last executing test programs: 11.797812547s ago: executing program 3 (id=589): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8800) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x12}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x8012, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef) 11.596840571s ago: executing program 3 (id=592): r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$rds(0x15, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006480)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fde58b"}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xce, 0x0, 0x1, [@nested={0x139, 0x13e, 0x0, 0x1, [@generic="4499040c9752d3a79e688177bbeeedd58fb9fe45946e44949027fb413f23864caf51d77cb13970bbd521253c3ca8e81d9b3394f04a4c7c7e47c937814c02818834352ab8b2c0017326c82c0e690eae22ee032665888592a025b75de30198a7244a80c5414922ce290a32c6608d5c55c1ee983f5d438805bd59e32c090e15185665de783e55da81cbb7100dcaf2b29a3fae90f7ec87e36c21679beef1122a475b6792886c075ed6559cea18a234448bd72428e85a63385bdd7493b6cfb1a86452b03b34a0ac931414373ea7e33f22d8eb8bea547952fa42317f2f2a8ca1", @nested={0x58, 0xa0, 0x0, 0x1, [@nested={0x54, 0x61, 0x0, 0x1, [@nested={0x50, 0x9d, 0x0, 0x1, [@nested={0x4c, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x24, 0xde, 0x0, 0x1, [@typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@remote}, @nested={0xc, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}]}]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket(0x1, 0x3, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006480)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fde58b"}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xce, 0x0, 0x1, [@nested={0x139, 0x13e, 0x0, 0x1, [@generic="4499040c9752d3a79e688177bbeeedd58fb9fe45946e44949027fb413f23864caf51d77cb13970bbd521253c3ca8e81d9b3394f04a4c7c7e47c937814c02818834352ab8b2c0017326c82c0e690eae22ee032665888592a025b75de30198a7244a80c5414922ce290a32c6608d5c55c1ee983f5d438805bd59e32c090e15185665de783e55da81cbb7100dcaf2b29a3fae90f7ec87e36c21679beef1122a475b6792886c075ed6559cea18a234448bd72428e85a63385bdd7493b6cfb1a86452b03b34a0ac931414373ea7e33f22d8eb8bea547952fa42317f2f2a8ca1", @nested={0x58, 0xa0, 0x0, 0x1, [@nested={0x54, 0x61, 0x0, 0x1, [@nested={0x50, 0x9d, 0x0, 0x1, [@nested={0x4c, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x24, 0xde, 0x0, 0x1, [@typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@remote}, @nested={0xc, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}]}]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) 11.296947671s ago: executing program 3 (id=596): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802ee5afbf24fbcccc554cd9761e81b8dad8"], 0x30}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r3, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802ee5afbf24fbcccc554cd9761e81b8dad8"], 0x30}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r3, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) (async) 8.490676033s ago: executing program 3 (id=605): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r10, &(0x7f00000001c0), &(0x7f0000000180)=@udp6, 0x3}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0xa, 0x7, 0x0, [{0x1000, 0x4, 0x2, 0x26}, {0x8, 0x7, 0x1008, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r11, 0x8907, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 7.842491878s ago: executing program 4 (id=614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x30200, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x1a15}, @void, @x25={0x1, 0xb3, 0x9, "e9a5267bff0f2d1c5e441d67d7e78f9db32c8d5155774cdb2b413276d0b673916be4d5aa46af"}}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x3d, 0x9, 0x80000, 0x800, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x4, 0xe}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 7.289911928s ago: executing program 3 (id=618): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x11, 0x4, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept$inet6(r3, &(0x7f0000001480)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x51249, 0x2}}, 0x20}}, 0x4800) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x200, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r7, 0x0, &(0x7f00000003c0)=""/242}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x19, 0x17, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xde97}, {}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0xec, &(0x7f00000011c0)=""/236, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000180), &(0x7f00000012c0)=[{0x2, 0x4, 0xa, 0xb}, {0x4, 0x2, 0x2, 0x8}, {0x4, 0x1, 0x0, 0xf}, {0x3, 0x4, 0xa, 0xb}], 0x10, 0xc9b, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x3, 0x100000001) syz_emit_ethernet(0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 6.799504993s ago: executing program 4 (id=623): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) 6.612050094s ago: executing program 4 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x2404c001}, 0x55b4fa2a241e0134) pread64(r0, &(0x7f0000000100)=""/171, 0xab, 0x6) (async) pread64(r0, &(0x7f0000000100)=""/171, 0xab, 0x6) 6.493048921s ago: executing program 4 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xd, 0x1, {0x5, '\x00', 0x4, 0x6, 0x80000001, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x24400, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r5, 0x2f, 0xe, 0x5, 0xffff, 0x55, @mcast1, @local, 0x80, 0x7, 0x101, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newnexthop={0x24, 0x68, 0x100, 0x70bd2b, 0x25dfdbf9, {0x2, 0x0, 0x4, 0x0, 0x26}, [@NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) 6.00982088s ago: executing program 4 (id=629): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='freezer.state\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 5.671157908s ago: executing program 3 (id=631): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x4571, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x80, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x400121e0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x30}}, 0x40000) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 5.6646761s ago: executing program 4 (id=633): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x50, 0x13, 0x800, 0x70bd29, 0x25dfdbfc, {0x6, 0x3, 0xe0, 0x2, {0x4e22, 0x4e23, [0xfffffffd, 0xff, 0x1000, 0x2800], [0xabf0, 0x8d37, 0xe, 0x7b9], r8, [0x4, 0x8]}, 0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8850) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) (async) unshare(0xc000000) sendmmsg(0xffffffffffffffff, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=[{0x10, 0x29, 0x39}], 0x10}}], 0x1, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) (async) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) 3.259532292s ago: executing program 2 (id=644): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 2.986594078s ago: executing program 2 (id=646): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x2a, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="8d437a57"]}]}, 0x28}}, 0xc000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000001500)={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000005c0)={r7, 0x9}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x1, 0x8, 0x8, 0x3, {{0x10, 0x4, 0x1, 0x18, 0x40, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xa6, 0x3, 0x6, [{@loopback, 0x400}, {@empty, 0x8}]}, @generic={0x7, 0x8, "29a2cf4ceb8e"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x5d, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)={0x284, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x68, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x3d, [@multicast1]}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x5d5]}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r9, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x85a0, '\x00', r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c00"], 0x140}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r10}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000740)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c80)={0xc0, r14, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x38f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4002040}, 0x4) 2.697740358s ago: executing program 2 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e9ea3a19fe92935d6873c6311ef20c221e2392d389d998a8b41b55e03134f270d8c96d7df76849ef56b3629a299cc0eb2437e1799636264e22964bc5a8461ab76f13749fb7483711c087d0f43ea7041c49821bf3c3981296d92bd56ed83393a857ea7d63205d1f539c92c380126a8a6045e0927d581e25db9ae49c6d2bee575e496df5455983c24f788a", 0x8a}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x20040080) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x312a}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x69e1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xfffffffffffffd9f}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000004900010029bd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0c0000fb070002"], 0x38}}, 0x40) r8 = socket$can_bcm(0x1d, 0x2, 0x2) shutdown(r8, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES32, @ANYRESDEC=r9], 0x6f4}}, 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 2.32326182s ago: executing program 2 (id=650): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) unshare(0x68040200) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendto$x25(r4, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$tun(0xffffffffffffffff, 0x0, 0xffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000aefbb4dbdf25010000000c0001800800e9005abb84849fdfdf550adf", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x20040810) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r6) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r8, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xc0}}, 0x2000c090) 1.715504997s ago: executing program 0 (id=653): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/123, 0x7b}, 0x9}], 0x1, 0x40002063, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1, &(0x7f0000001380)=@raw=[@alu={0x7, 0x0, 0x0, 0x8, 0x0, 0x20, 0xfffffffffffffffc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.714677425s ago: executing program 1 (id=654): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000b40)={0x21d2, {{0xa, 0x4e23, 0x5, @local, 0x7}}, 0x1, 0x9, [{{0xa, 0x4e22, 0x927, @private0, 0x3}}, {{0xa, 0x4e21, 0x4, @remote, 0xa1}}, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0xe}, 0x7}}, {{0xa, 0x4e24, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf31}}, {{0xa, 0x4e22, 0x1, @loopback}}, {{0xa, 0x4e21, 0x6, @private1, 0x9}}, {{0xa, 0x4e24, 0x0, @mcast1, 0xa}}, {{0xa, 0x4e20, 0x2, @mcast1, 0x3}}, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}]}, 0x510) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000580)={0x40, r11, 0x1, 0x78bd26, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x40}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xb0, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5b, 0xa8, @random="604d36840ca23f002b752fccd8fb2544f7bafb6e314c7a88c832a47474e4059b96b6b6066f50fcbbfd3e41bcacf6fea6e41d5bcd0cb5fb8a061937e451525aea9d5fc70840b1124b03e2df6eaa2490311f002e083b4083"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4c000) socket$inet_mptcp(0x2, 0x1, 0x106) 1.581330815s ago: executing program 0 (id=655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001228000140070824000a0004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto$inet6(r3, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, 0xffffffffffffffff, 0x1000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0xd568b000) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000004f68b473d25a2fbe000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 1.381202673s ago: executing program 1 (id=656): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 1.167447841s ago: executing program 1 (id=657): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x4, 0x9, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 744.244236ms ago: executing program 1 (id=658): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xd, 0x4, 0x12, 0x2}, &(0x7f00000003c0)=0x9c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x4, 0x9, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 686.212101ms ago: executing program 0 (id=659): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) 527.850501ms ago: executing program 2 (id=660): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010067726574617000004c000280050016000200000006000e000100000008000700ac1414aa080007007f00000106000e000000000008000100", @ANYRES32, @ANYBLOB="050016000100000008001500acb8060006000200", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x813}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 422.701104ms ago: executing program 0 (id=661): pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x34, r3, 0x1, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}}, 0x0) (async) write(r1, &(0x7f0000000540)="c6412e864583a763946edb8fde7448d929e7be544d9c5947710ac08940123f31474ef9dbdc61ff016ddeab86b5101df267cfd168c2c9694502e3717e7750da0cddbfae0711e9bc151f3ff70b6f8098605509ffc02a60fef76b2ae341ef43b8e310a57458bfd9b54769dff088dacd79c8fab9944496af729fb368bb3372c6b7b719c908126dfe", 0x86) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000002180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0xfec0ffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f00000000c0)=0xffffffff, 0x4) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fdff000000000000000000cf88cc876c0a4800850000008000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r8}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r9) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x274, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xcd, 