last executing test programs: 19.332468996s ago: executing program 4 (id=427): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000001780)={'ip6gre0\x00', 0x0, 0x2f, 0xb, 0x5, 0xe, 0x2f, @empty, @empty, 0x10, 0x760, 0x34, 0xfffffffc}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000980)=[{&(0x7f00000004c0)="bda2a1587c1086711530e7281d47366eb0c64f1e10dcb0a6abdf3a7a71b1ef795d39b9bc66594faeeaba68dcbed0181e0a5735cc2ad8218c7c9f04d19cd575886b104bf905c27d056e23eac73f34b0d01db966b3e5e2b42e2164dc78c03f793d42b5fde1475f37225b51403b9cba91e918e6bd77a1eb55686d96f53d0fcbfb76dc2b9baf327d2518", 0x88}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x403}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64a69400050038925a01000000000000008004000000ffe809000000fff5dd000000080003000601ff1f418e01400004fcff", 0x58}], 0x1) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="13b0b2959b639fd8fb0e44d9fe3d42be1d8d834d9f1236a44096decbc0fe1217850f209371f22a8d5eda42dbc19379fda4d3585226ffba3d44268ae6f72cfc83453d2bb44bbcf26b14c1d21a51af1cbe70328c9bf313eeb8cab8feade2db568c600bba418bb16ddb64813ad30c21c9c733001ca1ce560de0c687f36564ebc71d0bbfd6f81f409de14e17e6aaa1dd7ec5d4ce846e2914e722b5cf0a667b8f21210e", 0xa1, 0x8000, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', r8, 0x1, 0xf, 0x320, 0x8, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast2, @broadcast, {[@noop]}}}}}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x14, r10, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x8000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) 18.492337623s ago: executing program 4 (id=432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0300fcffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="68002f805c000380080004000000000008000400040000000c00050005000000000000000c000500a43f000000000000080001000200000005000200030000000c000500020000000000000008000400000000000c00050008000000000000000800010006000000"], 0x84}, 0x1, 0x0, 0x0, 0x5396ebcf8cd913b0}, 0x10) 18.279682992s ago: executing program 4 (id=436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000300), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r9], 0x50}}, 0x20008040) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r11, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r4, 0x1, 0x300, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 18.031427594s ago: executing program 4 (id=441): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x1, 0x2c800, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={r1, 0x2, 0x0, [0x3, 0x100, 0x7, 0x8, 0x8000000000000001], [0x190, 0x7, 0x4, 0x3ffc0, 0x9, 0xa86, 0x1c, 0x0, 0x10, 0xc, 0x0, 0x63, 0xd5e, 0x0, 0x6, 0xdf, 0x9, 0x8, 0xe, 0xd, 0x6, 0xffffffffffffffff, 0x1, 0x69, 0x3ff, 0x8, 0x0, 0xa, 0x9, 0x6, 0xd56e, 0xcd44, 0x1, 0x8, 0x5, 0x4000000000000, 0x7, 0x3, 0x400, 0xff, 0x6, 0x2, 0x7, 0xffffffffffffffff, 0x10001, 0x80, 0x8, 0x5, 0x8f, 0x20000000000000, 0xe87, 0x9, 0x8, 0x7, 0x8000000000000000, 0xfffffffffffffffe, 0x3400, 0x1, 0x9, 0x8, 0x40, 0x0, 0xfff, 0x2, 0x1, 0x4, 0x81, 0x76b7, 0x4, 0xe3b, 0x5, 0x40, 0x4, 0x6, 0x0, 0x9e, 0x9, 0x0, 0x8, 0x1, 0x6, 0x150, 0x401, 0xba26, 0x0, 0x8, 0xa3, 0x8, 0xb, 0x9, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0xd0b, 0x9, 0xfffffffffffffff9, 0x3, 0x7fffffffffffffff, 0x10, 0x4000000000000000, 0x1ab, 0x1e, 0x6, 0x3, 0x1ff, 0x1, 0x1, 0x8001, 0xff, 0x7, 0x5, 0x5, 0x6, 0xffffffffffffffff, 0x8, 0x6, 0x8ab0155, 0x0, 0xeb]}) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000840)=0x80008) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000880)={r2}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'tunl0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x700, 0x7800, 0x1, 0x8, {{0x26, 0x4, 0x3, 0x3, 0x98, 0x64, 0x0, 0xf4, 0x4, 0x0, @broadcast, @private=0xa010102, {[@end, @end, @lsrr={0x83, 0x1f, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100]}, @cipso={0x86, 0xc, 0x3, [{0x2, 0x6, "8c0dda81"}]}, @noop, @lsrr={0x83, 0x2b, 0x15, [@rand_addr=0x64010100, @multicast2, @local, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, @remote]}, @timestamp={0x44, 0x28, 0x93, 0x0, 0x0, [0x34, 0xb7, 0x4, 0xffffffff, 0xffff8001, 0x2c, 0x6, 0x7f, 0x10000]}]}}}}}) bind$can_j1939(r3, &(0x7f00000009c0)={0x1d, r4, 0x0, {0x2, 0x1, 0x3}, 0xfe}, 0x18) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000fc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a80)=@newtclass={0x4dc, 0x28, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xc, 0x1}, {0x7, 0xfff9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x444, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x2, 0x1, 0x5a6, 0xfff6, 0x5, 0x8}, {0x4, 0x0, 0x81, 0x2, 0x9, 0x7}, 0x4, 0x100, 0x5, 0x3, 0x9}}, @TCA_HTB_RTAB={0x404, 0x4, [0x2b5, 0x9, 0x7, 0x1000, 0x830, 0x101, 0x6, 0x5, 0x80000001, 0x100, 0x7, 0x6, 0x3, 0x4, 0x1f50087c, 0x7, 0x2, 0x80, 0x7, 0x7, 0x0, 0xe, 0x800, 0x43, 0x2, 0x9, 0x9, 0xb, 0x9, 0x7ff, 0x7, 0xfffffffb, 0x1, 0x10001, 0x7f, 0x816, 0xffffffc8, 0xfffeffff, 0x5, 0x0, 0x8001, 0x7fffffff, 0x6, 0x8, 0x1, 0x0, 0x2, 0xd49, 0x9, 0x1, 0xfff, 0x6, 0xc23, 0x1, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x80, 0xe, 0x0, 0x3bb, 0xc, 0x10, 0x7, 0x2, 0x0, 0x7, 0x7, 0x9, 0x5, 0x36, 0xfff, 0x0, 0x5, 0x7, 0x0, 0x10000, 0x6, 0x628, 0x9, 0x73b, 0x7, 0x3, 0xffffffff, 0x1, 0x8, 0x8, 0x6, 0x23ac, 0x5c93ddf, 0xa9b, 0xfffff1fc, 0x10001, 0xa239, 0x3, 0x100, 0x94c4, 0x3, 0x376cb6d3, 0x77, 0x101, 0x980, 0xf, 0x9e76, 0x7, 0xb, 0xfff, 0x6, 0x2, 0x6404e414, 0xffffde96, 0x2, 0x821, 0x3, 0x7ff, 0x8d, 0x401, 0x1ff, 0x2, 0x5, 0x9, 0x8, 0x1, 0x10001, 0x0, 0xfffffffa, 0x7, 0x4, 0x8, 0x7, 0x200, 0x2, 0x0, 0x9, 0xdb, 0x4, 0x6, 0x7, 0xffffffff, 0x6, 0xffffff55, 0xa57, 0x8, 0x8, 0xa000, 0x3, 0x1, 0x6, 0x8d, 0x6c0, 0x0, 0x38, 0x4, 0xb, 0x9, 0x1a0, 0x4, 0x2, 0x78b, 0x1ff, 0x8, 0x5, 0x6233, 0x7, 0x3ff, 0xb, 0xff, 0x4, 0x401, 0x100, 0x0, 0x2000000, 0xe7c, 0x2dcf, 0x9, 0x8, 0x50, 0x3, 0x857012f5, 0x8001, 0x9, 0xf, 0x5, 0x5, 0x8, 0x7, 0x0, 0xd, 0x6, 0xfffffc00, 0x2, 0x1, 0x8, 0xffff, 0x3, 0x5, 0xcbc8, 0x60ae, 0x1, 0xfffffff8, 0x80000000, 0xe, 0x48f, 0x1, 0xe, 0x10000, 0x81, 0x1, 0xe25, 0x100, 0x4, 0x4, 0x4, 0x2, 0xc0000000, 0x4, 0x6, 0x9, 0x7, 0x2, 0xb, 0x654, 0x4, 0x6, 0x8, 0x5, 0x7fff, 0x80, 0x3, 0x8, 0xb, 0x80b, 0x6, 0x10000, 0x5, 0x8, 0x1, 0xabb, 0xcb, 0x4, 0x8, 0x2, 0x555, 0x3, 0x6, 0x4, 0xfffffffa, 0xa2, 0x1, 0xbf, 0x2, 0x0, 0xfffffffa, 0xf1e, 0x40]}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x1a, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0x101}}, @TCA_HFSC_USC={0x10, 0x3, {0x65, 0x3, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xda}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xfd7d}}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x400d5}, 0x50) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000001000)={0x0, 0xe20d, 0x30, 0xfffffffffffffff9, 0x3}, &(0x7f0000001040)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001080)={r6, 0xc07d, 0x400, 0x200}, &(0x7f00000010c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001100)=@assoc_value={0x0}, &(0x7f0000001140)=0x8) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000001640)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000011c0)={0x440, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x1, 0x12, [0x80, 0x2, 0x4000, 0xb8, 0x3, 0x6, 0x6, 0x7, 0xc, 0x8000, 0x3ff, 0x1, 0x5, 0x8, 0x80000001, 0x66d5, 0x2, 0x1, 0xa, 0x6, 0x2, 0x7, 0x2, 0x6, 0x100, 0x3f9, 0x5, 0xfffffff8, 0x80000001, 0x7, 0x0, 0x8, 0x5, 0x6, 0x8, 0x88, 0x0, 0x40, 0x4, 0x0, 0x80000000, 0xffff, 0xfffffffe, 0x2, 0x5, 0x5, 0xffff, 0x1000, 0x0, 0x8, 0x4, 0x80, 0xfffffff7, 0x5, 0x1, 0x7, 0x9, 0x80000001, 0x6, 0xffffffc0, 0x4, 0x9, 0xfff, 0x200], [0x0, 0x3, 0x3, 0x1800, 0x4, 0x3864, 0x10001, 0x6, 0xe, 0x9667, 0x9817, 0x4a4c, 0x6, 0x4c8, 0x4, 0x59af, 0x2, 0x0, 0x8, 0x1892, 0x5, 0x3ff, 0x8, 0x5, 0xd4, 0x7, 0x22, 0x3, 0x6, 0x5, 0x9, 0x8, 0x82b7, 0x7, 0x4, 0x3, 0xffffcdd8, 0x33, 0x50, 0x2, 0x4, 0x2d, 0x4, 0x8, 0x9, 0x81, 0xf, 0x1, 0x40, 0x40, 0x8, 0x1, 0x3d, 0x68, 0x9, 0x4, 0x1, 0x4, 0xd, 0x1, 0x6395, 0x9, 0xc, 0x61], [0x7, 0x0, 0x9, 0xaab, 0x10000, 0x35c, 0x9, 0x5, 0x80000000, 0x9, 0xd6, 0xc0000000, 0x1, 0x3, 0xe105, 0x8, 0x8, 0x7ff, 0x1, 0x4, 0x1e7, 0xfffffff9, 0x0, 0x53, 0x2, 0x3ff, 0x0, 0x1, 0xd, 0x10000, 0x7fff, 0x6, 0xb, 0xfff, 0xfff, 0x7, 0xfffffff9, 0x9, 0x1, 0x975b, 0x10001, 0x3, 0x1ff, 0xa4, 0x1, 0x3d7, 0x10000, 0xfffffff9, 0x10001, 0x100, 0xa4f, 0xffffffff, 0x6, 0x8, 0x6954, 0x2, 0x8, 0x4, 0x7, 0x8, 0x5, 0x7, 0x3, 0x8], [0x5, 0x52c, 0xfffffff7, 0x2, 0x7, 0x7fffffff, 0x4, 0xa8, 0x7, 0x8, 0x8, 0x3, 0x8, 0x8, 0xdb, 0x2, 0xdc, 0x80000001, 0x3, 0xc12d, 0x1, 0x10000, 0x4, 0x8, 0x6, 0x10001, 0x2, 0x7, 0x5, 0x800, 0x8, 0x1, 0x5, 0x1, 0x10000, 0x0, 0x4, 0x0, 0xa4bf, 0x300000, 0x1, 0x8, 0x1, 0x7, 0x9, 0x5, 0x7fff, 0x4, 0x1, 0x4, 0x2, 0x6, 0x800, 0x6, 0x2, 0x192e, 0x2, 0x8, 0x4, 0x8, 0xd, 0xfff, 0x2, 0x4], 0x1d, ['\x00', 'hfsc\x00', '\\[@\x00', '(!^@\\--*(\x00', 'hfsc\x00', 'htb\x00']}, ["", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = accept4$inet(r5, 0x0, &(0x7f0000001680), 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f00000016c0)) bind$inet6(r8, &(0x7f0000001700)={0xa, 0x4e21, 0x6, @mcast1, 0x8}, 0x1c) connect$inet(r5, &(0x7f0000001740)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x20, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c085}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001880)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xac2f, 0xe, 0x10, 0x6, 0x8, 0x9, 0x7d}, 0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000001940)={r7, 0x4}, &(0x7f0000001980)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000019c0)={r11, 0xffff, 0xed28}, 0x8) r12 = openat$cgroup_int(r5, &(0x7f0000001a00)='memory.min\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000001a40)=0x3, 0x12) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000001a80), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001b00)={'sit0\x00', &(0x7f0000001ac0)={'gre0\x00', r4, 0x7800, 0x8000, 0x40, 0x47, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x65, 0x0, 0x98, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000001b40)=0x3, 0x4) recvfrom(r0, &(0x7f0000001b80)=""/184, 0xb8, 0x40000000, &(0x7f0000001c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @private2, 0x4}}, 0x80) 17.596932951s ago: executing program 4 (id=450): listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008000a0000000000e000e218d1dd", 0x70, 0x0, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14fe0200fe8000000000000000000000000000aa08000900"], 0x48}}, 0x0) 6.814203463s ago: executing program 4 (id=450): listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008000a0000000000e000e218d1dd", 0x70, 0x0, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14fe0200fe8000000000000000000000000000aa08000900"], 0x48}}, 0x0) 4.446986779s ago: executing program 3 (id=588): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x491, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r9, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1002}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r12, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x20048041) r13 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) 2.597459989s ago: executing program 0 (id=603): socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0], 0x48) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe80000000fffffff5000000000000aa87"], 0x0) 2.355712964s ago: executing program 0 (id=606): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x2000, 0x6000}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}}, {0x600, 0x0, 0x29, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03"}}}}}}}, 0x53) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x64, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000014) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x16, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.132123413s ago: executing program 1 (id=610): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98, 0x1100}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 1.903200895s ago: executing program 1 (id=611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900ff00000028001a000a0101"], 0x40}}, 0x20040810) 1.741502247s ago: executing program 3 (id=613): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f00000016c0)=""/4091, 0xffb}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000200)=""/157, 0x9d}], 0x5}, 0x0) 1.724345215s ago: executing program 1 (id=614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000480a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.607402611s ago: executing program 3 (id=615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x4040010) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000e00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000005cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x12c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xf5, 0x8, "1eea5cc324b00f04431bd372e60a8e163dc3b2f07006d7c462dc7623aca5d9c465f49013210ac582da48c3c3a9a28ed4a473888002b62c2e47b7af11f9736be66c729157c9c1554bf624c269688b404b99071e50176a572180b4e35a8c3ea5e397ace6ac85ea1f997ccfae1619d304c1a02648bfe83bc1a1154cf425b320f6caec74e1a6e4e414025e5fd4822837542e81a492503e181220c68ce4021c4905cb60aac4b39e8c5aa1c4a7dda9bfb8e66b42410b733473dfec265e7d8153c578f4949cbc5090f0e5565606c67d4bf8d87b3c4893ae9bdf5f4115f3f53f1d086851c5e9b40ecfb831d6ad4ed409d0eb7a3f89"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x890}, 0x220020d4) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x4040010) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000e00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000005cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x12c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xf5, 0x8, "1eea5cc324b00f04431bd372e60a8e163dc3b2f07006d7c462dc7623aca5d9c465f49013210ac582da48c3c3a9a28ed4a473888002b62c2e47b7af11f9736be66c729157c9c1554bf624c269688b404b99071e50176a572180b4e35a8c3ea5e397ace6ac85ea1f997ccfae1619d304c1a02648bfe83bc1a1154cf425b320f6caec74e1a6e4e414025e5fd4822837542e81a492503e181220c68ce4021c4905cb60aac4b39e8c5aa1c4a7dda9bfb8e66b42410b733473dfec265e7d8153c578f4949cbc5090f0e5565606c67d4bf8d87b3c4893ae9bdf5f4115f3f53f1d086851c5e9b40ecfb831d6ad4ed409d0eb7a3f89"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x890}, 0x220020d4) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) 1.60606501s ago: executing program 2 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000040005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) 1.480161961s ago: executing program 1 (id=617): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000007111b900000000008510000002000000850000005500000095000000000000009500a50500000000593d99973ab8bd84c7ae49ffb03398929787e599d43d73bfa7fbad380654b3dbd19705b578dd896a48070306cbb723154d92a6c9ba4e724ca3d4191cb23190858474249c9f0eb2c65e4ff70e1268d7aa51661c9062c9525f739b6e47126c7b84e972f425e4f09d46a0d1c17a5e0927153239042f0b6265561d1627a654effd7ef7500d875a3afdbde8a26f930cc2098b0027564c781f51a9b56eb8fd2f0cd67dcbb78e7c71b28f9599ef"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.370997149s ago: executing program 3 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000201800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) 1.355553725s ago: executing program 2 (id=619): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@printk={@p={0x18, 0x1, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4d1a636b}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.271767911s ago: executing program 1 (id=620): r0 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f00000003c0), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xac, 0x21, 0x1, 0x0, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0xac}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000b719a90000000000850000007b000000b7080000000000007baaf8ff00000000b5080000000000000b8af0ff00000000bfa100000000000007010000f8000007040000f0ffffffb702000008000000182300"/103, @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) sendto$inet(r8, &(0x7f0000000600)='\\', 0x1, 0x400005d, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) 1.2589337s ago: executing program 0 (id=621): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) (fail_nth: 96) close(r0) 1.1601303s ago: executing program 3 (id=622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057180ce88661691192dfeb3f420ab94d7b4656eb34b5a6d05aa918223dc798962d3d3be2d2eade00403b6061549e8fc2ebbc4234133cc54df2476337ebec1a5cf2a2ae64d5a9286ddc8955fcca6c082dd79fd4f1b843f7458defb3dc58d291284dc04f2b5496ff20278af8f0a8f3ddee505f281288091feecccde63af20c741d6c93179373567302e79b211dbeb71073defa647cb5b9e1df8603ad81a4ed344d41", 0xec}, {&(0x7f0000001240)="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", 0x194}, {&(0x7f0000000040)="8bb4d1d32f79c20214bc217e02714b678e6cc0736064b7c7411d77b0e2a7b89fb637", 0x22}], 0x3}, 0x9cdc2384056b48b8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x40, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 859.359719ms ago: executing program 2 (id=623): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0xeaff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 599.975565ms ago: executing program 3 (id=624): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x491, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r9, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1002}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r12, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x20048041) r13 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) 576.707624ms ago: executing program 0 (id=625): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f00000016c0)=""/4091, 0xffb}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000200)=""/157, 0x9d}], 0x5}, 0x0) 381.778562ms ago: executing program 2 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}, [], {0x95, 0x0, 0x0, 0x10000000}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) 380.625484ms ago: executing program 0 (id=627): r0 = socket(0x40000000015, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x2d}, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x7d) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) 227.794751ms ago: executing program 1 (id=628): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000400)='z', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0), 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000700), &(0x7f0000000740)=0x4) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r6, &(0x7f0000000680)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f0000001fc0)=""/4090, 0xffa}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000440)=""/72, 0x48}], 0x6, &(0x7f0000000580)=""/208, 0xd0}, 0x10161) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000002900), 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e24, @empty}}, 0xfffd, 0x3}, 0x90) 219.484076ms ago: executing program 2 (id=629): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85a", 0x62}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d08d7a6f4032c1abd9c33fb7", 0x5d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2d", 0x1d}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711049000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) sendfile(r3, r4, 0x0, 0xffffffff000) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85a", 0x62}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="acc841985992b795542cfc02168702bbeaa47559108de013368744361ae9fce3a400000000000000127afcd0ef8e31b66fe812b7ae70a93dbc94e463f3c6e27bf3762122c4e8a5ab049e37dca0574406f4d08d7a6f4032c1abd9c33fb7", 0x5d}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62", 0xc4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2d", 0x1d}], 0x3}}], 0x2, 0xc0) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711049000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) (async) 123.481849ms ago: executing program 0 (id=630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8a80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0xc8, 0x30, 0x25, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_pedit={0xb0, 0x1, 0x0, 0x0, {{0xa}, {0x84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xe, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x2c}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000380)={0xd18, 0x9a, 0x4, 0x6}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x400000}, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3d1}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0xfffffffffffffe57, 0x7, 0x1}]}}]}, 0x40}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000340), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt(0xffffffffffffffff, 0xc, 0x6, &(0x7f0000000200)=""/131, &(0x7f0000000080)=0x83) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="0800000010f725ac3119fdacac98f5a6cd8b462338af36deb4e00e0ca2cd5d1cecd6e754ea6f51e31eb9ab7b5df6e967bc7199200fba293370db888a35a921417565be7d5675be7d9671c49b969f9c4f8c2f3c9663cacaf67c2b54f489b53527fa700a5dae171af7a07266d0a7e08d6e42436952adb64da7873d15ce7674fc7596db02d09b54b578317e0846db34430253888ed735e554f519bf5ce330242001000000b119231437d8aa2b640ba713ad390c21ee4d9e884d26393a4c25ee26527c2b53c5bc0564d512b113c0dc162b800ae1e20c9fa6957b98bacc78c0cbf090ab7d861e6cdb712dee399c1f612c", @ANYRES32=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) close(r1) 0s ago: executing program 2 (id=631): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1003f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780055c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000ffffffffffffffef", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): scuous mode [ 76.481818][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.488920][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.496563][ T5838] bridge_slave_0: entered allmulticast mode [ 76.503350][ T5838] bridge_slave_0: entered promiscuous mode [ 76.537289][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.557005][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.564378][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.572429][ T5840] bridge_slave_0: entered allmulticast mode [ 76.579236][ T5840] bridge_slave_0: entered promiscuous mode [ 76.586740][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.593938][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.601222][ T5838] bridge_slave_1: entered allmulticast mode [ 76.607975][ T5838] bridge_slave_1: entered promiscuous mode [ 76.640029][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.649390][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.656517][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.664940][ T5840] bridge_slave_1: entered allmulticast mode [ 76.672567][ T5840] bridge_slave_1: entered promiscuous mode [ 76.686558][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.696677][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.704902][ T5839] bridge_slave_0: entered allmulticast mode [ 76.712299][ T5839] bridge_slave_0: entered promiscuous mode [ 76.783983][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.791698][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.798839][ T5839] bridge_slave_1: entered allmulticast mode [ 76.806075][ T5839] bridge_slave_1: entered promiscuous mode [ 76.846828][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.857892][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.877452][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.884824][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.892087][ T5845] bridge_slave_0: entered allmulticast mode [ 76.898754][ T5845] bridge_slave_0: entered promiscuous mode [ 76.906701][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.913878][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.921262][ T5845] bridge_slave_1: entered allmulticast mode [ 76.928148][ T5845] bridge_slave_1: entered promiscuous mode [ 76.938676][ T5841] team0: Port device team_slave_0 added [ 76.946426][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.957658][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.978047][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.990045][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.007620][ T5841] team0: Port device team_slave_1 added [ 77.076619][ T5840] team0: Port device team_slave_0 added [ 77.101003][ T5839] team0: Port device team_slave_0 added [ 77.110657][ T5838] team0: Port device team_slave_0 added [ 77.118481][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.131192][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.141748][ T5840] team0: Port device team_slave_1 added [ 77.148187][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.155225][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.181857][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.195841][ T5839] team0: Port device team_slave_1 added [ 77.203141][ T5838] team0: Port device team_slave_1 added [ 77.242417][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.254052][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.280696][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.324772][ T5845] team0: Port device team_slave_0 added [ 77.331741][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.338731][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.365544][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.377981][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.385355][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.411358][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.443430][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.452109][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.478593][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.491483][ T5845] team0: Port device team_slave_1 added [ 77.510333][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.517315][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.543518][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.556196][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.563498][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.589909][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.601736][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.608722][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.635624][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.650106][ T5854] Bluetooth: hci1: command tx timeout [ 77.655989][ T55] Bluetooth: hci4: command tx timeout [ 77.661595][ T5850] Bluetooth: hci0: command tx timeout [ 77.664397][ T5854] Bluetooth: hci2: command tx timeout [ 77.698396][ T5841] hsr_slave_0: entered promiscuous mode [ 77.704784][ T5841] hsr_slave_1: entered promiscuous mode [ 77.723720][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.730842][ T5854] Bluetooth: hci3: command tx timeout [ 77.736513][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.763311][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.787415][ T5840] hsr_slave_0: entered promiscuous mode [ 77.793747][ T5840] hsr_slave_1: entered promiscuous mode [ 77.800287][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.808238][ T5840] Cannot create hsr debugfs directory [ 77.818310][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.825493][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.851512][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.933825][ T5839] hsr_slave_0: entered promiscuous mode [ 77.940791][ T5839] hsr_slave_1: entered promiscuous mode [ 77.946772][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.954710][ T5839] Cannot create hsr debugfs directory [ 77.976874][ T5838] hsr_slave_0: entered promiscuous mode [ 77.983521][ T5838] hsr_slave_1: entered promiscuous mode [ 77.989728][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.997303][ T5838] Cannot create hsr debugfs directory [ 78.023669][ T5845] hsr_slave_0: entered promiscuous mode [ 78.031485][ T5845] hsr_slave_1: entered promiscuous mode [ 78.038408][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.046047][ T5845] Cannot create hsr debugfs directory [ 78.417706][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.440534][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.461192][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.476611][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.513989][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.527501][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.548543][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.573756][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.629325][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.651302][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.699912][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.710350][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.730405][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.750243][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.771619][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.795966][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.810680][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.868036][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.875437][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.887196][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.907477][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.930845][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.938107][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.953248][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.960410][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.970257][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.070311][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.116083][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.127315][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.166875][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.174067][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.199996][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.207153][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.232162][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.303653][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.310864][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.350145][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.357353][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.376319][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.387547][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.434779][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.480896][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.520038][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.543868][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.551039][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.598132][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.605342][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.644761][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.674064][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.701250][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.708407][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.734419][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.740146][ T5854] Bluetooth: hci2: command tx timeout [ 79.741612][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.746893][ T5854] Bluetooth: hci4: command tx timeout [ 79.755629][ T55] Bluetooth: hci0: command tx timeout [ 79.759996][ T5854] Bluetooth: hci1: command tx timeout [ 79.819965][ T5854] Bluetooth: hci3: command tx timeout [ 79.946128][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.972929][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.983390][ T5840] veth0_vlan: entered promiscuous mode [ 80.036317][ T5840] veth1_vlan: entered promiscuous mode [ 80.097191][ T5841] veth0_vlan: entered promiscuous mode [ 80.162484][ T5840] veth0_macvtap: entered promiscuous mode [ 80.191121][ T5841] veth1_vlan: entered promiscuous mode [ 80.202157][ T5840] veth1_macvtap: entered promiscuous mode [ 80.266439][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.300328][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.332676][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.349900][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.358745][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.375179][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.407188][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.487247][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.500475][ T5841] veth0_macvtap: entered promiscuous mode [ 80.547545][ T5841] veth1_macvtap: entered promiscuous mode [ 80.604692][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.617398][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.642381][ T5845] veth0_vlan: entered promiscuous mode [ 80.654657][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.665557][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.677834][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.723629][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.738656][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.750998][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.772916][ T5839] veth0_vlan: entered promiscuous mode [ 80.791751][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.800980][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.810655][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.821000][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.833433][ T5838] veth0_vlan: entered promiscuous mode [ 80.855143][ T5845] veth1_vlan: entered promiscuous mode [ 80.869411][ T5838] veth1_vlan: entered promiscuous mode [ 80.880953][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.888844][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.892394][ T5839] veth1_vlan: entered promiscuous mode [ 80.994911][ T5845] veth0_macvtap: entered promiscuous mode [ 81.016976][ T5845] veth1_macvtap: entered promiscuous mode [ 81.034875][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.056373][ T5838] veth0_macvtap: entered promiscuous mode [ 81.131744][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.155343][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.165421][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.188259][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.205024][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.213149][ T5839] veth0_macvtap: entered promiscuous mode [ 81.226432][ T5838] veth1_macvtap: entered promiscuous mode [ 81.268323][ T5839] veth1_macvtap: entered promiscuous mode [ 81.303011][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.321593][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.334606][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.348641][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.358662][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.369943][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.381380][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.402570][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.418571][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.430165][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.440722][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.451746][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.462472][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.473534][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.496227][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.505498][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 