last executing test programs: 5.372925554s ago: executing program 0 (id=748): r0 = socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000c000000000000000010000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) unshare(0x2040400) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r2, 0x4028}, {r4, 0x2000}], 0x2, &(0x7f0000000000)={0x0, 0x3938700}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x810, 0x510, 0x350, 0x350, 0x0, 0x188, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_vlan\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @empty, [], [], [], 0x1404}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @HL={0x28}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xff, 0xff, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010102, [0x0, 0x0, 0xff], @ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@loopback, [0x0, 0xff, 0xffffff00, 0xff], 0x52, 0x7f, 0x1d, 0x4e21, 0x4e22, 0x4e21, 0x4e21, 0x88, 0x80}, 0x82, 0x2444}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x8000}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback, 0x0, 0x32}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private1, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) 3.923827306s ago: executing program 0 (id=756): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'macvtap0\x00', {0x5}, 0xc}) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000080)=0x3, 0x4) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="cccfc2cd6df2fb75fdd30e7bdcae697de84e63138a90929e8d01d1f357bc34bc65b2206af4c658d2f653259506b3f593fe07e7d477bb34fc6bbddbb285c5b8fbd142d53e251ed0cc4cb7477b25d778eea7ff225d82ccb1c13202de48dc38ec43618d7fc2ba3ea5adb8f760040b57d2737f33a09ba872718942dc69f631c078e543ae77a2e41d84c3edd085ba4d1145b81927f2f85710c76ff25415e2514d957ecf25daf9e34a5171afe7f27adb7aeecd06cd966e952aa020fb290856b7e5326e27ad0b478129", 0xc6}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="4117ee67324f5535c399474313e77bdaa73edcbb432a80e13ee0e2a93b4138576aadb927c82c5260ff80d7b7e9e2e3c23c3a811deb6cb4ef99b55ff50ec9304f7451c223c4b466694e3afbc40026b366bfc1e8152ee91e632cc085fbb677fbb97b1b88383eb7380277db388aa8cc00c4eb4e55eb7aa8ff5fe8f531fe81c487851032efe109c768a72e4e02b98194b13a97fc97fd06cb4bc227b10fc4166475a410fd82c1f3ef1e817f330995b94932b206f0a4b52a517fe4", 0xb8}, {&(0x7f00000002c0)="7868460a04200e06aa689805b0d1854e57f5276d52bff99f377e174465a07a5bc9fb511cc3fd1835cdd627b5467d175a49bd1148a404b859e6c4ca10b6a4359103842eb1202262cdaac2d27fd41afbee447b7ca055f5afa350268c078ea58b5fe33073f7b357cbcd9dbac1ee4935e8fbf0ce206685d1af280186f33aa3098768361568522a293e7299368a4926dbd02b74a9", 0x92}, {&(0x7f0000000380)="a32a9d9e", 0x4}, {&(0x7f00000003c0)="f099b4db567536823cefd62a75f7f98a08b58aaa99d1f21244e07b62cdf92e3b0b86f4165089a66f67d55637365f3e9432fc716fc9d589adaa71b6f8bcb1cc95d59a29c4008c8f108ee90079804b69ded653b94f9cc5e757cd6045b9e87313591247d705ffe8dede3965fb83a2bd1226f7a0958afd3643f88fc9d90ad7ed3dd72bcfa2529a0e3da2932937e84636a174c731513c8eccd999f8fbe95b975a56ea6f8523c413401d1653fcd72bd91a6465b82815bfd4e0ed24e2e09a471159397563f29ebedc150136ee663a", 0xcb}], 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000700)={&(0x7f0000000540), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x79}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x39, 0xf}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x16) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000740)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7fff, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000007c0)={0x0, 0x5}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000800)=0x6) r5 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000840), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x521, 0x3, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x13, 0x400, 0xffff852b, 0x81, 0x4880, r6, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000009c0)={r5}) setsockopt$inet6_udp_int(r8, 0x11, 0x65, &(0x7f0000000a00)=0x9, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000a40)=@ccm_128={{0x304}, "0bd2f7b238e7e684", "19c9264d9042a3f71bf176b0c3b51744", "0359bee8", "e195596a0ed5c9e6"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000a80)=[@mss={0x2, 0x7}], 0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r7) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r9, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, @in={0x2, 0x4e22, @private=0xa010102}], 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000c80)={{0x5e, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x2, 'lc\x00', 0x1, 0xb, 0xc}, {@private=0xa010101, 0x4e20, 0x2, 0x5, 0x0, 0x800}}, 0x44) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000d00)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000d40)='freezer.state\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x84, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40004) 3.551354651s ago: executing program 0 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000ed93b0aa14e87616d84ba9653f1bbd8f94ef3fb9de4d1c0f1433c56e704080a44281e6d11cf0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xf2ff, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0xc0000000, 0x3, 0x6, {0xa, 0x2, 0x0, 0xfffe, 0xfff9, 0x7ff}, {0x1, 0x1, 0x7, 0xd53c, 0xc000, 0x4}, 0xa6c}}, @TCA_POLICE_PEAKRATE={0x2a2, 0x3, [0x8, 0x80000001, 0x8, 0x8001, 0x401, 0x3, 0xfffffffd, 0x2, 0xfffffff7, 0x8, 0x39a, 0x7, 0x0, 0xffff, 0x7, 0x7990e5b, 0x1, 0x45, 0x0, 0x7, 0x2, 0x8, 0x4, 0xd2, 0xb, 0x8, 0x6, 0x10, 0x6, 0x49, 0x7fffffff, 0x9, 0xa4ee, 0xae6, 0x6, 0xb, 0xb, 0x8, 0x8, 0x4, 0x5, 0xd2, 0x7, 0x0, 0x101, 0x6, 0x3, 0x6, 0x8, 0x5, 0x8, 0x4, 0x700, 0x98, 0x7, 0xe, 0xfff, 0x3, 0x1, 0x0, 0x7f, 0x9, 0x6, 0x7fff, 0x6, 0xe59, 0xd2, 0x5, 0x4, 0xfffffff9, 0x2, 0x4da9, 0x6, 0x80, 0x0, 0x2, 0x8, 0x7, 0x10, 0xfffff350, 0x4, 0xb, 0x7, 0x9, 0xfffffca2, 0x9, 0x2, 0x40, 0xffff, 0x6, 0x2, 0xbdd, 0x80000000, 0x292, 0x9, 0x0, 0x5, 0x40, 0x7cf, 0xfff, 0xc81b, 0x7fff, 0x6, 0x0, 0x57b, 0x10001, 0x9, 0xf, 0x3c83, 0x6, 0x7, 0xe, 0x6, 0x6, 0x0, 0xffffffff, 0x5, 0x11f7800, 0x5, 0x6, 0xff, 0x8, 0x200, 0x8e2, 0x9e, 0x7, 0x6, 0x7, 0x5, 0x27a, 0x10000, 0xfff, 0x3, 0xffffff80, 0x4, 0x80, 0x9, 0x800, 0x5, 0x4, 0x4, 0x4, 0x8, 0x5, 0x200, 0x7028, 0x4, 0x7, 0x298, 0x100, 0x5, 0x8001, 0x10, 0x1, 0xd4f, 0x816, 0x7, 0xe, 0x1, 0x1, 0x4, 0x8, 0x2e9610a9, 0x3, 0xd8, 0x80, 0x5, 0x9, 0x80000003, 0x1, 0x9, 0xa0, 0x9, 0x6, 0x1180, 0x1000, 0x3, 0x9, 0x5, 0xd6a, 0x2, 0x2, 0x8000, 0x2, 0x5, 0xe, 0x4a20e965, 0x0, 0x5, 0x2, 0x1, 0xb4, 0x98, 0x6, 0x40, 0x0, 0x7, 0x8, 0x72df, 0x9, 0x9, 0x8, 0x7, 0x7ff, 0x7, 0x9, 0x4, 0x9, 0xe8, 0xffffffff, 0x200, 0x8001, 0xfffffff9, 0x9, 0x31, 0xffff, 0x1000, 0x1, 0x747, 0x681c3fd2, 0x6, 0x10000, 0x2, 0x4, 0xffff, 0x7, 0xffff, 0x7, 0x8, 0x401, 0x36, 0x8, 0xd, 0x7ff, 0x436, 0x2, 0x7, 0x0, 0x9, 0x5b1, 0xfffffff8, 0x5b, 0x9, 0x7, 0x848, 0x7f, 0x4, 0x7fffffff, 0x5, 0x5, 0x1, 0x0, 0x0, 0x5, 0x5862, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x401, 0x6, 0x0, 0x0, 0x5, 0x2, 0x7ff, 0x7ff, 0x3, 0x4, 0x2, 0x153, 0x6, 0x6, 0xffff, 0x6, 0x5, 0x6, 0xcf13, 0x5, 0x8ef, 0x2, 0x80000001, 0x1, 0xfffffff7, 0x2, 0x4, 0x0, 0x7ff, 0x80000000, 0xffffffff, 0x1, 0xfff, 0xf, 0x7, 0x0, 0x4, 0x81, 0x6, 0x3, 0x80, 0x31d42533, 0x800, 0x0, 0xe2a, 0x9, 0x2000000, 0x7, 0x9, 0xb819, 0x6, 0x4, 0x3, 0x9, 0x7, 0xb84, 0x7, 0x3ff, 0x2, 0x0, 0xbfb, 0xd, 0x1, 0x5, 0x2, 0x40, 0x2, 0xf28, 0xb0, 0x6, 0x4, 0xdaf, 0x0, 0x4, 0x1bf, 0xb, 0x7, 0x1000, 0x8, 0x5, 0x0, 0x0, 0x800, 0x401, 0x0, 0x1000200, 0x8000, 0x0, 0xdee, 0x8695, 0x0, 0xf01, 0x1, 0x10001, 0xb, 0x7f, 0x9, 0x1, 0xfffffffd, 0x9, 0x7fff, 0xa93, 0x2, 0x0, 0x2, 0x40, 0x5, 0x0, 0x3, 0x76e, 0xd, 0x4, 0x1ff, 0x6, 0x9, 0x4, 0x4, 0x0, 0x5, 0x8, 0x8, 0x853, 0x80000000, 0x8, 0xbc, 0x8000, 0x3d8, 0x8, 0xfff, 0x200, 0x0, 0x61, 0xfffffeff, 0x4, 0x73294eaf, 0x0, 0x9, 0x80000001, 0xb319, 0x9, 0x8, 0x4077d5b8, 0x2, 0x3, 0x7, 0x2, 0x4, 0x3, 0x5491, 0x2, 0x7, 0xe, 0x2, 0x6, 0x5f3a, 0x5f24, 0x9, 0x4, 0x5, 0x9, 0x401, 0x3, 0x8, 0x80, 0x2, 0x1710dc0f, 0xffff, 0xb236, 0x100, 0xbff9, 0xfffffffe, 0x101, 0x9, 0x7fffffff, 0xffffff04, 0x7, 0xa93, 0x8, 0xd8b2, 0x1a2, 0x4, 0xaf93, 0xfff, 0x80, 0x3, 0x0, 0x0, 0x401, 0xfffffffe, 0x8, 0x9, 0x9, 0x2, 0xffff, 0x9, 0x5, 0xfffffffd, 0x4, 0x7, 0x0, 0x4, 0x2, 0x7, 0x8, 0xdbb, 0x9, 0x400, 0x6, 0x4, 0x3, 0x3, 0x9, 0x10001, 0x4, 0x65, 0x5, 0x2, 0x80000000, 0x6, 0x3, 0x4, 0xc8, 0x6, 0x9, 0x0, 0x2000000, 0x10001, 0x1, 0x7, 0x6, 0x72e, 0x3, 0x8, 0x8, 0x63, 0x4, 0x8, 0x0, 0x6, 0x7, 0x5, 0x80, 0x6, 0x4, 0x9, 0x4, 0x101, 0x6, 0x8, 0x1000, 0x5d8, 0x3, 0x8, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) (async) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r11, {0xd, 0x9}, {0x6}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb, 0xc}}]}, 0x3c}}, 0x4000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0xb, 0x1ff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x7, 0x3}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x11c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x11}, 0x400c0a4) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r14}, 0xc) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 3.388269547s ago: executing program 0 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x3, 0x8, {{0x1c, 0x4, 0x3, 0x19, 0x70, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x7, 0x8c, [@remote]}, @generic={0x88, 0x4, "30bc"}, @end, @ssrr={0x89, 0xf, 0xea, [@rand_addr=0x64010102, @rand_addr=0x64010100, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x24, 0x34, 0x3, 0x0, [{@rand_addr=0x64010102}, {@rand_addr=0x64010102, 0x8ee4}, {@multicast2, 0x1}, {@multicast2}]}, @ssrr={0x89, 0x7, 0xa6, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x9, [{@local, 0x10}, {@local, 0xffffffff}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff3, 0xe}, {0xfff2, 0xd}, {0x2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x80040}, 0x40005) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback, 0xf}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x800000008ec0, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r5, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r6}, 0x10) close(r7) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x69}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r8 = getpid() r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r9, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) 3.253986638s ago: executing program 3 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000006608ffffffff0000180020000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef", 0x11) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0x1}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xe, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000b080)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x48}}, 0x20040054) r8 = socket(0x1, 0x4, 0x81) write(r8, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0xfffffffffffff001) 