last executing test programs: 8.54931348s ago: executing program 4 (id=2806): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)='W', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="90", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x100101) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40080) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x128, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4c9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x48}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd2, 0xa9, @random="275d431d2f71a5a42759d1626ea4af3c419dbc85134d265abf21154ba06a6ee5940ec53a307100054b343bd3a9552aecefd6b1dcbe3be8d7fe87070b7ab061f2d7b390a4faa0371e598999113beb50f6a07e6f62967c87227779c7deb71816ca75043a0da0e783970c2438bf7b6813a326088750be91a1c39f8a1c2467b14a8c923938b4b047ed72c82df1ee7fcd9b11461057eaaa377ebc4fc2449f99cb7b086fb476bbd54e18de6d07743b8dc1418a1c3b9a0c30a7a462705ce88c9cec6bcff8ac0ea4566a31c17a15024e0931"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffff0000}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x10}, @TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "e501008e1641c83fa580856d4e397c0a"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="ab553fec94248c32e27d04000000288a590fbbb1347a7f06135746dac22acc2187", 0x21) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ac1414bb060001000200000008000600a7"], 0x38}}, 0x0) 7.634604719s ago: executing program 2 (id=2817): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007912000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, 0x0, 0x6a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000300)=""/110, 0x6e}], 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000140001000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00380000000000000000007aacc6d2fde6d99e4bc4c1b5cddefa7a1db18df84d66eca90899e5c3a8c1fcf23caaf3ba96a9a941cd88732fbc69cb145f"], 0x5c}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x400, r0, &(0x7f00000002c0)=0xfffffffffffffbff, 0x5, 0xf) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) splice(r4, 0x0, r6, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000400000060000"], 0x14}}, 0x0) 7.500811232s ago: executing program 4 (id=2820): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000200)}}], 0x1, 0x6000000) 7.344456572s ago: executing program 4 (id=2822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)='W', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="90", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x100101) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40080) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x128, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4c9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x48}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd2, 0xa9, @random="275d431d2f71a5a42759d1626ea4af3c419dbc85134d265abf21154ba06a6ee5940ec53a307100054b343bd3a9552aecefd6b1dcbe3be8d7fe87070b7ab061f2d7b390a4faa0371e598999113beb50f6a07e6f62967c87227779c7deb71816ca75043a0da0e783970c2438bf7b6813a326088750be91a1c39f8a1c2467b14a8c923938b4b047ed72c82df1ee7fcd9b11461057eaaa377ebc4fc2449f99cb7b086fb476bbd54e18de6d07743b8dc1418a1c3b9a0c30a7a462705ce88c9cec6bcff8ac0ea4566a31c17a15024e0931"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffff0000}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x10}, @TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "e501008e1641c83fa580856d4e397c0a"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="ab553fec94248c32e27d04000000288a590fbbb1347a7f06135746dac22acc2187", 0x21) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ac1414bb060001000200000008000600a7"], 0x38}}, 0x0) 7.165007731s ago: executing program 2 (id=2826): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170a0000000000020000000900020073797a32000000000900b501000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20010004, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x10001}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES64=r5, @ANYBLOB="2e003300d000000008021100000108021100000050505050505006"], 0x4c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000800)) 6.294906837s ago: executing program 4 (id=2835): bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], 0x0}, 0x90) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f00000019c0)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "544e6b24af869c8bcb343306faffffffff155fadb01fcc19dccce863bc600e4d"}, 0x3c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x3) close(r2) socket$xdp(0x2c, 0x3, 0x0) unshare(0x6020400) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0x57) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'team_slave_1\x00', 0x1ff}) 6.199833024s ago: executing program 2 (id=2837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080)=0x7, 0x4) socket$inet6(0xa, 0x3, 0xcf) (async) socket$inet6(0xa, 0x3, 0xcf) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100004000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0a00340001010101010100000800260020170000"], 0x30}}, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) (async) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 5.947354245s ago: executing program 2 (id=2841): ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000100)={0x0, 'syz1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.946687321s ago: executing program 4 (id=2842): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x681}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x14}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x52, &(0x7f0000000680)=""/244, &(0x7f0000000780)=0xf4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x7) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) socket(0x840000000002, 0x3, 0x100) 5.86492875s ago: executing program 2 (id=2843): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x54583}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) 5.735044275s ago: executing program 4 (id=2845): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007912000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, 0x0, 0x6a) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000300)=""/110, 0x6e}], 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000140001000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00380000000000000000007aacc6d2fde6d99e4bc4c1b5cddefa7a1db18df84d66eca90899e5c3a8c1fcf23caaf3ba96a9a941cd88732fbc69cb145f"], 0x5c}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x400, r0, &(0x7f00000002c0)=0xfffffffffffffbff, 0x5, 0xf) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) splice(r4, 0x0, r6, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000400000060000"], 0x14}}, 0x0) 5.549981026s ago: executing program 2 (id=2848): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007912000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, 0x0, 0x6a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000300)=""/110, 0x6e}], 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000140001000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00380000000000000000007aacc6d2fde6d99e4bc4c1b5cddefa7a1db18df84d66eca90899e5c3a8c1fcf23caaf3ba96a9a941cd88732fbc69cb145f"], 0x5c}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x400, r0, &(0x7f00000002c0)=0xfffffffffffffbff, 0x5, 0xf) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) splice(r4, 0x0, r6, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) close(r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000400000060000"], 0x14}}, 0x0) 2.191044253s ago: executing program 3 (id=2883): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000580)=[@timestamp, @window, @mss, @timestamp, @sack_perm, @mss={0x2, 0x1000}], 0x64) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf8}, 0x14) shutdown(r6, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.119324655s ago: executing program 3 (id=2885): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000004000000000000000010000000007e"], 0x20}}], 0x2, 0x0) 1.236401193s ago: executing program 3 (id=2887): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170a0000000000020000000900020073797a32000000000900b501000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20010004, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES64=r5, @ANYBLOB="2e003300d000000008021100000108021100000050505050505006"], 0x4c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000800)) 1.189454077s ago: executing program 1 (id=2888): socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="7a0a00ff0000000071104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x5a, r5}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006a00000825bd7000fcdbdf25020000000000000008000a000200000001996a6a5bb035fddf257e1d0ef8adb4fd4372c495137569ffbcb439849bac52dd635d2db74c99"], 0x20}}, 0x20008000) (async) r12 = getgid() sendmmsg$unix(r9, &(0x7f0000004b80)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000180)="e8eec36c5167c37884928146a76753cae9c3ebdf3e647ac3fafee805f392a332cc78c71a964c0cfbfb3748f990aa5ea6989d7f4c932b500f09ce22f23559dfea0b1742a7a238f6a6a65fcf83c906d5009cf25fa6cbbd5e1b7b656d0d53ba2b", 0x5f}, {&(0x7f0000000340)="e3edbc174db991b7c6725623fb6c51daa65532645ac6c9b8d6818462314475c2b8bcb1d1700ebb4896aa3a555e3657817811822cf552daccc52aea2bfd85871820ff2e3436e922003567b3e6e03aa570b77abad319b984180a08642843d12973", 0x60}, {&(0x7f00000004c0)="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", 0xf80}, {&(0x7f00000014c0)="ac0d3984974d51bd513276a9fcee258ed02b618b143ed5248af5a4ae130992db24b7f71488aa08c071d7bfc41639fc25ca3e88a0bbe12e6cbab004e86ca5fce985fbb7751538515a15a3a979e2e3500d01289c3debdb0f04fac860c23cc2f80d39943f70e4aaa1936d5582c59875a592cbae285cc4de993f7e12e4", 0x7b}, {&(0x7f0000001580)="0eb8c1c9d182d0e1a3060307fd94bca2cf635573e30867e47936b7e150c56a06dc89d0ae39f5ca3817c54ac21eadb8f7c384c8945e9c0f3b9053b7ee489ffdd021c55ac49d41bcf461f4568469ce9890603e16ea008c23a6c5148e0731d6a05f6973cf6d8231db42d558c0876e0885b8e8840368bc728916ece4eb2489eddc9d3fc51102b25c08e20146717307ce47434fbbdfafe9824c0ff8723069cb82dd08b7ebdda0c03e6a07702905a009ee5ce8ec1119813a40b3ad5d544fa942c5f288e93e30b5acf6329e61a0a8f09cce1a61a5e0ba9e5a", 0xd5}], 0x5, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c00ffff00000000010008ed64a52a59", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=0x0, @ANYRES8=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\b\x00\x00', @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="9f7e240eb3a8f18501e1ff00000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r6, @ANYRES32=r11, @ANYRES16, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES32, @ANYBLOB="1c0000c0e3ff000001000000020000007713a0c5713e82aceb6888ba7c0161523d9fcb8776ad035b9f8dafa796ddac57a5c5e45643d56115f4104e6db577a12b466e04d49de66cc80aa316216d608e4ccdd0c6dc42f1259fe878b8737b89836cb200d0f54fc2f2a99abde886d477d2a328845f5342cead0076a59df40baf5787d3a73bed99", @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES64=r10], 0x148, 0x52}}, {{&(0x7f0000001c00)=@file={0x45b92ccace97ec5a, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001c80)="b8fc300b7c222c5d6bb490f3fbd390ce0c6303e722513af71a56a75701ca897fae7e55a7cd295cdd922c689dbce104b02fb0d870f4f3f9c498bab7095b3f2544818e704aae218b3949d22380b2005f32cc7c35e87f42e8f21ce4e5b333e5ddf2a1c6e02367f5f4bc031cd673e2038d57b82600196af5c6942712e3521fc9482eed5de13ee0ced1501ae5c3c48920345f63be592a57c8c30b954d03c82f2fe1c80faab71aa99fde4e9024b2ed14efd7dc5d8aed09d233a4a2a40e788668f7c7eff94067d6c52a9329d6608e75bb77de4e7f7051ecae295b7aed8b24f5bcf7d1d41e12e4f86841", 0xe6}, {&(0x7f0000001d80)="0c2c590e3723f6428d03b332a36ae0681cebb529ddc38ec13dbe583b85e316262cd356cd79f7cbf350f663e281e502f6b6a2b16ff5cf1cdeabdcbe7c35a83dc109abdc899a42ce1e377626c94076f437a839bf92b90ac85cdc678b5929381d7aa736e39059b02a6219e382e41fe9858f3189a82dcc93426e005686ca0b9edaa0c3a37f0242f769334246f2274119938f5f3621d256a6e767d35d51b2d1cfcc0dd738c04898a5b669b1ba62fdb14b94ce38f32dc6dcd9efc9b590cfd1a00c131e70e594d43a264b", 0xc7}, {&(0x7f0000001e80)="a2a45745b327b8aa475c6c321e64a24bcdb9500e67d98d8b6421e8630aecd081bdec1196879acdb61b5e69f62b506dc67f7916f8ea1a8dd682b5c647231c3599908245717c4b2a0005497760d8476c6a25a2d50d4d9c9e011beadce4e50684ef31fc48cd19003c779c01522ab98a5dca11c8025d74280ced1dc86528f456682588", 0x81}, {&(0x7f00000020c0)="44817632cbe6fe8b1046b531b937e6ba0848a945d9b229388d9d5e652571ad5a4b7d96344958a8b4ee0f1baa047aec7be3ab0bcdd53d95df68f2af06770fdde47da7b7c0ab677fadc889af7b863377e9ee06f92f48471fd21530a7a0fa237551e1ed49cd8dd785f0b7d793a594204ed0c0893c6fa6dc22b4139f1a5b1d1cd14c1381feeacb1a8df18f92ee7462b12233b91df507e18a12730bdcd1947b4ada794c833064ae8141c3c2dc24a43f8c5ae0dd5eafb35492785654f9b78fab0d9e", 0xbf}], 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1b0000001c000000000000f60000000001000000", @ANYRES32, @ANYRES32, @ANYRES8=r8, @ANYRES64, @ANYRES64=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000036c0)="6d4503959439e8e3802ae5f01110faf93cd94664fdc272f497eb6c815aba1011540bf150d75f40a96600cca82a2e69069308b8d4839273e144cdd2e834a83ad62c0dec51a9091c31e6b89b8807ff05d473b3cfa8ff41d4bb433132c9dd2f4af97328951e5a89be0d8abe7304b2e874459232ce249b890190de7e1abe0ce2a99de7b1554913292f4df1d972a1b1c96305f019b9af3cab5cc2332eff865ed904823c166dc3280e093324798fd6f63a968902bd47d6d434ad8e1a00698e6d514e1f2876ea640c", 0xc5}], 0x1, 0x0, 0x0, 0x4040}}, {{&(0x7f0000003800)=@abs={0x1}, 0x6e, &(0x7f0000003880), 0x0, 0x0, 0x0, 0x4004001}}, {{&(0x7f00000038c0)=@abs, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000003940)="a7e51906238edf33622d085865f99fa57ddd91770d239152bcc589bf37401a685ac04d35f76c04957a3fbd9574d5677ab9bcca22f7e944919b1bb62763ff0332d79975979b0eed01535297824eac721e934ff033", 0x54}, {&(0x7f0000003a00)="132d306923c1fac5f984dec931e26c5ac73ad95a71249e52de0709c769cd4185537d89311cd629b3dc5e74ce781d309138", 0x31}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="80f9663e455d9c50e61c69d3acc34026a400cf714b53c24eb5cab0030e0be0d23a7f80eb441ca2ecacb1dcdaa24cce2343efbbf7346f399a31be89ae03a99918682685764e012021868fd49441cecb6480bf70da0a2cc02c06b18940526521c79cb517f46b4deda81db5794f37a892d9", 0x70}], 0x4, &(0x7f0000001880)=ANY=[@ANYRES64, @ANYRESOCT=r9, @ANYRES32, @ANYRES32=r3, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="fdad7de17fd9df4e42be9be416291b7f991aa3b4b7eba63683eecaf74839f5"], 0x48, 0x40800}}], 0x5, 0x240000c1) (async) r13 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r15 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r14, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee01}}}], 0x60}, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003d80)={{{@in6=@private0, @in6=@initdev}}, {{@in=@loopback}}}, &(0x7f0000003e80)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000003ec0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.04347389s ago: executing program 1 (id=2890): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x681}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x14}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x7) connect$unix(r5, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) socket(0x840000000002, 0x3, 0x100) 977.59043ms ago: executing program 0 (id=2891): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 952.440102ms ago: executing program 1 (id=2892): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec0000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x3c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, 0x0, &(0x7f0000000580)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCAX25CTLCON(r8, 0x89e8, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0x7ff, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r8, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000240)=0x2200004) pwritev(r9, &(0x7f0000000280)=[{&(0x7f00000002c0)="002147177ab3d35d86046120aad9e706b9e81300000005000000000000", 0x1d}, {&(0x7f0000000100)="afea7b79e88bbf78aa0de359be2c9b015240b0e83090b3f44d4df292b68928904da04130b67b2cbaa5097e3bf3756f2b462a918a407dd4c267957d97e2e21f", 0x3f}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000001c0)=0x7, 0x4) 801.975283ms ago: executing program 0 (id=2893): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000200)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x6000000) (fail_nth: 1) 773.357048ms ago: executing program 1 (id=2894): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, 0x0, &(0x7f0000000140)}, 0x20) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) shutdown(r2, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="0a000147102c5babca9556007d8a03dd71ae606306b62ef12a7e1ee3420f72ccdd98b1477c2a7a"], 0x48}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffe}, 0x8) (async) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@mcast1, @empty, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'wlan1\x00', 'xfrm0\x00', {0xff}, {}, 0x2f, 0x40, 0x0, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xff000000, 0xffff00, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'gretap0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x4, 0xb0, 0x0, 0x46}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xcd8b, 0x63, 0x9, 'netbios-ns\x00', {0x7fff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) (async) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x48, 0x0, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="2c002d8008"], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r10, &(0x7f00000022c0), 0x1000c) 399.442702ms ago: executing program 0 (id=2895): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000580)=[@timestamp, @window, @mss, @timestamp, @sack_perm, @mss={0x2, 0x1000}], 0x64) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf8}, 0x14) shutdown(r5, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 374.299852ms ago: executing program 0 (id=2896): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000f10000000000000000911206000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 351.325847ms ago: executing program 1 (id=2897): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 263.43013ms ago: executing program 3 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001400000000006c9078000000000000000000000000009c907801000000000000000000000000000200"/190], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000150020002bbd7000fef9ffffff78cdfd", @ANYRES32=r1, @ANYBLOB="14000600ff7f000000020000000000000d000000140006000900000009000000060000000e0000000800080044000000"], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48) (async) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005f005f0314f9f4070009000000000128626900"/36, 0x24) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) getsockname$ax25(r4, 0x0, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r5, 0x10e, 0xc, &(0x7f0000000340)=""/76, &(0x7f00000003c0)=0x4c) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@bcast, @netrom, @bcast, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f0000000140)=0x48, 0x80800) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000001000000000000000000000091120b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e00000000140002800600050088a80000060001000100000008000500", @ANYRES32=r8, @ANYBLOB="d440f247c7c06095574942d675c2bf77f528fb042af3a4d51ea7ce69a1c5dec4d405f6ce4c77f1ad9380ab840900204ebcd2448bc6d7b328"], 0x4c}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@udp=r10}, 0x20) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r2, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp=r11}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) 211.570689ms ago: executing program 0 (id=2899): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xd00}}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 210.799392ms ago: executing program 1 (id=2900): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)='W', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="90", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x100101) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40080) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x128, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4c9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x48}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd2, 0xa9, @random="275d431d2f71a5a42759d1626ea4af3c419dbc85134d265abf21154ba06a6ee5940ec53a307100054b343bd3a9552aecefd6b1dcbe3be8d7fe87070b7ab061f2d7b390a4faa0371e598999113beb50f6a07e6f62967c87227779c7deb71816ca75043a0da0e783970c2438bf7b6813a326088750be91a1c39f8a1c2467b14a8c923938b4b047ed72c82df1ee7fcd9b11461057eaaa377ebc4fc2449f99cb7b086fb476bbd54e18de6d07743b8dc1418a1c3b9a0c30a7a462705ce88c9cec6bcff8ac0ea4566a31c17a15024e0931"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffff0000}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x10}, @TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "e501008e1641c83fa580856d4e397c0a"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="ab553fec94248c32e27d04000000288a590fbbb1347a7f06135746dac22acc2187", 0x21) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ac1414bb060001000200000008000600a7"], 0x38}}, 0x0) 157.023038ms ago: executing program 0 (id=2901): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x0, 0x0, @empty, @local}}}}) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x4) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES8=r5], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x78, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2b10, 0x7, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x10045, 0xb94, 0x4, 0x12, 0xa, 0x19, 0x4, 0x8, {0xa953, 0x7, 0xe, 0x80, 0xffffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="14000000100001000000000000007f000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a01040000ebff000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00014000000000000000010c00024000000000efffffff0eeb0340000005f50900010073797a30", @ANYRESOCT=r5, @ANYBLOB="2b3939d5b147cc7e5bb9de7b677bc3d0ddd5163f1635919bd9a4a9d7b5ee6e9c6d53a811fb13f7dc2aad55db941b22c4a11917c81b545eb0253f4b4eae537f503e2eefd2e765c5137bc0e4a8a414602f541b906c97bef2706abce294e5764e3f3758798fd8b3d7deecc1c572d877e3a4b09877e2ab28ad4b82a6a64f47d08a6e2dd9f2c76184284f64626c018f17e948a61167520d74e8b2c3759d574e8e7b9935fb1aed0c14c919dd299e46b74dc7", @ANYRESDEC, @ANYRESHEX=0x0], 0xf8}}, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000004c0)="87af378a8d208b2c419587c5bea40ab3d487b08bbf1dc78adc4bda1140858f7d1daad8ebfe1113a50d42b976df1c4455d3a22953aede67a479a4dae947b8752260bd64d5463e05f0cbd7dfbbdd845ab21e1a401f9832307d7e008c9467b60fba800c9e0fc32561d946ab33ea", 0x6c}, {&(0x7f0000002940)="99d661321aafe161f8daa3aa686b49201e28", 0x12}, {&(0x7f0000000540)="f555c15b80122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e194719890a0fa96eb0889b44c00e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2ceb92862bcea0dd11dd8646deaec7a1cf3b896af4f798a9aae349da366682c28df77abde3fd225bcd1caa0b66dc73e68d5a6eb6558ae3f681b5265db18d5", 0xdc}, {&(0x7f0000002a40)="cedd02", 0x3}, {&(0x7f0000002b00)="ccf4d478ea4674b674d304c2f55df1bf3edcf361d2a56234a5f1d49af4b28f6cb9fffdedfbfe66d04276a5b7776a2c9f1366408c8cbde94e81b9d5aaf1df7468d4d9dc5331a21b85f9483318a39085ce0c42697a0db79feb1f6aea03ba242e87fa312419f10be40562264cffeb239c407716f0e67337bd09ec891e71fdae92b12a4864f25d27d77fcb4f434de62683beec9c42ae84dc6ce86531c64d50b07191721cd0dd2f40d4eb893e78172bd5708338ce03373eec8d300dacd21b7f9acd6a0360eac1d0690f873727440011ac07f627082060bdf97572abee5e501e3ed420cd5eb3fb1754", 0xe6}], 0x5}}, {{&(0x7f0000000640)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000680)="bf05d9721d9ac8f204f5b4b6dcedbf2d8b4ab9e4cdcbe5778103cc98e1b0ef0466581f9944db33d684af7b513cde304348feb4f2c9fa6102ea81b1fa062446e1ab4af2ba8794855f256c3afc807502b1", 0x50}, {&(0x7f0000000700)="b91bb69a5f5bf3ba79488a68cf6dd5102a054d1fdb47dc5d25bc64ea97", 0x1d}, {&(0x7f0000000740)="3c1a63c4e3fca3f28653280f8c2b323ddb7040e46138f07152dd29be273d144d2b87b8115397309318270b1a6491b5df99d1cccaf016c9c5a58842821235b7a10191a48e915939c73d5d404c2283e140b00e38df6fa3ec41f40c9c9c7d4c927804446e6e824afb627028347156b18148b08a1ef52b520e469fa7ce2276bc7ec4a037dfe2eba25eba074910234f68c6ed1710b4a30af393fef2f5141531b4571d6d2468d102e6f39591cdf8f021e1206618cec534ea7238367028c9d678", 0xbd}, {&(0x7f0000000800)="a2a8f5a6f367cbd4d83c5a909244c08778b5109486282fea40c3122a0d23d1efc9944b8b0c0e5df7c71c0ca14447b350dc6f266a6fe70b7e7a960f14451916f02c301b33ddc41a273736fce97a1536be95281874d88809e6acfd324554477baba327c48891b60c939ba58b0826ccb7b92715cf718775f8edf8ed6d4a1f545d8cbf55ae5224a234e305c52175b38fb4b82d96f95b9e4cda46664c2065ade9c98d739ae86815ed3c057e102b27aea4bde3897d79a4c37d7cf1d9604be45c27434f36734a6d4ce47b70028ab4a0404e20ebae8cb1fbd6a4380d0a80d4aad183066a53", 0xe1}], 0x4, &(0x7f0000000f40)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts={{0x60, 0x29, 0x37, {0x87, 0x8, '\x00', [@generic={0xc, 0x3f, "3e2f59d00fe8569b87e5941f08b31dd81b49eb3b020e43a100067dd87e5de0db110cee5a433ee2320d28376801c997792793a06d119c86e1d75249ff931300"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x0, 0x3, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, @private2, @rand_addr=' \x01\x00']}}}, @tclass={{0x14, 0x29, 0x43, 0xd}}, @hopopts={{0xc8, 0x29, 0x36, {0x88, 0x16, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0xa4, "602a86137a9d39b0340864f1b78d3f6b631567403278c9288790891b5f593a03ecd04314f19f3a363337ac23aefdf1081411a83d34b1ea70d4deaf2fcc7a30723583563db7f56587920c75899900005aa06aafb88ec74df0d2915bdc58413e61998e5cad90e027a5fdb47f4aa0055e8fe2a8ce5365c2f1e96a418fcd3cf3119419e47baf761107dc20023d3b8315aa20f9450dc7d5f7ef217d531a4355106b756a4acdf7"}]}}}], 0x210}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b40)="60ac806ec4937eda61981e79735951f9a2e41ba20b428121b163128dbcf7869ce28d055c7691519658e3b54c87d850310aeb0d57b415cf97b444c398ffc0bcfbcf07c63e8b73e7e9310017412f6a6775355f24839754e0cca5fe1b4df41866e2dd3f1024a924cc2900fedad27fdb582aae5759836117a8bea6fa84f2ff42de982410438e437ac7fffb5138c2", 0x8c}, {&(0x7f0000000c00)="7fc3b9320bf4b82520b2ed85e701c7dffa491e16d7f9ab0845979c56cde592b8ae3f524eb42837919c542acec486e219ea0533656128ea5eccd4b0f40c8bcbccc13c1001ac99fa356eb0f41f1c7c18fe39b3174335e10982862e9a04d39ec632ce5562deb8f9afe61abbc05689b01db776afb98f2f56d1c28baf7be0f741375061f47599bd7442a3aa010f3cdc5cfdd7cb9e66629894e4a3cd060e8b55dcf36ad1092e7180cd791c05379831d5373665022ce18f4565be96a34186c7c9025341f9d8528a64b0c93802ba", 0xca}, {&(0x7f0000000d00)="4fbb9fca46dc08f6dc8595ed2db17262497306c9952a6e02ce715a3923cfc113ebd1035794a8516709e7a99c18780d2d9e476eda6bcf9dc48018979662e56335069c6727bc53bbf41ec76e025adf7b85801f6f34983591cb7b59d68e59123a8f7d1a9a1da0f7df8e1f8b4d", 0x6b}, {&(0x7f0000000d80)="a297ed0d73a305648c9f6514bba2e0c5502e42bf0379e5ea0df2b5ad0bddace5a60a8c50f7ae697f9173a7168cd9c3e590695b31d3a758ef63de13991a96d34988a37a82ae135307fbce90f0601f38405b089d3febcfac957bf84c57eb71fd66d22dc5c63f6699db5a732dadc81e7c7d209232fdf5a80c8d441ba0c6be29cd0c9021f7b5897f", 0x86}], 0x4}}], 0x3, 0x0) pipe(&(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x7, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000940)=0x5, 0x2) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendto$inet(r7, &(0x7f0000000380)="e1", 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x3) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 112.759391ms ago: executing program 3 (id=2902): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x681}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x14}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x7) connect$unix(r5, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) socket(0x840000000002, 0x3, 0x100) 0s ago: executing program 3 (id=2903): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local, {[@noop]}}}}}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f00000006c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x8000f28, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r7) unshare(0x2000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee2cf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c00004bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353009e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b200100000b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556585295ce05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba93a34efd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000040000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951ede3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb4583f55c47828645e30464609"], &(0x7f0000000140)='GPL\x00'}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r11, r12}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r11, r10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r11, r9}, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300050000000500030080ffffff05000300016900000500030080ffffff0500030080ffffff0800020002"], 0x50}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) write$binfmt_script(r4, 0x0, 0xffffff59) kernel console output (not intermixed with test programs): 7.404421][ T9292] dump_stack_lvl+0x241/0x360 [ 207.409151][ T9292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.414402][ T9292] ? __pfx__printk+0x10/0x10 [ 207.419047][ T9292] ? fs_reclaim_acquire+0x93/0x140 [ 207.424219][ T9292] ? __pfx___might_resched+0x10/0x10 [ 207.429583][ T9292] ? dynamic_dname+0x141/0x1b0 [ 207.434401][ T9292] should_fail_ex+0x3b0/0x4e0 [ 207.439137][ T9292] ? tomoyo_encode+0x26f/0x540 [ 207.443942][ T9292] should_failslab+0xac/0x100 [ 207.448681][ T9292] ? tomoyo_encode+0x26f/0x540 [ 207.453489][ T9292] __kmalloc_noprof+0xd8/0x400 [ 207.458308][ T9292] tomoyo_encode+0x26f/0x540 [ 207.462948][ T9292] ? __pfx_sockfs_dname+0x10/0x10 [ 207.468018][ T9292] tomoyo_realpath_from_path+0x59e/0x5e0 [ 207.473712][ T9292] tomoyo_path_number_perm+0x23a/0x880 [ 207.479235][ T9292] ? tomoyo_path_number_perm+0x208/0x880 [ 207.484920][ T9292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.491091][ T9292] ? __fget_files+0x29/0x470 [ 207.495745][ T9292] ? __fget_files+0x3f6/0x470 [ 207.500466][ T9292] ? __fget_files+0x29/0x470 [ 207.505105][ T9292] security_file_ioctl+0x75/0xb0 [ 207.510101][ T9292] __se_sys_ioctl+0x47/0x170 [ 207.514746][ T9292] do_syscall_64+0xf3/0x230 [ 207.519295][ T9292] ? clear_bhb_loop+0x35/0x90 [ 207.524029][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.529963][ T9292] RIP: 0033:0x7facffb77299 [ 207.534417][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.554059][ T9292] RSP: 002b:00007fad008dc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.562514][ T9292] RAX: ffffffffffffffda RBX: 00007facffd05f80 RCX: 00007facffb77299 [ 207.570521][ T9292] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 207.578532][ T9292] RBP: 00007fad008dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.586538][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.594534][ T9292] R13: 000000000000000b R14: 00007facffd05f80 R15: 00007fff5ea8d908 [ 207.602562][ T9292] [ 207.614486][ T9292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.978971][ T9139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.087638][ T9139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.139478][ T9139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.162044][ T9139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.455879][ T9322] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.527825][ T9326] __nla_validate_parse: 1 callbacks suppressed [ 208.527847][ T9326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1373'. [ 208.604632][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.687955][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.718769][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.726050][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.768582][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.775846][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.906239][ T5243] Bluetooth: hci3: command tx timeout [ 209.349766][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.471918][ T9359] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1381'. [ 209.519141][ T9139] veth0_vlan: entered promiscuous mode [ 209.555053][ T9139] veth1_vlan: entered promiscuous mode [ 209.684657][ T9139] veth0_macvtap: entered promiscuous mode [ 209.736799][ T9139] veth1_macvtap: entered promiscuous mode [ 209.858296][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.923410][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.944896][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.986390][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.025307][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.075417][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.125062][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.155271][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.176857][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.205172][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.229072][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.260075][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.295235][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.335229][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.357730][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.433590][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.476550][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.479765][ T9383] netlink: 'syz.4.1386': attribute type 13 has an invalid length. [ 210.498869][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.535153][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.562171][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.586847][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.612172][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.632913][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.657913][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.680928][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.703678][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.726730][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.742217][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.759235][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.780621][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.801076][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.821908][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.846867][ T9383] netlink: 'syz.4.1386': attribute type 16 has an invalid length. [ 210.854877][ T9383] netlink: 'syz.4.1386': attribute type 17 has an invalid length. [ 210.990282][ T5243] Bluetooth: hci3: command tx timeout [ 211.054244][ T9139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.093237][ T9139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.125262][ T9139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.134044][ T9139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.398733][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.418417][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.444399][ T9385] dccp_close: ABORT with 329 bytes unread [ 211.578891][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.594364][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.780989][ T9407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.794675][ T9409] netlink: 'syz.0.1393': attribute type 13 has an invalid length. [ 212.091529][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'. [ 212.123529][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'. [ 212.353614][ T9430] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1400'. [ 212.624184][ T9444] xt_bpf: check failed: parse error [ 212.646055][ T9443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.201734][ T9459] bond0: entered promiscuous mode [ 213.216587][ T9431] dccp_close: ABORT with 329 bytes unread [ 213.222547][ T9459] bond_slave_0: entered promiscuous mode [ 213.246506][ T9459] bond_slave_1: entered promiscuous mode [ 213.725336][ C1] eth0: bad gso: type: 1, size: 1408 [ 213.778572][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1417'. [ 214.629784][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 214.818395][ T9501] No such timeout policy "syz0" [ 214.977633][ T9505] syz.3.1431[9505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.978105][ T9505] syz.3.1431[9505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.076999][ T9487] dccp_close: ABORT with 329 bytes unread [ 215.364756][ T9524] FAULT_INJECTION: forcing a failure. [ 215.364756][ T9524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.397549][ T9524] CPU: 0 UID: 0 PID: 9524 Comm: syz.4.1434 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 215.407965][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 215.418149][ T9524] Call Trace: [ 215.421464][ T9524] [ 215.424436][ T9524] dump_stack_lvl+0x241/0x360 [ 215.429186][ T9524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.434438][ T9524] ? __pfx__printk+0x10/0x10 [ 215.439099][ T9524] ? snprintf+0xda/0x120 [ 215.443396][ T9524] should_fail_ex+0x3b0/0x4e0 [ 215.448130][ T9524] _copy_to_user+0x2f/0xb0 [ 215.452597][ T9524] simple_read_from_buffer+0xca/0x150 [ 215.456980][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.458000][ T9524] proc_fail_nth_read+0x1e9/0x250 [ 215.468353][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.470168][ T9524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.479303][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.482626][ T9524] ? rw_verify_area+0x520/0x6b0 [ 215.492605][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.494410][ T9524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.503465][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.506880][ T9524] vfs_read+0x204/0xbc0 [ 215.506917][ T9524] ? __pfx_lock_release+0x10/0x10 [ 215.506958][ T9524] ? __pfx_vfs_read+0x10/0x10 [ 215.506990][ T9524] ? __fget_files+0x29/0x470 [ 215.507026][ T9524] ? __fget_files+0x3f6/0x470 [ 215.507078][ T9524] ksys_read+0x1a0/0x2c0 [ 215.507114][ T9524] ? __pfx_ksys_read+0x10/0x10 [ 215.507144][ T9524] ? do_syscall_64+0x100/0x230 [ 215.507176][ T9524] ? do_syscall_64+0xb6/0x230 [ 215.507204][ T9524] do_syscall_64+0xf3/0x230 [ 215.507232][ T9524] ? clear_bhb_loop+0x35/0x90 [ 215.507267][ T9524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.507296][ T9524] RIP: 0033:0x7facffb75d7c [ 215.507319][ T9524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 215.507338][ T9524] RSP: 002b:00007fad008dc040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.507365][ T9524] RAX: ffffffffffffffda RBX: 00007facffd05f80 RCX: 00007facffb75d7c [ 215.516950][ T5245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.518452][ T9524] RDX: 000000000000000f RSI: 00007fad008dc0b0 RDI: 0000000000000003 [ 215.626307][ T9524] RBP: 00007fad008dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.634290][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.642352][ T9524] R13: 000000000000000b R14: 00007facffd05f80 R15: 00007fff5ea8d908 [ 215.650348][ T9524] [ 215.883524][ C1] eth0: bad gso: type: 1, size: 1408 [ 215.942325][ T9542] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1442'. [ 215.999439][ T9546] netlink: 'syz.3.1444': attribute type 13 has an invalid length. [ 216.019270][ T9546] FAULT_INJECTION: forcing a failure. [ 216.019270][ T9546] name failslab, interval 1, probability 0, space 0, times 0 [ 216.056734][ T9546] CPU: 0 UID: 0 PID: 9546 Comm: syz.3.1444 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 216.067141][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 216.077241][ T9546] Call Trace: [ 216.080551][ T9546] [ 216.083534][ T9546] dump_stack_lvl+0x241/0x360 [ 216.088266][ T9546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.093516][ T9546] ? __pfx__printk+0x10/0x10 [ 216.098188][ T9546] ? ref_tracker_alloc+0x332/0x490 [ 216.103363][ T9546] should_fail_ex+0x3b0/0x4e0 [ 216.108092][ T9546] ? skb_clone+0x20c/0x390 [ 216.112528][ T9546] should_failslab+0xac/0x100 [ 216.117237][ T9546] ? skb_clone+0x20c/0x390 [ 216.121702][ T9546] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 216.127108][ T9546] skb_clone+0x20c/0x390 [ 216.131385][ T9546] __netlink_deliver_tap+0x3cc/0x7c0 [ 216.136698][ T9546] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.141906][ T9546] netlink_deliver_tap+0x19d/0x1b0 [ 216.147033][ T9546] netlink_unicast+0x7be/0x990 [ 216.151814][ T9546] ? __pfx_netlink_unicast+0x10/0x10 [ 216.157111][ T9546] ? __virt_addr_valid+0x183/0x530 [ 216.162231][ T9546] ? __check_object_size+0x49c/0x900 [ 216.167525][ T9546] ? bpf_lsm_netlink_send+0x9/0x10 [ 216.172653][ T9546] netlink_sendmsg+0x8e4/0xcb0 [ 216.177442][ T9546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.182741][ T9546] ? __import_iovec+0x536/0x820 [ 216.187604][ T9546] ? aa_sock_msg_perm+0x91/0x160 [ 216.192554][ T9546] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 216.197852][ T9546] ? security_socket_sendmsg+0x87/0xb0 [ 216.203327][ T9546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.208629][ T9546] __sock_sendmsg+0x221/0x270 [ 216.213331][ T9546] ____sys_sendmsg+0x525/0x7d0 [ 216.218122][ T9546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.223447][ T9546] __sys_sendmsg+0x2b0/0x3a0 [ 216.228065][ T9546] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.233215][ T9546] ? bpf_trace_run2+0x1fc/0x540 [ 216.238082][ T9546] ? bpf_trace_run2+0x36e/0x540 [ 216.242958][ T9546] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.249310][ T9546] ? rcu_is_watching+0x15/0xb0 [ 216.254181][ T9546] ? trace_sys_enter+0x1f/0xd0 [ 216.259063][ T9546] do_syscall_64+0xf3/0x230 [ 216.263609][ T9546] ? clear_bhb_loop+0x35/0x90 [ 216.268330][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.274245][ T9546] RIP: 0033:0x7f8422377299 [ 216.278668][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.298283][ T9546] RSP: 002b:00007f84231e9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.306708][ T9546] RAX: ffffffffffffffda RBX: 00007f8422505f80 RCX: 00007f8422377299 [ 216.314686][ T9546] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 000000000000000b [ 216.322663][ T9546] RBP: 00007f84231e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 216.330643][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.338628][ T9546] R13: 000000000000000b R14: 00007f8422505f80 R15: 00007ffcb05a36c8 [ 216.346631][ T9546] [ 216.375915][ T9546] netlink: 'syz.3.1444': attribute type 16 has an invalid length. [ 216.383912][ T9546] netlink: 'syz.3.1444': attribute type 17 has an invalid length. [ 216.685193][ T9562] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1449'. [ 216.786860][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'. [ 216.812229][ T9543] dccp_close: ABORT with 329 bytes unread [ 216.977571][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1450'. [ 217.176447][ T9522] chnl_net:caif_netlink_parms(): no params data found [ 217.388211][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.530778][ T9522] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.547088][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.554531][ T9522] bridge_slave_0: entered allmulticast mode [ 217.581522][ T9522] bridge_slave_0: entered promiscuous mode [ 217.670164][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.685339][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.692896][ T9522] bridge_slave_1: entered allmulticast mode [ 217.705570][ T5243] Bluetooth: hci5: command tx timeout [ 217.735654][ T9522] bridge_slave_1: entered promiscuous mode [ 218.019540][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.425924][ T9621] netlink: 'syz.4.1465': attribute type 13 has an invalid length. [ 218.560125][ T9609] dccp_close: ABORT with 329 bytes unread [ 219.785817][ T5243] Bluetooth: hci5: command tx timeout [ 219.823995][ T9522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.837608][ T9522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.868680][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1465'. [ 219.911042][ T9626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1466'. [ 220.172867][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 220.224224][ T9641] x_tables: duplicate underflow at hook 1 [ 220.252570][ T9641] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 220.301328][ T9522] team0: Port device team_slave_0 added [ 220.308825][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1467'. [ 220.387623][ T9648] Cannot find set identified by id 0 to match [ 220.412019][ T9522] team0: Port device team_slave_1 added [ 220.780915][ T9658] bridge0: port 2(bridge_slave_1) entered listening state [ 220.798516][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.826060][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.916023][ T9522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.948763][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.965301][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.011678][ T9522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.011716][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'. [ 221.030778][ T9670] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1476'. [ 221.046527][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'. [ 221.235719][ T9522] hsr_slave_0: entered promiscuous mode [ 221.276741][ T9522] hsr_slave_1: entered promiscuous mode [ 221.295351][ T9522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.303111][ T9522] Cannot create hsr debugfs directory [ 221.621528][ T9694] Cannot find set identified by id 0 to match [ 221.648560][ T9698] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1485'. [ 221.685572][ T9698] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1485'. [ 221.716223][ T9666] dccp_close: ABORT with 329 bytes unread [ 221.746374][ T9522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.748380][ T9701] xt_SECMARK: invalid mode: 0 [ 221.836972][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 221.866076][ T5243] Bluetooth: hci5: command tx timeout [ 221.949557][ T9522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.069934][ T9522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.198569][ T9522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.373852][ T9719] netlink: 'syz.1.1488': attribute type 9 has an invalid length. [ 222.738470][ T9522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.768389][ T9728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.797665][ T9522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.864191][ T9522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.894032][ T9522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.187540][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.251835][ T9522] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.269646][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.276953][ T5290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.316593][ T941] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.323859][ T941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.433019][ T9522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.684340][ T9730] dccp_close: ABORT with 329 bytes unread [ 223.849447][ T9522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.948536][ T5243] Bluetooth: hci5: command tx timeout [ 224.100885][ T9778] ip6t_srh: unknown srh invflags 4811 [ 224.183870][ T9522] veth0_vlan: entered promiscuous mode [ 224.233769][ T9522] veth1_vlan: entered promiscuous mode [ 224.364545][ T9522] veth0_macvtap: entered promiscuous mode [ 224.393285][ T9522] veth1_macvtap: entered promiscuous mode [ 224.490494][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.535295][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.565803][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.595519][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.627876][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.638830][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.659545][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.670536][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.682914][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.693943][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.704031][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.714601][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.724539][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.738449][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.752741][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.763353][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.797148][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.850452][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.885191][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.923184][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.955665][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.985634][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.015297][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.041134][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.075254][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.095242][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.115248][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.136502][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.161532][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.184638][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.199454][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.214400][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.255209][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.267457][ T9522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.280504][ T9522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.299701][ T9522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.346802][ T9522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.377199][ T9522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.400052][ T9522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.418633][ T9522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.795321][ T9802] dccp_close: ABORT with 329 bytes unread [ 225.925515][ T9527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.959354][ C1] eth0: bad gso: type: 1, size: 1408 [ 225.969889][ T9527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.056055][ T9526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.081094][ T9526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.109756][ T9834] __nla_validate_parse: 4 callbacks suppressed [ 226.109779][ T9834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1523'. [ 226.662689][ T9853] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.258424][ T9879] Bluetooth: MGMT ver 1.23 [ 227.355927][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1524'. [ 227.397035][ C1] eth0: bad gso: type: 1, size: 1408 [ 227.720245][ T9886] ip6t_srh: unknown srh invflags 4811 [ 227.833326][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1538'. [ 228.168702][ T9906] netlink: 'syz.1.1543': attribute type 10 has an invalid length. [ 228.267738][ C1] eth0: bad gso: type: 1, size: 1408 [ 228.313628][ T9913] netlink: 'syz.2.1546': attribute type 13 has an invalid length. [ 228.336837][ T9911] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1542'. [ 228.436458][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 228.548677][ T9913] netlink: 'syz.2.1546': attribute type 16 has an invalid length. [ 228.595591][ T9913] netlink: 'syz.2.1546': attribute type 17 has an invalid length. [ 229.450541][ C1] eth0: bad gso: type: 1, size: 1408 [ 229.501340][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 229.590231][ T9951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1558'. [ 229.619485][ T9958] netlink: 'syz.1.1561': attribute type 13 has an invalid length. [ 229.629435][ T9951] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1558'. [ 229.651482][ T9958] netlink: 'syz.1.1561': attribute type 16 has an invalid length. [ 229.666476][ T9958] netlink: 'syz.1.1561': attribute type 17 has an invalid length. [ 229.757000][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 230.199079][ T9970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.288467][ T9974] delete_channel: no stack [ 230.816706][ C1] eth0: bad gso: type: 1, size: 1408 [ 230.942858][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 230.999607][T10011] vxcan3: entered promiscuous mode [ 231.158974][T10011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1576'. [ 231.193408][T10011] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1576'. [ 231.203255][T10022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1577'. [ 231.236478][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 231.550397][T10032] xt_bpf: check failed: parse error [ 231.632954][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 231.714848][T10039] delete_channel: no stack [ 232.122317][ C1] eth0: bad gso: type: 1, size: 1408 [ 232.368600][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1594'. [ 232.395304][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1594'. [ 232.478158][ C1] eth0: bad gso: type: 1, size: 1408 [ 232.659616][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 232.881138][T10092] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1600'. [ 233.142578][T10098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.184422][ C1] eth0: bad gso: type: 1, size: 1408 [ 233.230532][T10101] netlink: 'syz.3.1603': attribute type 13 has an invalid length. [ 233.269836][T10101] netlink: 'syz.3.1603': attribute type 16 has an invalid length. [ 233.301248][T10101] netlink: 'syz.3.1603': attribute type 17 has an invalid length. [ 233.518531][T10114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1607'. [ 234.005942][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.086258][T10134] vxcan3: entered promiscuous mode [ 234.172041][ C1] eth0: bad gso: type: 1, size: 1408 [ 234.220377][T10143] netlink: 'syz.3.1617': attribute type 13 has an invalid length. [ 234.249764][T10143] netlink: 'syz.3.1617': attribute type 16 has an invalid length. [ 234.274292][T10143] netlink: 'syz.3.1617': attribute type 17 has an invalid length. [ 234.403326][T10145] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 235.074372][ C1] eth0: bad gso: type: 1, size: 1408 [ 235.097829][T10183] Bluetooth: hci3: unsupported parameter 64512 [ 235.119350][T10183] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 235.149905][T10175] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 235.408815][T10196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.924465][ C1] eth0: bad gso: type: 1, size: 1408 [ 235.932256][T10220] xt_bpf: check failed: parse error [ 236.138042][T10233] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 236.205794][T10235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.290116][T10229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.964574][T10268] __nla_validate_parse: 11 callbacks suppressed [ 236.964598][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 236.981302][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 237.038049][T10270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1660'. [ 237.149963][T10274] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1662'. [ 237.207403][T10279] xt_bpf: check failed: parse error [ 237.539680][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 237.580287][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1666'. [ 237.638492][T10298] geneve2: entered promiscuous mode [ 237.664262][T10298] geneve2: entered allmulticast mode [ 238.292477][T10324] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 238.336444][T10324] netlink: 8548 bytes leftover after parsing attributes in process `syz.1.1674'. [ 238.355337][T10324] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 238.398685][T10324] netlink: 'syz.1.1674': attribute type 2 has an invalid length. [ 238.734414][ C1] eth0: bad gso: type: 1, size: 1408 [ 238.842722][T10308] IPv6: addrconf: prefix option has invalid lifetime [ 238.883501][T10340] netlink: 'syz.4.1680': attribute type 33 has an invalid length. [ 238.901958][T10340] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1680'. [ 238.951740][T10340] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.994120][ C1] eth0: bad gso: type: 1, size: 1408 [ 239.492726][T10360] vcan0: entered promiscuous mode [ 239.584765][T10360] vlan2: entered promiscuous mode [ 239.628387][T10360] vcan0: left promiscuous mode [ 240.126657][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.206852][T10398] netlink: 'syz.2.1698': attribute type 3 has an invalid length. [ 240.222655][ C1] eth0: bad gso: type: 1, size: 1408 [ 240.486566][T10411] tipc: Started in network mode [ 240.508113][T10411] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 240.518708][T10411] tipc: Enabling of bearer rejected, failed to enable media [ 240.586075][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.710565][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 240.721775][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1706'. [ 240.741103][T10420] geneve2: entered promiscuous mode [ 240.746753][T10420] geneve2: entered allmulticast mode [ 241.156765][T10402] dccp_close: ABORT with 329 bytes unread [ 241.232826][ C1] eth0: bad gso: type: 1, size: 1408 [ 241.499007][T10449] netlink: 'syz.2.1717': attribute type 6 has an invalid length. [ 241.697246][T10457] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 241.717847][T10457] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 241.736523][T10457] netlink: 'syz.2.1721': attribute type 2 has an invalid length. [ 241.885012][T10460] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 241.925328][ C1] eth0: bad gso: type: 1, size: 1408 [ 242.164007][T10477] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 242.420283][T10487] syz.1.1733 (10487) used greatest stack depth: 18848 bytes left [ 242.582910][ C1] eth0: bad gso: type: 1, size: 1408 [ 242.722897][T10501] __nla_validate_parse: 1 callbacks suppressed [ 242.722923][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 242.756640][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 242.775316][T10501] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.1736'. [ 242.775488][T10505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.205048][T10528] xt_bpf: check failed: parse error [ 243.467739][T10540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.481527][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 243.501182][T10543] vlan1: entered promiscuous mode [ 243.514577][T10543] team0: entered promiscuous mode [ 243.519941][T10543] team_slave_0: entered promiscuous mode [ 243.533329][T10543] team_slave_1: entered promiscuous mode [ 243.596798][T10543] team0: left promiscuous mode [ 243.601670][T10543] team_slave_0: left promiscuous mode [ 243.615753][T10543] team_slave_1: left promiscuous mode [ 243.867862][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1760'. [ 243.882814][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1760'. [ 244.231701][T10575] netlink: 186744 bytes leftover after parsing attributes in process `syz.2.1767'. [ 244.242322][T10575] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 244.297427][T10577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.474858][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 244.496423][T10587] syz.2.1771 uses old SIOCAX25GETINFO [ 244.536109][T10584] vlan2: entered promiscuous mode [ 244.551525][T10584] team0: entered promiscuous mode [ 244.567902][T10584] team_slave_0: entered promiscuous mode [ 244.621809][T10584] team_slave_1: entered promiscuous mode [ 244.673547][T10584] team0: left promiscuous mode [ 244.687159][T10584] team_slave_0: left promiscuous mode [ 244.692846][T10584] team_slave_1: left promiscuous mode [ 244.702453][T10601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1775'. [ 245.169243][T10628] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1784'. [ 245.185327][T10628] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 245.214206][T10628] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 245.234639][T10629] tipc: Started in network mode [ 245.244944][T10629] tipc: Node identity ac1414aa, cluster identity 4711 [ 245.256881][T10629] tipc: Enabled bearer , priority 10 [ 245.759919][T10638] syzkaller0: entered promiscuous mode [ 245.779892][T10638] syzkaller0: entered allmulticast mode [ 245.804058][ T9521] syzkaller0: tun_net_xmit 48 [ 245.823028][T10638] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 245.835463][T10638] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 245.841419][T10638] syzkaller0: Linktype set failed because interface is up [ 246.124461][T10645] validate_nla: 3 callbacks suppressed [ 246.124483][T10645] netlink: 'syz.4.1791': attribute type 32 has an invalid length. [ 246.155655][T10645] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2) [ 246.275903][T10647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.385542][ T5285] tipc: Node number set to 2886997162 [ 246.943236][T10663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.059778][T10664] __nla_validate_parse: 5 callbacks suppressed [ 249.059800][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1797'. [ 249.081285][T10675] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 249.147464][T10697] xt_bpf: check failed: parse error [ 249.195882][T10678] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 249.448825][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 249.734433][T10723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1812'. [ 249.768938][T10723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1812'. [ 249.809092][T10724] netlink: 'syz.2.1813': attribute type 13 has an invalid length. [ 250.050584][T10735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.060843][T10736] xt_bpf: check failed: parse error [ 250.407947][T10747] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 250.701234][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1825'. [ 250.729664][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1825'. [ 250.766726][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 251.102392][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 251.147293][T10778] netlink: 'syz.3.1833': attribute type 3 has an invalid length. [ 251.990401][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 252.028685][T10812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1842'. [ 254.151826][T10814] lo: entered promiscuous mode [ 254.177857][T10826] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 254.198589][T10814] lo: left promiscuous mode [ 254.219253][T10829] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 255.018550][T10868] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1856'. [ 255.646450][T10855] dccp_close: ABORT with 329 bytes unread [ 255.965548][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.971976][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.608912][T10921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1875'. [ 256.794290][T10927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1876'. [ 257.080241][T10939] No such timeout policy "syz0" [ 257.626522][T10928] dccp_close: ABORT with 329 bytes unread [ 257.990052][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 259.517370][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1878'. [ 259.556851][T10949] pim6reg: entered allmulticast mode [ 259.562461][T10953] pim6reg: left allmulticast mode [ 259.716727][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 259.745387][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 259.859228][T10965] xt_bpf: check failed: parse error [ 260.441978][T10997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1894'. [ 260.490685][T10992] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1894'. [ 260.712891][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1899'. [ 260.725510][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 260.746753][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1899'. [ 261.161831][T11020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1902'. [ 261.205864][T11020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1902'. [ 261.228982][T11020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1902'. [ 261.257774][T11020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1902'. [ 261.267364][T11020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1902'. [ 261.431254][T11035] C: renamed from lo (while UP) [ 261.458167][T11035] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.496345][T11004] dccp_close: ABORT with 329 bytes unread [ 263.145520][ T5245] Bluetooth: hci2: command 0x0406 tx timeout [ 263.309128][T11127] IPv6: Can't replace route, no match found [ 264.211189][T11158] syzkaller0: entered allmulticast mode [ 264.223436][T11160] netlink: 'syz.0.1945': attribute type 5 has an invalid length. [ 264.334537][T11158] syzkaller0 (unregistering): left allmulticast mode [ 264.597488][ C1] eth0: bad gso: type: 1, size: 1408 [ 265.291055][T11211] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 265.316896][T11211] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.381822][T11226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.579704][T11229] vlan2: entered promiscuous mode [ 265.675505][T11240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.070605][T11254] __nla_validate_parse: 78 callbacks suppressed [ 266.070628][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 266.340076][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 266.535988][T11265] Bluetooth: hci3: invalid len left 7, exp >= 27 [ 266.727755][T11271] xt_bpf: check failed: parse error [ 266.938244][T11274] netlink: 'syz.1.1976': attribute type 8 has an invalid length. [ 267.086157][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 267.135022][T11282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1979'. [ 267.206125][T11285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1980'. [ 267.322340][T11282] netlink: 'syz.0.1979': attribute type 5 has an invalid length. [ 267.848524][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'. [ 267.891824][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'. [ 267.982547][T11319] xt_bpf: check failed: parse error [ 268.351621][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 268.844307][ C1] eth0: bad gso: type: 1, size: 1408 [ 269.164988][T11361] xt_bpf: check failed: parse error [ 269.258089][T11359] syzkaller0: entered allmulticast mode [ 269.280385][T11359] syzkaller0 (unregistering): left allmulticast mode [ 269.389070][T11369] vlan2: entered promiscuous mode [ 269.934184][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.010815][ T1851] IPVS: starting estimator thread 0... [ 270.115398][T11391] IPVS: using max 19 ests per chain, 45600 per kthread [ 270.330136][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.363443][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'. [ 270.384222][T11407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2013'. [ 271.350791][T11424] __nla_validate_parse: 1 callbacks suppressed [ 271.350814][T11424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2019'. [ 271.403801][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2019'. [ 271.407326][ C1] eth0: bad gso: type: 1, size: 1408 [ 271.423887][T11415] syzkaller0: entered allmulticast mode [ 271.474751][T11415] syzkaller0 (unregistering): left allmulticast mode [ 271.621163][T11434] vlan2: entered promiscuous mode [ 271.704083][ T7080] cgroup: fork rejected by pids controller in /syz1 [ 271.908991][T11444] xt_bpf: check failed: parse error [ 272.068192][ T9527] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.158937][ T9527] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.318648][T11450] FAULT_INJECTION: forcing a failure. [ 272.318648][T11450] name failslab, interval 1, probability 0, space 0, times 0 [ 272.375475][T11450] CPU: 0 UID: 0 PID: 11450 Comm: syz.3.2032 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 272.385977][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 272.396093][T11450] Call Trace: [ 272.399413][T11450] [ 272.402385][T11450] dump_stack_lvl+0x241/0x360 [ 272.407115][T11450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.412368][T11450] ? __pfx__printk+0x10/0x10 [ 272.417007][T11450] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 272.423031][T11450] ? __pfx___might_resched+0x10/0x10 [ 272.428340][T11450] ? __lock_acquire+0x137a/0x2040 [ 272.433430][T11450] should_fail_ex+0x3b0/0x4e0 [ 272.438132][T11450] should_failslab+0xac/0x100 [ 272.442828][T11450] ? __alloc_skb+0x1c3/0x440 [ 272.447528][T11450] kmem_cache_alloc_node_noprof+0x71/0x320 [ 272.453364][T11450] __alloc_skb+0x1c3/0x440 [ 272.457800][T11450] ? validate_chain+0x11e/0x5900 [ 272.462778][T11450] ? __pfx___alloc_skb+0x10/0x10 [ 272.467741][T11450] alloc_skb_with_frags+0xc3/0x770 [ 272.472959][T11450] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 272.478370][T11450] sock_alloc_send_pskb+0x91a/0xa60 [ 272.483605][T11450] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 272.489356][T11450] ? aa_sk_perm+0x967/0xab0 [ 272.493878][T11450] hci_sock_sendmsg+0x22b/0x11c0 [ 272.498832][T11450] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 272.504215][T11450] ? aa_sock_msg_perm+0x91/0x160 [ 272.509165][T11450] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.514470][T11450] ? security_socket_sendmsg+0x87/0xb0 [ 272.519942][T11450] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 272.525321][T11450] __sock_sendmsg+0x221/0x270 [ 272.530017][T11450] sock_write_iter+0x2dd/0x400 [ 272.534806][T11450] ? __pfx_sock_write_iter+0x10/0x10 [ 272.540113][T11450] ? bpf_lsm_file_permission+0x9/0x10 [ 272.545523][T11450] ? security_file_permission+0x7f/0xa0 [ 272.551100][T11450] vfs_write+0xa72/0xc90 [ 272.555376][T11450] ? __pfx_sock_write_iter+0x10/0x10 [ 272.560691][T11450] ? __pfx_vfs_write+0x10/0x10 [ 272.565490][T11450] ksys_write+0x1a0/0x2c0 [ 272.569836][T11450] ? __pfx_ksys_write+0x10/0x10 [ 272.574697][T11450] ? do_syscall_64+0x100/0x230 [ 272.579474][T11450] ? do_syscall_64+0xb6/0x230 [ 272.584162][T11450] do_syscall_64+0xf3/0x230 [ 272.588676][T11450] ? clear_bhb_loop+0x35/0x90 [ 272.593371][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.599378][T11450] RIP: 0033:0x7f8422377299 [ 272.603805][T11450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.623427][T11450] RSP: 002b:00007f84231e9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.631855][T11450] RAX: ffffffffffffffda RBX: 00007f8422505f80 RCX: 00007f8422377299 [ 272.639843][T11450] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000006 [ 272.647820][T11450] RBP: 00007f84231e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 272.655812][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.663810][T11450] R13: 000000000000000b R14: 00007f8422505f80 R15: 00007ffcb05a36c8 [ 272.671808][T11450] [ 272.723097][ T9527] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.846143][ C1] eth0: bad gso: type: 1, size: 1408 [ 