81.509559][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.519306][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 81.528630][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.533852][ T5929] nbd: socks must be embedded in a SOCK_ITEM attr [ 81.553248][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.561582][ T5929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6'. [ 81.578079][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.588739][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.598966][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.609680][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.620516][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.631193][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.641064][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.653086][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.664622][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.695577][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.698094][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.704441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.717220][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.732872][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.743737][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.754055][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.767170][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.785358][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.809907][ T5854] Bluetooth: hci0: command tx timeout [ 81.815880][ T5854] Bluetooth: hci4: command tx timeout [ 81.819712][ T5850] Bluetooth: hci2: command tx timeout [ 81.822151][ T5854] Bluetooth: hci1: command tx timeout [ 81.880020][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.891551][ T5854] Bluetooth: hci3: command tx timeout [ 81.899857][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.912384][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.923237][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.933792][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.944595][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.955318][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.967075][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.978863][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.991474][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.000957][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.011368][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.020716][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.054917][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.064576][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.073748][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.082586][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.232615][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.256512][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.314707][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.342164][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.399230][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 82.408140][ T5937] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 82.449674][ T5937] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 82.468069][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.477286][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 82.493824][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.517813][ T5937] syz_tun: entered promiscuous mode [ 82.530810][ T5937] erspan0: entered promiscuous mode [ 82.537253][ T5937] gretap0: entered promiscuous mode [ 82.566801][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.600536][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.655453][ T5935] netlink: 'syz.0.7': attribute type 3 has an invalid length. [ 82.741719][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.766927][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.825892][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.850175][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.272079][ T5956] netlink: 'syz.1.2': attribute type 5 has an invalid length. [ 83.378145][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.413539][ T5956] : entered promiscuous mode [ 83.652117][ T5970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 83.768379][ T5963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.826973][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 83.871985][ T5971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.893393][ T5854] Bluetooth: hci1: command tx timeout [ 83.898864][ T5854] Bluetooth: hci2: command tx timeout [ 83.902724][ T5973] vlan2: entered allmulticast mode [ 83.905646][ T55] Bluetooth: hci0: command tx timeout [ 83.910428][ T5850] Bluetooth: hci4: command tx timeout [ 83.914237][ T5973] batadv0: entered allmulticast mode [ 83.973293][ T5854] Bluetooth: hci3: command tx timeout [ 84.058717][ T5963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.145657][ T5971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.261365][ T5963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.284294][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.347394][ T5971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.508585][ T5963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.537815][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 84.577357][ T5971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.696432][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 84.902423][ T5971] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.944805][ T5971] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.967661][ T5971] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.998296][ T5971] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.457099][ T6015] sctp: [Deprecated]: syz.4.24 (pid 6015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.457099][ T6015] Use struct sctp_sack_info instead [ 85.493315][ T6019] ip6gretap0: entered promiscuous mode [ 85.514626][ T6019] vlan2: entered promiscuous mode [ 85.621898][ T6015] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 86.286012][ T6030] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.478632][ T6032] vlan2: entered allmulticast mode [ 86.491203][ T6032] batadv0: entered allmulticast mode [ 86.592013][ T6034] sctp: [Deprecated]: syz.1.32 (pid 6034) Use of int in max_burst socket option deprecated. [ 86.592013][ T6034] Use struct sctp_assoc_value instead [ 86.802915][ T6037] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.903661][ T6037] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.065529][ T6037] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.216125][ T6037] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.398094][ T6037] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.470242][ T6037] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.508703][ T6037] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.582864][ T6037] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.909543][ T6059] syz.4.38 uses obsolete (PF_INET,SOCK_PACKET) [ 87.929914][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 87.991744][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'. [ 88.806378][ T6070] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.51'. [ 88.816773][ T6070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.827559][ T6070] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 88.889323][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.928507][ T6080] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 88.964084][ T5963] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.042902][ T5963] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.082693][ T6080] veth0_macvtap: left promiscuous mode [ 89.104072][ T5963] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.161951][ T5963] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.391810][ T6092] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 89.409245][ T6092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.413237][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 89.696623][ T6104] Zero length message leads to an empty skb [ 89.743233][ T6104] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.056285][ T36] bond0 (unregistering): Released all slaves [ 90.090819][ T6104] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.202814][ T6104] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.315738][ T6104] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.346176][ T6122] netlink: 136 bytes leftover after parsing attributes in process `syz.3.60'. [ 90.363562][ T6122] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.385285][ T6125] netlink: 56 bytes leftover after parsing attributes in process `syz.3.60'. [ 90.524095][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 90.538713][ T6129] vlan2: entered promiscuous mode [ 90.544585][ T6129] batadv0: entered promiscuous mode [ 90.922325][ T6149] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.985891][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 91.123967][ T6156] xt_hashlimit: size too large, truncated to 1048576 [ 91.190058][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 91.370023][ T6104] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.387612][ T6104] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.402689][ T6104] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.416741][ T6104] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.529922][ T6161] netlink: 592 bytes leftover after parsing attributes in process `syz.3.71'. [ 91.903481][ T6176] batadv0: entered promiscuous mode [ 91.922113][ T6176] vlan2: entered promiscuous mode [ 91.968903][ T6179] dummy0: entered promiscuous mode [ 91.975671][ T6179] vlan3: entered promiscuous mode [ 92.095467][ T6184] dccp_v6_rcv: dropped packet with invalid checksum [ 92.126823][ T6186] netlink: 'syz.1.80': attribute type 15 has an invalid length. [ 92.144258][ T26] cfg80211: failed to load regulatory.db [ 92.225670][ T6188] netlink: 'syz.2.81': attribute type 7 has an invalid length. [ 92.240681][ T6188] netlink: 'syz.2.81': attribute type 8 has an invalid length. [ 92.258344][ T6188] bond0: entered promiscuous mode [ 92.266096][ T6188] bond_slave_0: entered promiscuous mode [ 92.272453][ T6188] bond_slave_1: entered promiscuous mode [ 92.279438][ T5894] IPVS: starting estimator thread 0... [ 92.285166][ T6188] bond0: left promiscuous mode [ 92.294905][ T6188] bond_slave_0: left promiscuous mode [ 92.303062][ T6188] bond_slave_1: left promiscuous mode [ 92.379304][ T6192] IPVS: using max 19 ests per chain, 45600 per kthread [ 92.705727][ T6215] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 93.160310][ T6233] __nla_validate_parse: 5 callbacks suppressed [ 93.160330][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 93.452117][ T6248] xt_ecn: cannot match TCP bits for non-tcp packets [ 93.882409][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 93.944195][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 93.972603][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.140480][ T6272] bridge_slave_1 (unregistering): left allmulticast mode [ 94.158105][ T6272] bridge_slave_1 (unregistering): left promiscuous mode [ 94.189602][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.262534][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 94.289273][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 94.298300][ T6281] netlink: 10 bytes leftover after parsing attributes in process `syz.3.117'. [ 94.326881][ T6279] bridge0: entered promiscuous mode [ 94.330230][ T6281] nbd: socks must be embedded in a SOCK_ITEM attr [ 94.338090][ T6279] vlan3: entered promiscuous mode [ 94.397753][ T6283] bridge0: port 3(hsr0) entered blocking state [ 94.405906][ T6283] bridge0: port 3(hsr0) entered disabled state [ 94.424818][ T6283] hsr0: entered allmulticast mode [ 94.434160][ T6283] hsr_slave_0: entered allmulticast mode [ 94.458665][ T6283] hsr_slave_1: entered allmulticast mode [ 94.473579][ T6283] hsr0: entered promiscuous mode [ 94.483571][ T6283] bridge0: port 3(hsr0) entered blocking state [ 94.490175][ T6283] bridge0: port 3(hsr0) entered forwarding state [ 95.137601][ T6294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.294229][ T6301] vlan2: entered allmulticast mode [ 95.593764][ T6294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.613061][ T6314] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 95.642626][ T6315] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 95.795672][ T6317] No such timeout policy "syz0" [ 95.874454][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 95.970383][ T6294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.166308][ T6297] IPVS: length: 78 != 8 [ 96.258088][ T6294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.283396][ T6342] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 96.494930][ T6294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.515745][ T6355] netlink: 188 bytes leftover after parsing attributes in process `syz.0.142'. [ 96.552627][ T6355] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 96.576077][ T6294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.643218][ T6294] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.774217][ T6294] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.279768][ T6418] netlink: 'syz.3.151': attribute type 10 has an invalid length. [ 97.784860][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.161'. [ 97.813008][ T6445] FAULT_INJECTION: forcing a failure. [ 97.813008][ T6445] name failslab, interval 1, probability 0, space 0, times 1 [ 97.838585][ T6445] CPU: 1 UID: 0 PID: 6445 Comm: syz.2.163 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 97.838625][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.838642][ T6445] Call Trace: [ 97.838649][ T6445] [ 97.838658][ T6445] dump_stack_lvl+0x241/0x360 [ 97.838706][ T6445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.838728][ T6445] ? __pfx__printk+0x10/0x10 [ 97.838750][ T6445] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 97.838780][ T6445] ? __pfx___might_resched+0x10/0x10 [ 97.838812][ T6445] should_fail_ex+0x40a/0x550 [ 97.838848][ T6445] should_failslab+0xac/0x100 [ 97.838877][ T6445] kmem_cache_alloc_node_noprof+0x77/0x380 [ 97.838906][ T6445] ? __alloc_skb+0x1c3/0x440 [ 97.838933][ T6445] __alloc_skb+0x1c3/0x440 [ 97.838960][ T6445] ? __pfx___alloc_skb+0x10/0x10 [ 97.838978][ T6445] ? __local_bh_enable_ip+0x168/0x200 [ 97.839007][ T6445] ? pppoe_sendmsg+0xb1/0x8a0 [ 97.839028][ T6445] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 97.839055][ T6445] sock_wmalloc+0xab/0x120 [ 97.839084][ T6445] pppoe_sendmsg+0x312/0x8a0 [ 97.839112][ T6445] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 97.839134][ T6445] ? aa_sock_msg_perm+0x91/0x160 [ 97.839170][ T6445] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 97.839190][ T6445] __sock_sendmsg+0x221/0x270 [ 97.839222][ T6445] ____sys_sendmsg+0x53a/0x860 [ 97.839256][ T6445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.839279][ T6445] ? __fget_files+0x2a/0x410 [ 97.839313][ T6445] ? __fget_files+0x2a/0x410 [ 97.839352][ T6445] __sys_sendmmsg+0x36a/0x720 [ 97.839389][ T6445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.839428][ T6445] ? __pfx_lock_release+0x10/0x10 [ 97.839457][ T6445] ? kstrtouint_from_user+0x128/0x190 [ 97.839505][ T6445] ? ksys_write+0x22a/0x2b0 [ 97.839527][ T6445] ? __pfx_lock_release+0x10/0x10 [ 97.839564][ T6445] ? sb_end_write+0xe9/0x1c0 [ 97.839594][ T6445] ? vfs_write+0x7fa/0xd10 [ 97.839626][ T6445] ? __mutex_unlock_slowpath+0x227/0x800 [ 97.839686][ T6445] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.839721][ T6445] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.839753][ T6445] ? do_syscall_64+0x100/0x230 [ 97.839787][ T6445] __x64_sys_sendmmsg+0xa0/0xb0 [ 97.839815][ T6445] do_syscall_64+0xf3/0x230 [ 97.839845][ T6445] ? clear_bhb_loop+0x35/0x90 [ 97.839877][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.839914][ T6445] RIP: 0033:0x7f1c1358d169 [ 97.839936][ T6445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.839952][ T6445] RSP: 002b:00007f1c1435c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.839974][ T6445] RAX: ffffffffffffffda RBX: 00007f1c137a5fa0 RCX: 00007f1c1358d169 [ 97.839988][ T6445] RDX: 0000000000000213 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 97.840001][ T6445] RBP: 00007f1c1435c090 R08: 0000000000000000 R09: 0000000000000000 [ 97.840012][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.840024][ T6445] R13: 0000000000000000 R14: 00007f1c137a5fa0 R15: 00007ffd1c07f8f8 [ 97.840052][ T6445] [ 98.225552][ T6454] FAULT_INJECTION: forcing a failure. [ 98.225552][ T6454] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.256171][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.2.166 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 98.256201][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.256213][ T6454] Call Trace: [ 98.256220][ T6454] [ 98.256229][ T6454] dump_stack_lvl+0x241/0x360 [ 98.256261][ T6454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.256285][ T6454] ? __pfx__printk+0x10/0x10 [ 98.256308][ T6454] ? __pfx_lock_release+0x10/0x10 [ 98.256348][ T6454] should_fail_ex+0x40a/0x550 [ 98.256386][ T6454] _copy_from_user+0x2d/0xb0 [ 98.256416][ T6454] bpf_prog_test_run_xdp+0xe07/0x11e0 [ 98.256466][ T6454] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.256501][ T6454] ? __fget_files+0x2a/0x410 [ 98.256534][ T6454] ? __fget_files+0x2a/0x410 [ 98.256567][ T6454] ? fput+0x21b/0x290 [ 98.256606][ T6454] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.256641][ T6454] bpf_prog_test_run+0x2e4/0x360 [ 98.256676][ T6454] __sys_bpf+0x487/0x820 [ 98.256708][ T6454] ? __pfx___sys_bpf+0x10/0x10 [ 98.256748][ T6454] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.256782][ T6454] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.256815][ T6454] ? do_syscall_64+0x100/0x230 [ 98.256851][ T6454] __x64_sys_bpf+0x7c/0x90 [ 98.256877][ T6454] do_syscall_64+0xf3/0x230 [ 98.256907][ T6454] ? clear_bhb_loop+0x35/0x90 [ 98.256940][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.256967][ T6454] RIP: 0033:0x7f1c1358d169 [ 98.256986][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.257007][ T6454] RSP: 002b:00007f1c1435c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.257028][ T6454] RAX: ffffffffffffffda RBX: 00007f1c137a5fa0 RCX: 00007f1c1358d169 [ 98.257042][ T6454] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 98.257055][ T6454] RBP: 00007f1c1435c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.257067][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.257078][ T6454] R13: 0000000000000000 R14: 00007f1c137a5fa0 R15: 00007ffd1c07f8f8 [ 98.257105][ T6454] [ 98.560457][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.683302][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 98.737366][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 98.852520][ T6466] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 98.883020][ T6466] batman_adv: batadv0: Adding interface: team0 [ 98.896333][ T6466] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.922148][ T6466] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 98.948121][ T6466] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 98.959257][ T6466] netlink: 2 bytes leftover after parsing attributes in process `syz.0.171'. [ 98.985917][ T6466] team0: entered promiscuous mode [ 98.991321][ T6466] team_slave_0: entered promiscuous mode [ 98.997618][ T6466] team_slave_1: entered promiscuous mode [ 99.007866][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.015958][ T6466] batman_adv: batadv0: Interface activated: team0 [ 99.027853][ T6466] batman_adv: batadv0: Interface deactivated: team0 [ 99.036080][ T6466] batman_adv: batadv0: Removing interface: team0 [ 99.048858][ T6466] bridge0: port 4(team0) entered blocking state [ 99.068052][ T6466] bridge0: port 4(team0) entered disabled state [ 99.092162][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 99.095111][ T6466] team0: entered allmulticast mode [ 99.115044][ T6466] team_slave_0: entered allmulticast mode [ 99.123377][ T6466] team_slave_1: entered allmulticast mode [ 99.137640][ T6466] bridge0: port 4(team0) entered blocking state [ 99.144060][ T6466] bridge0: port 4(team0) entered forwarding state [ 99.162849][ T6479] gtp0: entered allmulticast mode [ 99.185458][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 99.213131][ T6479] gtp1: entered allmulticast mode [ 99.218800][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 99.237305][ T6479] gtp2: entered allmulticast mode [ 99.238131][ T6466] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.171'. [ 99.243270][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 99.298772][ T6479] gtp3: entered allmulticast mode [ 99.304744][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 99.324403][ T6483] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.355928][ T6479] gtp4: entered allmulticast mode [ 99.364688][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 99.379688][ T6479] gtp5: entered allmulticast mode [ 99.392491][ T6479] gtp6: entered allmulticast mode [ 99.401720][ T6483] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.418102][ T6479] gtp7: entered allmulticast mode [ 99.430154][ T6479] gtp8: entered allmulticast mode [ 99.438978][ T6479] gtp9: entered allmulticast mode [ 99.449301][ T6479] gtp10: entered allmulticast mode [ 99.459859][ T6479] gtp11: entered allmulticast mode [ 99.468047][ T6483] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.491243][ T6479] gtp12: entered allmulticast mode [ 99.510119][ T6479] gtp13: entered allmulticast mode [ 99.519396][ T6479] gtp14: entered allmulticast mode [ 99.528889][ T6479] gtp15: entered allmulticast mode [ 99.537062][ T6483] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.558131][ T6479] gtp16: entered allmulticast mode [ 99.578227][ T6479] gtp17: entered allmulticast mode [ 99.589211][ T6479] gtp18: entered allmulticast mode [ 99.599197][ T6479] gtp19: entered allmulticast mode [ 99.608407][ T6479] gtp20: entered allmulticast mode [ 99.619398][ T6479] gtp21: entered allmulticast mode [ 99.628736][ T6479] gtp22: entered allmulticast mode [ 99.646570][ T6479] gtp23: entered allmulticast mode [ 99.674035][ T6479] gtp24: entered allmulticast mode [ 99.697864][ T6483] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.727327][ T6483] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.744277][ T6479] gtp25: entered allmulticast mode [ 99.769893][ T6483] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.790070][ T6479] gtp26: entered allmulticast mode [ 99.804658][ T6479] gtp27: entered allmulticast mode [ 99.815679][ T6487] veth0: entered promiscuous mode [ 99.827113][ T6487] vlan2: entered promiscuous mode [ 99.867102][ T6483] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.882491][ T6479] gtp28: entered allmulticast mode [ 99.895485][ T6479] gtp29: entered allmulticast mode [ 99.919284][ T6479] gtp30: entered allmulticast mode [ 100.178031][ T6501] ip6gretap0: entered promiscuous mode [ 100.183802][ T6501] vlan2: entered promiscuous mode [ 100.258825][ T6504] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.327608][ T6506] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.411122][ T6504] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.496971][ T6506] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.581769][ T6504] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.660346][ T6506] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.687846][ T6527] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 100.731015][ T6504] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.818577][ T6506] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.969317][ T6504] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.040902][ T6504] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.088724][ T6506] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.138433][ T6506] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.160118][ T6504] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.199990][ T6506] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.286803][ T6504] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.376804][ T6506] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.857803][ T6553] tipc: Started in network mode [ 101.887487][ T6553] tipc: Node identity d24531d64bf3, cluster identity 4711 [ 101.917972][ T6553] tipc: Enabled bearer , priority 0 [ 101.995719][ T6561] syzkaller0: entered promiscuous mode [ 102.019179][ T6561] syzkaller0: entered allmulticast mode [ 102.026894][ T6561] tipc: Resetting bearer [ 102.518278][ T6391] tipc: Resetting bearer [ 102.572658][ T6550] tipc: Resetting bearer [ 102.684566][ T5894] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 102.701881][ T5894] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 102.925127][ T6604] sctp: [Deprecated]: syz.2.225 (pid 6604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.925127][ T6604] Use struct sctp_sack_info instead [ 103.010442][ T5894] tipc: Node number set to 2578854358 [ 104.187967][ T6550] tipc: Disabling bearer [ 104.500341][ T6632] FAULT_INJECTION: forcing a failure. [ 104.500341][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 104.549235][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.3.230 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 104.549265][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.549277][ T6632] Call Trace: [ 104.549284][ T6632] [ 104.549293][ T6632] dump_stack_lvl+0x241/0x360 [ 104.549323][ T6632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.549345][ T6632] ? __pfx__printk+0x10/0x10 [ 104.549366][ T6632] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 104.549395][ T6632] ? __pfx___might_resched+0x10/0x10 [ 104.549426][ T6632] should_fail_ex+0x40a/0x550 [ 104.549461][ T6632] should_failslab+0xac/0x100 [ 104.549500][ T6632] kmem_cache_alloc_node_noprof+0x77/0x380 [ 104.549527][ T6632] ? __alloc_skb+0x1c3/0x440 [ 104.549552][ T6632] __alloc_skb+0x1c3/0x440 [ 104.549596][ T6632] ? __pfx___alloc_skb+0x10/0x10 [ 104.549633][ T6632] ? netlink_autobind+0xd6/0x2f0 [ 104.549651][ T6632] ? netlink_autobind+0x2b0/0x2f0 [ 104.549673][ T6632] netlink_sendmsg+0x634/0xcb0 [ 104.549702][ T6632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.549742][ T6632] ? aa_sock_msg_perm+0x91/0x160 [ 104.549778][ T6632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.549795][ T6632] __sock_sendmsg+0x221/0x270 [ 104.549827][ T6632] ____sys_sendmsg+0x53a/0x860 [ 104.549859][ T6632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.549881][ T6632] ? __fget_files+0x2a/0x410 [ 104.549912][ T6632] ? __fget_files+0x2a/0x410 [ 104.549961][ T6632] __sys_sendmsg+0x269/0x350 [ 104.549990][ T6632] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.550026][ T6632] ? do_sys_openat2+0x17a/0x1d0 [ 104.550078][ T6632] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.550110][ T6632] ? do_syscall_64+0x100/0x230 [ 104.550143][ T6632] ? do_syscall_64+0xb6/0x230 [ 104.550174][ T6632] do_syscall_64+0xf3/0x230 [ 104.550205][ T6632] ? clear_bhb_loop+0x35/0x90 [ 104.550237][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.550263][ T6632] RIP: 0033:0x7fecda38d169 [ 104.550280][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.550296][ T6632] RSP: 002b:00007fecdb2a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.550316][ T6632] RAX: ffffffffffffffda RBX: 00007fecda5a5fa0 RCX: 00007fecda38d169 [ 104.550330][ T6632] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 104.550342][ T6632] RBP: 00007fecdb2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 104.550354][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.550365][ T6632] R13: 0000000000000000 R14: 00007fecda5a5fa0 R15: 00007fff9eab05d8 [ 104.550392][ T6632] [ 104.846033][ T6634] Bluetooth: MGMT ver 1.23 [ 104.862473][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.872190][ T6634] team0: Port device bond0 added [ 104.881256][ T6634] bridge0: port 3(team0) entered blocking state [ 104.887862][ T6634] bridge0: port 3(team0) entered disabled state [ 104.901294][ T6634] team0: entered allmulticast mode [ 104.906554][ T6634] team_slave_0: entered allmulticast mode [ 104.940600][ T6636] FAULT_INJECTION: forcing a failure. [ 104.940600][ T6636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.960770][ T6634] team_slave_1: entered allmulticast mode [ 104.966744][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.1.233 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 104.966783][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.966795][ T6636] Call Trace: [ 104.966803][ T6636] [ 104.966811][ T6636] dump_stack_lvl+0x241/0x360 [ 104.966842][ T6636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.966865][ T6636] ? __pfx__printk+0x10/0x10 [ 104.966887][ T6636] ? __pfx_lock_release+0x10/0x10 [ 104.966926][ T6636] should_fail_ex+0x40a/0x550 [ 104.966961][ T6636] _copy_from_user+0x2d/0xb0 [ 104.966991][ T6636] bpf_prog_test_run_xdp+0xe07/0x11e0 [ 104.967041][ T6636] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.967074][ T6636] ? __fget_files+0x2a/0x410 [ 104.967108][ T6636] ? __fget_files+0x2a/0x410 [ 104.967141][ T6636] ? fput+0x21b/0x290 [ 104.967168][ T6636] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.967209][ T6636] bpf_prog_test_run+0x2e4/0x360 [ 104.967244][ T6636] __sys_bpf+0x487/0x820 [ 104.967275][ T6636] ? __pfx___sys_bpf+0x10/0x10 [ 104.967316][ T6636] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.967350][ T6636] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.967382][ T6636] ? do_syscall_64+0x100/0x230 [ 104.967417][ T6636] __x64_sys_bpf+0x7c/0x90 [ 104.967444][ T6636] do_syscall_64+0xf3/0x230 [ 104.967473][ T6636] ? clear_bhb_loop+0x35/0x90 [ 104.967505][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.967532][ T6636] RIP: 0033:0x7fd7cb58d169 [ 104.967549][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.967565][ T6636] RSP: 002b:00007fd7cc4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.967586][ T6636] RAX: ffffffffffffffda RBX: 00007fd7cb7a5fa0 RCX: 00007fd7cb58d169 [ 104.967601][ T6636] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 104.967613][ T6636] RBP: 00007fd7cc4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 104.967625][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.967636][ T6636] R13: 0000000000000000 R14: 00007fd7cb7a5fa0 R15: 00007ffe94607ae8 [ 104.967665][ T6636] [ 105.029704][ T6634] bond0: entered allmulticast mode [ 105.190290][ T6634] bond_slave_0: entered allmulticast mode [ 105.196071][ T6634] bond_slave_1: entered allmulticast mode [ 105.219353][ T6634] team0: entered promiscuous mode [ 105.224482][ T6634] team_slave_0: entered promiscuous mode [ 105.230654][ T6634] team_slave_1: entered promiscuous mode [ 105.236465][ T6634] bond0: entered promiscuous mode [ 105.241576][ T6634] bond_slave_0: entered promiscuous mode [ 105.248244][ T6634] bond_slave_1: entered promiscuous mode [ 105.256179][ T6634] bridge0: port 3(team0) entered blocking state [ 105.262613][ T6634] bridge0: port 3(team0) entered forwarding state [ 105.376226][ T6649] bond0: entered promiscuous mode [ 105.382472][ T6649] bond_slave_0: entered promiscuous mode [ 105.388385][ T6649] bond_slave_1: entered promiscuous mode [ 105.402853][ T6649] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 105.441702][ T6649] bond0: left promiscuous mode [ 105.446615][ T6649] bond_slave_0: left promiscuous mode [ 105.460301][ T6649] bond_slave_1: left promiscuous mode [ 105.530580][ T6655] batadv0: entered promiscuous mode [ 105.536004][ T6655] vlan2: entered promiscuous mode [ 105.736832][ T6664] dccp_v6_rcv: dropped packet with invalid checksum [ 105.918608][ T6674] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 105.937834][ T6674] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 105.958118][ T6674] __nla_validate_parse: 29 callbacks suppressed [ 105.958138][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 105.989112][ T6678] xt_limit: Overflow, try lower: 262144/524288 [ 106.304619][ T6689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.405406][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 106.432349][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 107.023684][ T6719] vlan2: entered allmulticast mode [ 107.039539][ T6719] batadv0: entered allmulticast mode [ 107.110879][ T6713] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.253372][ T6713] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.377173][ T6713] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.418408][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 107.584251][ T6713] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.644250][ T6739] veth0_macvtap: left promiscuous mode [ 107.774031][ T6713] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.880883][ T6713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.933432][ T6753] bridge0: entered promiscuous mode [ 107.949495][ T6753] vlan2: entered promiscuous mode [ 108.018097][ T6713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.038390][ T6713] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.070364][ T6759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 108.266430][ T6764] netlink: 'syz.3.275': attribute type 5 has an invalid length. [ 108.301912][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 108.380023][ T6764] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 109.020776][ T6791] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.159736][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 109.168572][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 109.209143][ T6795] netlink: 'syz.3.285': attribute type 5 has an invalid length. [ 109.287359][ T6791] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.376773][ T6791] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.484417][ T6791] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.646285][ T6791] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.701897][ T6791] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.753407][ T6791] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.802917][ T6805] FAULT_INJECTION: forcing a failure. [ 109.802917][ T6805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.805283][ T6791] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.844147][ T6805] CPU: 0 UID: 0 PID: 6805 Comm: syz.2.290 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 