2.890674632s ago: executing program 3 (id=764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.88801759s ago: executing program 4 (id=765): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1288, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x3c}}, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1416, 0xe50814127a83d959}, 0x10}}, 0x0) 2.755646899s ago: executing program 4 (id=766): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x400000001300, 0x400000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) listen(r0, 0x6) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x10) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c4) socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x0, 0x1}}, 0xe8) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0xa0}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0xfffffffffffffffc}}, {{@in=@multicast2, 0x2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40000, 0x0, 0x0, 0x0, 0x8, 0x4, 0x4}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 2.671544295s ago: executing program 1 (id=767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}], 0x1, 0x40) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}], 0x1, 0x40) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) (async) 2.486843727s ago: executing program 3 (id=768): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f0000009880)=[{0x0}, {0x0}, {&(0x7f0000009700)="fe", 0x1}], 0x3}}], 0x1, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xff, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0xb, @private0, 0x6}, @in6={0xa, 0x4e23, 0x8, @remote, 0x1}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x3}], 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0xf79ee000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008020"], 0x26}, 0x1, 0x0, 0x0, 0xa1}, 0x0) unshare(0x68060200) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r7, &(0x7f0000000380)=@tipc, &(0x7f0000000240)=0x80, 0x800) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000020000000000000000000000000000000001000000000000d4cd6ec7aa9020cdd4a3a2e7822b3db56e44cbcd426cf3df0941ad9f97a41c3a83e847811c286ad27ebac85319fbc8f43c96ba733259bd9f4383e0bcd80f0cf6d35a571c45f92d818a940f64b19bbb10bdb1908a26fa68588212f6a88ca21bdd09ebf5228fce10d9e10f760c5f1f12449afa79dd43f8660000000000000006ed6819f7d491f0c523deafd39fd5e9bf3c38bd00"/218], 0x48) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x4) 2.47982183s ago: executing program 2 (id=769): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0", 0x3a}], 0x1) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (fail_nth: 10) 2.468352769s ago: executing program 1 (id=770): r0 = epoll_create(0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x40000000}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)="abdb667358", 0x5}], 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0xfffffe7d) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf252800000008000200", @ANYRES32=r6, @ANYBLOB="05002e000600000005002b0001"], 0x2c}}, 0x200080a0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x58, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xca}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 2.16585168s ago: executing program 2 (id=771): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="d1a486ba", 0x4, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x11008000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/156, 0x9c}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xffff}], 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x5, 0x38, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00003c0012800b00010067726574617000002c00028006008e854e20000006000e000000000006000e0001000000080014003a0f0000080007006401010108000a00", @ANYRES32=r8, @ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r3, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x82, &(0x7f0000000200), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r2, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) 2.078818614s ago: executing program 1 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 1.899473103s ago: executing program 1 (id=773): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x20}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x20}, 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x20040810) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x20040810) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000480)="10208100", 0x40, 0x8051, &(0x7f0000000400)={0x11, 0x8100, r6}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @private}, &(0x7f0000000400)=0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x1c, r14, 0x3196aee33d918dfd, 0x0, 0x20000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x1c, r14, 0x3196aee33d918dfd, 0x0, 0x20000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @multicast2}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1ac, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x385f000) sendto$inet6(r0, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.560663378s ago: executing program 1 (id=774): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000003c0)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x40000001, 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x7}, {{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/240, 0xf0}], 0x3, &(0x7f00000004c0)=""/157, 0x9d}, 0x2}], 0x2, 0x45833af92e4b38fe, 0x0) 1.459103971s ago: executing program 4 (id=775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "3571a6", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x2c}]}}}}}}}, 0x0) 1.394368535s ago: executing program 4 (id=776): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c79205e02f1561b0010095448e9f7024b45fb2006c9117fe2a42fcd2ce27800968"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe2}, {0xc, 0x4}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) epoll_create1(0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @local}, &(0x7f00000005c0)=0xc) sendmsg$nl_route(r7, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getaddr={0x30, 0x16, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x8, 0x95, 0xfd, r8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x7e, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x36, 0x2, 0x7fff}}}}]}, 0x44}}, 0x4004) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{0x9, 0x2, 0x7, 0x7b7f}, {0x1, 0x2, 0x7, 0xfffffffa}, {0x4, 0x3, 0x1, 0xacb}, {0x9c, 0x5, 0x4, 0x2}, {0x0, 0x1, 0x6, 0xa8f}, {0xffff, 0x6, 0x88, 0x1}, {0x7, 0x98, 0xd, 0x7ff}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=@newtfilter={0x26cc, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x269c, 0x2, [@TCA_ROUTE4_POLICE={0x458, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x1, 0x9, 0x7fffffff, 0x3, 0x0, 0x80000000, 0x3, 0x8, 0x4, 0x26fd, 0x7, 0x5, 0x0, 0x0, 0x5, 0x3, 0x10001, 0x8f, 0x1000, 0x2, 0x3, 0x10, 0x3, 0xc, 0x4, 0x50, 0x7fffffff, 0x28000000, 0x9, 0x0, 0xff, 0x3, 0x9, 0x8, 0x4, 0x3, 0x4936, 0x1, 0x4, 0xa, 0x8, 0xb, 0x8, 0xf3aa5f9, 0x0, 0x2, 0x3, 0x3, 0xfff, 0x6, 0x3, 0x2, 0x0, 0x80000000, 0x7, 0x465d, 0x2, 0x80, 0x5, 0x4, 0xf, 0x400, 0x80, 0x2, 0x1, 0x7, 0xb, 0x10, 0x2b, 0x5, 0xfffffc01, 0x2, 0x27c0, 0x7, 0xac, 0x6, 0x6, 0x2, 0x80000000, 0x80000001, 0x9, 0x7, 0x4, 0x83, 0x7, 0xc9a3, 0xc8, 0x0, 0x4c4b, 0x80000001, 0x0, 0x4, 0xfffffff7, 0x8, 0x8000, 0x7, 0xeaa, 0x1, 0x3, 0x6, 0xe4, 0xfffffff0, 0xf0000000, 0xc, 0x4, 0x80000000, 0x40, 0x7, 0x0, 0x2, 0x7fff, 0x1, 0x9, 0x7f, 0x4, 0x80000001, 0x4, 0x7, 0xfffffffa, 0x7, 0x5, 0x40, 0x4000000, 0x4, 0x2, 0xffff8000, 0xfff, 0x9, 0x3, 0x1ff, 0x8, 0x0, 0xc, 0x5, 0x8001, 0xd0d0, 0x6, 0x9, 0x6f9, 0x5, 0xf, 0x7, 0x7, 0x6, 0x8, 0x4, 0xfffffffb, 0x101, 0x2, 0x4, 0xe, 0x7, 0x3, 0x0, 0x0, 0x8001, 0x5, 0x7, 0x7, 0x0, 0x2, 0x1, 0x46, 0x5, 0x5, 0xffffffff, 0x5b5d, 0xef3, 0x2, 0x80000001, 0x2, 0x0, 0x223, 0x6, 0x5, 0x8, 0x4, 0xa, 0xd, 0xba8, 0x4, 0x7, 0x8, 0x0, 0x4de, 0xa, 0x7f, 0x3, 0xb8, 0x6, 0x3, 0xffff, 0x14, 0x4, 0x0, 0x7fffffff, 0xffffd5b0, 0x0, 0xa, 0x1, 0x5, 0x0, 0x0, 0x2, 0x3, 0x81, 0x8, 0x8, 0x10, 0xcda, 0x9, 0x40, 0x6, 0x7, 0x9, 0x1ff, 0x7fffffff, 0x8, 0xd, 0x3, 0x4, 0x8, 0x982, 0x9, 0x7, 0x1, 0x6, 0x1, 0x4, 0x4, 0x6, 0x0, 0x29ecf5d0, 0x81, 0x9, 0x7, 0x5, 0x8, 0x4, 0xfff, 0x8, 0x2, 0x9, 0xfffffff8, 0x7f, 0x5, 0xe, 0x100, 0x7, 0x1, 0xdb99, 0x0, 0x8ac, 0xfffffffe, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x4, 0x5, 0x1, {0x8, 0x1, 0x4, 0x40, 0xa736, 0x1}, {0xf8, 0x9b3c1911c75adfe7, 0x4, 0x3, 0x7, 0x6}, 0xc5, 0x8, 0x1f}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_ROUTE4_POLICE={0xc34, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0xfb2, 0x8, 0x7e9, 0x3, 0xfe, 0x16, 0x7fffffff, 0x2, 0x2, 0x8, 0xfffffff9, 0xffffffff, 0xfff, 0x10, 0x3, 0xffffff0a, 0x40, 0x2, 0x3, 0x1, 0x7ff, 0x80, 0x40, 0xd7, 0x7, 0x8, 0x81e, 0x401, 0x3ff0, 0x8000, 0x3, 0x400, 0x973, 0x100, 0x5, 0x5, 0x100, 0xff, 0xc, 0x4f41, 0x8, 0x7, 0x2, 0x1800, 0x60, 0xd6a, 0x1000, 0x3, 0x4, 0x4, 0xfffffffc, 0x4, 0x7, 0x7ff, 0x5b, 0xfff, 0x7, 0x6, 0x2, 0x1000, 0xd72, 0x5, 0x8000, 0x100, 0x400, 0x6, 0x6, 0x2, 0x8, 0x9, 0x9, 0x8, 0x4, 0x0, 0x2, 0x3, 0xfff, 0x5, 0x7ff, 0x3, 0xeec, 0x51d2, 0x6e3, 0x6, 0xe068, 0x4, 0x1, 0x3, 0x2, 0x1, 0x80, 0x1, 0x2, 0x7f, 0x10c, 0x9, 0x2, 0x2, 0x5, 0xfffffffb, 0xb2, 0x3, 0xbb7, 0x1, 0x8f1, 0xff, 0x245e, 0x1, 0x4, 0x8000, 0xed0, 0x10001, 0x4, 0x2bd7, 0x7, 0x3, 0x32042730, 0x8000, 0xbea9, 0x8, 0x7, 0x10, 0xfffffffc, 0x8, 0x1f05, 0xfffff7e0, 0x3, 0x7, 0x1, 0xfffffff7, 0xee74, 0xffffe438, 0xfff, 0x81, 0x5, 0x4, 0xed0a, 0x4, 0x6, 0xff, 0x0, 0x8, 0x0, 0x5e0a, 0x8, 0x1, 0x2, 0x3, 0x7, 0x2, 0x8, 0x3, 0xa5f, 0xfffffff8, 0x3ff, 0x1, 0x8, 0x8, 0x80, 0xf, 0x4, 0xc0000000, 0x2, 0x9, 0x1, 0x2, 0x6, 0x9f3, 0x8000, 0xb, 0x661, 0x0, 0x9, 0x6, 0x800, 0xf, 0x7, 0x5b, 0x10, 0x7f, 0x64ec, 0xa, 0x7ff, 0x3, 0x0, 0x0, 0x9, 0x7fff, 0x7, 0x80000000, 0x800000, 0x5, 0x4, 0x5430, 0x0, 0x4, 0x4, 0x2ec, 0xe, 0xfffffff5, 0x6, 0x9c, 0x0, 0x7164fbad, 0x3, 0x6, 0x7, 0x0, 0xea19, 0x3, 0x8, 0x1, 0x8, 0x9, 0x8, 0x4, 0x90, 0xff, 0x7, 0x80000000, 0x0, 0x81, 0x2, 0x7, 0x0, 0x5, 0x8000, 0x6, 0x5, 0x7, 0x33, 0x9, 0x10, 0x7f, 0x9, 0xb, 0x18c9e53a, 0x5, 0x1, 0x8, 0xfffffff1, 0x0, 0xfffffffb, 0x2, 0x1000, 0xff, 0xfffff000, 0x80000001, 0xf03, 0xfffffff7, 0x6, 0x942, 0x5, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x131dd4f0, 0x5, 0x7ff, 0x6, 0x2b, 0x3, 0x101, 0x7, 0x800, 0x6, 0x81, 0x0, 0x9, 0x7, 0x9, 0x4, 0x8000, 0x3a, 0xe, 0x3, 0x0, 0x6, 0x1, 0x9, 0x7, 0x9, 0x4, 0xa, 0x6, 0x40, 0x6000, 0xf, 0x200, 0x6, 0x3, 0x5, 0x0, 0x3, 0x5, 0x1ff, 0x0, 0x6, 0x1, 0x2, 0x4, 0xa, 0x2, 0x8, 0x722, 0x8, 0x2, 0xb5fa, 0x6, 0x4, 0x9, 0x7, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0x7, 0x2, 0x8, 0x9, 0x0, 0x7f70, 0x2, 0x7, 0x3, 0x1838a412, 0x0, 0x2, 0xf, 0x6, 0x0, 0xa169, 0x3f, 0xfffffe00, 0x6, 0x8, 0xfffffffb, 0x3, 0x0, 0x4, 0x3, 0x9, 0x7, 0xeeb, 0x401, 