272.950928][ T9527] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.017787][T11460] vlan2: entered promiscuous mode [ 273.118018][T11468] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2035'. [ 273.157149][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2035'. [ 273.290507][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.300643][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.312924][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.321163][ T9527] bridge_slave_1: left allmulticast mode [ 273.327279][ T9527] bridge_slave_1: left promiscuous mode [ 273.333696][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.344328][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.352078][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.360188][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.396179][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 273.411474][ T9527] bridge_slave_0: left allmulticast mode [ 273.417950][ T9527] bridge_slave_0: left promiscuous mode [ 273.423836][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.447966][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 274.370129][ T9527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.395721][ T9527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.408916][ T9527] bond0 (unregistering): Released all slaves [ 274.458457][T11497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 274.467874][T11497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 274.488474][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2048'. [ 274.550542][T11502] gre1: entered allmulticast mode [ 274.599736][ T9527] tipc: Left network mode [ 274.872882][T11509] netlink: 'syz.2.2051': attribute type 33 has an invalid length. [ 274.899304][T11517] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2053'. [ 274.954455][T11513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2051'. [ 275.039204][T11523] xt_bpf: check failed: parse error [ 275.295488][ T9527] hsr_slave_0: left promiscuous mode [ 275.308782][ T9527] hsr_slave_1: left promiscuous mode [ 275.323781][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.334209][ T9527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.345024][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.353062][ T9527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.386011][ T9527] veth1_macvtap: left promiscuous mode [ 275.395504][ T9527] veth0_macvtap: left promiscuous mode [ 275.403873][ T9527] veth1_vlan: left promiscuous mode [ 275.409495][ T9527] veth0_vlan: left promiscuous mode [ 275.465465][ T5245] Bluetooth: hci1: command tx timeout [ 275.530346][T11538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.612101][ C1] eth0: bad gso: type: 1, size: 1408 [ 276.325677][ T9527] team0 (unregistering): Port device team_slave_1 removed [ 276.387332][ T9527] team0 (unregistering): Port device team_slave_0 removed [ 276.835758][T11555] netlink: 'syz.3.2065': attribute type 10 has an invalid length. [ 276.959038][T11555] team0: Port device netdevsim0 added [ 276.992518][T11469] chnl_net:caif_netlink_parms(): no params data found [ 277.374624][T11574] @: renamed from veth0_vlan (while UP) [ 277.410364][T11582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.515737][T11469] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.537853][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.545725][ T5245] Bluetooth: hci1: command tx timeout [ 277.556087][T11469] bridge_slave_0: entered allmulticast mode [ 277.596119][T11469] bridge_slave_0: entered promiscuous mode [ 277.614686][T11590] ipt_ECN: cannot use operation on non-tcp rule [ 277.648888][T11469] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.673404][T11469] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.698825][T11469] bridge_slave_1: entered allmulticast mode [ 277.728266][T11469] bridge_slave_1: entered promiscuous mode [ 277.910886][T11469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.004655][T11469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.068835][ T9527] IPVS: stop unused estimator thread 0... [ 278.141585][T11469] team0: Port device team_slave_0 added [ 278.174956][T11469] team0: Port device team_slave_1 added [ 278.297564][T11469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.322615][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.371346][T11469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.388334][T11469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.395939][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.460079][T11469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.490278][T11621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.602844][T11625] bridge2: entered promiscuous mode [ 278.645290][T11625] bridge2: entered allmulticast mode [ 278.720146][T11625] __nla_validate_parse: 3 callbacks suppressed [ 278.720167][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'. [ 278.757178][T11469] hsr_slave_0: entered promiscuous mode [ 278.772706][T11469] hsr_slave_1: entered promiscuous mode [ 278.796558][T11469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.825363][T11469] Cannot create hsr debugfs directory [ 279.258154][T11648] vlan2: entered promiscuous mode [ 279.422763][T11657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.628955][ T5243] Bluetooth: hci1: command tx timeout [ 279.664012][T11668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2103'. [ 279.697723][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2103'. [ 279.832520][T11469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.839767][T11672] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2106'. [ 279.868256][T11672] Κό: entered promiscuous mode [ 279.874213][T11469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.888668][T11469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.903164][T11469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.051398][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 280.082710][T11469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.116997][T11469] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.134905][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.142191][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.165758][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.173063][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.573303][T11686] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2110'. [ 280.805698][T11697] xt_bpf: check failed: parse error [ 280.877885][T11469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.911162][T11696] vlan2: entered promiscuous mode [ 281.017462][T11703] netlink: 'syz.3.2119': attribute type 10 has an invalid length. [ 281.112140][T11703] team0: Port device netdevsim0 removed [ 281.266080][T11469] veth0_vlan: entered promiscuous mode [ 281.308753][T11469] veth1_vlan: entered promiscuous mode [ 281.341375][T11714] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2120'. [ 281.371882][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2120'. [ 281.387264][T11469] veth0_macvtap: entered promiscuous mode [ 281.419680][T11469] veth1_macvtap: entered promiscuous mode [ 281.501459][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.522851][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.533065][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.543619][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.566136][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.586322][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.596366][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.606986][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.624488][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.639454][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.662524][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.685361][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.704367][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.706293][ T5243] Bluetooth: hci1: command tx timeout [ 281.716543][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.730668][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.741304][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.752952][T11469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.832712][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.848548][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.859400][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.879190][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.889691][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.901491][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.911434][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.922905][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.933003][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.943525][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.954027][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.965262][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.978606][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.989186][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.999337][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.010851][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.020884][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.032875][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.047242][T11469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.062106][T11469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.100307][T11469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.134590][T11469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.154133][T11469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.306835][T11716] syz.2.2122 (11716) used greatest stack depth: 16592 bytes left [ 282.437271][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.447518][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.547643][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 282.559417][ T2540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.591102][ T2540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.603454][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 282.770045][T11744] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 282.803173][T11740] bridge0: port 3(bond1) entered blocking state [ 282.879083][T11740] bridge0: port 3(bond1) entered disabled state [ 282.905807][T11740] bond1: entered allmulticast mode [ 282.911003][T11740] bridge1: entered allmulticast mode [ 282.929270][T11740] bond1: entered promiscuous mode [ 282.934749][T11740] bridge1: entered promiscuous mode [ 282.976085][T11752] tipc: Enabling of bearer rejected, failed to enable media [ 283.677660][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 283.875734][T11785] vlan2: entered promiscuous mode [ 284.010845][T11792] __nla_validate_parse: 1 callbacks suppressed [ 284.010871][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2145'. [ 284.188343][ C1] eth0: bad gso: type: 1, size: 1408 [ 284.272804][T11799] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 284.321606][T11799] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 284.619905][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 284.651156][T11824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.676986][T11827] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 284.803476][T11831] xt_bpf: check failed: parse error [ 284.899386][T11833] vlan2: entered promiscuous mode [ 285.068530][ C1] eth0: bad gso: type: 1, size: 1408 [ 285.123100][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2163'. [ 285.373700][ C1] eth0: bad gso: type: 1, size: 1408 [ 285.478787][T11858] xt_bpf: check failed: parse error [ 285.689810][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 285.717956][ C1] eth0: bad gso: type: 1, size: 1408 [ 285.722225][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 286.052134][ C1] eth0: bad gso: type: 1, size: 1408 [ 286.161842][T11891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.181456][T11890] vlan2: entered promiscuous mode [ 286.436658][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 286.598552][T11904] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 286.637702][T11897] bridge0: port 4(bond2) entered blocking state [ 286.645749][T11897] bridge0: port 4(bond2) entered disabled state [ 286.653100][T11897] bond2: entered allmulticast mode [ 286.658805][T11897] bridge2: entered allmulticast mode [ 286.666632][T11897] bond2: entered promiscuous mode [ 286.671809][T11897] bridge2: entered promiscuous mode [ 287.114269][T11928] vlan2: entered promiscuous mode [ 287.711519][T11915] dccp_close: ABORT with 329 bytes unread [ 288.092015][T11956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2204'. [ 288.163669][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2204'. [ 289.768979][ C1] eth0: bad gso: type: 1, size: 1408 [ 290.024679][T11966] vlan2: entered promiscuous mode [ 290.154355][T11973] vlan2: entered promiscuous mode [ 290.355413][ C1] eth0: bad gso: type: 1, size: 1408 [ 290.440100][T11987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2219'. [ 290.661351][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2225'. [ 290.884835][T12009] vlan2: entered promiscuous mode [ 291.250709][ C1] eth0: bad gso: type: 1, size: 1408 [ 291.418532][ C1] eth0: bad gso: type: 1, size: 1408 [ 291.447051][T12022] vlan2: entered promiscuous mode [ 291.806433][T12036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2239'. [ 291.906137][T12043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2241'. [ 292.145725][ C1] eth0: bad gso: type: 1, size: 1408 [ 292.289450][T12063] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2247'. [ 292.492102][T12069] vlan2: entered promiscuous mode [ 292.748976][ C1] eth0: bad gso: type: 1, size: 1408 [ 292.796093][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2254'. [ 292.876168][T12081] xt_bpf: check failed: parse error [ 293.159890][ C1] eth0: bad gso: type: 1, size: 1408 [ 293.229524][ C1] eth0: bad gso: type: 1, size: 1408 [ 293.339539][T12104] vlan2: entered promiscuous mode [ 293.378610][T12106] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2264'. [ 293.445998][T12111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.506497][T12113] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2268'. [ 293.524420][T12115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2267'. [ 293.704089][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'. [ 294.767879][ C1] eth0: bad gso: type: 1, size: 1408 [ 295.069396][T12164] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 295.113426][T12164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.120787][T12164] IPv6: NLM_F_CREATE should be set when creating new route [ 295.128126][T12164] IPv6: NLM_F_CREATE should be set when creating new route [ 295.539173][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.561867][T12151] dccp_close: ABORT with 329 bytes unread [ 295.578742][ T5288] IPVS: starting estimator thread 0... [ 295.644256][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.685631][T12193] IPVS: using max 19 ests per chain, 45600 per kthread [ 295.740404][T12198] __nla_validate_parse: 4 callbacks suppressed [ 295.740436][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2295'. [ 296.164597][T12210] ebt_among: dst integrity fail: 101 [ 296.334563][T12216] vlan2: entered promiscuous mode [ 296.371857][T12219] vlan2: entered promiscuous mode [ 296.383693][T12217] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 296.394437][T12217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.401745][T12217] IPv6: NLM_F_CREATE should be set when creating new route [ 296.409250][T12217] IPv6: NLM_F_CREATE should be set when creating new route [ 296.711706][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2303'. [ 296.738502][T12236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2304'. [ 296.997228][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2311'. [ 297.241456][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 297.323880][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 297.454197][T12263] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 297.481497][T12263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.488935][T12263] IPv6: NLM_F_CREATE should be set when creating new route [ 297.496281][T12263] IPv6: NLM_F_CREATE should be set when creating new route [ 298.104340][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2318'. [ 298.183299][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2319'. [ 298.480574][T12295] xt_bpf: check failed: parse error [ 298.589144][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2326'. [ 298.604826][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 298.625437][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2326'. [ 299.436806][T12322] bond_slave_0: entered promiscuous mode [ 299.443139][T12322] bond_slave_1: entered promiscuous mode [ 299.517452][T12322] bond_slave_0: left promiscuous mode [ 299.523156][T12322] bond_slave_1: left promiscuous mode [ 299.532853][ C1] eth0: bad gso: type: 1, size: 1408 [ 299.617253][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.710378][ C1] eth0: bad gso: type: 1, size: 1408 [ 300.055731][T12346] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.568609][ C1] eth0: bad gso: type: 1, size: 1408 [ 300.920305][T12380] __nla_validate_parse: 9 callbacks suppressed [ 300.920329][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'. [ 301.328087][T12394] sch_fq: defrate 0 ignored. [ 301.790885][T12406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.854511][T12414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2365'. [ 