0x5b, "6fd0b290fd3b1c057b9a6c87eb5a63c10ab33f9fa651173d8ae0b072ac2d768c18e9ce979040ee5c998883763637244fb10e889b5f31fee9d9f71edddad3dca861ece427742755305cbbd70c22668f64281e875eb1f08c2314cd49abe554ec48926dc25ebb32df659a65973ea08e9c9b0bab8487625b7aac275681bf5a9fb30f7019a35ebf89e1c854b7ecb4b795fca002b0bdfd657355e5abe1650815b43b11138e5a906694838e64e7fefa94d53f3a3827b65547dafeecb788aa9d673885fcb3c2e6c8e1a584ef55"}, @NL80211_ATTR_FRAME_MATCH={0xae, 0x5b, "e513610ebfb39c7871f9655e0cc25f61ce0a975240576b3832eab463d93364fae5266fdb28b167308adc699835eae731010b757beaffd9214ebc70cb98b8cd184cf2cfc9f00771ab42dc19699a72f8e3366738c3b0c48428108611a41265bc02b1ff231d01a54a5a645736cb737afdddecea470022022c06e481db2a5e17d30ad698ce295771a3f864d7ae692dc45fe617d079a7d3fde6ca2777f024dc9706954acfc2f276bf9795268c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_MATCH={0xd0, 0x5b, "790c391b68332399dcd997c2c89580a56ea7c23a03302ddec72f37759e28eba0bc3ca16e77af6ff90d0a7f3100e5a2d8f4926f5de18fb30371a37bb422607606acb0a80a3a5dc861cd2b60464d93749077ae2a52352e98bde2850626355dbee39a0b9a255578f1ae37a775efda7ff2ac6898cc19daa6c1897d2a277d33ea29bf9c3e8f2437e44242fd93afd7a9a151061a50c93b67a5121004e320e73be839de54491bec1a97403dd56f2eb83ea052dd60cb3e3da9016af619d5b3ddda22549698575449f9fdef4826458fdc"}]}, 0x274}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x800, 0x7, 0x7, 0xed4}]}) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 318.551812ms ago: executing program 2 (id=662): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae00000000000000001c000000fe00000400e8"], 0x1c}}, 0x48040) connect$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x2f, @loopback, 0x7fff}}, 0x24) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1abe17b07526000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6b3de7defe17bc9d7970acb346eb7234fbf4674024cda71f85fbc5984d0136182cda79d477f8c47ad79ad8ad77dfa17ba2da6a07ee0040ff0192d6b4014a2980530f12b08b5020363cff7c7e863b709d24e27fd8a847f56bdacb131d267d67bd0e417cea33ad1c0872ae1eae87a88fea1f4c5c1d645b1a104a4e16f923e513ea9133d5ccb55cd748e4cb5c89c3cd14bc39eedec48b3b81600ffb85fbb54a0d881ddebe7541f279828312555b0a3dddc45371d2bf33f517b4f57bda0083bf76b1fa8e0f4d6f4e06e26ee28af4d856ca4370a0576811c4ac8c12df8195dc16b6975b34ba66bcf955a1f5bd21", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x4080}, 0x8800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r8 = socket$kcm(0x2, 0x5, 0x84) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000140)=r9, 0x4) 317.337177ms ago: executing program 1 (id=663): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r0}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 159.35798ms ago: executing program 0 (id=664): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000003140)={0x2f, @dev={0xac, 0x14, 0x14, 0x38}, 0x4e20, 0x2, 'dh\x00', 0x10, 0x7fffffff, 0x5e}, 0x2c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0xe4, r6, 0xe701ac47a3d23ccd, 0xfffffffe, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xc6\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2.906453ms ago: executing program 1 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="5c2a99d37a49a8bd95bb17b2f1b7b60e854fc0a03eeb310abde9bac2a55b328e57f42a87b6c7b93b9597fa49512f8e05bccbd143a527aba89580a02626ed2bee02cfda914152b4c8249eb1b2ca76dea47dab09931910a989834bcd6dd4d9c4"], 0x40}}, 0xc8c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffee1, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280f00001200230b4ca0be1b0000000000000080", @ANYRES32=0x0, @ANYBLOB="0000000000000000080028003bea0000"], 0x28}}, 0x0) 0s ago: executing program 0 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000800)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x494}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 69.573386][ T5817] cgroup: Unknown subsys name 'net' [ 69.699582][ T5817] cgroup: Unknown subsys name 'cpuset' [ 69.708329][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.290827][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.867968][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.874611][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.289097][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.322640][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.331564][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.339909][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.349425][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.353643][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.358807][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.364072][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.373589][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.379189][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.385982][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.394224][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.401297][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.407628][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.424777][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.425450][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.436253][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.440977][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.447742][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.457687][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.467926][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.477157][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.484616][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.492182][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.501084][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.507850][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.518842][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.527121][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.534263][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.545805][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.986525][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 76.037885][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 76.157452][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 76.243582][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.251744][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.259862][ T5839] bridge_slave_0: entered allmulticast mode [ 76.266762][ T5839] bridge_slave_0: entered promiscuous mode [ 76.276089][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 76.302499][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.309742][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.317245][ T5839] bridge_slave_1: entered allmulticast mode [ 76.323990][ T5839] bridge_slave_1: entered promiscuous mode [ 76.358299][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 76.384418][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.391667][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.399317][ T5830] bridge_slave_0: entered allmulticast mode [ 76.407119][ T5830] bridge_slave_0: entered promiscuous mode [ 76.438386][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.447712][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.454898][ T5830] bridge_slave_1: entered allmulticast mode [ 76.462670][ T5830] bridge_slave_1: entered promiscuous mode [ 76.495142][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.515520][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.583003][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.596588][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.606595][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.613788][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.621114][ T5829] bridge_slave_0: entered allmulticast mode [ 76.628491][ T5829] bridge_slave_0: entered promiscuous mode [ 76.637672][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.644792][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.652209][ T5829] bridge_slave_1: entered allmulticast mode [ 76.659253][ T5829] bridge_slave_1: entered promiscuous mode [ 76.704232][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.711609][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.719660][ T5844] bridge_slave_0: entered allmulticast mode [ 76.728250][ T5844] bridge_slave_0: entered promiscuous mode [ 76.738254][ T5839] team0: Port device team_slave_0 added [ 76.744339][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.752094][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.759854][ T5844] bridge_slave_1: entered allmulticast mode [ 76.767381][ T5844] bridge_slave_1: entered promiscuous mode [ 76.790361][ T5830] team0: Port device team_slave_0 added [ 76.806779][ T5839] team0: Port device team_slave_1 added [ 76.814816][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.851438][ T5830] team0: Port device team_slave_1 added [ 76.862817][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.886569][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.899033][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.917258][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.924386][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.932743][ T5838] bridge_slave_0: entered allmulticast mode [ 76.939581][ T5838] bridge_slave_0: entered promiscuous mode [ 76.995616][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.002837][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.010417][ T5838] bridge_slave_1: entered allmulticast mode [ 77.017693][ T5838] bridge_slave_1: entered promiscuous mode [ 77.043986][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.052573][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.079520][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.109985][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.117359][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.143428][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.163341][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.170527][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.196613][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.211718][ T5829] team0: Port device team_slave_0 added [ 77.218357][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.225719][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.252338][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.267708][ T5844] team0: Port device team_slave_0 added [ 77.289360][ T5829] team0: Port device team_slave_1 added [ 77.305810][ T5844] team0: Port device team_slave_1 added [ 77.313815][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.326718][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.396453][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.403444][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.429557][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.464301][ T5838] team0: Port device team_slave_0 added [ 77.476030][ T5830] hsr_slave_0: entered promiscuous mode [ 77.482352][ T5830] hsr_slave_1: entered promiscuous mode [ 77.490456][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.500685][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.527106][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.547104][ T5841] Bluetooth: hci1: command tx timeout [ 77.554845][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.562375][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.588460][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.602640][ T5838] team0: Port device team_slave_1 added [ 77.625628][ T5834] Bluetooth: hci0: command tx timeout [ 77.630043][ T5839] hsr_slave_0: entered promiscuous mode [ 77.631560][ T5834] Bluetooth: hci2: command tx timeout [ 77.641519][ T5839] hsr_slave_1: entered promiscuous mode [ 77.642500][ T5145] Bluetooth: hci3: command tx timeout [ 77.651569][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.653536][ T5841] Bluetooth: hci4: command tx timeout [ 77.668545][ T5839] Cannot create hsr debugfs directory [ 77.674688][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.681801][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.708363][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.728355][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.735595][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.761790][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.817711][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.824696][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.851414][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.874923][ T5829] hsr_slave_0: entered promiscuous mode [ 77.881528][ T5829] hsr_slave_1: entered promiscuous mode [ 77.888002][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.895807][ T5829] Cannot create hsr debugfs directory [ 77.940627][ T5844] hsr_slave_0: entered promiscuous mode [ 77.946967][ T5844] hsr_slave_1: entered promiscuous mode [ 77.952896][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.960817][ T5844] Cannot create hsr debugfs directory [ 78.098272][ T5838] hsr_slave_0: entered promiscuous mode [ 78.104493][ T5838] hsr_slave_1: entered promiscuous mode [ 78.111737][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.119939][ T5838] Cannot create hsr debugfs directory [ 