0x0, 0x1000, 0x5e8, 0x7, 0x200, 0x1, 0x9, 0x1, 0x9, 0x3, 0xffff, 0x81, 0xe, 0xffff, 0x525, 0x2, 0x6, 0x1, 0x1d, 0x3, 0x6, 0x10001, 0x80000000, 0x6, 0x1, 0x8, 0x3ff, 0x55, 0x5, 0x2, 0x4, 0x3, 0x5, 0x1, 0x7, 0x2, 0x8, 0x9, 0x0, 0x10001, 0x8, 0x1000, 0x9, 0x3, 0x3, 0x18804869, 0x7687, 0x200, 0x3, 0xaa5, 0x1ff, 0x9, 0xfffeffff, 0x101, 0x7, 0x4bf, 0xf, 0x9, 0x9, 0x80000001, 0x8, 0xffff, 0x5, 0x9, 0x2, 0xe5d, 0x8e5, 0x8, 0x2, 0x401, 0xfa, 0x142e, 0x8, 0x6, 0xffff0001, 0x3, 0x81, 0x3, 0xb70, 0x200, 0xfffffeff, 0x5, 0x957, 0x1000, 0x8, 0x0, 0x9, 0x1, 0x0, 0xf, 0x7, 0x0, 0x7f, 0x593, 0x3, 0xff, 0x800, 0x9, 0x3, 0x0, 0xc0, 0x3, 0x200, 0x0, 0xef7, 0x2, 0x5, 0x8, 0x7fff, 0x5, 0x5, 0x4, 0x401, 0x1, 0xfffff766, 0x8000, 0x6, 0x10, 0x1, 0x1, 0x8, 0x9, 0x6962f619, 0x3, 0x401, 0x0, 0x2, 0x7dd83502, 0x0, 0x3, 0x6, 0xfffffffd, 0xbf, 0x3, 0x0, 0xdb2, 0x14, 0x9, 0x2, 0xa, 0x0, 0x0, 0xa49, 0x3, 0x5, 0xffffff52, 0x1, 0x2, 0x100, 0x7, 0x3, 0x0, 0x7, 0x7, 0x8001, 0x8, 0x0, 0x761a, 0x7ff, 0xfffffe00, 0x1, 0x4, 0x5, 0x9, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x98a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0xa, 0xd2, 0xfffff77d, 0xee91, 0x18, 0x5, 0x3, 0x2c, 0x8, 0xf, 0x30000000, 0x9, 0x9, 0xd, 0x1ff, 0x6, 0x7, 0x2, 0x6, 0xa21f, 0xffff0b6b, 0xf, 0xfffffff5, 0xc2, 0x1, 0x5, 0x5, 0x200, 0x4, 0x0, 0xe6, 0x9, 0x7, 0x80000000, 0x3, 0xffffffff, 0x7e, 0x6, 0x5, 0x4, 0x80000000, 0x5, 0x8, 0x4, 0x5c6, 0x3, 0x5, 0x466, 0x2, 0x9, 0x0, 0x25c, 0x8001, 0x2e, 0x4, 0x2, 0x7fff, 0xa06e, 0xd87c, 0x40, 0x8, 0x8db, 0x7, 0xf, 0x0, 0x9, 0x7, 0x1, 0x7, 0x1, 0x8, 0x1, 0x5, 0x10000, 0xffd, 0x3, 0x7, 0x2, 0x44, 0xff, 0x7fff, 0x80, 0xc7ec, 0xe000000, 0x7c3, 0x10, 0x100, 0x9f3, 0x800, 0x8b, 0xc, 0x9, 0x8000, 0x9, 0x800, 0xffff, 0x412, 0x52, 0x7, 0x5, 0x6, 0xff, 0x6, 0x0, 0x8, 0x7, 0x0, 0xe, 0xba, 0x2, 0x7, 0x7, 0xf1, 0x3, 0x3, 0x0, 0x3, 0x2, 0xff, 0x1, 0xfff, 0x0, 0xff, 0x1ff, 0x7, 0x1, 0x3, 0xa, 0x8, 0x0, 0xb, 0x0, 0x4, 0xffffffff, 0x1, 0x2, 0x5, 0x1, 0x3, 0x4, 0x6, 0x0, 0x2, 0x54c3, 0x27, 0x1, 0xfffffffd, 0x7, 0x5, 0x221b, 0x30ee, 0xfffffff7, 0x5, 0x4, 0x2, 0x800, 0x80000001, 0x1000, 0xfffffffd, 0xd, 0x80000001, 0x6, 0x0, 0x0, 0x7, 0x1, 0x10000, 0x8001, 0x1, 0xffff0000, 0x40, 0x0, 0x5, 0x9, 0x83, 0x5, 0x7, 0x100, 0x7f, 0x9, 0x100, 0x100, 0xfff, 0x1, 0x5, 0x0, 0x1, 0x5, 0x8, 0x9, 0x3, 0x2e6, 0xd056, 0x2, 0xffffff6c, 0x7ff, 0xffff, 0x6, 0x200, 0x7, 0x1, 0x24b4, 0x6, 0x7ccd6e0e, 0x0, 0x3ff, 0x8, 0x7fffffff, 0xb01b, 0x0, 0x10, 0xbda5, 0x3, 0x7f, 0x8, 0x5, 0x6, 0x7, 0xfffffffb, 0x100, 0x7, 0x5, 0x5, 0x7fff, 0x2, 0x7, 0x5, 0x8, 0x2, 0x2, 0x2, 0x5, 0x8d, 0x4, 0xf793, 0x4, 0x7c2d, 0x4, 0x8, 0x2, 0x7, 0x43d, 0x1, 0x4, 0x800, 0x8, 0x400, 0x0, 0x44, 0x7fff, 0x9, 0x1, 0xfff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_ACT={0x15f4, 0x6, [@m_ife={0xdc, 0x0, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @random="2afce121fd1f"}]}, {0x9c, 0x6, "5f27acdc77bc2dbab42661c1e39d3ce4ccec7d3f4e9a0c4afa26c96432b2be1408fe3e53976da9ef8f1050c57f3930cbcb4b0417ab78c3b3b07298bbfc6b5ae7ab41adb9d3675a42c10701442f95272146db5295956acbaca50b4b88315e5971263315fb99ce440c27bbb66c53137815d18984feb15062b8e6662d62e9c3709dab2b7774d8c6e928af9ee2acfdffeed5c8b7d885e3c8a680"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x106c, 0x3, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x2, 0x1, 0x2, 0xd}}, @TCA_DEF_DATA={0x9, 0x3, '%::-\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x104, 0xf, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2d4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x800}]}, {0xa6, 0x6, "5f7a569947f1743ead47d3681c8e3720a2568bccda6c02cd06d2d0e85908440ac9d6347cccb97c50cc5377761d68daf9ff544ffd577804736bd234eed2cb83f24ebb84ce774c61f784b4024998fe8e4cd119fdc41ebc5ed7c4bbe31c5354331792b7047b970ba8eaec835cac7a29c6ec095fe3a7197d55ec74990d5c6b2c7c3714d8111ffb3657ba12e7b35dffce8a7960dc1623b66a30fe9977ebeba1fa40ee2905"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x74, 0xd, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffd, 0x80000000, 0x6, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x1b, 0x6, "b1bf1f1b5cc3a5bdf5788285a4566a28487d8a711c8647"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x138, 0x5, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x7, 0x8, 0x6, 0x88b}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x30a20, 0x6, 0x2}, 0xa8b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x12a, 0x9, 0xffffffffffffffff, 0x4, 0x1ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x8, 0x3, 0x2, 0x3}, 0xfff0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x3, 0x3, 0x10000, 0xfffff8f9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0xb, 0x7, 0x9, 0x7}, 0x5}}]}, {0x5d, 0x6, "a099e502dccd8ab15393351b73d021f8e2fd1b707038b3391633e1d7aeaa454a34ef8877545f371538c3b7e26cdfe8f0a9f543aae83a1b392ef4cc29cc1d19e59601654949e2676e8dab31e485f47ed37f098685a59e1858c6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x100, 0x11, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffffffff}, @TCA_CT_LABELS_MASK={0x14, 0x8, "72d52f7a9d2ee8b6a627c354c0eb512b"}]}, {0xbc, 0x6, "78176889bd92fa9fe4ccc6bf5436db488a248eddca1f02b7bb9b7c09deb01e9ea2a8607cc16515a913ecbc304410fa3735fe57407ea87152a448913b115c06dc353ec7c9c72185a08c6b0e6e0e54341dd5dff82ef206503b96aec0a6cb8e01d24a4b3bd830e7098d710bacc31e501064fc9c92b9949ad58d6be4b283a8813264813c1ec8799992c299fa3b558ab872e7c2959c6b3a58cf72915ff2dfa932791deed65ee324b85a126a19d4b2d19413745f5f68a393c5c7b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_simple={0xf8, 0xa, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}]}, {0xbe, 0x6, "ea52480153822903a6cb41b828b336a80a2a165b3f8f2c13bde5177f0c287bd7982cb4af60ee5c2eaacc1fe0d5346ce58de99dd95344e08d8155023f7b3f5d64c2fe0e9bd37ae20d6a561d10f0f9ecb8869ac4f1c3fe4989a39fb17f52f4677d35cbe87ac836f54878199732d60016a64c839a637d01821e7fe797cd106ad63ef6c5052269183b501e0023fe75e6007bb6aea1eb5fc2dd6bb3021e709b1fdb8bb11459f3df368f1b3636503d359cfc42b38515c4a5493fe6b95c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xe}}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}]}, 0x26cc}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000006c0), 0x4) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.176959483s ago: executing program 2 (id=777): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x0, 0xfffc, 0xfffe, 0xa, 0x0, 0x30, 0x73}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x336a083a}, {0xd}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty, 0x34fd, 0x0, 0x0, 0x0, 0xff}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x4280) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) unshare(0x20000400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @void, @value}, 0x20) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 914.728014ms ago: executing program 1 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000ff0300000100000000040200", @ANYRES32, @ANYBLOB="55741f90", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000900), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r7) 865.283288ms ago: executing program 2 (id=779): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000300)=@deltaction={0x4c, 0x31, 0x1, 0x4, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6db}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea0a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) sendmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f9a15787b475938205979b95a208be9811722dee7f06a10ddc6893cfabc1a1068c34a2a99b7586280fc5ba21c02c82901b007d44bd88d47fbbde2425d48cbf3edf6a70643a2075b5b24901f8387b2f08822b6d54c1c427d461d1e5673b1f06d36b47638020757d2d6f26bda8b851763a15bfe494f222898da1e3d10e44d693c9ac", 0x81}], 0x1}}], 0x1, 0x20000080) (async) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/72, 0x4c}], 0x29, 0x0, 0xfffffed5}, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$inet6(r2, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$can_j1939(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r7, 0x0, {0x0, 0xff, 0x1}}, 0x18, &(0x7f0000000140)={&(0x7f0000000380)="2942f4a2e986355df161afb5fec58d565b1ece41acf49d3675790f36e8eeed5bf5706a5664316e4b7b859c0143b1465b65da3b6837599238cbde4859fe7c329b2636ac9ba5717704d1d4d30749bc6384f45e0f08f1fa6919a21538b8e39b0d88fe833a9c9054442d52483c8d6e6213654457129e8379d8374d2ac105413bb485e9a4ead631504ad9a148ac8152326aae11fa85f2e466e6e6bbb29e7c2e4f395d911fe61f1f84", 0xa6}, 0x1, 0x0, 0x0, 0x4040000}, 0x4001) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 623.052229ms ago: executing program 2 (id=780): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) socket(0x28, 0x3, 0x81) (async) r1 = socket(0x28, 0x3, 0x81) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000005c0)={0x0, 0x1, 0x10, 0x9, @vifc_lcl_addr=@broadcast, @rand_addr=0x64010100}, 0x10) 620.841525ms ago: executing program 3 (id=781): r0 = socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1b00000000000000000000005600000000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000fffffffffc0fbc95f50002000004000000000000000000001cfaa5ff2de5e4b7b64d723b61fcefef597b611423c8cbd59336061994d970058f5dd62a1bd87c15c789a683ec94a308472a4ae46097a1013da0f18cacf04fed899a68230c865a1c7ae1d2c84afe941ced5aa0558e"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001140)={@dev, @dev, 0x0}, &(0x7f0000001240)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001280)={r0, 0x8, 0x6, 0x1000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x0, '\x00', r2, r3, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000540), &(0x7f0000000b00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept4(r3, &(0x7f00000011c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000001400)=0x80, 0x80000) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001440), 0x4) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x166, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3"}]}}}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x1000029b, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_LINK={0x8, 0x1, r10}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105a000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 439.055015ms ago: executing program 2 (id=782): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x3) (async) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000680)={0x283}) write$tun(r0, 0x0, 0x0) 423.682984ms ago: executing program 4 (id=783): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000800140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) 369.241577ms ago: executing program 3 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8081, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x1, 0x400c404) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000000e08000240000000000000008008000640000000010900010073797a30"], 0x10c}}, 0x0) 269.280861ms ago: executing program 0 (id=785): unshare(0x2c060000) (async, rerun: 