301.864276][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 301.990481][T12406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.005837][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'. [ 302.172617][T12406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.413929][T12406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.608856][T12432] FAULT_INJECTION: forcing a failure. [ 302.608856][T12432] name failslab, interval 1, probability 0, space 0, times 0 [ 302.645630][T12432] CPU: 1 UID: 0 PID: 12432 Comm: syz.3.2374 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 302.656135][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 302.666249][T12432] Call Trace: [ 302.669559][T12432] [ 302.672532][T12432] dump_stack_lvl+0x241/0x360 [ 302.677272][T12432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.682593][T12432] ? __pfx__printk+0x10/0x10 [ 302.687315][T12432] ? __kmalloc_node_noprof+0xb7/0x440 [ 302.690878][T12406] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.692722][T12432] ? __pfx___might_resched+0x10/0x10 [ 302.692769][T12432] should_fail_ex+0x3b0/0x4e0 [ 302.692811][T12432] should_failslab+0xac/0x100 [ 302.715919][T12432] __kmalloc_node_noprof+0xdf/0x440 [ 302.721182][T12432] ? __kvmalloc_node_noprof+0x72/0x190 [ 302.726690][T12432] __kvmalloc_node_noprof+0x72/0x190 [ 302.732012][T12432] bpf_test_run_xdp_live+0x207/0x2110 [ 302.737416][T12432] ? arch_stack_walk+0x16d/0x1b0 [ 302.742386][T12432] ? stack_trace_save+0x118/0x1d0 [ 302.747439][T12432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 302.753261][T12432] ? mark_lock+0x9a/0x350 [ 302.757660][T12432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 302.763587][T12432] ? __might_fault+0xaa/0x120 [ 302.768288][T12432] ? __might_fault+0xc6/0x120 [ 302.772985][T12432] ? _copy_from_user+0xa6/0xe0 [ 302.777771][T12432] ? bpf_test_init+0x15a/0x180 [ 302.782551][T12432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 302.788032][T12432] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 302.793428][T12432] ? __pfx_lock_release+0x10/0x10 [ 302.798485][T12432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 302.804314][T12432] ? __fget_files+0x29/0x470 [ 302.808949][T12432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 302.814793][T12432] bpf_prog_test_run+0x33a/0x3b0 [ 302.819769][T12432] __sys_bpf+0x48d/0x810 [ 302.824035][T12432] ? __pfx___sys_bpf+0x10/0x10 [ 302.828832][T12432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 302.834836][T12432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.841181][T12432] ? do_syscall_64+0x100/0x230 [ 302.845963][T12432] __x64_sys_bpf+0x7c/0x90 [ 302.850396][T12432] do_syscall_64+0xf3/0x230 [ 302.854915][T12432] ? clear_bhb_loop+0x35/0x90 [ 302.859641][T12432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.865562][T12432] RIP: 0033:0x7f8422377299 [ 302.870000][T12432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.889624][T12432] RSP: 002b:00007f84231e9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.898057][T12432] RAX: ffffffffffffffda RBX: 00007f8422505f80 RCX: 00007f8422377299 [ 302.906047][T12432] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 302.914031][T12432] RBP: 00007f84231e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 302.922013][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.929992][T12432] R13: 000000000000000b R14: 00007f8422505f80 R15: 00007ffcb05a36c8 [ 302.937986][T12432] [ 302.996685][T12406] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.048822][T12406] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.103021][T12406] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.173968][T12438] ebt_among: dst integrity fail: 101 [ 303.401660][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2383'. [ 303.429707][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 303.476193][T12452] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 303.543864][T12456] sch_fq: defrate 0 ignored. [ 303.555270][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'. [ 303.772157][T12468] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2388'. [ 304.157234][T12483] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2392'. [ 304.665240][T12507] vlan1: entered promiscuous mode [ 304.728217][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'. [ 305.154166][T12522] FAULT_INJECTION: forcing a failure. [ 305.154166][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 305.206278][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.0.2409 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 305.216797][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 305.226897][T12522] Call Trace: [ 305.230214][T12522] [ 305.233183][T12522] dump_stack_lvl+0x241/0x360 [ 305.237927][T12522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.243177][T12522] ? __pfx__printk+0x10/0x10 [ 305.247819][T12522] ? __kmalloc_node_noprof+0xb7/0x440 [ 305.253252][T12522] ? __pfx___might_resched+0x10/0x10 [ 305.258601][T12522] should_fail_ex+0x3b0/0x4e0 [ 305.263346][T12522] should_failslab+0xac/0x100 [ 305.268095][T12522] __kmalloc_node_noprof+0xdf/0x440 [ 305.273353][T12522] ? __kvmalloc_node_noprof+0x72/0x190 [ 305.278882][T12522] __kvmalloc_node_noprof+0x72/0x190 [ 305.284227][T12522] bpf_test_run_xdp_live+0x277/0x2110 [ 305.289669][T12522] ? arch_stack_walk+0x16d/0x1b0 [ 305.294672][T12522] ? stack_trace_save+0x118/0x1d0 [ 305.299840][T12522] ? __lock_acquire+0x137a/0x2040 [ 305.304936][T12522] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 305.310887][T12522] ? mark_lock+0x9a/0x350 [ 305.315339][T12522] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 305.321308][T12522] ? __might_fault+0xaa/0x120 [ 305.326037][T12522] ? __might_fault+0xc6/0x120 [ 305.330761][T12522] ? _copy_from_user+0xa6/0xe0 [ 305.335564][T12522] ? bpf_test_init+0x15a/0x180 [ 305.340370][T12522] ? xdp_convert_md_to_buff+0x5b/0x330 [ 305.345888][T12522] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 305.351331][T12522] ? __pfx_lock_release+0x10/0x10 [ 305.356439][T12522] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 305.362307][T12522] ? __fget_files+0x29/0x470 [ 305.366966][T12522] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 305.372825][T12522] bpf_prog_test_run+0x33a/0x3b0 [ 305.377828][T12522] __sys_bpf+0x48d/0x810 [ 305.382121][T12522] ? __pfx___sys_bpf+0x10/0x10 [ 305.386952][T12522] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 305.392992][T12522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.399387][T12522] ? do_syscall_64+0x100/0x230 [ 305.404211][T12522] __x64_sys_bpf+0x7c/0x90 [ 305.408679][T12522] do_syscall_64+0xf3/0x230 [ 305.413224][T12522] ? clear_bhb_loop+0x35/0x90 [ 305.417969][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.423931][T12522] RIP: 0033:0x7f7784377299 [ 305.428386][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.448041][T12522] RSP: 002b:00007f7785115048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.456507][T12522] RAX: ffffffffffffffda RBX: 00007f7784505f80 RCX: 00007f7784377299 [ 305.464530][T12522] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 305.472552][T12522] RBP: 00007f77851150a0 R08: 0000000000000000 R09: 0000000000000000 [ 305.480557][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.488647][T12522] R13: 000000000000000b R14: 00007f7784505f80 R15: 00007ffd379f78c8 [ 305.496677][T12522] [ 305.595494][ C1] eth0: bad gso: type: 1, size: 1408 [ 305.655535][T12534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.951680][T12551] FAULT_INJECTION: forcing a failure. [ 305.951680][T12551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.985182][T12551] CPU: 1 UID: 0 PID: 12551 Comm: syz.4.2420 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 305.995712][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 306.005815][T12551] Call Trace: [ 306.009129][T12551] [ 306.012095][T12551] dump_stack_lvl+0x241/0x360 [ 306.016846][T12551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.022095][T12551] ? __pfx__printk+0x10/0x10 [ 306.026741][T12551] ? snprintf+0xda/0x120 [ 306.031042][T12551] should_fail_ex+0x3b0/0x4e0 [ 306.035786][T12551] _copy_to_user+0x2f/0xb0 [ 306.040264][T12551] simple_read_from_buffer+0xca/0x150 [ 306.045698][T12551] proc_fail_nth_read+0x1e9/0x250 [ 306.050805][T12551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.056412][T12551] ? rw_verify_area+0x520/0x6b0 [ 306.061318][T12551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.066926][T12551] vfs_read+0x204/0xbc0 [ 306.071225][T12551] ? __pfx_lock_release+0x10/0x10 [ 306.076317][T12551] ? __pfx_sock_write_iter+0x10/0x10 [ 306.081646][T12551] ? __pfx_vfs_read+0x10/0x10 [ 306.086375][T12551] ? __fget_files+0x29/0x470 [ 306.091017][T12551] ? __fget_files+0x3f6/0x470 [ 306.095761][T12551] ksys_read+0x1a0/0x2c0 [ 306.100057][T12551] ? __pfx_ksys_read+0x10/0x10 [ 306.104881][T12551] ? do_syscall_64+0x100/0x230 [ 306.109704][T12551] ? do_syscall_64+0xb6/0x230 [ 306.114427][T12551] do_syscall_64+0xf3/0x230 [ 306.118979][T12551] ? clear_bhb_loop+0x35/0x90 [ 306.123726][T12551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.129673][T12551] RIP: 0033:0x7facffb75d7c [ 306.134136][T12551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 306.153798][T12551] RSP: 002b:00007fad008dc040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.162275][T12551] RAX: ffffffffffffffda RBX: 00007facffd05f80 RCX: 00007facffb75d7c [ 306.170299][T12551] RDX: 000000000000000f RSI: 00007fad008dc0b0 RDI: 0000000000000003 [ 306.178324][T12551] RBP: 00007fad008dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 306.186343][T12551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.194362][T12551] R13: 000000000000000b R14: 00007facffd05f80 R15: 00007fff5ea8d908 [ 306.202406][T12551] [ 306.319114][T12561] vlan2: entered promiscuous mode [ 306.519855][T12570] __nla_validate_parse: 4 callbacks suppressed [ 306.519881][T12570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2424'. [ 306.627044][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2426'. [ 306.936326][T12590] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 306.993381][T12594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2433'. [ 307.010384][T12594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2433'. [ 307.034306][T12596] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.247785][T12602] vlan2: entered promiscuous mode [ 307.341577][T12607] FAULT_INJECTION: forcing a failure. [ 307.341577][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 307.365886][T12607] CPU: 0 UID: 0 PID: 12607 Comm: syz.4.2439 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 307.376474][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 307.386573][T12607] Call Trace: [ 307.389887][T12607] [ 307.392854][T12607] dump_stack_lvl+0x241/0x360 [ 307.397597][T12607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.402873][T12607] ? __pfx__printk+0x10/0x10 [ 307.407615][T12607] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 307.409994][T12608] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2438'. [ 307.413548][T12607] ? __pfx___might_resched+0x10/0x10 [ 307.427841][T12607] should_fail_ex+0x3b0/0x4e0 [ 307.432575][T12607] should_failslab+0xac/0x100 [ 307.437326][T12607] __kmalloc_cache_node_noprof+0x74/0x300 [ 307.443106][T12607] ? page_pool_create_percpu+0x77/0x7c0 [ 307.448712][T12607] page_pool_create_percpu+0x77/0x7c0 [ 307.454152][T12607] bpf_test_run_xdp_live+0x2cd/0x2110 [ 307.459571][T12607] ? arch_stack_walk+0x16d/0x1b0 [ 307.464587][T12607] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 307.470451][T12607] ? mark_lock+0x9a/0x350 [ 307.474896][T12607] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 307.480859][T12607] ? __might_fault+0xaa/0x120 [ 307.485593][T12607] ? __might_fault+0xc6/0x120 [ 307.490421][T12607] ? _copy_from_user+0xa6/0xe0 [ 307.495263][T12607] ? bpf_test_init+0x15a/0x180 [ 307.500112][T12607] ? xdp_convert_md_to_buff+0x5b/0x330 [ 307.505624][T12607] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 307.511056][T12607] ? __pfx_lock_release+0x10/0x10 [ 307.516149][T12607] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 307.522023][T12607] ? __fget_files+0x29/0x470 [ 307.526694][T12607] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 307.532560][T12607] bpf_prog_test_run+0x33a/0x3b0 [ 307.537557][T12607] __sys_bpf+0x48d/0x810 [ 307.541856][T12607] ? __pfx___sys_bpf+0x10/0x10 [ 307.546684][T12607] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.552725][T12607] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.559113][T12607] ? do_syscall_64+0x100/0x230 [ 307.563939][T12607] __x64_sys_bpf+0x7c/0x90 [ 307.568407][T12607] do_syscall_64+0xf3/0x230 [ 307.572964][T12607] ? clear_bhb_loop+0x35/0x90 [ 307.577731][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.583676][T12607] RIP: 0033:0x7facffb77299 [ 307.588132][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.607786][T12607] RSP: 002b:00007fad008dc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.616254][T12607] RAX: ffffffffffffffda RBX: 00007facffd05f80 RCX: 00007facffb77299 [ 307.624281][T12607] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 307.632323][T12607] RBP: 00007fad008dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 307.640345][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.648369][T12607] R13: 000000000000000b R14: 00007facffd05f80 R15: 00007fff5ea8d908 [ 307.656401][T12607] [ 307.799937][T12621] xt_bpf: check failed: parse error [ 307.859427][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2441'. [ 307.862431][T12626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.363592][T12648] vlan2: entered promiscuous mode [ 308.858438][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 308.912935][T12669] macvlan2: entered promiscuous mode [ 308.929081][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 308.951508][T12669] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.987659][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 308.993696][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 309.174174][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2464'. [ 309.447360][T12687] FAULT_INJECTION: forcing a failure. [ 309.447360][T12687] name failslab, interval 1, probability 0, space 0, times 0 [ 309.460456][T12687] CPU: 0 UID: 0 PID: 12687 Comm: syz.4.2466 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 309.470924][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 309.481010][T12687] Call Trace: [ 309.484321][T12687] [ 309.487260][T12687] dump_stack_lvl+0x241/0x360 [ 309.491955][T12687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.497174][T12687] ? __pfx__printk+0x10/0x10 [ 309.501784][T12687] ? __kmalloc_node_noprof+0xb7/0x440 [ 309.507169][T12687] ? __pfx___might_resched+0x10/0x10 [ 309.512484][T12687] should_fail_ex+0x3b0/0x4e0 [ 309.517222][T12687] should_failslab+0xac/0x100 [ 309.521969][T12687] __kmalloc_node_noprof+0xdf/0x440 [ 309.527210][T12687] ? __kvmalloc_node_noprof+0x72/0x190 [ 309.532720][T12687] __kvmalloc_node_noprof+0x72/0x190 [ 309.538040][T12687] page_pool_create_percpu+0x2b0/0x7c0 [ 309.543516][T12687] bpf_test_run_xdp_live+0x2cd/0x2110 [ 309.548898][T12687] ? arch_stack_walk+0x16d/0x1b0 [ 309.553861][T12687] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 309.559696][T12687] ? mark_lock+0x9a/0x350 [ 309.564103][T12687] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 309.570021][T12687] ? __might_fault+0xaa/0x120 [ 309.574718][T12687] ? __might_fault+0xc6/0x120 [ 309.579413][T12687] ? _copy_from_user+0xa6/0xe0 [ 309.584185][T12687] ? bpf_test_init+0x15a/0x180 [ 309.588958][T12687] ? xdp_convert_md_to_buff+0x5b/0x330 [ 309.594429][T12687] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 309.599831][T12687] ? __pfx_lock_release+0x10/0x10 [ 309.604901][T12687] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 309.610717][T12687] ? __fget_files+0x29/0x470 [ 309.615347][T12687] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 309.621184][T12687] bpf_prog_test_run+0x33a/0x3b0 [ 309.626162][T12687] __sys_bpf+0x48d/0x810 [ 309.630440][T12687] ? __pfx___sys_bpf+0x10/0x10 [ 309.635243][T12687] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.641245][T12687] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.647590][T12687] ? do_syscall_64+0x100/0x230 [ 309.652371][T12687] __x64_sys_bpf+0x7c/0x90 [ 309.656804][T12687] do_syscall_64+0xf3/0x230 [ 309.661319][T12687] ? clear_bhb_loop+0x35/0x90 [ 309.666015][T12687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.671923][T12687] RIP: 0033:0x7facffb77299 [ 309.676349][T12687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.695969][T12687] RSP: 002b:00007fad008dc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.704394][T12687] RAX: ffffffffffffffda RBX: 00007facffd05f80 RCX: 00007facffb77299 [ 309.712382][T12687] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 309.720378][T12687] RBP: 00007fad008dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 309.728370][T12687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.736354][T12687] R13: 000000000000000b R14: 00007facffd05f80 R15: 00007fff5ea8d908 [ 309.744350][T12687] [ 309.775441][T12687] page_pool_create_percpu() gave up with errno -12 [ 310.015883][T12696] xt_bpf: check failed: parse error [ 310.277236][T12706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.729091][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.745448][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.754431][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.769239][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.777826][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 310.785414][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.108446][T12721] chnl_net:caif_netlink_parms(): no