78.397065][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.415854][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.439101][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.455971][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.477737][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.509518][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.529295][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.548141][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.582639][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.596255][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.607679][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.629018][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.691488][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.705040][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.718777][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.732443][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.829865][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.861272][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.873832][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.904637][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.955120][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.971510][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.007837][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.023763][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.057447][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.071578][ T230] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.078998][ T230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.090247][ T230] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.097396][ T230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.132120][ T230] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.139279][ T230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.150076][ T230] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.157246][ T230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.172096][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.204552][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.218492][ T230] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.225774][ T230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.275091][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.282259][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.311742][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.372658][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.379876][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.393668][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.400923][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.421739][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.524242][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.628216][ T5145] Bluetooth: hci1: command tx timeout [ 79.629582][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.705799][ T5145] Bluetooth: hci3: command tx timeout [ 79.711575][ T5834] Bluetooth: hci4: command tx timeout [ 79.711586][ T5846] Bluetooth: hci2: command tx timeout [ 79.714912][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.718230][ T5841] Bluetooth: hci0: command tx timeout [ 79.722465][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.771005][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.778225][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.892104][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.939336][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.013424][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.033289][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.110301][ T5829] veth0_vlan: entered promiscuous mode [ 80.121914][ T5830] veth0_vlan: entered promiscuous mode [ 80.144465][ T5829] veth1_vlan: entered promiscuous mode [ 80.169338][ T5830] veth1_vlan: entered promiscuous mode [ 80.209913][ T5839] veth0_vlan: entered promiscuous mode [ 80.283400][ T5839] veth1_vlan: entered promiscuous mode [ 80.309725][ T5829] veth0_macvtap: entered promiscuous mode [ 80.340437][ T5829] veth1_macvtap: entered promiscuous mode [ 80.363268][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.388285][ T5839] veth0_macvtap: entered promiscuous mode [ 80.415849][ T5839] veth1_macvtap: entered promiscuous mode [ 80.428579][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.450036][ T5830] veth0_macvtap: entered promiscuous mode [ 80.482077][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.498803][ T5830] veth1_macvtap: entered promiscuous mode [ 80.544502][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.557043][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.570110][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.581264][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.590842][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.600537][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.609910][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.627831][ T5844] veth0_vlan: entered promiscuous mode [ 80.649233][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.659848][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.671297][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.682324][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.694190][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.709912][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.720704][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.731970][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.744609][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.755766][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764545][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.773612][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787100][ T5844] veth1_vlan: entered promiscuous mode [ 80.795820][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.806999][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.817512][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.828321][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.839920][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.875120][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.884222][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.893798][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.902615][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.925669][ T5838] veth0_vlan: entered promiscuous mode [ 80.973859][ T5838] veth1_vlan: entered promiscuous mode [ 81.064546][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.078815][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.092463][ T5844] veth0_macvtap: entered promiscuous mode [ 81.123400][ T5844] veth1_macvtap: entered promiscuous mode [ 81.152875][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.162239][ T5838] veth0_macvtap: entered promiscuous mode [ 81.171230][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.191100][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.202624][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.213304][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.224245][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.234652][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.245446][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.257153][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.275202][ T5838] veth1_macvtap: entered promiscuous mode [ 81.288192][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.299238][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.309409][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.320997][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.331192][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.341935][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.352838][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.374296][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.393125][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.404163][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.419674][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.429747][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.440401][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.450683][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.461264][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.473523][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.502017][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.512930][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.523155][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.533797][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.543819][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.554931][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.564828][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.575385][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.586505][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.613183][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.623430][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.632445][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.641316][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.652544][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.661731][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.670547][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.679343][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.705193][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.716240][ T5841] Bluetooth: hci1: command tx timeout [ 81.716682][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.727945][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.740547][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.749577][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.784337][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.792634][ T5841] Bluetooth: hci2: command tx timeout [ 81.801935][ T5145] Bluetooth: hci3: command tx timeout [ 81.808011][ T5834] Bluetooth: hci4: command tx timeout [ 81.813589][ T5841] Bluetooth: hci0: command tx timeout [ 81.909677][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.964105][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.980571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.006831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022081][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.109137][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.133038][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.245090][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.272970][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.311274][ T5924] Zero length message leads to an empty skb [ 82.378021][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.417024][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.619520][ T5932] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 82.710838][ T5922] @0ÿ: renamed from bond_slave_0 (while UP) [ 82.816962][ T5932] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.454487][ T5960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11'. [ 83.487063][ T5960] netlink: 'syz.4.11': attribute type 2 has an invalid length. [ 83.521864][ T5960] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11'. [ 83.785648][ T5841] Bluetooth: hci1: command tx timeout [ 83.812567][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 83.842253][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 83.865706][ T5841] Bluetooth: hci0: command tx timeout [ 83.871724][ T5145] Bluetooth: hci3: command tx timeout [ 83.877909][ T5834] Bluetooth: hci4: command tx timeout [ 83.878546][ T5846] Bluetooth: hci2: command tx timeout [ 84.231326][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.247637][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.256143][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.641666][ T2154] IPVS: starting estimator thread 0... [ 84.745997][ T6002] IPVS: using max 20 ests per chain, 48000 per kthread [ 84.899570][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.909761][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'. [ 84.927095][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.066743][ T6010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22'. [ 85.082615][ T5974] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.109650][ T5974] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.142459][ T5974] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.190560][ T5974] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.394784][ T6004] geneve2: entered promiscuous mode [ 85.405456][ T6004] geneve2: entered allmulticast mode [ 85.492357][ T6007] netlink: 168 bytes leftover after parsing attributes in process `syz.0.22'. [ 85.510224][ T6007] netlink: 168 bytes leftover after parsing attributes in process `syz.0.22'. [ 85.575168][ T6007] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 85.692423][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 85.703401][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 86.060407][ T6033] netlink: 'syz.4.31': attribute type 26 has an invalid length. [ 86.097394][ T6033] xt_bpf: check failed: parse error [ 86.326157][ T6051] netlink: 'syz.4.36': attribute type 10 has an invalid length. [ 86.361536][ T6051] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 86.456547][ T6051] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 86.494023][ T6051] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 86.514651][ T6057] IPVS: stopping backup sync thread 6061 ... [ 86.521280][ T6061] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 86.531326][ T6055] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 86.553019][ T6059] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 87.096635][ T6081] x_tables: duplicate underflow at hook 2 [ 87.127951][ T6081] x_tables: duplicate underflow at hook 2 [ 87.391922][ T6091] openvswitch: netlink: Flow key attr not present in new flow. [ 87.732253][ T6102] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 88.388079][ T6112] netlink: 'syz.1.54': attribute type 2 has an invalid length. [ 88.484402][ T6117] __nla_validate_parse: 22 callbacks suppressed [ 88.484424][ T6117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'. [ 88.543500][ T6121] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.54'. [ 88.552743][ T6117] netlink: 168 bytes leftover after parsing attributes in process `syz.0.55'. [ 88.581542][ T6117] netlink: 168 bytes leftover after parsing attributes in process `syz.0.55'. [ 88.674650][ T6124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.55'. [ 88.679448][ T6117] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 88.732584][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 88.806353][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 88.847801][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 89.010448][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 89.317334][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 89.347044][ T6147] FAULT_INJECTION: forcing a failure. [ 89.347044][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 89.387699][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.3.62 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 89.387730][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.387746][ T6147] Call Trace: [ 89.387754][ T6147] [ 89.387763][ T6147] dump_stack_lvl+0x241/0x360 [ 89.387802][ T6147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.387826][ T6147] ? __pfx__printk+0x10/0x10 [ 89.387850][ T6147] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 89.387882][ T6147] ? __pfx___might_resched+0x10/0x10 [ 89.387916][ T6147] should_fail_ex+0x40a/0x550 [ 89.387954][ T6147] should_failslab+0xac/0x100 [ 89.387984][ T6147] kmem_cache_alloc_node_noprof+0x77/0x380 [ 89.388020][ T6147] ? __alloc_skb+0x1c3/0x440 [ 89.388046][ T6147] __alloc_skb+0x1c3/0x440 [ 89.388067][ T6147] ? __pfx_netlink_unicast+0x10/0x10 [ 89.388100][ T6147] ? __pfx___alloc_skb+0x10/0x10 [ 89.388126][ T6147] ? nlmsg_notify+0x14c/0x1c0 [ 89.388159][ T6147] nf_tables_commit+0x7ce1/0x9140 [ 89.388232][ T6147] ? __pfx_nf_tables_commit+0x10/0x10 [ 89.388265][ T6147] ? nft_trans_commit_list_add_tail+0x190/0x550 [ 89.388288][ T6147] ? nft_obj_init+0x283/0x360 [ 89.388321][ T6147] ? nf_tables_updobj+0x33f/0x480 [ 89.388357][ T6147] ? nf_tables_newobj+0x1083/0x1790 [ 89.388410][ T6147] ? __nla_parse+0x40/0x60 [ 89.388438][ T6147] nfnetlink_rcv+0xc77/0x2ab0 [ 89.388503][ T6147] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 89.388579][ T6147] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.388609][ T6147] ? skb_clone+0x240/0x390 [ 89.388635][ T6147] ? __pfx_lock_release+0x10/0x10 [ 89.388683][ T6147] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.388717][ T6147] netlink_unicast+0x7f6/0x990 [ 89.388756][ T6147] ? __pfx_netlink_unicast+0x10/0x10 [ 89.388783][ T6147] ? __virt_addr_valid+0x45f/0x530 [ 89.388804][ T6147] ? __phys_addr_symbol+0x2f/0x70 [ 89.388824][ T6147] ? __check_object_size+0x47a/0x730 [ 89.388858][ T6147] netlink_sendmsg+0x8de/0xcb0 [ 89.388903][ T6147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.388941][ T6147] ? aa_sock_msg_perm+0x91/0x160 [ 89.388979][ T6147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.389010][ T6147] __sock_sendmsg+0x221/0x270 [ 89.389051][ T6147] ____sys_sendmsg+0x53a/0x860 [ 89.389087][ T6147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.389110][ T6147] ? __fget_files+0x2a/0x410 [ 89.389145][ T6147] ? __fget_files+0x2a/0x410 [ 89.389186][ T6147] __sys_sendmsg+0x269/0x350 [ 89.389217][ T6147] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.389257][ T6147] ? do_sys_openat2+0x17a/0x1d0 [ 89.389316][ T6147] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.389350][ T6147] ? do_syscall_64+0x100/0x230 [ 89.389383][ T6147] ? do_syscall_64+0xb6/0x230 [ 89.389414][ T6147] do_syscall_64+0xf3/0x230 [ 89.389443][ T6147] ? clear_bhb_loop+0x35/0x90 [ 89.389476][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.389512][ T6147] RIP: 0033:0x7fa16ed8d169 [ 89.389534][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.389551][ T6147] RSP: 002b:00007fa16fbcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.389574][ T6147] RAX: ffffffffffffffda RBX: 00007fa16efa5fa0 RCX: 00007fa16ed8d169 [ 89.389589][ T6147] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 89.389602][ T6147] RBP: 00007fa16fbcd090 R08: 0000000000000000 R09: 0000000000000000 [ 89.389614][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.389626][ T6147] R13: 0000000000000000 R14: 00007fa16efa5fa0 R15: 00007fffce53df48 [ 89.389658][ T6147] [ 90.612929][ T6171] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 90.789337][ T6173] tun0: tun_chr_ioctl cmd 1074025681 [ 90.891727][ T6176] netlink: 'syz.3.72': attribute type 9 has an invalid length. [ 90.905746][ T6176] netlink: 'syz.3.72': attribute type 7 has an invalid length. [ 90.913433][ T6176] netlink: 'syz.3.72': attribute type 8 has an invalid length. [ 91.192025][ T6184] vcan1: entered allmulticast mode [ 91.734625][ T6182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.756115][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.882878][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.025534][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 92.138632][ T6214] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 92.360872][ T47] cfg80211: failed to load regulatory.db [ 93.665101][ T6265] vlan0: entered promiscuous mode [ 93.674366][ T6265] __nla_validate_parse: 11 callbacks suppressed [ 93.674386][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 93.753323][ T6268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.97'. [ 93.755887][ T6265] vlan0 (unregistering): left promiscuous mode [ 93.869391][ T6268] netlink: 168 bytes leftover after parsing attributes in process `syz.1.97'. [ 93.967974][ T6268] netlink: 168 bytes leftover after parsing attributes in process `syz.1.97'. [ 94.065415][ T6268] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 94.192626][ T6267] netlink: 224 bytes leftover after parsing attributes in process `syz.1.97'. [ 94.328723][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 94.803231][ T6302] bridge: RTM_NEWNEIGH with invalid ether address [ 94.825683][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 95.092381][ T6320] FAULT_INJECTION: forcing a failure. [ 95.092381][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 95.139243][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.1.116 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 95.139272][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.139284][ T6320] Call Trace: [ 95.139292][ T6320] [ 95.139301][ T6320] dump_stack_lvl+0x241/0x360 [ 95.139331][ T6320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.139353][ T6320] ? __pfx__printk+0x10/0x10 [ 95.139386][ T6320] should_fail_ex+0x40a/0x550 [ 95.139421][ T6320] should_failslab+0xac/0x100 [ 95.139451][ T6320] ? skb_clone+0x20c/0x390 [ 95.139474][ T6320] kmem_cache_alloc_noprof+0x70/0x380 [ 95.139508][ T6320] skb_clone+0x20c/0x390 [ 95.139536][ T6320] __netlink_deliver_tap+0x3c4/0x7f0 [ 95.139591][ T6320] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.139620][ T6320] netlink_deliver_tap+0x19d/0x1b0 [ 95.139652][ T6320] netlink_unicast+0x7c4/0x990 [ 95.139688][ T6320] ? __pfx_netlink_unicast+0x10/0x10 [ 95.139715][ T6320] ? __virt_addr_valid+0x45f/0x530 [ 95.139737][ T6320] ? __phys_addr_symbol+0x2f/0x70 [ 95.139756][ T6320] ? __check_object_size+0x47a/0x730 [ 95.139789][ T6320] netlink_sendmsg+0x8de/0xcb0 [ 95.139833][ T6320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.139870][ T6320] ? aa_sock_msg_perm+0x91/0x160 [ 95.139907][ T6320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.139937][ T6320] __sock_sendmsg+0x221/0x270 [ 95.139971][ T6320] ____sys_sendmsg+0x53a/0x860 [ 95.140006][ T6320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.140029][ T6320] ? __fget_files+0x2a/0x410 [ 95.140063][ T6320] ? __fget_files+0x2a/0x410 [ 95.140103][ T6320] __sys_sendmsg+0x269/0x350 [ 95.140134][ T6320] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.140172][ T6320] ? do_sys_openat2+0x17a/0x1d0 [ 95.140231][ T6320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.140264][ T6320] ? do_syscall_64+0x100/0x230 [ 95.140296][ T6320] ? do_syscall_64+0xb6/0x230 [ 95.140326][ T6320] do_syscall_64+0xf3/0x230 [ 95.140354][ T6320] ? clear_bhb_loop+0x35/0x90 [ 95.140386][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.140414][ T6320] RIP: 0033:0x7fdf8498d169 [ 95.140432][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.140449][ T6320] RSP: 002b:00007fdf827f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.140471][ T6320] RAX: ffffffffffffffda RBX: 00007fdf84ba5fa0 RCX: 00007fdf8498d169 [ 95.140486][ T6320] RDX: 0000000000004084 RSI: 00004000000001c0 RDI: 0000000000000003 [ 95.140498][ T6320] RBP: 00007fdf827f6090 R08: 0000000000000000 R09: 0000000000000000 [ 95.140510][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.140522][ T6320] R13: 0000000000000000 R14: 00007fdf84ba5fa0 R15: 00007ffc7cb96a08 [ 95.140564][ T6320] [ 95.146137][ T6322] netlink: 32 bytes leftover after parsing attributes in process `syz.3.115'. [ 95.198263][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.590104][ T6318] netlink: 224 bytes leftover after parsing attributes in process `syz.3.115'. [ 95.763446][ T6331] xt_CT: No such helper "pptp" [ 95.776408][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 95.963766][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.015024][ T6322] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 96.065939][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.160545][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.727892][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.735562][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.966783][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.222117][ T6356] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.245336][ T6356] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.254288][ T6356] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.295410][ T6356] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.474124][ T6394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.783318][ T6361] bond0 (unregistering): (slave 1@0ÿ): Releasing backup interface [ 97.810876][ T6361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.833106][ T6361] bond0 (unregistering): Released all slaves [ 97.906597][ T6396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.937368][ T6396] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.976320][ T6396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.019091][ T6396] syz.4.129 (6396) used greatest stack depth: 18480 bytes left [ 98.917312][ T6436] __nla_validate_parse: 143 callbacks suppressed [ 98.917336][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.138'. [ 99.027854][ T6387] IPVS: starting estimator thread 0... [ 99.034958][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 99.165453][ T6444] IPVS: using max 20 ests per chain, 48000 per kthread [ 99.310252][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.142'. [ 99.371860][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.143'. [ 99.380948][ T6460] netlink: 168 bytes leftover after parsing attributes in process `syz.0.143'. [ 99.402068][ T6460] netlink: 168 bytes leftover after parsing attributes in process `syz.0.143'. [ 99.429350][ T6460] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 99.550530][ T6458] netlink: 224 bytes leftover after parsing attributes in process `syz.0.143'. [ 99.670170][ T6468] ipt_REJECT: TCP_RESET invalid for non-tcp [ 100.224468][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'. [ 100.271071][ T6479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.335778][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 100.378724][ T6491] bond_slave_0: entered allmulticast mode [ 100.533984][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 100.620001][ T6479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.711776][ T6512] Bluetooth: MGMT ver 1.23 [ 100.877058][ T6516] netlink: 'syz.4.158': attribute type 12 has an invalid length. [ 100.907460][ T6517] netlink: 'syz.1.159': attribute type 7 has an invalid length. [ 100.915772][ T6517] netlink: 'syz.1.159': attribute type 8 has an invalid length. [ 100.923643][ T6517] netlink: 'syz.1.159': attribute type 15 has an invalid length. [ 101.052617][ T6479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.419151][ T6479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.563366][ T6533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.731250][ T6479] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.753900][ T6479] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.778572][ T6479] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.841512][ T6479] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.985682][ T6533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.194700][ T6533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.720271][ T6533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.747862][ T5846] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 103.007038][ T6578] FAULT_INJECTION: forcing a failure. [ 103.007038][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 103.043199][ T6533] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.052704][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz.2.169 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 103.052732][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.052745][ T6578] Call Trace: [ 103.052752][ T6578] [ 103.052761][ T6578] dump_stack_lvl+0x241/0x360 [ 103.052800][ T6578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.052825][ T6578] ? __pfx__printk+0x10/0x10 [ 103.052853][ T6578] ? ref_tracker_alloc+0x332/0x490 [ 103.052895][ T6578] should_fail_ex+0x40a/0x550 [ 103.052934][ T6578] should_failslab+0xac/0x100 [ 103.052964][ T6578] ? skb_clone+0x20c/0x390 [ 103.052989][ T6578] kmem_cache_alloc_noprof+0x70/0x380 [ 103.053026][ T6578] skb_clone+0x20c/0x390 [ 103.053057][ T6578] __netlink_deliver_tap+0x3c4/0x7f0 [ 103.053102][ T6578] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.053133][ T6578] netlink_deliver_tap+0x19d/0x1b0 [ 103.053167][ T6578] netlink_sendskb+0x68/0x140 [ 103.053197][ T6578] netlink_unicast+0x39d/0x990 [ 103.053224][ T6578] ? netlink_broadcast_filtered+0x1260/0x12a0 [ 103.053264][ T6578] ? __pfx_netlink_unicast+0x10/0x10 [ 103.053303][ T6578] nlmsg_notify+0x13b/0x1c0 [ 103.053346][ T6578] nf_tables_commit+0x8169/0x9140 [ 103.053422][ T6578] ? __pfx_nf_tables_commit+0x10/0x10 [ 103.053456][ T6578] ? nft_trans_commit_list_add_tail+0x190/0x550 [ 103.053479][ T6578] ? nft_obj_init+0x283/0x360 [ 103.053513][ T6578] ? nf_tables_updobj+0x33f/0x480 [ 103.053549][ T6578] ? nf_tables_newobj+0x1083/0x1790 [ 103.053604][ T6578] ? __nla_parse+0x40/0x60 [ 103.053632][ T6578] nfnetlink_rcv+0xc77/0x2ab0 [ 103.053694][ T6578] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 103.053773][ T6578] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.053803][ T6578] ? skb_clone+0x240/0x390 [ 103.053830][ T6578] ? __pfx_lock_release+0x10/0x10 [ 103.053877][ T6578] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.053912][ T6578] netlink_unicast+0x7f6/0x990 [ 103.053950][ T6578] ? __pfx_netlink_unicast+0x10/0x10 [ 103.053976][ T6578] ? __virt_addr_valid+0x45f/0x530 [ 103.053997][ T6578] ? __phys_addr_symbol+0x2f/0x70 [ 103.054017][ T6578] ? __check_object_size+0x47a/0x730 [ 103.054051][ T6578] netlink_sendmsg+0x8de/0xcb0 [ 103.054098][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.054136][ T6578] ? aa_sock_msg_perm+0x91/0x160 [ 103.054175][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.054206][ T6578] __sock_sendmsg+0x221/0x270 [ 103.054241][ T6578] ____sys_sendmsg+0x53a/0x860 [ 103.054276][ T6578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.054300][ T6578] ? __fget_files+0x2a/0x410 [ 103.054340][ T6578] ? __fget_files+0x2a/0x410 [ 103.054382][ T6578] __sys_sendmsg+0x269/0x350 [ 103.054413][ T6578] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.054454][ T6578] ? do_sys_openat2+0x17a/0x1d0 [ 103.054514][ T6578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.054549][ T6578] ? do_syscall_64+0x100/0x230 [ 103.054582][ T6578] ? do_syscall_64+0xb6/0x230 [ 103.054613][ T6578] do_syscall_64+0xf3/0x230 [ 103.054641][ T6578] ? clear_bhb_loop+0x35/0x90 [ 103.054675][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.054702][ T6578] RIP: 0033:0x7f0f8658d169 [ 103.054721][ T6578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.054738][ T6578] RSP: 002b:00007f0f87318038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.054760][ T6578] RAX: ffffffffffffffda RBX: 00007f0f867a5fa0 RCX: 00007f0f8658d169 [ 103.054776][ T6578] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 103.054789][ T6578] RBP: 00007f0f87318090 R08: 0000000000000000 R09: 0000000000000000 [ 103.054802][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.054814][ T6578] R13: 0000000000000000 R14: 00007f0f867a5fa0 R15: 00007ffc9342e058 [ 103.054846][ T6578] [ 103.443175][ T6533] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.459866][ T6533] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.476273][ T6533] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.816576][ T6592] netlink: 'syz.1.173': attribute type 11 has an invalid length. [ 103.871580][ T6591] netlink: 'syz.1.173': attribute type 11 has an invalid length. [ 103.944346][ T6593] __nla_validate_parse: 8 callbacks suppressed [ 103.944369][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 104.026421][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 104.149697][ T6602] openvswitch: netlink: IP tunnel dst address not specified [ 104.178192][ T6600] netlink: 'syz.4.174': attribute type 32 has an invalid length. [ 104.331406][ T6607] netlink: 84 bytes leftover after parsing attributes in process `syz.1.177'. [ 104.395594][ T6607] netem: invalid attributes len -16 [ 104.400966][ T6607] netem: change failed [ 104.663795][ T6619] Illegal XDP return value 4294967274 on prog (id 83) dev N/A, expect packet loss! [ 104.697368][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 104.708120][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 104.719063][ T6627] FAULT_INJECTION: forcing a failure. [ 104.719063][ T6627] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.734047][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.4.181 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 104.734075][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.734087][ T6627] Call Trace: [ 104.734095][ T6627] [ 104.734104][ T6627] dump_stack_lvl+0x241/0x360 [ 104.734135][ T6627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.734158][ T6627] ? __pfx__printk+0x10/0x10 [ 104.734182][ T6627] ? __pfx_lock_release+0x10/0x10 [ 104.734215][ T6627] ? __lock_acquire+0x1397/0x2100 [ 104.734251][ T6627] should_fail_ex+0x40a/0x550 [ 104.734287][ T6627] _copy_from_user+0x2d/0xb0 [ 104.734317][ T6627] kstrtouint_from_user+0xc6/0x190 [ 104.734344][ T6627] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 104.734372][ T6627] ? __pfx_lock_acquire+0x10/0x10 [ 104.734414][ T6627] proc_fail_nth_write+0xaa/0x2d0 [ 104.734444][ T6627] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 104.734471][ T6627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.734507][ T6627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.734539][ T6627] vfs_write+0x29f/0xd10 [ 104.734565][ T6627] ? fdget_pos+0x254/0x320 [ 104.734594][ T6627] ? __mutex_unlock_slowpath+0x227/0x800 [ 104.734627][ T6627] ? __pfx_vfs_write+0x10/0x10 [ 104.734647][ T6627] ? do_sys_openat2+0x17a/0x1d0 [ 104.734681][ T6627] ? __fget_files+0x2a/0x410 [ 104.734714][ T6627] ? __fget_files+0x395/0x410 [ 104.734743][ T6627] ? __fget_files+0x2a/0x410 [ 104.734783][ T6627] ksys_write+0x18f/0x2b0 [ 104.734808][ T6627] ? __pfx_ksys_write+0x10/0x10 [ 104.734832][ T6627] ? do_syscall_64+0x100/0x230 [ 104.734864][ T6627] ? do_syscall_64+0xb6/0x230 [ 104.734895][ T6627] do_syscall_64+0xf3/0x230 [ 104.734929][ T6627] ? clear_bhb_loop+0x35/0x90 [ 104.734961][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.734989][ T6627] RIP: 0033:0x7f83db98bc1f [ 104.735007][ T6627] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 104.735024][ T6627] RSP: 002b:00007f83dc8d6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 104.735045][ T6627] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83db98bc1f [ 104.735060][ T6627] RDX: 0000000000000001 RSI: 00007f83dc8d60a0 RDI: 0000000000000004 [ 104.735072][ T6627] RBP: 00007f83dc8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.735085][ T6627] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 104.735097][ T6627] R13: 0000000000000000 R14: 00007f83dbba5fa0 R15: 00007fff1e8f2fa8 [ 104.735128][ T6627] [ 105.271678][ T6638] netlink: 'syz.2.186': attribute type 6 has an invalid length. [ 105.282799][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 105.368931][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 105.401511][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'. [ 105.788395][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.192'. [ 105.852050][ T6660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.191'. [ 107.280674][ T6663] syz.4.193: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.301281][ T6663] CPU: 1 UID: 0 PID: 6663 Comm: syz.4.193 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 107.301306][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.301318][ T6663] Call Trace: [ 107.301324][ T6663] [ 107.301332][ T6663] dump_stack_lvl+0x241/0x360 [ 107.301364][ T6663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.301388][ T6663] ? __pfx__printk+0x10/0x10 [ 107.301413][ T6663] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 107.301441][ T6663] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 107.301469][ T6663] warn_alloc+0x278/0x410 [ 107.301497][ T6663] ? __pfx_warn_alloc+0x10/0x10 [ 107.301526][ T6663] ? veth_dev_init+0x35f/0x550 [ 107.301546][ T6663] ? __get_vm_area_node+0x1c8/0x2d0 [ 107.301577][ T6663] ? __get_vm_area_node+0x25c/0x2d0 [ 107.301619][ T6663] __vmalloc_node_range_noprof+0x62f/0x1380 [ 107.301641][ T6663] ? look_up_lock_class+0x77/0x170 [ 107.301695][ T6663] ? rcu_is_watching+0x15/0xb0 [ 107.301719][ T6663] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.301743][ T6663] ? rcu_is_watching+0x15/0xb0 [ 107.301832][ T6663] ? trace_kmalloc+0x1f/0xd0 [ 107.301860][ T6663] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 107.301891][ T6663] ? __kvmalloc_node_noprof+0x72/0x190 [ 107.301925][ T6663] __kvmalloc_node_noprof+0x142/0x190 [ 107.301948][ T6663] ? veth_dev_init+0x35f/0x550 [ 107.301972][ T6663] veth_dev_init+0x35f/0x550 [ 107.302004][ T6663] register_netdevice+0x6d7/0x1b70 [ 107.302095][ T6663] ? _get_random_bytes+0x25d/0x2c0 [ 107.302136][ T6663] ? snprintf+0xda/0x120 [ 107.302162][ T6663] ? __pfx_register_netdevice+0x10/0x10 [ 107.302190][ T6663] ? __pfx_snprintf+0x10/0x10 [ 107.302216][ T6663] ? __asan_memset+0x23/0x50 [ 107.302252][ T6663] veth_newlink+0x66a/0xb70 [ 107.302283][ T6663] ? __pfx_veth_newlink+0x10/0x10 [ 107.302376][ T6663] ? alloc_netdev_mqs+0xe01/0x1210 [ 107.302413][ T6663] ? rtnl_create_link+0x95b/0xc90 [ 107.302444][ T6663] ? __pfx_veth_newlink+0x10/0x10 [ 107.302468][ T6663] rtnl_newlink_create+0x37b/0xbd0 [ 107.302508][ T6663] ? __mutex_lock+0x602/0x1010 [ 107.302542][ T6663] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 107.302571][ T6663] ? __pfx___mutex_lock+0x10/0x10 [ 107.302612][ T6663] ? ns_capable+0x8a/0xf0 [ 107.302643][ T6663] rtnl_newlink+0x167a/0x1d90 [ 107.302682][ T6663] ? stack_depot_save_flags+0x37/0x940 [ 107.302734][ T6663] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.302823][ T6663] ? __netlink_deliver_tap+0x561/0x7f0 [ 107.302860][ T6663] ? __pfx_validate_chain+0x10/0x10 [ 107.302884][ T6663] ? __sock_sendmsg+0x221/0x270 [ 107.302915][ T6663] ? ____sys_sendmsg+0x53a/0x860 [ 107.302940][ T6663] ? __sys_sendmsg+0x269/0x350 [ 107.302964][ T6663] ? do_syscall_64+0xf3/0x230 [ 107.302993][ T6663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.303107][ T6663] ? __pfx_lock_release+0x10/0x10 [ 107.303160][ T6663] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.303198][ T6663] rtnetlink_rcv_msg+0x791/0xcf0 [ 107.303232][ T6663] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 107.303272][ T6663] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.303315][ T6663] ? ref_tracker_free+0x643/0x7e0 [ 107.303345][ T6663] netlink_rcv_skb+0x206/0x480 [ 107.303381][ T6663] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.303419][ T6663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.303479][ T6663] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.303517][ T6663] netlink_unicast+0x7f6/0x990 [ 107.303559][ T6663] ? __pfx_netlink_unicast+0x10/0x10 [ 107.303587][ T6663] ? __virt_addr_valid+0x45f/0x530 [ 107.303610][ T6663] ? __phys_addr_symbol+0x2f/0x70 [ 107.303630][ T6663] ? __check_object_size+0x47a/0x730 [ 107.303666][ T6663] netlink_sendmsg+0x8de/0xcb0 [ 107.303714][ T6663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.303763][ T6663] ? aa_sock_msg_perm+0x91/0x160 [ 107.303806][ T6663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.303841][ T6663] __sock_sendmsg+0x221/0x270 [ 107.303877][ T6663] ____sys_sendmsg+0x53a/0x860 [ 107.303914][ T6663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.303939][ T6663] ? __fget_files+0x2a/0x410 [ 107.303990][ T6663] ? __fget_files+0x2a/0x410 [ 107.304034][ T6663] __sys_sendmsg+0x269/0x350 [ 107.304061][ T6663] ? __pfx_futex_wake+0x10/0x10 [ 107.304099][ T6663] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.304173][ T6663] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.304211][ T6663] ? do_syscall_64+0x100/0x230 [ 107.304245][ T6663] ? do_syscall_64+0xb6/0x230 [ 107.304279][ T6663] do_syscall_64+0xf3/0x230 [ 107.304310][ T6663] ? clear_bhb_loop+0x35/0x90 [ 107.304345][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.304376][ T6663] RIP: 0033:0x7f83db98d169 [ 107.304397][ T6663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.304415][ T6663] RSP: 002b:00007f83dc8d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.304439][ T6663] RAX: ffffffffffffffda RBX: 00007f83dbba5fa0 RCX: 00007f83db98d169 [ 107.304455][ T6663] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000003 [ 107.304470][ T6663] RBP: 00007f83dba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.304485][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.304498][ T6663] R13: 0000000000000000 R14: 00007f83dbba5fa0 R15: 00007fff1e8f2fa8 [ 107.304531][ T6663] [ 107.304555][ T6663] Mem-Info: [ 107.820299][ T6663] active_anon:7747 