32) unshare(0x24020400) (async, rerun: 32) r0 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) listen(r0, 0x0) (rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24040000) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31110000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) (async, rerun: 64) connect$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 70.7742ms ago: executing program 3 (id=786): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0x0, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newlink={0x270, 0x10, 0x400, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r1, 0x2800, 0xe9000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_VFINFO_LIST={0x218, 0x16, 0x0, 0x1, [{0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1, @link_local}}, @IFLA_VF_MAC={0x28, 0x1, {0x47c, @random="7382b40a9335"}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffffff, 0x1}}, @IFLA_VF_MAC={0x28}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x800, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9f7}}, @IFLA_VF_VLAN={0x10, 0x2, {0xe42, 0x69e, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x8000}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffd, 0x1}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6f89, 0x400}}]}, {0x120, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x6eb, 0x4e5b, 0x88a8}}, {0x14, 0x1, {0x49508b1d, 0x392, 0xd, 0x8100}}, {0x14, 0x1, {0x3, 0x88b, 0xfffff005, 0x9a8}}, {0x14, 0x1, {0x401, 0xe72, 0xf, 0x9a8}}, {0x14, 0x1, {0x604d, 0x313, 0x5, 0x88a8}}, {0x14, 0x1, {0x0, 0xe47, 0x7, 0x8100}}, {0x14, 0x1, {0x8000, 0x9ef, 0x4, 0x88a8}}, {0x14, 0x1, {0x4, 0x5d6, 0x5, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0xc, @local}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0xf679}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0x8001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x9}}]}]}, @IFLA_BROADCAST={0xa}, @IFLA_OPERSTATE={0x5, 0x10, 0x81}]}, 0x270}, 0x1, 0x2}, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x3a0, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r6}, 0x38) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=@polexpire={0x20c, 0x1b, 0x400, 0x70bd28, 0x5, {{{@in=@empty, @in6=@private1, 0x4e21, 0x6a, 0x4e24, 0x353, 0x2, 0x20, 0x20, 0x0, r5, r7}, {0x2, 0xa, 0x10, 0x3, 0xfffffffffffffffd, 0xe, 0x3, 0x6}, {0x0, 0x3, 0x4, 0x2}, 0x401, 0x0, 0x1, 0x1, 0x2, 0x1}, 0xd2}, [@extra_flags={0x8, 0x18, 0x556e6d68}, @tmpl={0x84, 0x5, [{{@in6=@private0, 0x4d4, 0x6c}, 0x2, @in=@loopback, 0x3504, 0x2, 0x1, 0x5, 0x9, 0x3ff, 0x8}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x3c}, 0x2, @in=@local, 0x3502, 0x4, 0x1, 0x8, 0x0, 0x9, 0x1}]}, @algo_aead={0xac, 0x12, {{'rfc4106(aegis128-aesni)\x00'}, 0x300, 0x120, "2b386d46b8896197c77f406d2e05771db4e753835837d7ea6ab61561fb73e974b670a35d9ee7b94aadc20e2bdc9e7e8c407a97e9f9e475c13f0be24d25c615b438fa6ae67cdccd6a312d8d9c8a95569c7ebec2a0f11968efb7bf8bef8f54baf5"}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0x280}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c0015"], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff0000000000006bcd850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000001480)="1fce66fbd35b013d2b4017c2c490", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 69.310188ms ago: executing program 0 (id=787): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002480)=ANY=[@ANYBLOB='P\x00\x00', @ANYBLOB="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", @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c005100736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x240440d1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df86dd", 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xec}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00'}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="8aa0956ed41fd2a5478b4be2bd742cab933c1a22aa9816c5e4e04bb1716d6bb2ddb49c8a6c63d12ebd64a8e5a0670d51dcad94", @ANYRESHEX=r4], 0x50}}, 0x800) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r6) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) 0s ago: executing program 4 (id=788): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x13d, 0xfffffffffffffffe}, 0x10) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): port 6081 - 0 [ 93.129546][ T6108] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.139990][ T6108] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.196855][ T6116] bridge0: port 3(gretap0) entered blocking state [ 93.203805][ T6116] bridge0: port 3(gretap0) entered disabled state [ 93.211319][ T6116] gretap0: entered allmulticast mode [ 93.218731][ T6116] gretap0: entered promiscuous mode [ 93.228819][ T6124] gretap0: left allmulticast mode [ 93.235383][ T6124] gretap0: left promiscuous mode [ 93.240794][ T6124] bridge0: port 3(gretap0) entered disabled state [ 93.279512][ T6134] macvlan2: entered promiscuous mode [ 93.285500][ T6134] macvlan2: entered allmulticast mode [ 93.568011][ T6139] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 93.624467][ T6139] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 93.663480][ T6144] dccp_v4_rcv: dropped packet with invalid checksum [ 94.390811][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 94.763488][ T6172] bond0: (slave bond_slave_0): Releasing backup interface [ 94.793784][ T6178] warning: `syz.3.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.353194][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.653044][ T5856] Bluetooth: hci0: command 0x0401 tx timeout [ 96.488947][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 96.501506][ T6206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 96.512223][ T6206] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 97.144685][ T6197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.154762][ T6197] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 97.308840][ T6209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 97.392449][ T6208] netlink: 64 bytes leftover after parsing attributes in process `syz.1.68'. [ 97.508468][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.71'. [ 97.538625][ T6214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.71'. [ 97.609078][ T6214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.821392][ T6222] __nla_validate_parse: 29 callbacks suppressed [ 97.821413][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 98.257605][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 98.283315][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 98.619818][ T6248] netlink: 18128 bytes leftover after parsing attributes in process `syz.2.82'. [ 98.824802][ T6255] netlink: 100 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.900683][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.919237][ T6253] netlink: 64 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.933424][ T6253] tipc: Invalid UDP bearer configuration [ 98.933475][ T6253] tipc: Enabling of bearer rejected, failed to enable media [ 98.977346][ T6251] syzkaller1: entered promiscuous mode [ 98.983576][ T6251] syzkaller1: entered allmulticast mode [ 99.258257][ T6263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.86'. [ 99.556537][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 99.977327][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.287072][ T6295] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 100.327259][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.335491][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.342173][ T6300] netlink: 'syz.2.96': attribute type 4 has an invalid length. [ 100.367187][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 100.417042][ T6306] netlink: 'syz.2.96': attribute type 4 has an invalid length. [ 100.618286][ T6289] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.740126][ T6309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.761552][ T6313] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.802540][ T6313] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 101.050282][ T6323] batman_adv: batadv0: Adding interface: dummy0 [ 101.111037][ T6323] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.189406][ T6323] batman_adv: batadv0: Interface activated: dummy0 [ 101.506276][ T6340] Cannot find del_set index 1 as target [ 101.606988][ T6340] xt_CT: No such helper "netbios-ns" [ 102.265138][ T6359] bridge_slave_1: left allmulticast mode [ 102.310046][ T6359] bridge_slave_1: left promiscuous mode [ 102.316381][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.352686][ T6359] bridge_slave_0: left allmulticast mode [ 102.393169][ T6359] bridge_slave_0: left promiscuous mode [ 102.422081][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.633517][ T6361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.820285][ T6362] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 102.848535][ T6362] bond2: (slave macvlan3): Enslaving as an active interface with an up link [ 103.059588][ T6375] __nla_validate_parse: 40 callbacks suppressed [ 103.059609][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 103.113260][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.335439][ T6375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.481124][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 103.521329][ T6384] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 103.545432][ T6382] vlan2: entered allmulticast mode [ 103.552254][ T6382] veth0_to_batadv: entered allmulticast mode [ 103.581093][ T6384] syz1: rxe_newlink: already configured on team_slave_0 [ 103.583234][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.121'. [ 104.028134][ T6404] tun0: tun_chr_ioctl cmd 1074025675 [ 104.035882][ T6404] tun0: persist enabled [ 104.734570][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 104.743633][ T6436] netlink: 'syz.3.137': attribute type 10 has an invalid length. [ 104.755591][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.766310][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 104.798182][ T6439] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 105.322226][ T6457] netlink: 19 bytes leftover after parsing attributes in process `syz.4.141'. [ 105.411335][ T6462] macsec1: entered promiscuous mode [ 105.432534][ T6462] macsec1: entered allmulticast mode [ 105.532277][ T6473] Illegal XDP return value 16128 on prog (id 36) dev syz_tun, expect packet loss! [ 105.645732][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 105.744087][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 105.749639][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'. [ 105.763321][ T6477] bond_slave_0: entered promiscuous mode [ 105.769276][ T6477] bond_slave_1: entered promiscuous mode [ 105.809117][ T6477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.828809][ T12] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:8049:b7ff:fe40:1bd7 