params data found [ 311.351263][T12738] sctp: [Deprecated]: syz.1.2481 (pid 12738) Use of int in maxseg socket option. [ 311.351263][T12738] Use struct sctp_assoc_value instead [ 311.469167][T12721] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.495632][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.503001][T12721] bridge_slave_0: entered allmulticast mode [ 311.533738][T12721] bridge_slave_0: entered promiscuous mode [ 311.560063][T12721] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.585327][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.605567][T12721] bridge_slave_1: entered allmulticast mode [ 311.613338][T12721] bridge_slave_1: entered promiscuous mode [ 311.762570][T12754] __nla_validate_parse: 5 callbacks suppressed [ 311.762593][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 311.793149][T12754] macvlan2: entered promiscuous mode [ 311.821213][T12754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.845549][T12761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2487'. [ 311.857360][T12721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.864119][T12761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2487'. [ 311.938252][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 312.042328][ T9512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.180765][T12721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.281064][ T9512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.292574][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2490'. [ 312.343222][T12779] FAULT_INJECTION: forcing a failure. [ 312.343222][T12779] name failslab, interval 1, probability 0, space 0, times 0 [ 312.358227][T12721] team0: Port device team_slave_0 added [ 312.372365][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.4.2493 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 312.382842][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 312.392928][T12779] Call Trace: [ 312.396219][T12779] [ 312.399168][T12779] dump_stack_lvl+0x241/0x360 [ 312.403892][T12779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.409110][T12779] ? __pfx__printk+0x10/0x10 [ 312.413720][T12779] ? __kmalloc_node_noprof+0xb7/0x440 [ 312.419108][T12779] ? __pfx___might_resched+0x10/0x10 [ 312.424413][T12779] should_fail_ex+0x3b0/0x4e0 [ 312.429115][T12779] should_failslab+0xac/0x100 [ 312.433818][T12779] __kmalloc_node_noprof+0xdf/0x440 [ 312.439033][T12779] ? __kvmalloc_node_noprof+0x72/0x190 [ 312.444514][T12779] __kvmalloc_node_noprof+0x72/0x190 [ 312.449822][T12779] page_pool_create_percpu+0x2b0/0x7c0 [ 312.455311][T12779] bpf_test_run_xdp_live+0x2cd/0x2110 [ 312.460721][T12779] ? arch_stack_walk+0x16d/0x1b0 [ 312.465725][T12779] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 312.471557][T12779] ? mark_lock+0x9a/0x350 [ 312.475961][T12779] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 312.481885][T12779] ? __might_fault+0xaa/0x120 [ 312.486603][T12779] ? __might_fault+0xc6/0x120 [ 312.491306][T12779] ? _copy_from_user+0xa6/0xe0 [ 312.496081][T12779] ? bpf_test_init+0x15a/0x180 [ 312.500853][T12779] ? xdp_convert_md_to_buff+0x5b/0x330 [ 312.506344][T12779] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 312.511774][T12779] ? __pfx_lock_release+0x10/0x10 [ 312.516856][T12779] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.522699][T12779] ? __fget_files+0x29/0x470 [ 312.527322][T12779] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.533144][T12779] bpf_prog_test_run+0x33a/0x3b0 [ 312.538102][T12779] __sys_bpf+0x48d/0x810 [ 312.542360][T12779] ? __pfx___sys_bpf+0x10/0x10 [ 312.547151][T12779] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 312.553151][T12779] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.559497][T12779] ? do_syscall_64+0x100/0x230 [ 312.564285][T12779] __x64_sys_bpf+0x7c/0x90 [ 312.568733][T12779] do_syscall_64+0xf3/0x230 [ 312.573252][T12779] ? clear_bhb_loop+0x35/0x90 [ 312.577949][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.583873][T12779] RIP: 0033:0x7facffb77299 [ 312.588335][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.607977][T12779] RSP: 002b:00007fad008dc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.616403][T12779] RAX: ffffffffffffffda RBX: 00007facffd05f80 RCX: 00007facffb77299 [ 312.624385][T12779] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 312.632380][T12779] RBP: 00007fad008dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.640381][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.648365][T12779] R13: 000000000000000b R14: 00007facffd05f80 R15: 00007fff5ea8d908 [ 312.656381][T12779] [ 312.673314][T12779] page_pool_create_percpu() gave up with errno -12 [ 312.695667][ T9512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.727687][T12721] team0: Port device team_slave_1 added [ 312.797396][T12721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.805437][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.831856][T12721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.844458][ T5245] Bluetooth: hci2: command tx timeout [ 312.913572][ T9512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.010622][T12721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.013593][T12773] dccp_close: ABORT with 329 bytes unread [ 313.025216][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.107441][T12721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.223518][T12789] netlink: 'syz.3.2497': attribute type 2 has an invalid length. [ 313.332601][T12721] hsr_slave_0: entered promiscuous mode [ 313.348256][T12721] hsr_slave_1: entered promiscuous mode [ 313.365352][T12721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.373071][T12721] Cannot create hsr debugfs directory [ 313.399027][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 313.684661][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 313.732800][T12812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'. [ 313.746021][T12812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'. [ 313.778224][ T9512] bridge_slave_1: left allmulticast mode [ 313.793056][ T9512] bridge_slave_1: left promiscuous mode [ 313.805976][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.850774][ T9512] bridge_slave_0: left allmulticast mode [ 313.876780][ T9512] bridge_slave_0: left promiscuous mode [ 313.897179][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.926745][T12818] sctp: [Deprecated]: syz.0.2505 (pid 12818) Use of int in maxseg socket option. [ 313.926745][T12818] Use struct sctp_assoc_value instead [ 314.236248][T12833] xt_bpf: check failed: parse error [ 314.902502][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 314.912533][ T5245] Bluetooth: hci2: command tx timeout [ 314.974817][ T9512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.989772][ T9512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.002608][ T9512] bond0 (unregistering): Released all slaves [ 315.113335][T12834] dccp_close: ABORT with 329 bytes unread [ 315.141710][ T9512] Κό: left promiscuous mode [ 315.327456][T12861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2522'. [ 315.343404][ T9512] tipc: Disabling bearer [ 315.357920][ T9512] tipc: Left network mode [ 315.604407][T12865] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 315.655297][T12865] netlink: 'syz.0.2521': attribute type 2 has an invalid length. [ 315.754131][T12879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.049239][ T9512] hsr_slave_0: left promiscuous mode [ 316.080230][ T9512] hsr_slave_1: left promiscuous mode [ 316.086920][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.094528][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.103213][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.113369][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.151687][ T9512] veth1_macvtap: left promiscuous mode [ 316.157629][ T9512] veth0_macvtap: left promiscuous mode [ 316.163817][ T9512] veth1_vlan: left promiscuous mode [ 316.189084][ T9512] veth0_vlan: left promiscuous mode [ 316.914182][ T9512] team0 (unregistering): Port device team_slave_1 removed [ 316.985202][ T9512] team0 (unregistering): Port device team_slave_0 removed [ 317.005084][ T5245] Bluetooth: hci2: command tx timeout [ 317.391343][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.398830][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.827416][T12915] __nla_validate_parse: 4 callbacks suppressed [ 317.827437][T12915] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2535'. [ 317.897229][T12915] netlink: 'syz.4.2535': attribute type 2 has an invalid length. [ 317.935373][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2535'. [ 317.964386][T12721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.988171][T12915] pim6reg1: entered promiscuous mode [ 317.993544][T12915] pim6reg1: entered allmulticast mode [ 318.055914][T12721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.068935][T12721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.118528][T12721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.193595][ T9512] IPVS: stop unused estimator thread 0... [ 318.263305][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 318.440202][T12721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.506559][T12721] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.543607][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.550879][ T5317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.597187][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.604407][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.677292][T12937] netlink: 'syz.1.2541': attribute type 13 has an invalid length. [ 319.042979][T12721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.071228][ T5245] Bluetooth: hci2: command tx timeout [ 319.080067][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2544'. [ 319.101188][T12950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2545'. [ 319.149226][T12721] veth0_vlan: entered promiscuous mode [ 319.168331][T12721] veth1_vlan: entered promiscuous mode [ 319.219595][T12721] veth0_macvtap: entered promiscuous mode [ 319.264567][T12721] veth1_macvtap: entered promiscuous mode [ 319.375897][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.407781][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.418660][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.445882][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.476048][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.495207][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.511251][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.535530][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.555914][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.587542][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.609054][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.627086][T12959] can: request_module (can-proto-0) failed. [ 319.657988][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.684910][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.707641][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.728027][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.748405][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.767951][T12721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.790434][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.801248][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.811752][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.830551][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.851436][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.866233][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.866561][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 319.878603][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.896159][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.906927][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.923363][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.939091][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.952836][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.969778][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.015389][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.040649][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.075953][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.095377][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.125166][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.157107][T12721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.230842][T12721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.251144][T12721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.260238][T12721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.282863][T12721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.402198][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'. [ 320.479297][ T9519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.503407][ T9519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.558600][ T2540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.584437][ T2540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.650020][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2556'. [ 320.674754][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2556'. [ 320.758048][T12992] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 320.812747][T12992] team0: Device hsr_slave_1 failed to register rx_handler [ 320.924293][T12980] dccp_close: ABORT with 329 bytes unread [ 320.972916][T12996] vlan2: entered promiscuous mode [ 321.398032][T13017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2564'. [ 321.929733][T13029] FAULT_INJECTION: forcing a failure. [ 321.929733][T13029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.944696][T13029] CPU: 1 UID: 0 PID: 13029 Comm: syz.4.2569 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 321.955181][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 321.965286][T13029] Call Trace: [ 321.968599][T13029] [ 321.971657][T13029] dump_stack_lvl+0x241/0x360 [ 321.976405][T13029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.981675][T13029] ? __pfx__printk+0x10/0x10 [ 321.986327][T13029] ? __pfx_lock_release+0x10/0x10 [ 321.991417][T13029] should_fail_ex+0x3b0/0x4e0 [ 321.996153][T13029] _copy_from_iter+0x1f6/0x1960 [ 322.001055][T13029] ? __virt_addr_valid+0x183/0x530 [ 322.006209][T13029] ? __pfx_lock_release+0x10/0x10 [ 322.011298][T13029] ? __alloc_skb+0x28f/0x440 [ 322.015939][T13029] ? __pfx__copy_from_iter+0x10/0x10 [ 322.021268][T13029] ? __virt_addr_valid+0x183/0x530 [ 322.026421][T13029] ? __virt_addr_valid+0x183/0x530 [ 322.031572][T13029] ? __virt_addr_valid+0x45f/0x530 [ 322.036735][T13029] ? __check_object_size+0x49c/0x900 [ 322.042069][T13029] netlink_sendmsg+0x73d/0xcb0 [ 322.046902][T13029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.052225][T13029] ? aa_sock_msg_perm+0x91/0x160 [ 322.057187][T13029] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 322.062529][T13029] ? security_socket_sendmsg+0x87/0xb0 [ 322.068035][T13029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.073373][T13029] __sock_sendmsg+0x221/0x270 [ 322.078098][T13029] sock_write_iter+0x2dd/0x400 [ 322.082915][T13029] ? __pfx_sock_write_iter+0x10/0x10 [ 322.088254][T13029] ? bpf_lsm_file_permission+0x9/0x10 [ 322.093684][T13029] ? security_file_permission+0x7f/0xa0 [ 322.099293][T13029] vfs_write+0xa72/0xc90 [ 322.103601][T13029] ? __pfx_sock_write_iter+0x10/0x10 [ 322.108967][T13029] ? __pfx_vfs_write+0x10/0x10 [ 322.113803][T13029] ksys_write+0x1a0/0x2c0 [ 322.118196][T13029] ? __pfx_ksys_write+0x10/0x10 [ 322.123087][T13029] ? do_syscall_64+0x100/0x230 [ 322.127892][T13029] ? do_syscall_64+0xb6/0x230 [ 322.132604][T13029] do_syscall_64+0xf3/0x230 [ 322.137131][T13029] ? clear_bhb_loop+0x35/0x90 [ 322.141847][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.147769][T13029] RIP: 0033:0x7facffb77299 [ 322.152204][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.171844][T13029] RSP: 002b:00007fad008dc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.180312][T13029] RAX: ffffffffffffffda RBX: 00007facffd05f80 RCX: 00007facffb77299 [ 322.188315][T13029] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000005 [ 322.196329][T13029] RBP: 00007fad008dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 322.204338][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.212358][T13029] R13: 000000000000000b R14: 00007facffd05f80 R15: 00007fff5ea8d908 [ 322.220398][T13029] [ 322.751838][T13047] ipvlan2: entered promiscuous mode [ 322.831938][T13051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.409993][T13074] __nla_validate_parse: 2 callbacks suppressed [ 323.410014][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 323.432982][T13079] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2581'. [ 323.457257][T13078] vlan2: entered promiscuous mode [ 323.497888][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 323.702696][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 323.792462][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 324.563325][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2596'. [ 325.224522][T13126] Cannot find set identified by id 0 to match [ 325.424572][T13130] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2600'. [ 325.470697][T13130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2600'. [ 325.503460][T13132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2601'. [ 325.525931][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2601'. [ 325.750316][T13140] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 326.721686][T13172] xt_bpf: check failed: parse error [ 326.898915][T13181] vlan2: entered