inactive_anon:0 isolated_anon:0 [ 107.820299][ T6663] active_file:1415 inactive_file:38302 isolated_file:0 [ 107.820299][ T6663] unevictable:768 dirty:109 writeback:0 [ 107.820299][ T6663] slab_reclaimable:9830 slab_unreclaimable:100372 [ 107.820299][ T6663] mapped:32688 shmem:4305 pagetables:878 [ 107.820299][ T6663] sec_pagetables:0 bounce:0 [ 107.820299][ T6663] kernel_misc_reclaimable:0 [ 107.820299][ T6663] free:1335280 free_pcp:2081 free_cma:0 [ 107.867295][ T6663] Node 0 active_anon:30988kB inactive_anon:0kB active_file:5660kB inactive_file:153132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130752kB dirty:460kB writeback:0kB shmem:15684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11504kB pagetables:3520kB sec_pagetables:0kB all_unreclaimable? no [ 107.899939][ T6663] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 107.930286][ T6663] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.957462][ T6663] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 107.963257][ T6663] Node 0 DMA32 free:1425920kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:30944kB inactive_anon:0kB active_file:5660kB inactive_file:152816kB unevictable:1536kB writepending:460kB present:3129332kB managed:2549704kB mlocked:0kB bounce:0kB free_pcp:924kB local_pcp:624kB free_cma:0kB [ 107.993531][ T6663] lowmem_reserve[]: 0 0 0 0 0 [ 107.998362][ T6663] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 108.025548][ T6663] lowmem_reserve[]: 0 0 0 0 0 [ 108.030368][ T6663] Node 1 Normal free:3907556kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 108.060732][ T6663] lowmem_reserve[]: 0 0 0 0 0 [ 108.066587][ T6663] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.079590][ T6663] Node 0 DMA32: 2*4kB (UM) 125*8kB (UE) 3*16kB (UE) 43*32kB (UME) 72*64kB (UME) 25*128kB (UM) 29*256kB (UME) 16*512kB (UM) 9*1024kB (UME) 1*2048kB (M) 339*4096kB (UM) = 1425664kB [ 108.098091][ T6663] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 108.109940][ T6663] Node 1 Normal: 241*4kB (UM) 46*8kB (UME) 39*16kB (UME) 206*32kB (UME) 108*64kB (UME) 29*128kB (UME) 11*256kB (UME) 11*512kB (UME) 7*1024kB (UME) 3*2048kB (U) 944*4096kB (M) = 3907556kB [ 108.128739][ T6663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.138374][ T6663] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.147839][ T6663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.157535][ T6663] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.167099][ T6663] 44022 total pagecache pages [ 108.172194][ T6663] 0 pages in swap cache [ 108.176583][ T6663] Free swap = 124996kB [ 108.180766][ T6663] Total swap = 124996kB [ 108.184957][ T6663] 2097051 pages RAM [ 108.189668][ T6663] 0 pages HighMem/MovableOnly [ 108.194474][ T6663] 427903 pages reserved [ 108.198974][ T6663] 0 pages cma reserved [ 108.979769][ T6664] __nla_validate_parse: 2 callbacks suppressed [ 108.979787][ T6664] netlink: 168 bytes leftover after parsing attributes in process `syz.1.192'. [ 108.997031][ T6664] netlink: 168 bytes leftover after parsing attributes in process `syz.1.192'. [ 109.007503][ T6664] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 109.663035][ T6697] netlink: 'syz.4.203': attribute type 14 has an invalid length. [ 109.884724][ T6706] netlink: 'syz.3.204': attribute type 2 has an invalid length. [ 109.923303][ T6706] fþ: entered promiscuous mode [ 109.931706][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 110.474888][ T6729] warning: `syz.2.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.730436][ T6731] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.928276][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 110.980265][ T6734] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 110.988258][ T6734] netlink: 224 bytes leftover after parsing attributes in process `syz.3.209'. [ 111.001105][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 111.081287][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 111.119404][ T6747] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 111.141485][ T6747] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.539253][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 111.560859][ T6759] netlink: 'syz.3.221': attribute type 3 has an invalid length. [ 112.341554][ T6792] netlink: 96 bytes leftover after parsing attributes in process `syz.2.232'. [ 112.889126][ T6809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.236'. [ 113.006975][ T6811] dccp_v4_rcv: dropped packet with invalid checksum [ 113.626077][ T5846] Bluetooth: hci2: command tx timeout [ 113.879097][ T6860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.029618][ T6866] __nla_validate_parse: 9 callbacks suppressed [ 114.029638][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 114.294792][ T6866] team0 (unregistering): Port device team_slave_0 removed [ 114.305980][ T6866] team0 (unregistering): Port device team_slave_1 removed [ 114.331877][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 114.559387][ T6886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.258'. [ 114.702807][ T6896] netlink: 'syz.1.259': attribute type 4 has an invalid length. [ 114.848756][ T6902] netlink: 'syz.4.262': attribute type 2 has an invalid length. [ 114.904179][ T6905] netlink: 'syz.4.262': attribute type 2 has an invalid length. [ 115.181094][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 115.183022][ T6918] netlink: 'syz.4.267': attribute type 7 has an invalid length. [ 115.370681][ T6930] netlink: 11 bytes leftover after parsing attributes in process `syz.3.268'. [ 115.550420][ T6938] x_tables: duplicate underflow at hook 3 [ 115.759958][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 115.834552][ T6955] netlink: 56 bytes leftover after parsing attributes in process `syz.3.277'. [ 115.857978][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 116.358325][ T6986] gtp0: entered allmulticast mode [ 116.405120][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 116.702781][ T5883] IPVS: starting estimator thread 0... [ 116.806242][ T7011] IPVS: using max 20 ests per chain, 48000 per kthread [ 116.951758][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 116.983036][ T7021] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 117.840995][ T7074] veth1_to_bond: entered allmulticast mode [ 117.909534][ T7075] veth1_to_bond: entered promiscuous mode [ 118.209036][ T7084] IPv6: sit1: Disabled Multicast RS [ 118.789582][ T7097] xt_CT: No such helper "pptp" [ 118.918294][ T7074] veth1_to_bond: left promiscuous mode [ 118.942448][ T7074] veth1_to_bond: left allmulticast mode [ 119.233451][ T7111] __nla_validate_parse: 83 callbacks suppressed [ 119.233471][ T7111] netlink: 224 bytes leftover after parsing attributes in process `syz.1.320'. [ 119.465367][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 120.833735][ T7175] netlink: 224 bytes leftover after parsing attributes in process `syz.4.336'. [ 121.010232][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 121.105732][ T7165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.442731][ T7203] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 121.459091][ T7204] netlink: 'syz.0.344': attribute type 15 has an invalid length. [ 121.495664][ T7204] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 121.503376][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 121.773095][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 121.850300][ T7215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.349'. [ 122.177330][ T7233] bridge0: port 3(syz_tun) entered blocking state [ 122.190295][ T7233] bridge0: port 3(syz_tun) entered disabled state [ 122.207506][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 122.227756][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 122.254068][ T7233] syz_tun: entered allmulticast mode [ 122.281867][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 122.301007][ T7244] netlink: 48 bytes leftover after parsing attributes in process `syz.2.354'. [ 122.322613][ T7233] syz_tun: entered promiscuous mode [ 122.357591][ T7233] bridge0: port 3(syz_tun) entered blocking state [ 122.364609][ T7233] bridge0: port 3(syz_tun) entered forwarding state [ 122.485465][ T7243] xt_CT: No such helper "pptp" [ 122.822483][ T7261] netlink: 'syz.4.357': attribute type 11 has an invalid length. [ 122.993935][ T7260] netlink: 'syz.4.357': attribute type 3 has an invalid length. [ 123.264414][ T7272] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 123.390474][ T7279] xt_hashlimit: size too large, truncated to 1048576 [ 123.528115][ T7276] bond1: (slave gretap1): making interface the new active one [ 123.568395][ T7276] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.597144][ T7286] openvswitch: netlink: IP tunnel dst address not specified [ 123.645782][ T7293] xt_hashlimit: size too large, truncated to 1048576 [ 124.459250][ T7318] __nla_validate_parse: 41 callbacks suppressed [ 124.459270][ T7318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.369'. [ 124.510981][ T7315] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.628294][ T7315] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.741046][ T7315] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.913523][ T7315] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.970346][ T7333] bridge0: port 3(gretap0) entered blocking state [ 124.994024][ T7333] bridge0: port 3(gretap0) entered disabled state [ 125.031576][ T7333] gretap0: entered allmulticast mode [ 125.045003][ T7333] gretap0: entered promiscuous mode [ 125.052726][ T7333] bridge0: port 3(gretap0) entered blocking state [ 125.059349][ T7333] bridge0: port 3(gretap0) entered forwarding state [ 125.230828][ T7315] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.310169][ T7315] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.371611][ T7315] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.408409][ T7359] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 125.443884][ T7359] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 125.479387][ T7315] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.804351][ T30] audit: type=1800 audit(1742391523.033:2): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.379" name="memory.events" dev="tmpfs" ino=423 res=0 errno=0 [ 125.822853][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 126.045652][ T7383] syz.0.388 (7383) used greatest stack depth: 17728 bytes left [ 126.367287][ T7395] sctp: [Deprecated]: syz.0.392 (pid 7395) Use of int in max_burst socket option. [ 126.367287][ T7395] Use struct sctp_assoc_value instead [ 126.735688][ T7401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.394'. [ 126.990243][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 127.178439][ T7423] netlink: 'syz.2.398': attribute type 8 has an invalid length. [ 127.208400][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 127.233179][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.390'. [ 127.247848][ T7387] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.276855][ T7417] team0: Device gtp0 is of different type [ 127.303750][ T7418] team0: Device gtp0 is of different type [ 127.800588][ T7441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.404'. [ 128.243750][ T7459] bridge0: port 4(vlan0) entered blocking state [ 128.275604][ T7459] bridge0: port 4(vlan0) entered disabled state [ 128.292504][ T7459] vlan0: entered allmulticast mode [ 128.321036][ T7459] vlan0: left allmulticast mode [ 128.485954][ T7469] netlink: 68 bytes leftover after parsing attributes in process `syz.3.410'. [ 128.548037][ T7472] netlink: 40 bytes leftover after parsing attributes in process `syz.4.411'. [ 129.021858][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 129.567504][ T7510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.422'. [ 129.823915][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 129.843436][ T7523] netlink: 68 bytes leftover after parsing attributes in process `syz.1.425'. [ 130.302620][ T7530] syz_tun: left allmulticast mode [ 130.345548][ T7530] syz_tun: left promiscuous mode [ 130.351944][ T7530] bridge0: port 3(syz_tun) entered disabled state [ 130.427067][ T7530] bridge_slave_0: left allmulticast mode [ 130.447631][ T7537] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 130.455588][ T7530] bridge_slave_0: left promiscuous mode [ 130.472248][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.572721][ T7530] bridge_slave_1: left allmulticast mode [ 130.583740][ T7530] bridge_slave_1: left promiscuous mode [ 130.611162][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.650419][ T7530] bond0: (slave bond_slave_0): Releasing backup interface [ 130.671822][ T7530] bond0: (slave bond_slave_1): Releasing backup interface [ 130.712637][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.737102][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.771460][ T7530] bond1: (slave gretap1): Releasing active interface [ 130.813523][ T7540] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 131.164352][ T7559] netlink: 44 bytes leftover after parsing attributes in process `syz.1.434'. [ 131.307472][ T7567] netem: change failed [ 131.367709][ T7571] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003 [ 131.407205][ T7566] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.577035][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 132.638410][ T7606] netlink: 44 bytes leftover after parsing attributes in process `syz.4.446'. [ 132.690080][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 132.998919][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.448'. [ 