109.844175][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.844187][ T6805] Call Trace: [ 109.844194][ T6805] [ 109.844202][ T6805] dump_stack_lvl+0x241/0x360 [ 109.844233][ T6805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.844255][ T6805] ? __pfx__printk+0x10/0x10 [ 109.844278][ T6805] ? __pfx_lock_release+0x10/0x10 [ 109.844318][ T6805] should_fail_ex+0x40a/0x550 [ 109.844354][ T6805] _copy_from_user+0x2d/0xb0 [ 109.844383][ T6805] bpf_prog_test_run_xdp+0xe07/0x11e0 [ 109.844436][ T6805] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 109.844469][ T6805] ? __fget_files+0x2a/0x410 [ 109.844502][ T6805] ? __fget_files+0x2a/0x410 [ 109.844536][ T6805] ? fput+0x21b/0x290 [ 109.844575][ T6805] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 109.844606][ T6805] bpf_prog_test_run+0x2e4/0x360 [ 109.844665][ T6805] __sys_bpf+0x487/0x820 [ 109.844696][ T6805] ? __pfx___sys_bpf+0x10/0x10 [ 109.844737][ T6805] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.844771][ T6805] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.844804][ T6805] ? do_syscall_64+0x100/0x230 [ 109.844839][ T6805] __x64_sys_bpf+0x7c/0x90 [ 109.844866][ T6805] do_syscall_64+0xf3/0x230 [ 109.844896][ T6805] ? clear_bhb_loop+0x35/0x90 [ 109.844928][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.844955][ T6805] RIP: 0033:0x7f1c1358d169 [ 109.844972][ T6805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.844988][ T6805] RSP: 002b:00007f1c1435c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.845009][ T6805] RAX: ffffffffffffffda RBX: 00007f1c137a5fa0 RCX: 00007f1c1358d169 [ 109.845023][ T6805] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 109.845035][ T6805] RBP: 00007f1c1435c090 R08: 0000000000000000 R09: 0000000000000000 [ 109.845047][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.845058][ T6805] R13: 0000000000000000 R14: 00007f1c137a5fa0 R15: 00007ffd1c07f8f8 [ 109.845087][ T6805] [ 110.322060][ T6814] CĂ: renamed from team_slave_0 (while UP) [ 110.413043][ T6814] netlink: 'syz.4.294': attribute type 3 has an invalid length. [ 110.447116][ T6814] netlink: 152 bytes leftover after parsing attributes in process `syz.4.294'. [ 110.463682][ T6814] A link change request failed with some changes committed already. Interface CĂ may have been left with an inconsistent configuration, please check. [ 110.518730][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.295'. [ 111.053554][ T6855] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.168915][ T6855] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.259429][ T6855] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.398605][ T6855] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.507689][ T6868] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.596914][ T6855] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.647509][ T6855] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.711085][ T6855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.744304][ T6878] __nla_validate_parse: 1 callbacks suppressed [ 111.744323][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 111.744704][ T6868] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.808474][ T6879] xt_TCPMSS: Only works on TCP SYN packets [ 111.938661][ T6855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.011150][ T6868] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.155552][ T6888] FAULT_INJECTION: forcing a failure. [ 112.155552][ T6888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.207549][ T6868] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.207934][ T6888] CPU: 0 UID: 0 PID: 6888 Comm: syz.1.313 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 112.207966][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.207978][ T6888] Call Trace: [ 112.207987][ T6888] [ 112.207996][ T6888] dump_stack_lvl+0x241/0x360 [ 112.208029][ T6888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.208055][ T6888] ? __pfx__printk+0x10/0x10 [ 112.208080][ T6888] ? __pfx_lock_release+0x10/0x10 [ 112.208123][ T6888] should_fail_ex+0x40a/0x550 [ 112.208174][ T6888] _copy_from_user+0x2d/0xb0 [ 112.208206][ T6888] copy_msghdr_from_user+0xae/0x680 [ 112.208241][ T6888] ? __pfx___might_resched+0x10/0x10 [ 112.208275][ T6888] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 112.208315][ T6888] ? do_recvmmsg+0x44e/0xab0 [ 112.208344][ T6888] ? __might_fault+0xaa/0x120 [ 112.208370][ T6888] do_recvmmsg+0x3bd/0xab0 [ 112.208411][ T6888] ? __pfx_do_recvmmsg+0x10/0x10 [ 112.208461][ T6888] ? ksys_write+0x22a/0x2b0 [ 112.208486][ T6888] ? __pfx_lock_release+0x10/0x10 [ 112.208527][ T6888] ? sb_end_write+0xe9/0x1c0 [ 112.208560][ T6888] ? vfs_write+0x7fa/0xd10 [ 112.208586][ T6888] ? __mutex_unlock_slowpath+0x227/0x800 [ 112.208630][ T6888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.208663][ T6888] ? __fget_files+0x2a/0x410 [ 112.208711][ T6888] __x64_sys_recvmmsg+0x199/0x250 [ 112.208743][ T6888] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 112.208774][ T6888] ? do_syscall_64+0x100/0x230 [ 112.208811][ T6888] ? do_syscall_64+0xb6/0x230 [ 112.208846][ T6888] do_syscall_64+0xf3/0x230 [ 112.208879][ T6888] ? clear_bhb_loop+0x35/0x90 [ 112.208914][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.208944][ T6888] RIP: 0033:0x7fd7cb58d169 [ 112.208963][ T6888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.208984][ T6888] RSP: 002b:00007fd7cc4b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 112.209008][ T6888] RAX: ffffffffffffffda RBX: 00007fd7cb7a5fa0 RCX: 00007fd7cb58d169 [ 112.209024][ T6888] RDX: 0000000000001800 RSI: 0000200000001dc0 RDI: 0000000000000004 [ 112.209038][ T6888] RBP: 00007fd7cc4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 112.209052][ T6888] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000002 [ 112.209064][ T6888] R13: 0000000000000000 R14: 00007fd7cb7a5fa0 R15: 00007ffe94607ae8 [ 112.209096][ T6888] [ 112.352883][ T6897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.317'. [ 112.779666][ T6909] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 112.806286][ T6909] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.324'. [ 112.843838][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.864023][ T6868] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.923214][ T6868] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.965540][ T6868] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.033989][ T6868] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.045534][ T6921] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 113.063711][ T6921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.328'. [ 113.078654][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 113.088942][ T6921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.328'. [ 113.158734][ T6919] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.243503][ T6925] x_tables: duplicate underflow at hook 3 [ 113.306467][ T6929] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 113.311013][ T6919] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.520928][ T6919] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.648225][ T6919] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.671997][ T6941] FAULT_INJECTION: forcing a failure. [ 113.671997][ T6941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.706347][ T6941] CPU: 0 UID: 0 PID: 6941 Comm: syz.2.337 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 113.706378][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.706390][ T6941] Call Trace: [ 113.706398][ T6941] [ 113.706406][ T6941] dump_stack_lvl+0x241/0x360 [ 113.706437][ T6941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.706459][ T6941] ? __pfx__printk+0x10/0x10 [ 113.706482][ T6941] ? __pfx_lock_release+0x10/0x10 [ 113.706521][ T6941] should_fail_ex+0x40a/0x550 [ 113.706557][ T6941] _copy_from_iter+0x1df/0x1c40 [ 113.706583][ T6941] ? __virt_addr_valid+0x183/0x530 [ 113.706604][ T6941] ? __pfx_lock_release+0x10/0x10 [ 113.706641][ T6941] ? __alloc_skb+0x28f/0x440 [ 113.706664][ T6941] ? __pfx__copy_from_iter+0x10/0x10 [ 113.706690][ T6941] ? __virt_addr_valid+0x183/0x530 [ 113.706708][ T6941] ? __virt_addr_valid+0x183/0x530 [ 113.706726][ T6941] ? __virt_addr_valid+0x45f/0x530 [ 113.706746][ T6941] ? __phys_addr_symbol+0x2f/0x70 [ 113.706764][ T6941] ? __check_object_size+0x47a/0x730 [ 113.706797][ T6941] netlink_sendmsg+0x742/0xcb0 [ 113.706829][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.706853][ T6941] ? aa_sock_msg_perm+0x91/0x160 [ 113.706889][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.706906][ T6941] __sock_sendmsg+0x221/0x270 [ 113.706940][ T6941] ____sys_sendmsg+0x53a/0x860 [ 113.706973][ T6941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.707015][ T6941] ? __fget_files+0x2a/0x410 [ 113.707049][ T6941] ? __fget_files+0x2a/0x410 [ 113.707089][ T6941] __sys_sendmsg+0x269/0x350 [ 113.707131][ T6941] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.707168][ T6941] ? do_sys_openat2+0x17a/0x1d0 [ 113.707224][ T6941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.707281][ T6941] ? do_syscall_64+0x100/0x230 [ 113.707316][ T6941] ? do_syscall_64+0xb6/0x230 [ 113.707350][ T6941] do_syscall_64+0xf3/0x230 [ 113.707401][ T6941] ? clear_bhb_loop+0x35/0x90 [ 113.707447][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.707474][ T6941] RIP: 0033:0x7f1c1358d169 [ 113.707491][ T6941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.707525][ T6941] RSP: 002b:00007f1c1435c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.707547][ T6941] RAX: ffffffffffffffda RBX: 00007f1c137a5fa0 RCX: 00007f1c1358d169 [ 113.707561][ T6941] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 113.707574][ T6941] RBP: 00007f1c1435c090 R08: 0000000000000000 R09: 0000000000000000 [ 113.707587][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.707598][ T6941] R13: 0000000000000000 R14: 00007f1c137a5fa0 R15: 00007ffd1c07f8f8 [ 113.707628][ T6941] [ 114.183792][ T6949] bridge_slave_0: left allmulticast mode [ 114.198926][ T6949] bridge_slave_0: left promiscuous mode [ 114.214863][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.246474][ T6955] FAULT_INJECTION: forcing a failure. [ 114.246474][ T6955] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.261585][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.0.342 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 114.261615][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.261627][ T6955] Call Trace: [ 114.261635][ T6955] [ 114.261643][ T6955] dump_stack_lvl+0x241/0x360 [ 114.261674][ T6955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.261697][ T6955] ? __pfx__printk+0x10/0x10 [ 114.261721][ T6955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.261759][ T6955] should_fail_ex+0x40a/0x550 [ 114.261795][ T6955] prepare_alloc_pages+0x1da/0x5b0 [ 114.261827][ T6955] __alloc_frozen_pages_noprof+0x16f/0x710 [ 114.261854][ T6955] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.261877][ T6955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.261921][ T6955] ? lockdep_hardirqs_on+0x99/0x150 [ 114.261954][ T6955] alloc_pages_mpol+0x311/0x660 [ 114.261989][ T6955] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.262029][ T6955] alloc_pages_noprof+0x121/0x190 [ 114.262067][ T6955] bpf_prog_test_run_xdp+0xcc0/0x11e0 [ 114.262119][ T6955] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.262153][ T6955] ? __fget_files+0x2a/0x410 [ 114.262186][ T6955] ? __fget_files+0x2a/0x410 [ 114.262226][ T6955] ? fput+0x21b/0x290 [ 114.262255][ T6955] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.262289][ T6955] bpf_prog_test_run+0x2e4/0x360 [ 114.262325][ T6955] __sys_bpf+0x487/0x820 [ 114.262356][ T6955] ? __pfx___sys_bpf+0x10/0x10 [ 114.262398][ T6955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.262433][ T6955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.262467][ T6955] ? do_syscall_64+0x100/0x230 [ 114.262502][ T6955] __x64_sys_bpf+0x7c/0x90 [ 114.262536][ T6955] do_syscall_64+0xf3/0x230 [ 114.262567][ T6955] ? clear_bhb_loop+0x35/0x90 [ 114.262601][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.262629][ T6955] RIP: 0033:0x7efc9878d169 [ 114.262647][ T6955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.262663][ T6955] RSP: 002b:00007efc99535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.262686][ T6955] RAX: ffffffffffffffda RBX: 00007efc989a5fa0 RCX: 00007efc9878d169 [ 114.262700][ T6955] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 114.262713][ T6955] RBP: 00007efc99535090 R08: 0000000000000000 R09: 0000000000000000 [ 114.262725][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.262737][ T6955] R13: 0000000000000000 R14: 00007efc989a5fa0 R15: 00007fff57e1b898 [ 114.262767][ T6955] [ 114.540191][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 114.558253][ T6949] bond0: (slave bond_slave_0): Releasing backup interface [ 114.577694][ T6949] bond0: (slave bond_slave_1): Releasing backup interface [ 114.611107][ T6949] team0: Port device team_slave_0 removed [ 114.652922][ T6949] team0: Port device team_slave_1 removed [ 114.664246][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.672545][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.687197][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.694998][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.711679][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 114.751317][ T6958] vlan2: entered allmulticast mode [ 114.756627][ T6958] bond0: entered allmulticast mode [ 114.763534][ T6958] bridge0: port 1(vlan2) entered blocking state [ 114.770877][ T6958] bridge0: port 1(vlan2) entered disabled state [ 114.778632][ T6958] vlan2: entered promiscuous mode [ 114.785128][ T6958] bond0: entered promiscuous mode [ 114.983217][ T6919] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.017437][ T6919] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.042300][ T6971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.347'. [ 115.048375][ T6919] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.075447][ T26] IPVS: starting estimator thread 0... [ 115.094055][ T6975] dummy0: entered promiscuous mode [ 115.099433][ T6975] vlan2: entered promiscuous mode [ 115.158787][ T6919] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.189155][ T6977] IPVS: using max 18 ests per chain, 43200 per kthread [ 115.311843][ T6984] sctp: [Deprecated]: syz.1.351 (pid 6984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.311843][ T6984] Use struct sctp_sack_info instead [ 115.591441][ T6994] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 115.606358][ T6993] bridge0: entered promiscuous mode [ 115.636750][ T6993] vlan2: entered promiscuous mode [ 115.687973][ T6998] vlan3: entered allmulticast mode [ 115.949240][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 116.098102][ T7023] vlan2: entered promiscuous mode [ 116.607620][ T7050] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.840925][ T7060] vlan3: entered promiscuous mode [ 116.847306][ T7060] dummy0: entered promiscuous mode [ 116.858532][ T7063] __nla_validate_parse: 5 callbacks suppressed [ 116.858550][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 116.860995][ T7060] batman_adv: batadv0: Adding interface: vlan3 [ 116.892641][ T7060] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.918588][ T7060] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 116.962083][ T7067] netlink: 'syz.2.381': attribute type 12 has an invalid length. [ 116.970388][ T7067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.381'. [ 117.280270][ T7073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.452753][ T7080] FAULT_INJECTION: forcing a failure. [ 117.452753][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 117.480022][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.2.387 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 117.480053][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.480065][ T7080] Call Trace: [ 117.480072][ T7080] [ 117.480080][ T7080] dump_stack_lvl+0x241/0x360 [ 117.480113][ T7080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.480137][ T7080] ? __pfx__printk+0x10/0x10 [ 117.480173][ T7080] should_fail_ex+0x40a/0x550 [ 117.480211][ T7080] should_failslab+0xac/0x100 [ 117.480241][ T7080] ? skb_clone+0x20c/0x390 [ 117.480267][ T7080] kmem_cache_alloc_noprof+0x70/0x380 [ 117.480303][ T7080] skb_clone+0x20c/0x390 [ 117.480334][ T7080] __netlink_deliver_tap+0x3c4/0x7f0 [ 117.480381][ T7080] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.480413][ T7080] netlink_deliver_tap+0x19d/0x1b0 [ 117.480449][ T7080] netlink_unicast+0x7c4/0x990 [ 117.480489][ T7080] ? __pfx_netlink_unicast+0x10/0x10 [ 117.480517][ T7080] ? __virt_addr_valid+0x45f/0x530 [ 117.480539][ T7080] ? __phys_addr_symbol+0x2f/0x70 [ 117.480557][ T7080] ? __check_object_size+0x47a/0x730 [ 117.480592][ T7080] netlink_sendmsg+0x8de/0xcb0 [ 117.480626][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.480651][ T7080] ? aa_sock_msg_perm+0x91/0x160 [ 117.480692][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.480718][ T7080] __sock_sendmsg+0x221/0x270 [ 117.480754][ T7080] ____sys_sendmsg+0x53a/0x860 [ 117.480791][ T7080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.480815][ T7080] ? __fget_files+0x2a/0x410 [ 117.480849][ T7080] ? __fget_files+0x2a/0x410 [ 117.480889][ T7080] __sys_sendmsg+0x269/0x350 [ 117.480922][ T7080] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.480963][ T7080] ? do_sys_openat2+0x17a/0x1d0 [ 117.481023][ T7080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.481058][ T7080] ? do_syscall_64+0x100/0x230 [ 117.481093][ T7080] ? do_syscall_64+0xb6/0x230 [ 117.481127][ T7080] do_syscall_64+0xf3/0x230 [ 117.481158][ T7080] ? clear_bhb_loop+0x35/0x90 [ 117.481193][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.481221][ T7080] RIP: 0033:0x7f1c1358d169 [ 117.481240][ T7080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.481256][ T7080] RSP: 002b:00007f1c1435c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.481278][ T7080] RAX: ffffffffffffffda RBX: 00007f1c137a5fa0 RCX: 00007f1c1358d169 [ 117.481293][ T7080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 117.481306][ T7080] RBP: 00007f1c1435c090 R08: 0000000000000000 R09: 0000000000000000 [ 117.481318][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.481329][ T7080] R13: 0000000000000000 R14: 00007f1c137a5fa0 R15: 00007ffd1c07f8f8 [ 117.481361][ T7080] [ 117.481443][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.857204][ T7081] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.917120][ T7091] netlink: 256 bytes leftover after parsing attributes in process `syz.2.389'. [ 117.929309][ T7091] netlink: 136 bytes leftover after parsing attributes in process `syz.2.389'. [ 117.943628][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 117.962583][ T7081] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.007386][ T7088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.388'. [ 118.181247][ T7081] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.233198][ T7081] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.262439][ T7095] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.326721][ T7095] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.384195][ T7081] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.407748][ T7081] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.427480][ T7095] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.446338][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.457556][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.467923][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.478674][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.489179][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.500108][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.510092][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.521654][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.532045][ T7102] batadv_slave_0: entered promiscuous mode [ 118.538824][ T7102] batadv_slave_0: left promiscuous mode [ 118.554883][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.568485][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.579510][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.590975][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.601143][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.611911][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.622918][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.633618][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.643977][ T7103] batadv_slave_0: entered promiscuous mode [ 118.652688][ T7103] batadv_slave_0: left promiscuous mode [ 118.670003][ T7081] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.694816][ T7095] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.714455][ T7081] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.930007][ T7095] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.079240][ T7095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.118298][ T7095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.184707][ T7095] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.343921][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 119.363435][ T7123] 8021q: VLANs not supported on caif0 [ 120.000422][ T7139] netlink: 376 bytes leftover after parsing attributes in process `syz.1.406'. [ 120.023680][ T7137] netlink: 376 bytes leftover after parsing attributes in process `syz.1.406'. [ 120.026175][ T7143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.408'. [ 120.641423][ T7161] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 120.789375][ T7164] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 120.961446][ T7166] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.171101][ T7166] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.222416][ T7184] xt_l2tp: v2 doesn't support IP mode [ 121.337769][ T7166] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.601088][ T7166] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.663128][ T7195] batadv0: entered promiscuous mode [ 121.668779][ T7195] vlan4: entered promiscuous mode [ 121.817851][ T7206] FAULT_INJECTION: forcing a failure. [ 121.817851][ T7206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.843295][ T7207] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 121.877352][ T7166] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.898672][ T7206] CPU: 1 UID: 0 PID: 7206 Comm: syz.0.428 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 121.898703][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.898716][ T7206] Call Trace: [ 121.898723][ T7206] [ 121.898732][ T7206] dump_stack_lvl+0x241/0x360 [ 121.898763][ T7206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.898787][ T7206] ? __pfx__printk+0x10/0x10 [ 121.898820][ T7206] should_fail_ex+0x40a/0x550 [ 121.898857][ T7206] _copy_to_user+0x31/0xb0 [ 121.898888][ T7206] bpf_test_finish+0x212/0x890 [ 121.898935][ T7206] ? __pfx_bpf_test_finish+0x10/0x10 [ 121.898973][ T7206] ? rep_movs_alternative+0x4a/0x70 [ 121.899001][ T7206] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 121.899053][ T7206] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 121.899086][ T7206] ? __fget_files+0x2a/0x410 [ 121.899120][ T7206] ? __fget_files+0x2a/0x410 [ 121.899155][ T7206] ? fput+0x21b/0x290 [ 121.899184][ T7206] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 121.899219][ T7206] bpf_prog_test_run+0x2e4/0x360 [ 121.899263][ T7206] __sys_bpf+0x487/0x820 [ 121.899294][ T7206] ? __pfx___sys_bpf+0x10/0x10 [ 121.899336][ T7206] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.899372][ T7206] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.899405][ T7206] ? do_syscall_64+0x100/0x230 [ 121.899440][ T7206] __x64_sys_bpf+0x7c/0x90 [ 121.899468][ T7206] do_syscall_64+0xf3/0x230 [ 121.899498][ T7206] ? clear_bhb_loop+0x35/0x90 [ 121.899532][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.899561][ T7206] RIP: 0033:0x7efc9878d169 [ 121.899578][ T7206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.899595][ T7206] RSP: 002b:00007efc99535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.899617][ T7206] RAX: ffffffffffffffda RBX: 00007efc989a5fa0 RCX: 00007efc9878d169 [ 121.899632][ T7206] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 121.899646][ T7206] RBP: 00007efc99535090 R08: 0000000000000000 R09: 0000000000000000 [ 121.899658][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.899670][ T7206] R13: 0000000000000000 R14: 00007efc989a5fa0 R15: 00007fff57e1b898 [ 121.899701][ T7206] [ 121.921773][ T7166] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.336485][ T7166] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.413698][ T7166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.820237][ T7242] __nla_validate_parse: 7 callbacks suppressed [ 122.820258][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.436'. [ 122.982791][ T7250] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 123.022963][ T7250] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 123.050883][ T7250] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 123.076457][ T7250] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.165005][ T7259] dccp_invalid_packet: P.Data Offset(172) too large [ 123.167862][ T2948] bridge0: port 1(vlan2) entered blocking state [ 123.178039][ T2948] bridge0: port 1(vlan2) entered forwarding state [ 123.413642][ T7266] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.566499][ T7266] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.625846][ T6398] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.698378][ T7266] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.971588][ T6398] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.020340][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 124.120915][ T7266] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.192666][ T6398] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.361948][ T6398] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.492090][ T7266] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.536939][ T7266] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.627472][ T7266] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.643136][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.655520][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.665213][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.684940][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.699753][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.709705][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.800991][ T7266] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.896349][ T6398] team0: left allmulticast mode [ 124.913472][ T6398] CĂ: left allmulticast mode [ 124.918760][ T6398] team_slave_1: left allmulticast mode [ 124.929042][ T6398] bond0: left allmulticast mode [ 124.933939][ T6398] bond_slave_0: left allmulticast mode [ 124.959478][ T6398] bond_slave_1: left allmulticast mode [ 124.966421][ T6398] team0: left promiscuous mode [ 124.977986][ T6398] CĂ: left promiscuous mode [ 124.991793][ T6398] team_slave_1: left promiscuous mode [ 124.999420][ T6398] bond0: left promiscuous mode [ 125.009301][ T6398] bond_slave_0: left promiscuous mode [ 125.019430][ T6398] bond_slave_1: left promiscuous mode [ 125.032051][ T6398] bridge0: port 3(team0) entered disabled state [ 125.055145][ T6398] bridge_slave_1: left allmulticast mode [ 125.069198][ T6398] bridge_slave_1: left promiscuous mode [ 125.075161][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.097100][ T6398] bridge_slave_0: left allmulticast mode [ 125.104029][ T6398] bridge_slave_0: left promiscuous mode [ 125.119193][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.423013][ T7324] netlink: 'syz.3.466': attribute type 3 has an invalid length. [ 125.577331][ T7328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.468'. [ 125.862007][ T6398] team0: Port device bond0 removed [ 125.876781][ T6398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.895615][ T6398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.907770][ T6398] bond0 (unregistering): Released all slaves [ 125.944448][ T7332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.073409][ T7334] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 126.075249][ T7332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.184700][ T7336] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 126.215352][ T7332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.273143][ T7339] syz.1.471: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.330573][ T7339] CPU: 1 UID: 0 PID: 7339 Comm: syz.1.471 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 126.330608][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.330621][ T7339] Call Trace: [ 126.330628][ T7339] [ 126.330637][ T7339] dump_stack_lvl+0x241/0x360 [ 126.330671][ T7339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.330697][ T7339] ? __pfx__printk+0x10/0x10 [ 126.330733][ T7339] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 126.330762][ T7339] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 126.330795][ T7339] warn_alloc+0x278/0x410 [ 126.330819][ T7339] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 126.330842][ T7339] ? __pfx_warn_alloc+0x10/0x10 [ 126.330864][ T7339] ? kasan_save_track+0x3f/0x80 [ 126.330885][ T7339] ? __kasan_kmalloc+0x98/0xb0 [ 126.330915][ T7339] ? xsk_setsockopt+0x4aa/0x810 [ 126.330936][ T7339] ? do_sock_setsockopt+0x3af/0x720 [ 126.330959][ T7339] ? __x64_sys_setsockopt+0x1ee/0x280 [ 126.330981][ T7339] ? do_syscall_64+0xf3/0x230 [ 126.331010][ T7339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.331047][ T7339] __vmalloc_node_range_noprof+0x126/0x1380 [ 126.331098][ T7339] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.331124][ T7339] ? __kasan_kmalloc+0x98/0xb0 [ 126.331154][ T7339] vmalloc_user_noprof+0x74/0x80 [ 126.331175][ T7339] ? xskq_create+0xb6/0x170 [ 126.331196][ T7339] xskq_create+0xb6/0x170 [ 126.331221][ T7339] xsk_init_queue+0xa1/0x100 [ 126.331246][ T7339] xsk_setsockopt+0x4aa/0x810 [ 126.331269][ T7339] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.331290][ T7339] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.331324][ T7339] ? aa_sock_opt_perm+0x79/0x120 [ 126.331362][ T7339] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.331382][ T7339] do_sock_setsockopt+0x3af/0x720 [ 126.331413][ T7339] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 126.331444][ T7339] ? __fget_files+0x395/0x410 [ 126.331474][ T7339] ? __fget_files+0x2a/0x410 [ 126.331513][ T7339] __x64_sys_setsockopt+0x1ee/0x280 [ 126.331545][ T7339] do_syscall_64+0xf3/0x230 [ 126.331576][ T7339] ? clear_bhb_loop+0x35/0x90 [ 126.331608][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.331637][ T7339] RIP: 0033:0x7fd7cb58d169 [ 126.331656][ T7339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.331672][ T7339] RSP: 002b:00007fd7cc4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.331695][ T7339] RAX: ffffffffffffffda RBX: 00007fd7cb7a5fa0 RCX: 00007fd7cb58d169 [ 126.331720][ T7339] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 126.331733][ T7339] RBP: 00007fd7cb60e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 126.331746][ T7339] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.331758][ T7339] R13: 0000000000000000 R14: 00007fd7cb7a5fa0 R15: 00007ffe94607ae8 [ 126.331789][ T7339] [ 126.401731][ T7339] Mem-Info: [ 126.672589][ T7339] active_anon:6882 inactive_anon:0 isolated_anon:0 [ 126.672589][ T7339] active_file:1595 inactive_file:38315 isolated_file:0 [ 126.672589][ T7339] unevictable:768 dirty:410 writeback:0 [ 126.672589][ T7339] slab_reclaimable:11216 slab_unreclaimable:97749 [ 126.672589][ T7339] mapped:32564 shmem:4294 pagetables:751 [ 126.672589][ T7339] sec_pagetables:0 bounce:0 [ 126.672589][ T7339] kernel_misc_reclaimable:0 [ 126.672589][ T7339] free:1336740 free_pcp:3286 free_cma:0 [ 126.731040][ T7332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.770122][ T5854] Bluetooth: hci1: command tx timeout [ 126.793397][ T7339] Node 0 active_anon:27428kB inactive_anon:0kB active_file:6380kB inactive_file:153188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130356kB dirty:1636kB writeback:0kB shmem:15640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11872kB pagetables:3204kB sec_pagetables:0kB all_unreclaimable? no [ 126.854838][ T7339] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 126.885417][ T7339] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.971446][ T7339] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 126.985973][ T7339] Node 0 DMA32 free:1432364kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:27488kB inactive_anon:0kB active_file:6380kB inactive_file:152864kB unevictable:1536kB writepending:1636kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:2340kB local_pcp:668kB free_cma:0kB [ 127.020460][ T7339] lowmem_reserve[]: 0 0 0 0 0 [ 127.025275][ T7339] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.052312][ T7339] lowmem_reserve[]: 0 0 0 0 0 [ 127.057090][ T7339] Node 1 Normal free:3910568kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.087771][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 127.097441][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 127.106344][ T7339] lowmem_reserve[]: 0 0 0 0 0 [ 127.132421][ T7339] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.150560][ T7339] Node 0 DMA32: 117*4kB (ME) 155*8kB (UME) 158*16kB (ME) 116*32kB (UME) 55*64kB (ME) 6*128kB (UM) 1*256kB (E) 13*512kB (UME) 22*1024kB (UME) 13*2048kB (UME) 333*4096kB (UM) = 1432268kB [ 127.172669][ T7339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.184840][ T7339] Node 1 Normal: 162*4kB (UME) 34*8kB (UME) 35*16kB (UME) 165*32kB (UME) 79*64kB (UME) 25*128kB (UME) 15*256kB (UME) 7*512kB (UME) 5*1024kB (UM) 4*2048kB (UE) 946*4096kB (M) = 3910568kB [ 127.203924][ T7339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.213726][ T7339] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.223811][ T7339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.233674][ T7339] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.243350][ T7339] 41344 total pagecache pages [ 127.248165][ T7339] 0 pages in swap cache [ 127.252639][ T7339] Free swap = 124996kB [ 127.256980][ T7339] Total swap = 124996kB [ 127.261324][ T7339] 2097051 pages RAM [ 127.265276][ T7339] 0 pages HighMem/MovableOnly [ 127.270177][ T7339] 427906 pages reserved [ 127.274546][ T7339] 0 pages cma reserved [ 127.314100][ T6398] hsr_slave_0: left promiscuous mode [ 127.341380][ T6398] hsr_slave_1: left promiscuous mode [ 127.347410][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.368744][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.390084][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.407796][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.449947][ T6398] veth1_macvtap: left promiscuous mode [ 127.455916][ T6398] veth0_macvtap: left promiscuous mode [ 127.462418][ T6398] veth1_vlan: left promiscuous mode [ 127.468300][ T6398] veth0_vlan: left promiscuous mode [ 128.134530][ T6398] team0 (unregistering): Port device team_slave_1 removed [ 128.173967][ T6398] team0 (unregistering): Port device CĂ removed [ 128.517974][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 128.562504][ T7375] bridge0: entered promiscuous mode [ 128.582624][ T7375] bridge0: port 2(macsec1) entered blocking state [ 128.592172][ T7375] bridge0: port 2(macsec1) entered disabled state [ 128.604908][ T7375] macsec1: entered allmulticast mode [ 128.613568][ T7375] bridge0: entered allmulticast mode [ 128.626805][ T7375] macsec1: left allmulticast mode [ 128.633440][ T7375] bridge0: left allmulticast mode [ 128.647141][ T7375] bridge0: left promiscuous mode [ 128.713276][ T7332] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.738170][ T7332] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.770267][ T7332] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.785089][ T7332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.849568][ T5854] Bluetooth: hci1: command tx timeout [ 128.949394][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.956955][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.965455][ T7296] bridge_slave_0: entered allmulticast mode [ 128.973162][ T7296] bridge_slave_0: entered promiscuous mode [ 128.981457][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.988755][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.988791][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.489'. [ 128.996244][ T7296] bridge_slave_1: entered allmulticast mode [ 129.012716][ T7296] bridge_slave_1: entered promiscuous mode [ 129.019252][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 129.037272][ T7395] netlink: 'syz.1.489': attribute type 7 has an invalid length. [ 129.060131][ T7395] netlink: 'syz.1.489': attribute type 8 has an invalid length. [ 129.089889][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 129.205405][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.236988][ T7395] syz_tun: entered promiscuous mode [ 129.263885][ T7395] erspan0: entered promiscuous mode [ 129.288798][ T7395] gretap0: entered promiscuous mode [ 129.311116][ T7395] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 129.342694][ T7395] Cannot create hsr debugfs directory [ 129.384907][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.454045][ T7413] xt_bpf: check failed: parse error [ 129.554399][ T7296] team0: Port device team_slave_0 added [ 129.594381][ T7296] team0: Port device team_slave_1 added [ 129.753623][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.770622][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.810195][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.827417][ T7427] vlan0: entered promiscuous mode [ 129.869708][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.876823][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.908674][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.988388][ T7296] hsr_slave_0: entered promiscuous mode [ 130.004067][ T7296] hsr_slave_1: entered promiscuous mode [ 130.021901][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.039448][ T7296] Cannot create hsr debugfs directory [ 130.082830][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 130.159452][ T7441] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 130.397976][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'. [ 130.737273][ T7296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.757323][ T7296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.794305][ T7296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.821866][ T7296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.930431][ T5854] Bluetooth: hci1: command tx timeout [ 130.995456][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.021139][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.040948][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.048148][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.114076][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.121282][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.139227][ T7457] netlink: 72 bytes leftover after parsing attributes in process `syz.3.518'. [ 131.261551][ T7461] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 131.563052][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.599297][ T7474] : renamed from bond_slave_0 (while UP) [ 131.613297][ T7475] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 131.635867][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.525'. [ 131.750918][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 132.172303][ T7296] veth0_vlan: entered promiscuous mode [ 132.192251][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 132.199395][ T7296] veth1_vlan: entered promiscuous mode [ 132.216297][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 132.232026][ T7500] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 132.264826][ T7296] veth0_macvtap: entered promiscuous mode [ 132.282615][ T7296] veth1_macvtap: entered promiscuous mode [ 132.290751][ T7500] nbd: socks must be embedded in a SOCK_ITEM attr [ 132.307770][ T7500] block nbd0: shutting down sockets [ 132.367515][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.378702][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.388687][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.399864][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.434003][ T7507] netlink: 'syz.1.534': attribute type 8 has an invalid length. [ 132.439896][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.472903][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.510967][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.573571][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.593031][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.610722][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.628413][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.646809][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.670728][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.691072][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.727304][ T7296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.747105][ T7296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.766898][ T7296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.786206][ T7296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.986393][ T6380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.009237][ T5854] Bluetooth: hci1: command tx timeout [ 133.016242][ T6380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.102212][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.110830][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.114054][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.118693][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.283859][ T7501] x_tables: duplicate entry at hook 2 [ 133.585836][ T7538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.611384][ T7540] Bluetooth: MGMT ver 1.23 [ 134.240913][ T7562] __nla_validate_parse: 8 callbacks suppressed [ 134.240933][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'. [ 134.598659][ T7573] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.670379][ T7573] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.832789][ T7573] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.939682][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.952591][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.961028][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.969300][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.977684][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.985121][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.038611][ T7573] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.260058][ T7573] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.338726][ T7573] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.429845][ T7573] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.455807][ T7573] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.642787][ T7609] sctp: [Deprecated]: syz.0.571 (pid 7609) Use of int in maxseg socket option. [ 135.642787][ T7609] Use struct sctp_assoc_value instead [ 135.717950][ T7582] chnl_net:caif_netlink_parms(): no params data found [ 135.796199][ T7609] sctp: [Deprecated]: syz.0.571 (pid 7609) Use of int in max_burst socket option. [ 135.796199][ T7609] Use struct sctp_assoc_value instead [ 136.090106][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.097280][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.131486][ T7582] bridge_slave_0: entered allmulticast mode [ 136.158126][ T7582] bridge_slave_0: entered promiscuous mode [ 136.178223][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.185885][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.194044][ T7582] bridge_slave_1: entered allmulticast mode [ 136.202761][ T7582] bridge_slave_1: entered promiscuous mode [ 136.234415][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 136.351110][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.367910][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.484595][ T7582] team0: Port device team_slave_0 added [ 136.509776][ T7582] team0: Port device team_slave_1 added [ 136.631825][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.638837][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.691922][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.705192][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.712392][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.741512][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.799604][ T7653] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.836655][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 136.910534][ T7582] hsr_slave_0: entered promiscuous mode [ 136.925547][ T7582] hsr_slave_1: entered promiscuous mode [ 136.942911][ T7582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.959918][ T7582] Cannot create hsr debugfs directory [ 136.994435][ T7653] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.089656][ T5854] Bluetooth: hci1: command tx timeout [ 137.148640][ T7653] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.252045][ T7653] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.388661][ T7659] netlink: 'syz.2.590': attribute type 13 has an invalid length. [ 137.401387][ T7582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.472325][ T7582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.671804][ T7582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.805848][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 137.815744][ T7582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.836904][ T7672] netlink: 'syz.0.593': attribute type 7 has an invalid length. [ 137.845696][ T7672] netlink: 'syz.0.593': attribute type 8 has an invalid length. [ 137.853671][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 137.867649][ T7672] syz_tun: entered promiscuous mode [ 137.875162][ T7672] erspan0: entered promiscuous mode [ 137.886462][ T7672] gretap0: entered promiscuous mode [ 137.893484][ T7672] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 137.902794][ T7672] Cannot create hsr debugfs directory [ 138.103654][ T7582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.142208][ T7582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.169393][ T7582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.200649][ T7582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.248876][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 138.401200][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.451231][ T7582] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.484856][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.492046][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.531052][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.538216][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.604025][ T7582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.629873][ T7582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.698943][ T7653] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.744882][ T7653] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.800226][ T7703] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.873113][ T7653] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.907952][ T7703] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.941156][ T7653] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.972042][ T7703] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.081757][ T7703] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.169476][ T5854] Bluetooth: hci1: command tx timeout [ 139.181037][ T7582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.307107][ T7703] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.376164][ T7703] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.421239][ T7703] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.491160][ T7703] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.792200][ T7582] veth0_vlan: entered promiscuous mode [ 139.825655][ T7582] veth1_vlan: entered promiscuous mode [ 139.875274][ T7582] veth0_macvtap: entered promiscuous mode [ 139.903646][ T7582] veth1_macvtap: entered promiscuous mode [ 139.929394][ T7745] FAULT_INJECTION: forcing a failure. [ 139.929394][ T7745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.945890][ T7745] CPU: 1 UID: 0 PID: 7745 Comm: syz.0.621 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 139.945919][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.945931][ T7745] Call Trace: [ 139.945939][ T7745] [ 139.945947][ T7745] dump_stack_lvl+0x241/0x360 [ 139.945978][ T7745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.946001][ T7745] ? __pfx__printk+0x10/0x10 [ 139.946024][ T7745] ? __pfx_lock_release+0x10/0x10 [ 139.946064][ T7745] should_fail_ex+0x40a/0x550 [ 139.946100][ T7745] _copy_from_user+0x2d/0xb0 [ 139.946131][ T7745] copy_msghdr_from_user+0xae/0x680 [ 139.946163][ T7745] ? __pfx___might_resched+0x10/0x10 [ 139.946194][ T7745] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 139.946231][ T7745] ? do_recvmmsg+0x44e/0xab0 [ 139.946257][ T7745] ? __might_fault+0xaa/0x120 [ 139.946283][ T7745] do_recvmmsg+0x3bd/0xab0 [ 139.946319][ T7745] ? __pfx_do_recvmmsg+0x10/0x10 [ 139.946366][ T7745] ? ksys_write+0x22a/0x2b0 [ 139.946389][ T7745] ? __pfx_lock_release+0x10/0x10 [ 139.946426][ T7745] ? sb_end_write+0xe9/0x1c0 [ 139.946456][ T7745] ? vfs_write+0x7fa/0xd10 [ 139.946480][ T7745] ? __mutex_unlock_slowpath+0x227/0x800 [ 139.946520][ T7745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.946549][ T7745] ? __fget_files+0x2a/0x410 [ 139.946604][ T7745] __x64_sys_recvmmsg+0x199/0x250 [ 139.946634][ T7745] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 139.946681][ T7745] ? do_syscall_64+0x100/0x230 [ 139.946715][ T7745] ? do_syscall_64+0xb6/0x230 [ 139.946750][ T7745] do_syscall_64+0xf3/0x230 [ 139.946781][ T7745] ? clear_bhb_loop+0x35/0x90 [ 139.946826][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.946854][ T7745] RIP: 0033:0x7efc9878d169 [ 139.946872][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.946889][ T7745] RSP: 002b:00007efc99535038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 139.946910][ T7745] RAX: ffffffffffffffda RBX: 00007efc989a5fa0 RCX: 00007efc9878d169 [ 139.946925][ T7745] RDX: 0000000000001800 RSI: 0000200000001dc0 RDI: 0000000000000004 [ 139.946937][ T7745] RBP: 00007efc99535090 R08: 0000000000000000 R09: 0000000000000000 [ 139.946950][ T7745] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000002 [ 139.946962][ T7745] R13: 0000000000000000 R14: 00007efc989a5fa0 R15: 00007fff57e1b898 [ 139.946991][ T7745] [ 140.193579][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.204178][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.214774][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.225358][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.235715][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.246234][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.256206][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.266757][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.278036][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.311263][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.323212][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.333889][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.344626][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.354564][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.365798][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.376867][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.387635][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.398838][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.430058][ T7582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.455677][ T7582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.482374][ T7582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.503176][ T7582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.595746][ T7756] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.866506][ T7756] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.962386][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.983132][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.082334][ T7756] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.132183][ T7777] vlan3: entered promiscuous