promiscuous mode [ 327.146912][T13194] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 327.557885][T13207] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 328.053048][T13226] vlan2: entered promiscuous mode [ 328.194663][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.744884][T13246] __nla_validate_parse: 12 callbacks suppressed [ 328.744906][T13246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2642'. [ 328.868540][T13251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2642'. [ 329.035023][T13259] xt_bpf: check failed: parse error [ 329.109643][T13262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2648'. [ 329.127120][T13261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.337822][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 329.341284][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2654'. [ 329.386503][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2654'. [ 329.387882][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 329.430392][T13273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2653'. [ 329.470268][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2653'. [ 329.710172][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 330.524059][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'. [ 331.753483][T13374] xt_bpf: check failed: parse error [ 332.076439][T13382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.339421][T13393] vlan2: entered promiscuous mode [ 332.837770][T13416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.864495][T13415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.924609][T13415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.954057][T13416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.971024][T13415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.982637][T13385] dccp_close: ABORT with 329 bytes unread [ 333.084473][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.462305][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.936193][T13455] __nla_validate_parse: 5 callbacks suppressed [ 333.936234][T13455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2709'. [ 334.050819][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 334.609761][T13484] netlink: 'syz.2.2724': attribute type 11 has an invalid length. [ 334.618958][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'. [ 334.673430][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.876210][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2726'. [ 335.074239][T13497] vlan2: entered promiscuous mode [ 335.304324][T13501] vlan2: entered promiscuous mode [ 335.670116][T13514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2737'. [ 335.685545][T13514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2737'. [ 335.809743][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2738'. [ 335.975648][T13527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2736'. [ 336.011278][T13527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2736'. [ 336.019145][T13529] wg1 speed is unknown, defaulting to 1000 [ 336.033251][T13531] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 336.062785][T13529] wg1 speed is unknown, defaulting to 1000 [ 336.084987][T13529] wg1 speed is unknown, defaulting to 1000 [ 336.334486][T13539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.532512][ T5285] wg1 speed is unknown, defaulting to 1000 [ 336.540099][T13529] infiniband syz1: set active [ 336.548806][T13529] infiniband syz1: added wg1 [ 336.588322][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 336.664930][T13544] geneve2: entered promiscuous mode [ 336.695123][T13544] geneve2: entered allmulticast mode [ 336.758839][T13529] RDS/IB: syz1: added [ 336.764326][T13529] smc: adding ib device syz1 with port count 1 [ 336.809937][T13529] smc: ib device syz1 port 1 has pnetid [ 336.851815][ T5288] wg1 speed is unknown, defaulting to 1000 [ 336.888673][T13529] wg1 speed is unknown, defaulting to 1000 [ 336.929986][T13556] vlan2: entered promiscuous mode [ 337.382761][T13529] wg1 speed is unknown, defaulting to 1000 [ 337.508405][T13573] xt_bpf: check failed: parse error [ 337.921498][T13529] wg1 speed is unknown, defaulting to 1000 [ 338.028639][T13582] vlan2: entered promiscuous mode [ 338.425777][T13529] wg1 speed is unknown, defaulting to 1000 [ 338.835387][T13529] wg1 speed is unknown, defaulting to 1000 [ 339.018395][T13613] __nla_validate_parse: 4 callbacks suppressed [ 339.018416][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2773'. [ 339.089568][T13616] netlink: 'syz.3.2774': attribute type 11 has an invalid length. [ 339.109813][T13616] netlink: 'syz.3.2774': attribute type 1 has an invalid length. [ 339.309630][T13529] wg1 speed is unknown, defaulting to 1000 [ 339.774774][T13625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2776'. [ 339.805424][T13625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2776'. [ 339.931293][T13529] wg1 speed is unknown, defaulting to 1000 [ 340.066332][T13632] vlan2: entered promiscuous mode [ 340.113233][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 340.264346][T13644] x_tables: ip_tables: ah match: only valid for protocol 51 [ 340.492323][T13529] wg1 speed is unknown, defaulting to 1000 [ 340.846345][T13529] wg1 speed is unknown, defaulting to 1000 [ 341.020186][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 341.197105][T13673] xt_bpf: check failed: parse error [ 341.281350][T13529] wg1 speed is unknown, defaulting to 1000 [ 341.344478][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.482485][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2793'. [ 341.562718][T13684] vlan2: entered promiscuous mode [ 341.762402][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 342.147557][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2803'. [ 342.172653][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2802'. [ 342.175707][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2803'. [ 342.897849][T13739] sctp: [Deprecated]: syz.1.2811 (pid 13739) Use of int in max_burst socket option deprecated. [ 342.897849][T13739] Use struct sctp_assoc_value instead [ 343.095998][T13747] xt_bpf: check failed: parse error [ 343.309593][T13752] vlan2: entered promiscuous mode [ 343.598727][T13765] vlan2: entered promiscuous mode [ 343.680287][T13773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2824'. [ 344.367645][T13801] vlan2: entered promiscuous mode [ 344.510599][ C1] eth0: bad gso: type: 1, size: 1408 [ 344.882385][T13817] xt_bpf: check failed: parse error [ 344.903951][T13812] vlan2: entered promiscuous mode [ 345.009640][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.130036][T13828] ipip0: entered promiscuous mode [ 345.414231][T13846] __nla_validate_parse: 3 callbacks suppressed [ 345.414250][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2849'. [ 345.823623][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2852'. [ 346.831386][T13886] xt_bpf: check failed: parse error [ 346.923846][T13891] vlan2: entered promiscuous mode [ 347.014220][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2866'. [ 347.333114][T13904] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2869'. [ 347.347174][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2869'. [ 347.422941][T13906] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 348.036788][ C1] eth0: bad gso: type: 1, size: 1408 [ 348.071478][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 348.448456][T13930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2880'. [ 348.459695][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2880'. [ 348.633747][T13916] dccp_close: ABORT with 329 bytes unread [ 348.907808][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.894145][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2892'. [ 349.913757][T13966] vlan2: entered promiscuous mode [ 350.055708][T13970] FAULT_INJECTION: forcing a failure. [ 350.055708][T13970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.087387][T13970] CPU: 1 UID: 0 PID: 13970 Comm: syz.0.2893 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 350.097891][T13970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 350.107984][T13970] Call Trace: [ 350.111290][T13970] [ 350.114248][T13970] dump_stack_lvl+0x241/0x360 [ 350.118983][T13970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.124219][T13970] ? __pfx__printk+0x10/0x10 [ 350.128854][T13970] ? __pfx_lock_release+0x10/0x10 [ 350.133959][T13970] should_fail_ex+0x3b0/0x4e0 [ 350.138701][T13970] _copy_from_user+0x2f/0xe0 [ 350.143341][T13970] copy_msghdr_from_user+0xae/0x680 [ 350.148601][T13970] ? _parse_integer_limit+0x1b5/0x200 [ 350.154029][T13970] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 350.159903][T13970] __sys_sendmmsg+0x374/0x740 [ 350.164643][T13970] ? __pfx___sys_sendmmsg+0x10/0x10 [ 350.169941][T13970] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 350.175896][T13970] ? ksys_write+0x23e/0x2c0 [ 350.180492][T13970] ? __pfx_lock_release+0x10/0x10 [ 350.185579][T13970] ? vfs_write+0x7c4/0xc90 [ 350.190060][T13970] ? __mutex_unlock_slowpath+0x21d/0x750 [ 350.195741][T13970] ? __pfx_vfs_write+0x10/0x10 [ 350.200558][T13970] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.206562][T13970] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.212907][T13970] ? do_syscall_64+0x100/0x230 [ 350.217689][T13970] __x64_sys_sendmmsg+0xa0/0xb0 [ 350.222562][T13970] do_syscall_64+0xf3/0x230 [ 350.227081][T13970] ? clear_bhb_loop+0x35/0x90 [ 350.231777][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.237685][T13970] RIP: 0033:0x7f7784377299 [ 350.242111][T13970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.261739][T13970] RSP: 002b:00007f7785115048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.270184][T13970] RAX: ffffffffffffffda RBX: 00007f7784505f80 RCX: 00007f7784377299 [ 350.278195][T13970] RDX: 0000000000000001 RSI: 0000000020000800 RDI: 0000000000000003 [ 350.286177][T13970] RBP: 00007f77851150a0 R08: 0000000000000000 R09: 0000000000000000 [ 350.294154][T13970] R10: 0000000006000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.302132][T13970] R13: 000000000000000b R14: 00007f7784505f80 R15: 00007ffd379f78c8 [ 350.310128][T13970] [ 350.859708][T14000] [ 350.862105][T14000] ====================================================== [ 350.869140][T14000] WARNING: possible circular locking dependency detected [ 350.876157][T14000] 6.10.0-syzkaller-12562-g1722389b0d86 #0 Not tainted [ 350.882927][T14000] ------------------------------------------------------ [ 350.889960][T14000] syz.0.2901/14000 is trying to acquire lock: [ 350.896021][T14000] ffffffff8fbdbcd8 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xb5/0x7b0 [ 350.905523][T14000] [ 350.905523][T14000] but task is already holding lock: [ 350.912917][T14000] ffffffff8fbdbc78 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x28/0x7b0 [ 350.922517][T14000] [ 350.922517][T14000] which lock already depends on the new lock. [ 350.922517][T14000] [ 350.932922][T14000] [ 350.932922][T14000] the existing dependency chain (in reverse order) is: [ 350.941938][T14000] [ 350.941938][T14000] -> #2 (nr_neigh_list_lock){+...}-{2:2}: [ 350.949849][T14000] lock_acquire+0x1ed/0x550 [ 350.954895][T14000] _raw_spin_lock_bh+0x35/0x50 [ 350.960301][T14000] nr_rt_ioctl+0x398/0xfb0 [ 350.965293][T14000] sock_do_ioctl+0x158/0x460 [ 350.970429][T14000] sock_ioctl+0x629/0x8e0 [ 350.975290][T14000] __se_sys_ioctl+0xfc/0x170 [ 350.980409][T14000] do_syscall_64+0xf3/0x230 [ 350.985447][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.991886][T14000] [ 350.991886][T14000] -> #1 (&nr_node->node_lock){+...}-{2:2}: [ 350.999904][T14000] lock_acquire+0x1ed/0x550 [ 351.004949][T14000] _raw_spin_lock_bh+0x35/0x50 [ 351.010249][T14000] nr_rt_ioctl+0x192/0xfb0 [ 351.015207][T14000] sock_do_ioctl+0x158/0x460 [ 351.020329][T14000] sock_ioctl+0x629/0x8e0 [ 351.025186][T14000] __se_sys_ioctl+0xfc/0x170 [ 351.030310][T14000] do_syscall_64+0xf3/0x230 [ 351.035340][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.041763][T14000] [ 351.041763][T14000] -> #0 (nr_node_list_lock){+...}-{2:2}: [ 351.049605][T14000] validate_chain+0x18e0/0x5900 [ 351.054987][T14000] __lock_acquire+0x137a/0x2040 [ 351.060391][T14000] lock_acquire+0x1ed/0x550 [ 351.065425][T14000] _raw_spin_lock_bh+0x35/0x50 [ 351.070711][T14000] nr_rt_device_down+0xb5/0x7b0 [ 351.076103][T14000] nr_device_event+0x134/0x150 [ 351.081401][T14000] notifier_call_chain+0x19f/0x3e0 [ 351.087051][T14000] __dev_notify_flags+0x207/0x400 [ 351.092639][T14000] dev_change_flags+0xf0/0x1a0 [ 351.097957][T14000] dev_ifsioc+0x7c8/0xe70 [ 351.102828][T14000] dev_ioctl+0x719/0x1340 [ 351.107693][T14000] sock_do_ioctl+0x240/0x460 [ 351.112811][T14000] sock_ioctl+0x629/0x8e0 [ 351.117664][T14000] __se_sys_ioctl+0xfc/0x170 [ 351.122779][T14000] do_syscall_64+0xf3/0x230 [ 351.127802][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.134395][T14000] [ 351.134395][T14000] other info that might help us debug this: [ 351.134395][T14000] [ 351.144617][T14000] Chain exists of: [ 351.144617][T14000] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 351.144617][T14000] [ 351.158465][T14000] Possible unsafe locking scenario: [ 351.158465][T14000] [ 351.165947][T14000] CPU0 CPU1 [ 351.171312][T14000] ---- ---- [ 351.176678][T14000] lock(nr_neigh_list_lock); [ 351.181365][T14000] lock(&nr_node->node_lock); [ 351.188683][T14000] lock(nr_neigh_list_lock); [ 351.195901][T14000] lock(nr_node_list_lock); [ 351.200516][T14000] [ 351.200516][T14000] *** DEADLOCK *** [ 351.200516][T14000] [ 351.208663][T14000] 2 locks held by syz.0.2901/14000: [ 351.213857][T14000] #0: ffffffff8fa7f788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 351.222677][T14000] #1: ffffffff8fbdbc78 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x28/0x7b0 [ 351.232711][T14000] [ 351.232711][T14000] stack backtrace: [ 351.238597][T14000] CPU: 0 UID: 0 PID: 14000 Comm: syz.0.2901 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 351.249009][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 351.259064][T14000] Call Trace: [ 351.262348][T14000] [ 351.265286][T14000] dump_stack_lvl+0x241/0x360 [ 351.269973][T14000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.275182][T14000] ? print_circular_bug+0x130/0x1a0 [ 351.280388][T14000] check_noncircular+0x36a/0x4a0 [ 351.285335][T14000] ? __pfx_check_noncircular+0x10/0x10 [ 351.290798][T14000] ? lockdep_lock+0x123/0x2b0 [ 351.295505][T14000] validate_chain+0x18e0/0x5900 [ 351.300376][T14000] ? __pfx_lockdep_unlock+0x10/0x10 [ 351.305610][T14000] ? __pfx_validate_chain+0x10/0x10 [ 351.310836][T14000] ? __pfx_validate_chain+0x10/0x10 [ 351.316048][T14000] ? __try_to_del_timer_sync+0x2ad/0x340 [ 351.321794][T14000] ? mark_lock+0x9a/0x350 [ 351.326139][T14000] __lock_acquire+0x137a/0x2040 [ 351.331016][T14000] lock_acquire+0x1ed/0x550 [ 351.335533][T14000] ? nr_rt_device_down+0xb5/0x7b0 [ 351.340588][T14000] ? __pfx_lock_acquire+0x10/0x10 [ 351.345624][T14000] ? nr_rt_device_down+0xb5/0x7b0 [ 351.350665][T14000] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 351.356485][T14000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.361865][T14000] ? nr_rt_device_down+0xb5/0x7b0 [ 351.366906][T14000] _raw_spin_lock_bh+0x35/0x50 [ 351.371672][T14000] ? nr_rt_device_down+0xb5/0x7b0 [ 351.376799][T14000] nr_rt_device_down+0xb5/0x7b0 [ 351.381933][T14000] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 351.387659][T14000] ? do_raw_spin_unlock+0x13c/0x8b0 [ 351.392863][T14000] ? packet_notifier+0xa1a/0xa30 [ 351.397823][T14000] nr_device_event+0x134/0x150 [ 351.402632][T14000] notifier_call_chain+0x19f/0x3e0 [ 351.407765][T14000] __dev_notify_flags+0x207/0x400 [ 351.412803][T14000] ? dev_set_rx_mode+0x23c/0x2e0 [ 351.417754][T14000] ? __pfx___dev_notify_flags+0x10/0x10 [ 351.423306][T14000] ? __dev_change_flags+0x515/0x6f0 [ 351.428515][T14000] ? __pfx___dev_change_flags+0x10/0x10 [ 351.434079][T14000] ? rcu_is_watching+0x15/0xb0 [ 351.438865][T14000] ? trace_contention_end+0x3c/0x120 [ 351.444160][T14000] ? __mutex_lock+0x2ef/0xd70 [ 351.448851][T14000] dev_change_flags+0xf0/0x1a0 [ 351.453637][T14000] dev_ifsioc+0x7c8/0xe70 [ 351.457982][T14000] ? __pfx_dev_ifsioc+0x10/0x10 [ 351.462940][T14000] ? dev_load+0x21/0x1f0 [ 351.467200][T14000] dev_ioctl+0x719/0x1340 [ 351.471545][T14000] sock_do_ioctl+0x240/0x460 [ 351.476146][T14000] ? __pfx_sock_do_ioctl+0x10/0x10 [ 351.481274][T14000] sock_ioctl+0x629/0x8e0 [ 351.485613][T14000] ? __pfx_sock_ioctl+0x10/0x10 [ 351.490479][T14000] ? __fget_files+0x29/0x470 [ 351.495085][T14000] ? __fget_files+0x3f6/0x470 [ 351.499780][T14000] ? __fget_files+0x29/0x470 [ 351.504389][T14000] ? bpf_lsm_file_ioctl+0x9/0x10 [ 351.509354][T14000] ? security_file_ioctl+0x87/0xb0 [ 351.514487][T14000] ? __pfx_sock_ioctl+0x10/0x10 [ 351.519348][T14000] __se_sys_ioctl+0xfc/0x170 [ 351.523954][T14000] do_syscall_64+0xf3/0x230 [ 351.528470][T14000] ? clear_bhb_loop+0x35/0x90 [ 351.533160][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.539064][T14000] RIP: 0033:0x7f7784377299 [ 351.543485][T14000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.563098][T14000] RSP: 002b:00007f77850d3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.571521][T14000] RAX: ffffffffffffffda RBX: 00007f7784506130 RCX: 00007f7784377299 [ 351.579497][T14000] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 351.587474][T14000] RBP: 00007f77843e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 351.595454][T14000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.603433][T14000] R13: 000000000000006e R14: 00007f7784506130 R15: 00007ffd379f78c8 [ 351.611428][T14000] [ 358.356578][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!