133.009323][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.448'. [ 133.313047][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.476664][ T7629] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.454'. [ 133.515557][ T7629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.995613][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 135.003442][ T7682] __nla_validate_parse: 4 callbacks suppressed [ 135.003463][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 135.528398][ T7710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.476'. [ 135.592076][ T7711] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.647381][ T7710] netlink: 112 bytes leftover after parsing attributes in process `syz.1.476'. [ 135.670030][ T7710] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 135.678960][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 135.691182][ T7711] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.754698][ T7711] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.851246][ T7711] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.986733][ T7711] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.022117][ T7711] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.058452][ T7711] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.100566][ T7711] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.155828][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 136.175725][ T7734] 8021q: VLANs not supported on nlmon0 [ 136.814158][ T7747] netlink: 148 bytes leftover after parsing attributes in process `syz.1.485'. [ 136.855656][ T7747] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 137.280765][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 137.299927][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 137.330763][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 137.415329][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 137.817017][ T7783] pimreg0: tun_chr_ioctl cmd 1074025677 [ 137.828821][ T7783] pimreg0: linktype set to 65534 [ 138.642006][ T7820] netlink: 'syz.3.506': attribute type 11 has an invalid length. [ 139.461376][ T7839] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 139.475687][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 139.862782][ T7847] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 139.880213][ T7847] batman_adv: batadv0: Adding interface: team0 [ 139.950953][ T7847] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.986235][ T7850] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 139.998451][ T7847] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 140.008545][ T7850] __nla_validate_parse: 7 callbacks suppressed [ 140.008563][ T7850] netlink: 2 bytes leftover after parsing attributes in process `syz.2.516'. [ 140.013092][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 140.090075][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'. [ 140.100979][ T7854] ip6t_srh: unknown srh invflags 4000 [ 140.113893][ T7860] netlink: 'syz.0.522': attribute type 7 has an invalid length. [ 140.114831][ T7850] team0: entered promiscuous mode [ 140.129879][ T7860] netlink: 'syz.0.522': attribute type 8 has an invalid length. [ 140.136528][ T7850] team_slave_0: entered promiscuous mode [ 140.143426][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 140.144374][ T7850] team_slave_1: entered promiscuous mode [ 140.152601][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 140.171705][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 140.172824][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.191787][ T7850] batman_adv: batadv0: Interface activated: team0 [ 140.198963][ T7850] batman_adv: batadv0: Interface deactivated: team0 [ 140.206371][ T7850] batman_adv: batadv0: Removing interface: team0 [ 140.236315][ T7850] bridge0: port 4(team0) entered blocking state [ 140.252545][ T7870] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.516'. [ 140.262327][ T7850] bridge0: port 4(team0) entered disabled state [ 140.288818][ T7850] team0: entered allmulticast mode [ 140.296487][ T7850] team_slave_0: entered allmulticast mode [ 140.302316][ T7850] team_slave_1: entered allmulticast mode [ 140.314549][ T7850] bridge0: port 4(team0) entered blocking state [ 140.321130][ T7850] bridge0: port 4(team0) entered forwarding state [ 140.362677][ T7873] netlink: 224 bytes leftover after parsing attributes in process `syz.3.524'. [ 140.392308][ T7860] erspan0: entered promiscuous mode [ 140.406087][ T7860] gretap0: entered promiscuous mode [ 140.420421][ T7860] erspan0: left promiscuous mode [ 140.431682][ T7860] gretap0: left promiscuous mode [ 140.860355][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 141.293643][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 141.480622][ T7913] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 141.488839][ T7913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.832196][ T7918] bond0: (slave dummy0): Releasing backup interface [ 141.842956][ T7918] batman_adv: batadv0: Adding interface: dummy0 [ 141.849954][ T7918] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.884903][ T7918] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 141.910824][ T7920] team0: Device gtp0 is of different type [ 142.142425][ T7928] geneve2: entered promiscuous mode [ 142.195316][ T7928] geneve2: entered allmulticast mode [ 142.423479][ T7935] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 143.035040][ T7970] netlink: 'syz.0.554': attribute type 10 has an invalid length. [ 143.099778][ T7970] team0: Port device geneve0 added [ 143.452577][ T7993] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 144.220548][ T8034] veth1_to_bond: entered promiscuous mode [ 144.403068][ T8039] netlink: 'syz.1.573': attribute type 7 has an invalid length. [ 144.438726][ T8039] netlink: 'syz.1.573': attribute type 8 has an invalid length. [ 144.751248][ T8052] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.772032][ T8052] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 144.813345][ T8052] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 144.856337][ T8052] team0: Cannot enslave team device to itself [ 144.992460][ T8060] vlan2: entered promiscuous mode [ 145.005490][ T8060] vlan2: entered allmulticast mode [ 145.047236][ T8068] __nla_validate_parse: 16 callbacks suppressed [ 145.047256][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 145.114598][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 145.389289][ T8079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.583'. [ 145.521767][ T8083] netlink: 'syz.0.594': attribute type 2 has an invalid length. [ 145.560614][ T8083] netlink: 'syz.0.594': attribute type 9 has an invalid length. [ 145.585738][ T8083] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.594'. [ 147.216086][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 149.203548][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 149.648479][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.707014][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.969921][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.609'. [ 150.276818][ T8202] netlink: 'syz.4.614': attribute type 3 has an invalid length. [ 150.305844][ T8195] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 150.341994][ T8195] batman_adv: batadv0: Adding interface: team0 [ 150.349551][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 150.362961][ T8195] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.396297][ T8208] openvswitch: netlink: IP tunnel TTL not specified. [ 150.404090][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 150.424785][ T8195] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 150.459835][ T8201] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 150.500438][ T8201] netlink: 2 bytes leftover after parsing attributes in process `syz.1.612'. [ 150.568000][ T8201] team0: entered promiscuous mode [ 150.573435][ T8201] team_slave_0: entered promiscuous mode [ 150.595700][ T8201] team_slave_1: entered promiscuous mode [ 150.603083][ T8201] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.614364][ T8201] batman_adv: batadv0: Interface activated: team0 [ 150.621464][ T8201] batman_adv: batadv0: Interface deactivated: team0 [ 150.637248][ T8201] batman_adv: batadv0: Removing interface: team0 [ 150.653844][ T8201] bridge0: port 3(team0) entered blocking state [ 150.661888][ T8195] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.612'. [ 150.710186][ T8201] bridge0: port 3(team0) entered disabled state [ 150.743009][ T8201] team0: entered allmulticast mode [ 150.777923][ T8216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.617'. [ 150.797225][ T8201] team_slave_0: entered allmulticast mode [ 150.809449][ T8201] team_slave_1: entered allmulticast mode [ 151.075920][ T8230] ipvlan0: entered promiscuous mode [ 151.171730][ T8221] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 151.228831][ T8221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.618'. [ 151.296421][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.623'. [ 151.402385][ T8243] xt_CT: No such helper "netbios-ns" [ 152.107072][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 152.125934][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 152.269153][ T8275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.456049][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 152.595998][ T8275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.689658][ T8291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 152.724068][ T8291] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.911278][ T8275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.238430][ T8275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.640083][ T8275] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.787922][ T8275] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.850714][ T8275] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.892260][ T8275] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.704195][ T8360] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 155.132636][ T8371] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 155.206934][ T8376] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 155.446197][ T8379] __nla_validate_parse: 8 callbacks suppressed [ 155.446217][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.647'. [ 155.521532][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 155.772097][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 155.908285][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 156.005486][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 156.138781][ T8392] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 156.192044][ T8392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.009600][ T8403] team0 (unregistering): Port device team_slave_0 removed [ 157.043471][ T8403] team0 (unregistering): Port device team_slave_1 removed [ 157.116376][ T8403] team0 (unregistering): Port device geneve0 removed [ 157.575441][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 157.886056][ T8431] IPVS: set_ctl: invalid protocol: 47 172.20.20.56:20000 [ 158.110387][ T8435] ================================================================== [ 158.118516][ T8435] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 158.127316][ T8435] Write of size 8 at addr ffff888079af6430 by task syz.1.665/8435 [ 158.135151][ T8435] [ 158.137511][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.1.665 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 158.137538][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.137552][ T8435] Call Trace: [ 158.137560][ T8435] [ 158.137570][ T8435] dump_stack_lvl+0x241/0x360 [ 158.137600][ T8435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.137625][ T8435] ? __pfx__printk+0x10/0x10 [ 158.137647][ T8435] ? _printk+0xd5/0x120 [ 158.137671][ T8435] ? __virt_addr_valid+0x183/0x530 [ 158.137692][ T8435] ? __virt_addr_valid+0x183/0x530 [ 158.137714][ T8435] print_report+0x16e/0x5b0 [ 158.137741][ T8435] ? __virt_addr_valid+0x183/0x530 [ 158.137761][ T8435] ? __virt_addr_valid+0x183/0x530 [ 158.137781][ T8435] ? __virt_addr_valid+0x45f/0x530 [ 158.137801][ T8435] ? __phys_addr+0xba/0x170 [ 158.137821][ T8435] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 158.137846][ T8435] kasan_report+0x143/0x180 [ 158.137874][ T8435] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 158.137902][ T8435] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 158.137928][ T8435] gtp_encap_enable_socket+0x435/0x5c0 [ 158.137958][ T8435] ? __pfx_gtp_encap_enable_socket+0x10/0x10 [ 158.137985][ T8435] ? __pfx_gtp_encap_recv+0x10/0x10 [ 158.138010][ T8435] ? __pfx_gtp_encap_destroy+0x10/0x10 [ 158.138037][ T8435] ? rcu_is_watching+0x15/0xb0 [ 158.138061][ T8435] ? trace_kmalloc+0x1f/0xd0 [ 158.138089][ T8435] ? __kmalloc_noprof+0x2a5/0x4c0 [ 158.138118][ T8435] ? gtp_newlink+0x285/0xf70 [ 158.138144][ T8435] gtp_newlink+0x7b5/0xf70 [ 158.138169][ T8435] ? __pfx_gtp_newlink+0x10/0x10 [ 158.138193][ T8435] rtnl_newlink_create+0x37b/0xbd0 [ 158.138220][ T8435] ? __pfx_aa_get_newest_label+0x10/0x10 [ 158.138256][ T8435] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 158.138281][ T8435] ? __pfx___mutex_lock+0x10/0x10 [ 158.138316][ T8435] ? ns_capable+0x8a/0xf0 [ 158.138343][ T8435] rtnl_newlink+0x167a/0x1d90 [ 158.138377][ T8435] ? stack_depot_save_flags+0x37/0x940 [ 158.138418][ T8435] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.138450][ T8435] ? __netlink_deliver_tap+0x561/0x7f0 [ 158.138490][ T8435] ? __pfx_validate_chain+0x10/0x10 [ 158.138513][ T8435] ? __sock_sendmsg+0x221/0x270 [ 158.138542][ T8435] ? ____sys_sendmsg+0x53a/0x860 [ 158.138566][ T8435] ? __sys_sendmsg+0x269/0x350 [ 158.138590][ T8435] ? do_syscall_64+0xf3/0x230 [ 158.138618][ T8435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.138658][ T8435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.138692][ T8435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.138729][ T8435] ? mark_lock+0x9a/0x360 [ 158.138751][ T8435] ? __lock_acquire+0x1397/0x2100 [ 158.138799][ T8435] ? __pfx_lock_release+0x10/0x10 [ 158.138839][ T8435] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.138872][ T8435] rtnetlink_rcv_msg+0x791/0xcf0 [ 158.138904][ T8435] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 158.138939][ T8435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.138976][ T8435] ? ref_tracker_free+0x643/0x7e0 [ 158.139000][ T8435] netlink_rcv_skb+0x206/0x480 [ 158.139032][ T8435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.139065][ T8435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.139109][ T8435] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.139142][ T8435] netlink_unicast+0x7f6/0x990 [ 158.139175][ T8435] ? __pfx_netlink_unicast+0x10/0x10 [ 158.139203][ T8435] ? __virt_addr_valid+0x45f/0x530 [ 158.139223][ T8435] ? __phys_addr_symbol+0x2f/0x70 [ 158.139242][ T8435] ? __check_object_size+0x47a/0x730 [ 158.139274][ T8435] netlink_sendmsg+0x8de/0xcb0 [ 158.139313][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.139348][ T8435] ? aa_sock_msg_perm+0x91/0x160 [ 158.139383][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.139415][ T8435] __sock_sendmsg+0x221/0x270 [ 158.139447][ T8435] ____sys_sendmsg+0x53a/0x860 [ 158.139482][ T8435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.139507][ T8435] ? __fget_files+0x2a/0x410 [ 158.139540][ T8435] ? __fget_files+0x2a/0x410 [ 158.139575][ T8435] __sys_sendmsg+0x269/0x350 [ 158.139603][ T8435] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.139651][ T8435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.139685][ T8435] ? do_syscall_64+0x100/0x230 [ 158.139716][ T8435] ? do_syscall_64+0xb6/0x230 [ 158.139746][ T8435] do_syscall_64+0xf3/0x230 [ 158.139774][ T8435] ? clear_bhb_loop+0x35/0x90 [ 158.139806][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.139836][ T8435] RIP: 0033:0x7fdf8498d169 [ 158.139855][ T8435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.139873][ T8435] RSP: 002b:00007fdf827f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.139897][ T8435] RAX: ffffffffffffffda RBX: 00007fdf84ba5fa0 RCX: 00007fdf8498d169 [ 158.139913][ T8435] RDX: 000000000000c8c0 RSI: 0000400000000280 RDI: 0000000000000004 [ 158.139927][ T8435] RBP: 00007fdf84a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.139941][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.139953][ T8435] R13: 0000000000000000 R14: 00007fdf84ba5fa0 R15: 00007ffc7cb96a08 [ 158.139976][ T8435] [ 158.139984][ T8435] [ 158.629179][ T8435] Allocated by task 8039: [ 158.633514][ T8435] kasan_save_track+0x3f/0x80 [ 158.638208][ T8435] __kasan_slab_alloc+0x66/0x80 [ 158.643067][ T8435] kmem_cache_alloc_noprof+0x1d9/0x380 [ 158.648538][ T8435] sk_prot_alloc+0x58/0x210 [ 158.653048][ T8435] sk_alloc+0x3e/0x370 [ 158.657121][ T8435] inet_create+0x648/0xea0 [ 158.661547][ T8435] __sock_create+0x4c0/0xa30 [ 158.666148][ T8435] __sys_socket+0x150/0x3c0 [ 158.670667][ T8435] __x64_sys_socket+0x7a/0x90 [ 158.675356][ T8435] do_syscall_64+0xf3/0x230 [ 158.679867][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.685769][ T8435] [ 158.688093][ T8435] Freed by task 8038: [ 158.692070][ T8435] kasan_save_track+0x3f/0x80 [ 158.696753][ T8435] kasan_save_free_info+0x40/0x50 [ 158.701791][ T8435] __kasan_slab_free+0x59/0x70 [ 158.706560][ T8435] kmem_cache_free+0x195/0x410 [ 158.711339][ T8435] __sk_destruct+0x4fd/0x690 [ 158.715939][ T8435] inet_release+0x17d/0x200 [ 158.720467][ T8435] sock_close+0xbc/0x240 [ 158.724735][ T8435] __fput+0x3e9/0x9f0 [ 158.728729][ T8435] task_work_run+0x24f/0x310 [ 158.733337][ T8435] syscall_exit_to_user_mode+0x13f/0x340 [ 158.738984][ T8435] do_syscall_64+0x100/0x230 [ 158.743586][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.749495][ T8435] [ 158.751819][ T8435] The buggy address belongs to the object at ffff888079af5d00 [ 158.751819][ T8435] which belongs to the cache UDP of size 1856 [ 158.765273][ T8435] The buggy address is located 1840 bytes inside of [ 158.765273][ T8435] freed 1856-byte region [ffff888079af5d00, ffff888079af6440) [ 158.779259][ T8435] [ 158.781587][ T8435] The buggy address belongs to the physical page: [ 158.787996][ T8435] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079af64c0 pfn:0x79af0 [ 158.798167][ T8435] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.806676][ T8435] memcg:ffff888027a85301 [ 158.810915][ T8435] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 158.818467][ T8435] page_type: f5(slab) [ 158.822452][ T8435] raw: 00fff00000000040 ffff888140eb0500 dead000000000122 0000000000000000 [ 158.831039][ T8435] raw: ffff888079af64c0 000000008010000b 00000000f5000000 ffff888027a85301 [ 158.839627][ T8435] head: 00fff00000000040 ffff888140eb0500 dead000000000122 0000000000000000 [ 158.848328][ T8435] head: ffff888079af64c0 000000008010000b 00000000f5000000 ffff888027a85301 [ 158.857027][ T8435] head: 00fff00000000003 ffffea0001e6bc01 ffffffffffffffff 0000000000000000 [ 158.865712][ T8435] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 158.874384][ T8435] page dumped because: kasan: bad access detected [ 158.880816][ T8435] page_owner tracks the page as allocated [ 158.886536][ T8435] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 81725914212, free_ts 81697515360 [ 158.907905][ T8435] post_alloc_hook+0x1f4/0x240 [ 158.912709][ T8435] get_page_from_freelist+0x365c/0x37a0 [ 158.918284][ T8435] __alloc_frozen_pages_noprof+0x292/0x710 [ 158.924106][ T8435] alloc_pages_mpol+0x311/0x660 [ 158.928971][ T8435] allocate_slab+0x8f/0x3a0 [ 158.933499][ T8435] ___slab_alloc+0xc27/0x14a0 [ 158.938181][ T8435] __slab_alloc+0x58/0xa0 [ 158.942514][ T8435] kmem_cache_alloc_noprof+0x268/0x380 [ 158.947982][ T8435] sk_prot_alloc+0x58/0x210 [ 158.952493][ T8435] sk_alloc+0x3e/0x370 [ 158.956567][ T8435] inet_create+0x648/0xea0 [ 158.960998][ T8435] __sock_create+0x4c0/0xa30 [ 158.965601][ T8435] udp_sock_create4+0xda/0x670 [ 158.970374][ T8435] wg_socket_init+0x6c0/0xea0 [ 158.975152][ T8435] wg_open+0x255/0x420 [ 158.979255][ T8435] __dev_open+0x45a/0x8a0 [ 158.983597][ T8435] page last free pid 5830 tgid 5830 stack trace: [ 158.989924][ T8435] free_frozen_pages+0xe0d/0x10e0 [ 158.994952][ T8435] __slab_free+0x2c2/0x380 [ 158.999373][ T8435] qlist_free_all+0x9a/0x140 [ 159.003972][ T8435] kasan_quarantine_reduce+0x14f/0x170 [ 159.009545][ T8435] __kasan_slab_alloc+0x23/0x80 [ 159.014407][ T8435] __kmalloc_cache_noprof+0x1d9/0x390 [ 159.019889][ T8435] ref_tracker_alloc+0x14b/0x490 [ 159.024832][ T8435] netdev_queue_update_kobjects+0x1d6/0x720 [ 159.030749][ T8435] netdev_register_kobject+0x234/0x2f0 [ 159.036222][ T8435] register_netdevice+0x12c3/0x1b70 [ 159.041453][ T8435] cfg80211_register_netdevice+0x149/0x2f0 [ 159.047295][ T8435] ieee80211_if_add+0x119d/0x1780 [ 159.052342][ T8435] ieee80211_register_hw+0x3708/0x42e0 [ 159.057817][ T8435] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 159.063550][ T8435] hwsim_new_radio_nl+0xece/0x2290 [ 159.068674][ T8435] genl_rcv_msg+0xb1f/0xec0 [ 159.073213][ T8435] [ 159.075541][ T8435] Memory state around the buggy address: [ 159.081176][ T8435] ffff888079af6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.089263][ T8435] ffff888079af6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.097334][ T8435] >ffff888079af6400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 159.105420][ T8435] ^ [ 159.111068][ T8435] ffff888079af6480: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 159.119159][ T8435] ffff888079af6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.127401][ T8435] ================================================================== [ 159.137056][ T8435] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.144288][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.1.665 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 159.154907][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.164988][ T8435] Call Trace: [ 159.168324][ T8435] [ 159.171314][ T8435] dump_stack_lvl+0x241/0x360 [ 159.176051][ T8435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.181281][ T8435] ? __pfx__printk+0x10/0x10 [ 159.185900][ T8435] ? vscnprintf+0x5d/0x90 [ 159.190282][ T8435] panic+0x349/0x880 [ 159.194225][ T8435] ? check_panic_on_warn+0x21/0xb0 [ 159.199405][ T8435] ? __pfx_panic+0x10/0x10 [ 159.203865][ T8435] ? mark_lock+0x9a/0x360 [ 159.208221][ T8435] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 159.214148][ T8435] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 159.220074][ T8435] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 159.226444][ T8435] ? print_report+0x519/0x5b0 [ 159.231180][ T8435] check_panic_on_warn+0x86/0xb0 [ 159.236171][ T8435] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 159.242196][ T8435] end_report+0x77/0x160 [ 159.246484][ T8435] kasan_report+0x154/0x180 [ 159.251027][ T8435] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 159.257050][ T8435] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 159.262895][ T8435] gtp_encap_enable_socket+0x435/0x5c0 [ 159.268488][ T8435] ? __pfx_gtp_encap_enable_socket+0x10/0x10 [ 159.274602][ T8435] ? __pfx_gtp_encap_recv+0x10/0x10 [ 159.279838][ T8435] ? __pfx_gtp_encap_destroy+0x10/0x10 [ 159.285337][ T8435] ? rcu_is_watching+0x15/0xb0 [ 159.290151][ T8435] ? trace_kmalloc+0x1f/0xd0 [ 159.294785][ T8435] ? __kmalloc_noprof+0x2a5/0x4c0 [ 159.299861][ T8435] ? gtp_newlink+0x285/0xf70 [ 159.304498][ T8435] gtp_newlink+0x7b5/0xf70 [ 159.308963][ T8435] ? __pfx_gtp_newlink+0x10/0x10 [ 159.313951][ T8435] rtnl_newlink_create+0x37b/0xbd0 [ 159.319101][ T8435] ? __pfx_aa_get_newest_label+0x10/0x10 [ 159.324785][ T8435] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 159.330457][ T8435] ? __pfx___mutex_lock+0x10/0x10 [ 159.335530][ T8435] ? ns_capable+0x8a/0xf0 [ 159.339903][ T8435] rtnl_newlink+0x167a/0x1d90 [ 159.344629][ T8435] ? stack_depot_save_flags+0x37/0x940 [ 159.350141][ T8435] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.355188][ T8435] ? __netlink_deliver_tap+0x561/0x7f0 [ 159.360669][ T8435] ? __pfx_validate_chain+0x10/0x10 [ 159.365878][ T8435] ? __sock_sendmsg+0x221/0x270 [ 159.370743][ T8435] ? ____sys_sendmsg+0x53a/0x860 [ 159.375689][ T8435] ? __sys_sendmsg+0x269/0x350 [ 159.380461][ T8435] ? do_syscall_64+0xf3/0x230 [ 159.385153][ T8435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.391242][ T8435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.397240][ T8435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.403587][ T8435] ? mark_lock+0x9a/0x360 [ 159.407924][ T8435] ? __lock_acquire+0x1397/0x2100 [ 159.412974][ T8435] ? __pfx_lock_release+0x10/0x10 [ 159.418022][ T8435] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.423066][ T8435] rtnetlink_rcv_msg+0x791/0xcf0 [ 159.428030][ T8435] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 159.433185][ T8435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.438666][ T8435] ? ref_tracker_free+0x643/0x7e0 [ 159.443701][ T8435] netlink_rcv_skb+0x206/0x480 [ 159.448483][ T8435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.453962][ T8435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.459271][ T8435] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.464487][ T8435] netlink_unicast+0x7f6/0x990 [ 159.469270][ T8435] ? __pfx_netlink_unicast+0x10/0x10 [ 159.474572][ T8435] ? __virt_addr_valid+0x45f/0x530 [ 159.479695][ T8435] ? __phys_addr_symbol+0x2f/0x70 [ 159.484729][ T8435] ? __check_object_size+0x47a/0x730 [ 159.490030][ T8435] netlink_sendmsg+0x8de/0xcb0 [ 159.494815][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.500132][ T8435] ? aa_sock_msg_perm+0x91/0x160 [ 159.505093][ T8435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.510428][ T8435] __sock_sendmsg+0x221/0x270 [ 159.515128][ T8435] ____sys_sendmsg+0x53a/0x860 [ 159.519905][ T8435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.525203][ T8435] ? __fget_files+0x2a/0x410 [ 159.529819][ T8435] ? __fget_files+0x2a/0x410 [ 159.534428][ T8435] __sys_sendmsg+0x269/0x350 [ 159.539030][ T8435] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.544170][ T8435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.550523][ T8435] ? do_syscall_64+0x100/0x230 [ 159.555305][ T8435] ? do_syscall_64+0xb6/0x230 [ 159.559999][ T8435] do_syscall_64+0xf3/0x230 [ 159.564533][ T8435] ? clear_bhb_loop+0x35/0x90 [ 159.569247][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.575177][ T8435] RIP: 0033:0x7fdf8498d169 [ 159.579612][ T8435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.599250][ T8435] RSP: 002b:00007fdf827f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.607698][ T8435] RAX: ffffffffffffffda RBX: 00007fdf84ba5fa0 RCX: 00007fdf8498d169 [ 159.615684][ T8435] RDX: 000000000000c8c0 RSI: 0000400000000280 RDI: 0000000000000004 [ 159.623662][ T8435] RBP: 00007fdf84a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.631642][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.639621][ T8435] R13: 0000000000000000 R14: 00007fdf84ba5fa0 R15: 00007ffc7cb96a08 [ 159.647623][ T8435] [ 159.650959][ T8435] Kernel Offset: disabled [ 159.655306][ T8435] Rebooting in 86400 seconds..