mode [ 141.178556][ T6380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.187104][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 141.197798][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 141.197844][ T6380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.216053][ T7773] xt_bpf: check failed: parse error [ 141.230859][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 141.249602][ T5854] Bluetooth: hci1: command tx timeout [ 141.310643][ T7778] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 141.318549][ T7778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 141.354811][ T7756] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.401126][ T7778] ================================================================== [ 141.409265][ T7778] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 141.418159][ T7778] Read of size 8 at addr ffff88807a0ed4a8 by task syz.0.630/7778 [ 141.425908][ T7778] [ 141.428255][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.0.630 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 141.428284][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.428297][ T7778] Call Trace: [ 141.428305][ T7778] [ 141.428314][ T7778] dump_stack_lvl+0x241/0x360 [ 141.428353][ T7778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.428376][ T7778] ? __pfx__printk+0x10/0x10 [ 141.428397][ T7778] ? _printk+0xd5/0x120 [ 141.428417][ T7778] ? __virt_addr_valid+0x183/0x530 [ 141.428437][ T7778] ? __virt_addr_valid+0x183/0x530 [ 141.428459][ T7778] print_report+0x16e/0x5b0 [ 141.428486][ T7778] ? __virt_addr_valid+0x183/0x530 [ 141.428506][ T7778] ? __virt_addr_valid+0x183/0x530 [ 141.428524][ T7778] ? __virt_addr_valid+0x45f/0x530 [ 141.428543][ T7778] ? __phys_addr+0xba/0x170 [ 141.428563][ T7778] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 141.428588][ T7778] kasan_report+0x143/0x180 [ 141.428616][ T7778] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 141.428645][ T7778] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 141.428669][ T7778] ? udp_destroy_sock+0x2fa/0x340 [ 141.428702][ T7778] ? __pfx_udp_destroy_sock+0x10/0x10 [ 141.428733][ T7778] sk_common_release+0x71/0x2e0 [ 141.428753][ T7778] inet_release+0x17d/0x200 [ 141.428781][ T7778] sock_release+0x82/0x150 [ 141.428811][ T7778] geneve_sock_release+0x3fa/0x500 [ 141.428843][ T7778] geneve_stop+0x1ae/0x1e0 [ 141.428870][ T7778] ? __pfx_geneve_stop+0x10/0x10 [ 141.428898][ T7778] __dev_close_many+0x3a6/0x700 [ 141.428933][ T7778] ? __pfx___dev_close_many+0x10/0x10 [ 141.428967][ T7778] ? dev_set_rx_mode+0x23c/0x2e0 [ 141.428991][ T7778] __dev_change_flags+0x30e/0x6f0 [ 141.429016][ T7778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.429049][ T7778] ? __pfx___dev_change_flags+0x10/0x10 [ 141.429076][ T7778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.429110][ T7778] ? __pfx_validate_linkmsg+0x10/0x10 [ 141.429140][ T7778] netif_change_flags+0x8b/0x1a0 [ 141.429165][ T7778] do_setlink+0xd94/0x41d0 [ 141.429195][ T7778] ? mark_lock+0x9a/0x360 [ 141.429226][ T7778] ? __pfx_do_setlink+0x10/0x10 [ 141.429246][ T7778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.429279][ T7778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.429312][ T7778] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 141.429339][ T7778] ? lockdep_hardirqs_on+0x99/0x150 [ 141.429367][ T7778] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 141.429393][ T7778] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 141.429422][ T7778] ? rcu_is_watching+0x15/0xb0 [ 141.429446][ T7778] ? __mutex_lock+0xba3/0x1010 [ 141.429477][ T7778] ? __mutex_lock+0x602/0x1010 [ 141.429510][ T7778] ? rtnl_setlink+0x6b0/0xbe0 [ 141.429529][ T7778] ? __pfx___mutex_lock+0x10/0x10 [ 141.429563][ T7778] ? ns_capable+0x8a/0xf0 [ 141.429590][ T7778] rtnl_setlink+0x818/0xbe0 [ 141.429609][ T7778] ? __pfx_validate_chain+0x10/0x10 [ 141.429633][ T7778] ? __pfx_rtnl_setlink+0x10/0x10 [ 141.429659][ T7778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.429714][ T7778] ? rcu_read_unlock+0x87/0xa0 [ 141.429742][ T7778] ? __pfx_lock_release+0x10/0x10 [ 141.429780][ T7778] ? __pfx_rtnl_setlink+0x10/0x10 [ 141.429800][ T7778] rtnetlink_rcv_msg+0x791/0xcf0 [ 141.429831][ T7778] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 141.429872][ T7778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.429908][ T7778] ? ref_tracker_free+0x643/0x7e0 [ 141.429933][ T7778] netlink_rcv_skb+0x206/0x480 [ 141.429965][ T7778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.429998][ T7778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.430040][ T7778] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.430074][ T7778] netlink_unicast+0x7f6/0x990 [ 141.430107][ T7778] ? __pfx_netlink_unicast+0x10/0x10 [ 141.430135][ T7778] ? __virt_addr_valid+0x45f/0x530 [ 141.430155][ T7778] ? __phys_addr_symbol+0x2f/0x70 [ 141.430174][ T7778] ? __check_object_size+0x47a/0x730 [ 141.430216][ T7778] netlink_sendmsg+0x8de/0xcb0 [ 141.430243][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.430265][ T7778] ? aa_sock_msg_perm+0x91/0x160 [ 141.430302][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.430321][ T7778] __sock_sendmsg+0x221/0x270 [ 141.430354][ T7778] ____sys_sendmsg+0x53a/0x860 [ 141.430384][ T7778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.430408][ T7778] ? __fget_files+0x2a/0x410 [ 141.430440][ T7778] ? __fget_files+0x2a/0x410 [ 141.430475][ T7778] __sys_sendmsg+0x269/0x350 [ 141.430499][ T7778] ? __pfx_futex_wake+0x10/0x10 [ 141.430532][ T7778] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.430579][ T7778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.430612][ T7778] ? do_syscall_64+0x100/0x230 [ 141.430645][ T7778] ? do_syscall_64+0xb6/0x230 [ 141.430677][ T7778] do_syscall_64+0xf3/0x230 [ 141.430707][ T7778] ? clear_bhb_loop+0x35/0x90 [ 141.430739][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.430768][ T7778] RIP: 0033:0x7efc9878d169 [ 141.430786][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.430804][ T7778] RSP: 002b:00007efc99514038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.430827][ T7778] RAX: ffffffffffffffda RBX: 00007efc989a6080 RCX: 00007efc9878d169 [ 141.430843][ T7778] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000e [ 141.430857][ T7778] RBP: 00007efc9880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.430870][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.430882][ T7778] R13: 0000000000000000 R14: 00007efc989a6080 R15: 00007fff57e1b898 [ 141.430905][ T7778] [ 141.430913][ T7778] [ 141.966109][ T7778] Allocated by task 7532: [ 141.970437][ T7778] kasan_save_track+0x3f/0x80 [ 141.975124][ T7778] __kasan_slab_alloc+0x66/0x80 [ 141.979991][ T7778] kmem_cache_alloc_noprof+0x1d9/0x380 [ 141.985474][ T7778] sk_prot_alloc+0x58/0x210 [ 141.989981][ T7778] sk_alloc+0x3e/0x370 [ 141.994052][ T7778] inet_create+0x648/0xea0 [ 141.998472][ T7778] __sock_create+0x4c0/0xa30 [ 142.003071][ T7778] __sys_socket+0x150/0x3c0 [ 142.007575][ T7778] __x64_sys_socket+0x7a/0x90 [ 142.012269][ T7778] do_syscall_64+0xf3/0x230 [ 142.016779][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.022686][ T7778] [ 142.025008][ T7778] Freed by task 7531: [ 142.028984][ T7778] kasan_save_track+0x3f/0x80 [ 142.033675][ T7778] kasan_save_free_info+0x40/0x50 [ 142.038708][ T7778] __kasan_slab_free+0x59/0x70 [ 142.043478][ T7778] kmem_cache_free+0x195/0x410 [ 142.048250][ T7778] __sk_destruct+0x4fd/0x690 [ 142.052850][ T7778] inet_release+0x17d/0x200 [ 142.057367][ T7778] sock_close+0xbc/0x240 [ 142.061620][ T7778] __fput+0x3e9/0x9f0 [ 142.065619][ T7778] task_work_run+0x24f/0x310 [ 142.070213][ T7778] syscall_exit_to_user_mode+0x13f/0x340 [ 142.075857][ T7778] do_syscall_64+0x100/0x230 [ 142.080463][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.086367][ T7778] [ 142.088690][ T7778] The buggy address belongs to the object at ffff88807a0ecd80 [ 142.088690][ T7778] which belongs to the cache UDP of size 1856 [ 142.102196][ T7778] The buggy address is located 1832 bytes inside of [ 142.102196][ T7778] freed 1856-byte region [ffff88807a0ecd80, ffff88807a0ed4c0) [ 142.116181][ T7778] [ 142.118504][ T7778] The buggy address belongs to the physical page: [ 142.124920][ T7778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a0e8 [ 142.133684][ T7778] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.142184][ T7778] memcg:ffff88802846cf01 [ 142.146429][ T7778] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 142.153977][ T7778] page_type: f5(slab) [ 142.157979][ T7778] raw: 00fff00000000040 ffff88801b7d3280 dead000000000122 0000000000000000 [ 142.166566][ T7778] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88802846cf01 [ 142.175158][ T7778] head: 00fff00000000040 ffff88801b7d3280 dead000000000122 0000000000000000 [ 142.183848][ T7778] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88802846cf01 [ 142.192525][ T7778] head: 00fff00000000003 ffffea0001e83a01 ffffffffffffffff 0000000000000000 [ 142.201204][ T7778] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 142.209872][ T7778] page dumped because: kasan: bad access detected [ 142.216291][ T7778] page_owner tracks the page as allocated [ 142.222012][ T7778] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5845, tgid 5845 (syz-executor), ts 82197809151, free_ts 82121161125 [ 142.243381][ T7778] post_alloc_hook+0x1f4/0x240 [ 142.248176][ T7778] get_page_from_freelist+0x365c/0x37a0 [ 142.253725][ T7778] __alloc_frozen_pages_noprof+0x292/0x710 [ 142.259537][ T7778] alloc_pages_mpol+0x311/0x660 [ 142.264399][ T7778] allocate_slab+0x8f/0x3a0 [ 142.268906][ T7778] ___slab_alloc+0xc27/0x14a0 [ 142.273597][ T7778] __slab_alloc+0x58/0xa0 [ 142.277942][ T7778] kmem_cache_alloc_noprof+0x268/0x380 [ 142.283417][ T7778] sk_prot_alloc+0x58/0x210 [ 142.287929][ T7778] sk_alloc+0x3e/0x370 [ 142.292003][ T7778] inet_create+0x648/0xea0 [ 142.296432][ T7778] __sock_create+0x4c0/0xa30 [ 142.301037][ T7778] __sys_socket+0x150/0x3c0 [ 142.305543][ T7778] __x64_sys_socket+0x7a/0x90 [ 142.310222][ T7778] do_syscall_64+0xf3/0x230 [ 142.314735][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.320639][ T7778] page last free pid 5851 tgid 5851 stack trace: [ 142.327048][ T7778] free_frozen_pages+0xe0d/0x10e0 [ 142.332074][ T7778] __slab_free+0x2c2/0x380 [ 142.336501][ T7778] qlist_free_all+0x9a/0x140 [ 142.341126][ T7778] kasan_quarantine_reduce+0x14f/0x170 [ 142.346610][ T7778] __kasan_slab_alloc+0x23/0x80 [ 142.351482][ T7778] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 142.357401][ T7778] __alloc_skb+0x1c3/0x440 [ 142.361826][ T7778] mld_newpack+0x17c/0xc70 [ 142.366256][ T7778] add_grec+0x1492/0x19a0 [ 142.370598][ T7778] mld_ifc_work+0x691/0xd90 [ 142.375113][ T7778] process_scheduled_works+0xabe/0x18e0 [ 142.380672][ T7778] worker_thread+0x870/0xd30 [ 142.385273][ T7778] kthread+0x7a9/0x920 [ 142.389351][ T7778] ret_from_fork+0x4b/0x80 [ 142.393779][ T7778] ret_from_fork_asm+0x1a/0x30 [ 142.398553][ T7778] [ 142.400969][ T7778] Memory state around the buggy address: [ 142.406613][ T7778] ffff88807a0ed380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.414695][ T7778] ffff88807a0ed400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.422768][ T7778] >ffff88807a0ed480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 142.430834][ T7778] ^ [ 142.436213][ T7778] ffff88807a0ed500: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 142.444285][ T7778] ffff88807a0ed580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.452350][ T7778] ================================================================== [ 142.464379][ T7778] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.471615][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.0.630 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 142.482208][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.492270][ T7778] Call Trace: [ 142.495550][ T7778] [ 142.498484][ T7778] dump_stack_lvl+0x241/0x360 [ 142.503181][ T7778] ? mark_lock+0x9a/0x360 [ 142.507520][ T7778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.512727][ T7778] ? __pfx__printk+0x10/0x10 [ 142.517322][ T7778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.523325][ T7778] ? vscnprintf+0x5d/0x90 [ 142.527667][ T7778] panic+0x349/0x880 [ 142.531571][ T7778] ? check_panic_on_warn+0x21/0xb0 [ 142.536700][ T7778] ? __pfx_panic+0x10/0x10 [ 142.541129][ T7778] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 142.547032][ T7778] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.553021][ T7778] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.559536][ T7778] check_panic_on_warn+0x86/0xb0 [ 142.564488][ T7778] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 142.570569][ T7778] end_report+0x77/0x160 [ 142.574911][ T7778] kasan_report+0x154/0x180 [ 142.579459][ T7778] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 142.585558][ T7778] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 142.591463][ T7778] ? udp_destroy_sock+0x2fa/0x340 [ 142.596597][ T7778] ? __pfx_udp_destroy_sock+0x10/0x10 [ 142.602010][ T7778] sk_common_release+0x71/0x2e0 [ 142.606869][ T7778] inet_release+0x17d/0x200 [ 142.611399][ T7778] sock_release+0x82/0x150 [ 142.615828][ T7778] geneve_sock_release+0x3fa/0x500 [ 142.620956][ T7778] geneve_stop+0x1ae/0x1e0 [ 142.625383][ T7778] ? __pfx_geneve_stop+0x10/0x10 [ 142.630338][ T7778] __dev_close_many+0x3a6/0x700 [ 142.635212][ T7778] ? __pfx___dev_close_many+0x10/0x10 [ 142.640608][ T7778] ? dev_set_rx_mode+0x23c/0x2e0 [ 142.645556][ T7778] __dev_change_flags+0x30e/0x6f0 [ 142.650593][ T7778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.656679][ T7778] ? __pfx___dev_change_flags+0x10/0x10 [ 142.662253][ T7778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.668611][ T7778] ? __pfx_validate_linkmsg+0x10/0x10 [ 142.674008][ T7778] netif_change_flags+0x8b/0x1a0 [ 142.678969][ T7778] do_setlink+0xd94/0x41d0 [ 142.683423][ T7778] ? mark_lock+0x9a/0x360 [ 142.687783][ T7778] ? __pfx_do_setlink+0x10/0x10 [ 142.692657][ T7778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.698664][ T7778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.705018][ T7778] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 142.711022][ T7778] ? lockdep_hardirqs_on+0x99/0x150 [ 142.716239][ T7778] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.722152][ T7778] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.728492][ T7778] ? rcu_is_watching+0x15/0xb0 [ 142.733267][ T7778] ? __mutex_lock+0xba3/0x1010 [ 142.738044][ T7778] ? __mutex_lock+0x602/0x1010 [ 142.742824][ T7778] ? rtnl_setlink+0x6b0/0xbe0 [ 142.747506][ T7778] ? __pfx___mutex_lock+0x10/0x10 [ 142.752548][ T7778] ? ns_capable+0x8a/0xf0 [ 142.756890][ T7778] rtnl_setlink+0x818/0xbe0 [ 142.761408][ T7778] ? __pfx_validate_chain+0x10/0x10 [ 142.766617][ T7778] ? __pfx_rtnl_setlink+0x10/0x10 [ 142.771658][ T7778] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.777674][ T7778] ? rcu_read_unlock+0x87/0xa0 [ 142.782454][ T7778] ? __pfx_lock_release+0x10/0x10 [ 142.787506][ T7778] ? __pfx_rtnl_setlink+0x10/0x10 [ 142.792543][ T7778] rtnetlink_rcv_msg+0x791/0xcf0 [ 142.797497][ T7778] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 142.802628][ T7778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.808114][ T7778] ? ref_tracker_free+0x643/0x7e0 [ 142.813153][ T7778] netlink_rcv_skb+0x206/0x480 [ 142.817933][ T7778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.823417][ T7778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.828726][ T7778] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.833941][ T7778] netlink_unicast+0x7f6/0x990 [ 142.838724][ T7778] ? __pfx_netlink_unicast+0x10/0x10 [ 142.844020][ T7778] ? __virt_addr_valid+0x45f/0x530 [ 142.849146][ T7778] ? __phys_addr_symbol+0x2f/0x70 [ 142.854192][ T7778] ? __check_object_size+0x47a/0x730 [ 142.859491][ T7778] netlink_sendmsg+0x8de/0xcb0 [ 142.864274][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.869566][ T7778] ? aa_sock_msg_perm+0x91/0x160 [ 142.874540][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.879830][ T7778] __sock_sendmsg+0x221/0x270 [ 142.884524][ T7778] ____sys_sendmsg+0x53a/0x860 [ 142.889326][ T7778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.894621][ T7778] ? __fget_files+0x2a/0x410 [ 142.899324][ T7778] ? __fget_files+0x2a/0x410 [ 142.903945][ T7778] __sys_sendmsg+0x269/0x350 [ 142.908544][ T7778] ? __pfx_futex_wake+0x10/0x10 [ 142.913417][ T7778] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.918556][ T7778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.924899][ T7778] ? do_syscall_64+0x100/0x230 [ 142.929684][ T7778] ? do_syscall_64+0xb6/0x230 [ 142.934382][ T7778] do_syscall_64+0xf3/0x230 [ 142.938922][ T7778] ? clear_bhb_loop+0x35/0x90 [ 142.943639][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.949563][ T7778] RIP: 0033:0x7efc9878d169 [ 142.954013][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.973654][ T7778] RSP: 002b:00007efc99514038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.982095][ T7778] RAX: ffffffffffffffda RBX: 00007efc989a6080 RCX: 00007efc9878d169 [ 142.990104][ T7778] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000e [ 142.998092][ T7778] RBP: 00007efc9880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.006093][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.014094][ T7778] R13: 0000000000000000 R14: 00007efc989a6080 R15: 00007fff57e1b898 [ 143.022081][ T7778] [ 143.025406][ T7778] Kernel Offset: disabled [ 143.029735][ T7778] Rebooting in 86400 seconds..