error=-28 [ 105.842710][ T6477] bond1: (slave macvlan2): making interface the new active one [ 105.856809][ T6477] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 106.257275][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 106.881049][ T6487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.948718][ T6518] pimreg: entered allmulticast mode [ 106.956720][ T6514] 8021q: VLANs not supported on pimreg [ 107.093860][ T6522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.113573][ T6522] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 107.122244][ T6522] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 107.435987][ T6531] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 107.479733][ T6531] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.938041][ T6553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.027835][ T6560] macsec1: left promiscuous mode [ 108.035370][ T6560] macsec1: left allmulticast mode [ 108.083406][ T6559] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 108.092119][ T35] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:24f4:77ff:fe0a:f757 error=-28 [ 108.116470][ T6559] bond2: (slave macvlan3): Enslaving as an active interface with an up link [ 108.670026][ T6586] __nla_validate_parse: 5 callbacks suppressed [ 108.670049][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'. [ 108.937721][ T6597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.187'. [ 108.959787][ T6310] IPVS: starting estimator thread 0... [ 109.064141][ T6598] IPVS: using max 20 ests per chain, 48000 per kthread [ 109.112363][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.472435][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 109.611611][ T6592] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.625688][ T6592] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.640309][ T6592] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.652814][ T6592] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.774985][ T6613] geneve1: entered promiscuous mode [ 110.108666][ T6646] Cannot find set identified by id 0 to match [ 110.265294][ T6646] pim6reg: entered allmulticast mode [ 110.271931][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.197'. [ 110.366293][ T6657] IPv6: sit1: Disabled Multicast RS [ 110.400463][ T6657] sit1: entered allmulticast mode [ 110.478278][ T6656] netlink: 55 bytes leftover after parsing attributes in process `syz.0.199'. [ 111.088963][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 113.087188][ T6695] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.102295][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 113.466873][ T6727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.209'. [ 113.563780][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'. [ 113.889403][ T6751] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 113.960411][ T6756] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.019504][ T6754] netlink: 'syz.1.217': attribute type 16 has an invalid length. [ 114.054336][ T29] audit: type=1800 audit(1741804257.149:2): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="memory.events" dev="tmpfs" ino=286 res=0 errno=0 [ 114.054541][ T6768] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 114.132782][ T29] audit: type=1800 audit(1741804257.149:3): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="memory.events" dev="tmpfs" ino=286 res=0 errno=0 [ 114.147790][ T6756] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.189208][ T29] audit: type=1804 audit(1741804257.189:4): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.219" name="/newroot/52/memory.events" dev="tmpfs" ino=286 res=1 errno=0 [ 114.196463][ T6756] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.212172][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 114.273062][ T6756] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 114.295310][ T6756] bond3: (slave geneve3): making interface the new active one [ 114.309690][ T6756] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 114.581550][ T6784] netlink: 212 bytes leftover after parsing attributes in process `syz.2.224'. [ 114.636219][ T6784] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.656037][ T6788] netlink: 47 bytes leftover after parsing attributes in process `syz.3.225'. [ 114.733856][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 114.925449][ T6803] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.228'. [ 114.971031][ T6803] openvswitch: netlink: Message has 8 unknown bytes. [ 115.409430][ T6820] bond1: entered promiscuous mode [ 115.414803][ T6820] bond1: entered allmulticast mode [ 115.420460][ T6820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.663317][ T6811] netlink: 88 bytes leftover after parsing attributes in process `syz.0.230'. [ 115.686543][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.230'. [ 115.709886][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 115.767185][ T6811] netlink: 80 bytes leftover after parsing attributes in process `syz.0.230'. [ 115.851987][ T6832] netlink: 40 bytes leftover after parsing attributes in process `syz.3.235'. [ 115.885243][ T6840] netlink: 'syz.4.236': attribute type 10 has an invalid length. [ 115.974316][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.084360][ T6840] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.259621][ T6846] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.332734][ T6861] FAULT_INJECTION: forcing a failure. [ 116.332734][ T6861] name failslab, interval 1, probability 0, space 0, times 1 [ 116.345887][ T6860] bond0: entered promiscuous mode [ 116.363178][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.2.242 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 116.363208][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.363224][ T6861] Call Trace: [ 116.363232][ T6861] [ 116.363240][ T6861] dump_stack_lvl+0x241/0x360 [ 116.363279][ T6861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.363302][ T6861] ? __pfx__printk+0x10/0x10 [ 116.363324][ T6861] ? __kmalloc_noprof+0xb5/0x4c0 [ 116.363354][ T6861] ? __pfx___might_resched+0x10/0x10 [ 116.363385][ T6861] should_fail_ex+0x40a/0x550 [ 116.363419][ T6861] should_failslab+0xac/0x100 [ 116.363448][ T6861] __kmalloc_noprof+0xdd/0x4c0 [ 116.363475][ T6861] ? __virt_addr_valid+0x183/0x530 [ 116.363493][ T6861] ? sk_prot_alloc+0xe0/0x210 [ 116.363518][ T6861] sk_prot_alloc+0xe0/0x210 [ 116.363537][ T6861] ? sk_alloc+0x27/0x370 [ 116.363559][ T6861] sk_alloc+0x3e/0x370 [ 116.363583][ T6861] bpf_prog_test_run_skb+0x3b3/0x1830 [ 116.363612][ T6861] ? __pfx_lock_release+0x10/0x10 [ 116.363652][ T6861] ? __pfx___might_resched+0x10/0x10 [ 116.363685][ T6861] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 116.363710][ T6861] ? __fget_files+0x2a/0x410 [ 116.363743][ T6861] ? fput+0x21b/0x290 [ 116.363769][ T6861] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 116.363803][ T6861] bpf_prog_test_run+0x2e4/0x360 [ 116.363837][ T6861] __sys_bpf+0x487/0x820 [ 116.363868][ T6861] ? __pfx___sys_bpf+0x10/0x10 [ 116.363908][ T6861] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 116.363941][ T6861] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.363973][ T6861] ? do_syscall_64+0x100/0x230 [ 116.364004][ T6861] __x64_sys_bpf+0x7c/0x90 [ 116.364031][ T6861] do_syscall_64+0xf3/0x230 [ 116.364055][ T6861] ? clear_bhb_loop+0x35/0x90 [ 116.364094][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.364125][ T6861] RIP: 0033:0x7f4be958d169 [ 116.364147][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.364163][ T6861] RSP: 002b:00007f4bea351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.364185][ T6861] RAX: ffffffffffffffda RBX: 00007f4be97a5fa0 RCX: 00007f4be958d169 [ 116.364199][ T6861] RDX: 000000000000004c RSI: 0000400000000240 RDI: 000000000000000a [ 116.364211][ T6861] RBP: 00007f4bea351090 R08: 0000000000000000 R09: 0000000000000000 [ 116.364223][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.364234][ T6861] R13: 0000000000000000 R14: 00007f4be97a5fa0 R15: 00007ffc6831a178 [ 116.364262][ T6861] [ 116.364419][ T6860] bond_slave_0: entered promiscuous mode [ 116.407594][ T6852] x_tables: duplicate entry at hook 2 [ 116.423094][ T6860] bond_slave_1: entered promiscuous mode [ 116.831889][ T6860] bond0: left promiscuous mode [ 116.856441][ T6860] bond_slave_0: left promiscuous mode [ 116.878894][ T6860] bond_slave_1: left promiscuous mode [ 116.978997][ T6876] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.088384][ T6883] netlink: 'syz.0.249': attribute type 3 has an invalid length. [ 117.317669][ T6874] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 117.397510][ T6880] tipc: Started in network mode [ 117.402443][ T6880] tipc: Node identity 000000000000000000000091dc000001, cluster identity 4711 [ 117.468338][ T6880] tipc: Enabling of bearer rejected, failed to enable media [ 117.646876][ T6891] pim6reg: entered allmulticast mode [ 117.669422][ T6889] pim6reg: left allmulticast mode [ 117.709120][ T6897] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 117.879107][ T6897] bond2: entered promiscuous mode [ 117.919130][ T6897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.943759][ T6907] FAULT_INJECTION: forcing a failure. [ 117.943759][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 117.983054][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.0.255 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 117.983084][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.983096][ T6907] Call Trace: [ 117.983103][ T6907] [ 117.983111][ T6907] dump_stack_lvl+0x241/0x360 [ 117.983146][ T6907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.983169][ T6907] ? __pfx__printk+0x10/0x10 [ 117.983192][ T6907] ? __kmalloc_noprof+0xb5/0x4c0 [ 117.983228][ T6907] ? __pfx___might_resched+0x10/0x10 [ 117.983259][ T6907] should_fail_ex+0x40a/0x550 [ 117.983294][ T6907] should_failslab+0xac/0x100 [ 117.983322][ T6907] __kmalloc_noprof+0xdd/0x4c0 [ 117.983350][ T6907] ? security_sk_alloc+0x53/0x360 [ 117.983380][ T6907] security_sk_alloc+0x53/0x360 [ 117.983408][ T6907] sk_prot_alloc+0xfa/0x210 [ 117.983429][ T6907] ? sk_alloc+0x27/0x370 [ 117.983452][ T6907] sk_alloc+0x3e/0x370 [ 117.983476][ T6907] bpf_prog_test_run_skb+0x3b3/0x1830 [ 117.983504][ T6907] ? __pfx_lock_release+0x10/0x10 [ 117.983546][ T6907] ? __pfx___might_resched+0x10/0x10 [ 117.983580][ T6907] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 117.983607][ T6907] ? __fget_files+0x2a/0x410 [ 117.983641][ T6907] ? fput+0x21b/0x290 [ 117.983669][ T6907] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 117.983700][ T6907] bpf_prog_test_run+0x2e4/0x360 [ 117.983735][ T6907] __sys_bpf+0x487/0x820 [ 117.983767][ T6907] ? __pfx___sys_bpf+0x10/0x10 [ 117.983809][ T6907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.983845][ T6907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.983878][ T6907] ? do_syscall_64+0x100/0x230 [ 117.983910][ T6907] __x64_sys_bpf+0x7c/0x90 [ 117.983935][ T6907] do_syscall_64+0xf3/0x230 [ 117.983958][ T6907] ? clear_bhb_loop+0x35/0x90 [ 117.983988][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.984016][ T6907] RIP: 0033:0x7f6d82b8d169 [ 117.984035][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.984057][ T6907] RSP: 002b:00007f6d83ad0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.984079][ T6907] RAX: ffffffffffffffda RBX: 00007f6d82da5fa0 RCX: 00007f6d82b8d169 [ 117.984094][ T6907] RDX: 000000000000004c RSI: 0000400000000240 RDI: 000000000000000a [ 117.984107][ T6907] RBP: 00007f6d83ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 117.984120][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.984133][ T6907] R13: 0000000000000000 R14: 00007f6d82da5fa0 R15: 00007fffade77368 [ 117.984164][ T6907] [ 118.328510][ T6900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.335769][ T6900] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 118.346097][ T6900] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 118.481305][ T6900] bond2: (slave ip6gre1): making interface the new active one [ 118.488949][ T6900] ip6gre1: entered promiscuous mode [ 118.498017][ T6900] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 119.088889][ T6934] x_tables: duplicate underflow at hook 2 [ 119.442391][ T6943] x_tables: duplicate underflow at hook 1 [ 119.484210][ T6943] x_tables: duplicate underflow at hook 2 [ 120.030606][ T6969] __nla_validate_parse: 6 callbacks suppressed [ 120.030625][ T6969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.271'. [ 120.104139][ T6969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 120.469679][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 120.498247][ T6977] x_tables: duplicate underflow at hook 1 [ 120.626552][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 120.653552][ T6989] Bluetooth: MGMT ver 1.23 [ 120.661868][ T6989] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 120.932187][ T6997] FAULT_INJECTION: forcing a failure. [ 120.932187][ T6997] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.003104][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: syz.1.279 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 121.003134][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.003147][ T6997] Call Trace: [ 121.003155][ T6997] [ 121.003164][ T6997] dump_stack_lvl+0x241/0x360 [ 121.003193][ T6997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.003212][ T6997] ? __pfx__printk+0x10/0x10 [ 121.003238][ T6997] should_fail_ex+0x40a/0x550 [ 121.003267][ T6997] _copy_to_user+0x31/0xb0 [ 121.003292][ T6997] bpf_test_finish+0x27b/0x890 [ 121.003323][ T6997] ? __pfx_bpf_test_finish+0x10/0x10 [ 121.003351][ T6997] ? convert___skb_to_skb+0x41/0x630 [ 121.003372][ T6997] ? convert_skb_to___skb+0x2d3/0x510 [ 121.003396][ T6997] bpf_prog_test_run_skb+0xff8/0x1830 [ 121.003436][ T6997] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 121.003457][ T6997] ? __fget_files+0x2a/0x410 [ 121.003485][ T6997] ? fput+0x21b/0x290 [ 121.003507][ T6997] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 121.003531][ T6997] bpf_prog_test_run+0x2e4/0x360 [ 121.003560][ T6997] __sys_bpf+0x487/0x820 [ 121.003585][ T6997] ? __pfx___sys_bpf+0x10/0x10 [ 121.003619][ T6997] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.003647][ T6997] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.003673][ T6997] ? do_syscall_64+0x100/0x230 [ 121.003705][ T6997] __x64_sys_bpf+0x7c/0x90 [ 121.003727][ T6997] do_syscall_64+0xf3/0x230 [ 121.003747][ T6997] ? clear_bhb_loop+0x35/0x90 [ 121.003773][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.003796][ T6997] RIP: 0033:0x7fedd2b8d169 [ 121.003811][ T6997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.003824][ T6997] RSP: 002b:00007fedd3aba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.003842][ T6997] RAX: ffffffffffffffda RBX: 00007fedd2da5fa0 RCX: 00007fedd2b8d169 [ 121.003854][ T6997] RDX: 000000000000004c RSI: 0000400000000240 RDI: 000000000000000a [ 121.003865][ T6997] RBP: 00007fedd3aba090 R08: 0000000000000000 R09: 0000000000000000 [ 121.003875][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.003884][ T6997] R13: 0000000000000000 R14: 00007fedd2da5fa0 R15: 00007fffceb5fe18 [ 121.003908][ T6997] [ 121.298974][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.278'. [ 121.380219][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 121.433764][ T7002] netlink: 52 bytes leftover after parsing attributes in process `syz.2.281'. [ 121.686848][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 121.878967][ T7022] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.288'. [ 121.913069][ T7022] openvswitch: netlink: Flow key attribute not present in set flow. [ 121.985415][ T7024] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 122.010737][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.117597][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 122.129129][ T7033] tun0: tun_chr_ioctl cmd 1074025677 [ 122.153343][ T7033] tun0: linktype set to 776 [ 122.209154][ T7031] netlink: 'syz.0.290': attribute type 13 has an invalid length. [ 122.216591][ T7036] FAULT_INJECTION: forcing a failure. [ 122.216591][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.230559][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.3.292 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 122.230587][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.230600][ T7036] Call Trace: [ 122.230607][ T7036] [ 122.230616][ T7036] dump_stack_lvl+0x241/0x360 [ 122.230647][ T7036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.230671][ T7036] ? __pfx__printk+0x10/0x10 [ 122.230705][ T7036] should_fail_ex+0x40a/0x550 [ 122.230740][ T7036] _copy_to_user+0x31/0xb0 [ 122.230768][ T7036] bpf_test_finish+0x212/0x890 [ 122.230823][ T7036] ? __pfx_bpf_test_finish+0x10/0x10 [ 122.230855][ T7036] ? convert___skb_to_skb+0x41/0x630 [ 122.230879][ T7036] ? convert_skb_to___skb+0x2d3/0x510 [ 122.230908][ T7036] bpf_prog_test_run_skb+0xff8/0x1830 [ 122.230956][ T7036] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 122.230981][ T7036] ? __fget_files+0x2a/0x410 [ 122.231033][ T7036] ? fput+0x21b/0x290 [ 122.231059][ T7036] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 122.231088][ T7036] bpf_prog_test_run+0x2e4/0x360 [ 122.231123][ T7036] __sys_bpf+0x487/0x820 [ 122.231155][ T7036] ? __pfx___sys_bpf+0x10/0x10 [ 122.231198][ T7036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 122.231231][ T7036] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.231264][ T7036] ? do_syscall_64+0x100/0x230 [ 122.231295][ T7036] __x64_sys_bpf+0x7c/0x90 [ 122.231321][ T7036] do_syscall_64+0xf3/0x230 [ 122.231346][ T7036] ? clear_bhb_loop+0x35/0x90 [ 122.231380][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.231407][ T7036] RIP: 0033:0x7fae8678d169 [ 122.231427][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.231443][ T7036] RSP: 002b:00007fae845f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.231465][ T7036] RAX: ffffffffffffffda RBX: 00007fae869a5fa0 RCX: 00007fae8678d169 [ 122.231480][ T7036] RDX: 000000000000004c RSI: 0000400000000240 RDI: 000000000000000a [ 122.231493][ T7036] RBP: 00007fae845f6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.231506][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.231518][ T7036] R13: 0000000000000000 R14: 00007fae869a5fa0 R15: 00007ffdd3057738 [ 122.231548][ T7036] [ 122.515754][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'. [ 122.566482][ T7031] gretap0: refused to change device tx_queue_len [ 122.578739][ T7031] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.847346][ T7053] netpci0: tun_chr_ioctl cmd 1074025677 [ 122.872353][ T7053] netpci0: linktype set to 773 [ 122.929539][ T7055] bridge0: entered promiscuous mode [ 122.946851][ T7055] bridge0: entered allmulticast mode [ 122.956590][ T7055] team0: Device bridge0 is up. Set it down before adding it as a team port [ 123.085595][ T7058] netpci0: tun_chr_ioctl cmd 1074025673 [ 123.368659][ T7076] netlink: 'syz.4.304': attribute type 30 has an invalid length. [ 123.395550][ T7081] FAULT_INJECTION: forcing a failure. [ 123.395550][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.489679][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.1.305 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 123.489719][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.489731][ T7081] Call Trace: [ 123.489737][ T7081] [ 123.489746][ T7081] dump_stack_lvl+0x241/0x360 [ 123.489777][ T7081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.489799][ T7081] ? __pfx__printk+0x10/0x10 [ 123.489831][ T7081] should_fail_ex+0x40a/0x550 [ 123.489866][ T7081] _copy_to_user+0x31/0xb0 [ 123.489906][ T7081] bpf_test_finish+0x2e6/0x890 [ 123.489939][ T7081] ? __pfx_bpf_test_finish+0x10/0x10 [ 123.489969][ T7081] ? convert___skb_to_skb+0x41/0x630 [ 123.489991][ T7081] ? convert_skb_to___skb+0x2d3/0x510 [ 123.490018][ T7081] bpf_prog_test_run_skb+0xff8/0x1830 [ 123.490060][ T7081] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 123.490083][ T7081] ? __fget_files+0x2a/0x410 [ 123.490100][ T7085] netlink: 'syz.2.306': attribute type 10 has an invalid length. [ 123.490114][ T7081] ? fput+0x21b/0x290 [ 123.490139][ T7081] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 123.490162][ T7081] bpf_prog_test_run+0x2e4/0x360 [ 123.490194][ T7081] __sys_bpf+0x487/0x820 [ 123.490225][ T7081] ? __pfx___sys_bpf+0x10/0x10 [ 123.490267][ T7081] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.490303][ T7081] ? rcu_is_watching+0x15/0xb0 [ 123.490331][ T7081] __x64_sys_bpf+0x7c/0x90 [ 123.490358][ T7081] do_syscall_64+0xf3/0x230 [ 123.490383][ T7081] ? clear_bhb_loop+0x35/0x90 [ 123.490415][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.490441][ T7081] RIP: 0033:0x7fedd2b8d169 [ 123.490479][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.490496][ T7081] RSP: 002b:00007fedd3aba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.490519][ T7081] RAX: ffffffffffffffda RBX: 00007fedd2da5fa0 RCX: 00007fedd2b8d169 [ 123.490535][ T7081] RDX: 000000000000004c RSI: 0000400000000240 RDI: 000000000000000a [ 123.490548][ T7081] RBP: 00007fedd3aba090 R08: 0000000000000000 R09: 0000000000000000 [ 123.490561][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.490573][ T7081] R13: 0000000000000000 R14: 00007fedd2da5fa0 R15: 00007fffceb5fe18 [ 123.490605][ T7081] [ 123.607173][ T7087] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 123.685892][ T7090] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 123.738272][ T7087] macsec1: entered promiscuous mode [ 123.745429][ T7087] macsec1: entered allmulticast mode [ 123.756435][ T7087] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 124.260712][ T7115] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 124.764538][ T7136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.862275][ T7142] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 125.132369][ T7150] netlink: 'syz.4.326': attribute type 6 has an invalid length. [ 125.142088][ T7150] netlink: 'syz.4.326': attribute type 7 has an invalid length. [ 125.151403][ T7150] netlink: 'syz.4.326': attribute type 8 has an invalid length. [ 125.386810][ T7152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.395783][ T7152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.410061][ T7152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.433017][ T7152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.444426][ T7152] geneve3: entered promiscuous mode [ 125.450313][ T7152] geneve3: entered allmulticast mode [ 125.467231][ T7152] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.496601][ T7152] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.507371][ T7152] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.516516][ T7152] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.392352][ T7134] __nla_validate_parse: 13 callbacks suppressed [ 126.392373][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 126.428135][ T29] audit: type=1804 audit(1741804269.519:5): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.336" name="/newroot/49/cgroup.controllers" dev="tmpfs" ino=269 res=1 errno=0 [ 126.476136][ T7134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.523012][ T29] audit: type=1800 audit(1741804269.519:6): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.336" name="cgroup.controllers" dev="tmpfs" ino=269 res=0 errno=0 [ 126.682522][ T7194] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 127.257411][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 127.293264][ T7206] openvswitch: netlink: Flow key attr not present in new flow. [ 127.484144][ T29] audit: type=1800 audit(1741804270.599:7): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.347" name="memory.events" dev="tmpfs" ino=423 res=0 errno=0 [ 127.536756][ T29] audit: type=1804 audit(1741804270.629:8): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.347" name="memory.events" dev="tmpfs" ino=423 res=1 errno=0 [ 128.110593][ T7238] netlink: 136 bytes leftover after parsing attributes in process `syz.4.352'. [ 128.167825][ T7233] xt_CT: No such helper "pptp" [ 128.279412][ T6303] IPVS: starting estimator thread 0... [ 128.382999][ T7247] IPVS: using max 21 ests per chain, 50400 per kthread [ 128.437309][ T7253] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 128.595040][ T7260] netlink: 172 bytes leftover after parsing attributes in process `syz.3.355'. [ 128.648458][ T7254] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 128.666896][ T7261] netlink: 260 bytes leftover after parsing attributes in process `syz.3.355'. [ 129.074480][ T7279] syz.0.361: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 129.113140][ T7281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.359'. [ 129.133549][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.0.361 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 129.133580][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.133592][ T7279] Call Trace: [ 129.133600][ T7279] [ 129.133609][ T7279] dump_stack_lvl+0x241/0x360 [ 129.133641][ T7279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.133665][ T7279] ? __pfx__printk+0x10/0x10 [ 129.133702][ T7279] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 129.133729][ T7279] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 129.133759][ T7279] warn_alloc+0x278/0x410 [ 129.133783][ T7279] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 129.133805][ T7279] ? __pfx_warn_alloc+0x10/0x10 [ 129.133828][ T7279] ? kasan_save_track+0x3f/0x80 [ 129.133848][ T7279] ? __kasan_kmalloc+0x98/0xb0 [ 129.133872][ T7279] ? xsk_setsockopt+0x4aa/0x810 [ 129.133900][ T7279] ? do_sock_setsockopt+0x3af/0x720 [ 129.133920][ T7279] ? __x64_sys_setsockopt+0x1ee/0x280 [ 129.133939][ T7279] ? do_syscall_64+0xf3/0x230 [ 129.133963][ T7279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.134001][ T7279] __vmalloc_node_range_noprof+0x126/0x1380 [ 129.134052][ T7279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.134079][ T7279] ? __kasan_kmalloc+0x98/0xb0 [ 129.134109][ T7279] vmalloc_user_noprof+0x74/0x80 [ 129.134130][ T7279] ? xskq_create+0xb6/0x170 [ 129.134159][ T7279] xskq_create+0xb6/0x170 [ 129.134193][ T7279] xsk_init_queue+0xa1/0x100 [ 129.134227][ T7279] xsk_setsockopt+0x4aa/0x810 [ 129.134259][ T7279] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.134296][ T7279] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.134329][ T7279] ? aa_sock_opt_perm+0x79/0x120 [ 129.134365][ T7279] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.134393][ T7279] do_sock_setsockopt+0x3af/0x720 [ 129.134421][ T7279] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 129.134448][ T7279] ? __fget_files+0x395/0x410 [ 129.134476][ T7279] ? __fget_files+0x2a/0x410 [ 129.134514][ T7279] __x64_sys_setsockopt+0x1ee/0x280 [ 129.134543][ T7279] do_syscall_64+0xf3/0x230 [ 129.134568][ T7279] ? clear_bhb_loop+0x35/0x90 [ 129.134599][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.134626][ T7279] RIP: 0033:0x7f6d82b8d169 [ 129.134644][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.134660][ T7279] RSP: 002b:00007f6d83ad0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.134682][ T7279] RAX: ffffffffffffffda RBX: 00007f6d82da5fa0 RCX: 00007f6d82b8d169 [ 129.134696][ T7279] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 129.134708][ T7279] RBP: 00007f6d82c0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 129.134719][ T7279] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.134731][ T7279] R13: 0000000000000000 R14: 00007f6d82da5fa0 R15: 00007fffade77368 [ 129.134762][ T7279] [ 129.134770][ T7279] Mem-Info: [ 129.469221][ T7279] active_anon:6295 inactive_anon:0 isolated_anon:0 [ 129.469221][ T7279] active_file:1466 inactive_file:38319 isolated_file:0 [ 129.469221][ T7279] unevictable:3831 dirty:255 writeback:0 [ 129.469221][ T7279] slab_reclaimable:10067 slab_unreclaimable:103100 [ 129.469221][ T7279] mapped:32071 shmem:2906 pagetables:879 [ 129.469221][ T7279] sec_pagetables:0 bounce:0 [ 129.469221][ T7279] kernel_misc_reclaimable:0 [ 129.469221][ T7279] free:1334256 free_pcp:1723 free_cma:0 [ 129.516788][ T7279] Node 0 active_anon:26480kB inactive_anon:0kB active_file:5864kB inactive_file:153204kB unevictable:13788kB isolated(anon):0kB isolated(file):0kB mapped:130584kB dirty:1016kB writeback:0kB shmem:11188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12080kB pagetables:3516kB sec_pagetables:0kB all_unreclaimable? no [ 129.550675][ T7279] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 129.582402][ T7279] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.621583][ T7289] bridge_slave_0: left allmulticast mode [ 129.637057][ T7289] bridge_slave_0: left promiscuous mode [ 129.643150][ T7279] lowmem_reserve[]: 0 2489 2490 0 0 [ 129.663162][ T7279] Node 0 DMA32 free:1410452kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:29340kB inactive_anon:0kB active_file:5864kB inactive_file:152888kB unevictable:13788kB writepending:1016kB present:3129332kB managed:2549736kB mlocked:12252kB bounce:0kB free_pcp:6336kB local_pcp:1044kB free_cma:0kB [ 129.695089][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.725631][ T7279] lowmem_reserve[]: 0 0 0 0 0 [ 129.730454][ T7279] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 129.791349][ T7289] bridge_slave_1: left allmulticast mode [ 129.803467][ T7289] bridge_slave_1: left promiscuous mode [ 129.809128][ T7279] lowmem_reserve[]: 0 0 0 0 0 [ 129.814378][ T7279] Node 1 Normal free:3907712kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.843991][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.853974][ T7279] lowmem_reserve[]: 0 0 0 0 0 [ 129.861147][ T7279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.896939][ T5943] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 129.913576][ T7279] Node 0 DMA32: 83*4kB (UM) 15*8kB (UME) 9*16kB (E) 20*32kB (UE) 5*64kB (UE) 39*128kB (UME) 10*256kB (UME) 4*512kB (U) 4*1024kB (U) 8*2048kB (U) 335*4096kB (UME) = 1403796kB [ 129.935555][ T7289] bond0: (slave bond_slave_0): Releasing backup interface [ 129.949537][ T5943] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 129.969585][ T7289] bond0: (slave bond_slave_1): Releasing backup interface [ 129.983617][ T7279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 130.019801][ T7279] Node 1 Normal: 214*4kB (UME) 41*8kB (UME) 38*16kB (UME) 220*32kB (UME) 86*64kB (UME) 25*128kB (UME) 14*256kB (UME) 7*512kB (UM) 8*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3907712kB [ 130.039807][ T7289] team0: Port device team_slave_0 removed [ 130.045591][ T7279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.045653][ T7279] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.045674][ T7279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.045692][ T7279] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.045711][ T7279] 46934 total pagecache pages [ 130.045733][ T7279] 0 pages in swap cache [ 130.093982][ T7279] Free swap = 124996kB [ 130.096714][ T7289] team0: Port device team_slave_1 removed [ 130.098152][ T7279] Total swap = 124996kB [ 130.108104][ T7279] 2097051 pages RAM [ 130.111936][ T7279] 0 pages HighMem/MovableOnly [ 130.111966][ T7289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.116972][ T7279] 427895 pages reserved [ 130.128080][ T7279] 0 pages cma reserved [ 130.134459][ T7289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.150750][ T7289] bond1: (slave macvlan2): Releasing backup interface [ 130.161637][ T7289] bond2: (slave macvlan3): Releasing backup interface [ 130.181091][ T7289] bond3: (slave macvlan4): Releasing backup interface [ 130.219496][ T7286] team0: Mode changed to "loadbalance" [ 130.234622][ T7295] x_tables: duplicate underflow at hook 3 [ 130.257018][ T7295] netlink: 'syz.0.363': attribute type 9 has an invalid length. [ 130.753281][ T7303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 130.919507][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.367'. [ 131.033182][ T7313] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 131.073813][ T7313] batman_adv: batadv0: Adding interface: team0 [ 131.080036][ T7313] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.122180][ T7313] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 131.148252][ T7314] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 131.209311][ T7314] netlink: 2 bytes leftover after parsing attributes in process `syz.1.367'. [ 131.331579][ T7314] team0: entered promiscuous mode [ 131.363251][ T7314] team_slave_0: entered promiscuous mode [ 131.403854][ T7314] team_slave_1: entered promiscuous mode [ 131.427167][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.463453][ T7314] batman_adv: batadv0: Interface activated: team0 [ 131.470428][ T7314] batman_adv: batadv0: Interface deactivated: team0 [ 131.504739][ T7314] batman_adv: batadv0: Removing interface: team0 [ 131.563778][ T7328] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 131.571957][ T7328] netlink: 2 bytes leftover after parsing attributes in process `syz.2.372'. [ 131.613752][ T7331] veth1_macvtap: left promiscuous mode [ 131.619294][ T7331] macsec0: entered promiscuous mode [ 131.696456][ T7336] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.372'. [ 131.707031][ T7336] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 132.364609][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 132.383454][ T7363] ax25_connect(): syz.1.381 uses autobind, please contact jreuter@yaina.de [ 132.417269][ T7363] ax25_connect(): syz.1.381 uses autobind, please contact jreuter@yaina.de [ 132.620330][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 132.646115][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 132.710983][ T7373] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 132.953676][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960678][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.502152][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 133.565608][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 133.673088][ T7397] netlink: 'syz.0.389': attribute type 18 has an invalid length. [ 134.126525][ T7402] netlink: 'syz.3.390': attribute type 39 has an invalid length. [ 134.237153][ T7405] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 134.557911][ T7408] sctp: [Deprecated]: syz.1.393 (pid 7408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.557911][ T7408] Use struct sctp_sack_info instead [ 134.640918][ T5943] IPVS: starting estimator thread 0... [ 134.782308][ T7412] IPVS: using max 20 ests per chain, 48000 per kthread [ 135.103463][ T7417] netlink: 'syz.1.395': attribute type 2 has an invalid length. [ 135.164648][ T7417] : entered promiscuous mode [ 135.271463][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 135.850821][ T7311] Set syz1 is full, maxelem 65536 reached [ 135.940562][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 136.710309][ T7451] IPv6: syztnl1: Disabled Multicast RS [ 137.214629][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.413'. [ 137.301480][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.411'. [ 137.375632][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.411'. [ 137.722123][ T7503] FAULT_INJECTION: forcing a failure. [ 137.722123][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.744851][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.4.418 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 137.744882][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.744895][ T7503] Call Trace: [ 137.744902][ T7503] [ 137.744911][ T7503] dump_stack_lvl+0x241/0x360 [ 137.744945][ T7503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.744969][ T7503] ? __pfx__printk+0x10/0x10 [ 137.744992][ T7503] ? __pfx_lock_release+0x10/0x10 [ 137.745035][ T7503] should_fail_ex+0x40a/0x550 [ 137.745073][ T7503] _copy_to_iter+0x1df/0x1c40 [ 137.745099][ T7503] ? __virt_addr_valid+0x183/0x530 [ 137.745121][ T7503] ? __pfx_lock_release+0x10/0x10 [ 137.745164][ T7503] ? __pfx__copy_to_iter+0x10/0x10 [ 137.745192][ T7503] ? __virt_addr_valid+0x183/0x530 [ 137.745212][ T7503] ? __virt_addr_valid+0x183/0x530 [ 137.745230][ T7503] ? __virt_addr_valid+0x45f/0x530 [ 137.745253][ T7503] ? __check_object_size+0x47a/0x730 [ 137.745287][ T7503] __skb_datagram_iter+0x107/0x900 [ 137.745314][ T7503] ? __local_bh_enable_ip+0x168/0x200 [ 137.745339][ T7503] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 137.745367][ T7503] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 137.745397][ T7503] skb_copy_datagram_iter+0xd1/0x250 [ 137.745427][ T7503] tipc_recvstream+0x7a8/0xf80 [ 137.745469][ T7503] ? __pfx_tipc_recvstream+0x10/0x10 [ 137.745490][ T7503] ? aa_sock_msg_perm+0x91/0x160 [ 137.745525][ T7503] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 137.745550][ T7503] ? __pfx_tipc_recvstream+0x10/0x10 [ 137.745573][ T7503] sock_recvmsg+0x22f/0x280 [ 137.745608][ T7503] ____sys_recvmsg+0x1c6/0x480 [ 137.745642][ T7503] ? __pfx_____sys_recvmsg+0x10/0x10 [ 137.745691][ T7503] __sys_recvmsg+0x291/0x390 [ 137.745722][ T7503] ? __pfx___sys_recvmsg+0x10/0x10 [ 137.745769][ T7503] ? __fget_files+0x2a/0x410 [ 137.745817][ T7503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.745851][ T7503] ? do_syscall_64+0x100/0x230 [ 137.745882][ T7503] ? do_syscall_64+0xb6/0x230 [ 137.745911][ T7503] do_syscall_64+0xf3/0x230 [ 137.745937][ T7503] ? clear_bhb_loop+0x35/0x90 [ 137.745971][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.745999][ T7503] RIP: 0033:0x7f6b3d58d169 [ 137.746017][ T7503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.746034][ T7503] RSP: 002b:00007f6b3b3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 137.746057][ T7503] RAX: ffffffffffffffda RBX: 00007f6b3d7a5fa0 RCX: 00007f6b3d58d169 [ 137.746072][ T7503] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 137.746085][ T7503] RBP: 00007f6b3b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.746097][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.746110][ T7503] R13: 0000000000000000 R14: 00007f6b3d7a5fa0 R15: 00007ffdb8d00f28 [ 137.746142][ T7503] [ 138.562339][ T7526] openvswitch: netlink: EtherType 50a is less than min 600 [ 138.754677][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 138.875003][ T7534] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.046684][ T7544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.431'. [ 139.167092][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 139.506128][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.563750][ T7545] team0: left promiscuous mode [ 139.572183][ T7556] tipc: Can't bind to reserved service type 1 [ 139.585651][ T7545] team_slave_0: left promiscuous mode [ 139.591318][ T7545] team_slave_1: left promiscuous mode [ 139.628055][ T7557] netlink: 'syz.3.435': attribute type 58 has an invalid length. [ 139.648243][ T7545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.677496][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.435'. [ 139.861639][ T7564] FAULT_INJECTION: forcing a failure. [ 139.861639][ T7564] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 139.879746][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.4.438 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 139.879775][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.879786][ T7564] Call Trace: [ 139.879794][ T7564] [ 139.879802][ T7564] dump_stack_lvl+0x241/0x360 [ 139.879832][ T7564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.879854][ T7564] ? __pfx__printk+0x10/0x10 [ 139.879888][ T7564] should_fail_ex+0x40a/0x550 [ 139.879944][ T7564] prepare_alloc_pages+0x1da/0x5b0 [ 139.879977][ T7564] __alloc_frozen_pages_noprof+0x16f/0x710 [ 139.880006][ T7564] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.880054][ T7564] alloc_pages_mpol+0x311/0x660 [ 139.880090][ T7564] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 139.880129][ T7564] vma_alloc_folio_noprof+0x12b/0x260 [ 139.880165][ T7564] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 139.880198][ T7564] ? do_raw_spin_unlock+0x13c/0x8b0 [ 139.880231][ T7564] folio_prealloc+0x2e/0x170 [ 139.880255][ T7564] do_wp_page+0x1253/0x49b0 [ 139.880304][ T7564] ? __pfx_do_wp_page+0x10/0x10 [ 139.880351][ T7564] ? __pfx_lock_acquire+0x10/0x10 [ 139.880380][ T7564] ? rcu_is_watching+0x15/0xb0 [ 139.880408][ T7564] ? do_raw_spin_lock+0x14f/0x370 [ 139.880435][ T7564] ? __pfx____pte_offset_map+0x10/0x10 [ 139.880486][ T7564] __handle_mm_fault+0x24d5/0x70f0 [ 139.880516][ T7564] ? mark_lock+0x9a/0x360 [ 139.880567][ T7564] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.880612][ T7564] ? mt_find+0x2a9/0x920 [ 139.880638][ T7564] ? __pfx_lock_release+0x10/0x10 [ 139.880683][ T7564] ? mt_find+0x2a9/0x920 [ 139.880710][ T7564] ? mt_find+0x6c8/0x920 [ 139.880736][ T7564] ? mt_find+0x2a9/0x920 [ 139.880766][ T7564] ? __pfx_mt_find+0x10/0x10 [ 139.880814][ T7564] ? find_vma+0xf9/0x170 [ 139.880833][ T7564] ? __pfx_find_vma+0x10/0x10 [ 139.880850][ T7564] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.880886][ T7564] handle_mm_fault+0x3e5/0x8d0 [ 139.880931][ T7564] exc_page_fault+0x2b9/0x8b0 [ 139.880962][ T7564] asm_exc_page_fault+0x26/0x30 [ 139.880991][ T7564] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 139.881024][ T7564] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 139.881041][ T7564] RSP: 0018:ffffc90003057738 EFLAGS: 00050206 [ 139.881060][ T7564] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 000000000000f5d0 [ 139.881075][ T7564] RDX: 0000000000000000 RSI: ffff8880607c0ce8 RDI: 0000400000001000 [ 139.881089][ T7564] RBP: ffffc900030578b8 R08: ffff8880607d02b7 R09: 1ffff1100c0fa056 [ 139.881104][ T7564] R10: dffffc0000000000 R11: ffffed100c0fa057 R12: ffffc90003057e18 [ 139.881119][ T7564] R13: 1ffff9200060afc3 R14: ffff8880607c00e8 R15: 00000000000101d0 [ 139.881143][ T7564] ? _copy_to_iter+0x1a1/0x1c40 [ 139.881175][ T7564] _copy_to_iter+0x260/0x1c40 [ 139.881212][ T7564] ? __virt_addr_valid+0x183/0x530 [ 139.881233][ T7564] ? __pfx_lock_release+0x10/0x10 [ 139.881274][ T7564] ? __pfx__copy_to_iter+0x10/0x10 [ 139.881300][ T7564] ? __virt_addr_valid+0x183/0x530 [ 139.881325][ T7564] ? __virt_addr_valid+0x183/0x530 [ 139.881343][ T7564] ? __virt_addr_valid+0x45f/0x530 [ 139.881365][ T7564] ? __check_object_size+0x47a/0x730 [ 139.881398][ T7564] __skb_datagram_iter+0x107/0x900 [ 139.881424][ T7564] ? __local_bh_enable_ip+0x168/0x200 [ 139.881466][ T7564] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 139.881494][ T7564] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 139.881523][ T7564] skb_copy_datagram_iter+0xd1/0x250 [ 139.881553][ T7564] tipc_recvstream+0x7a8/0xf80 [ 139.881596][ T7564] ? __pfx_tipc_recvstream+0x10/0x10 [ 139.881617][ T7564] ? aa_sock_msg_perm+0x91/0x160 [ 139.881651][ T7564] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 139.881676][ T7564] ? __pfx_tipc_recvstream+0x10/0x10 [ 139.881699][ T7564] sock_recvmsg+0x22f/0x280 [ 139.881733][ T7564] ____sys_recvmsg+0x1c6/0x480 [ 139.881768][ T7564] ? __pfx_____sys_recvmsg+0x10/0x10 [ 139.881819][ T7564] __sys_recvmsg+0x291/0x390 [ 139.881849][ T7564] ? __pfx___sys_recvmsg+0x10/0x10 [ 139.881888][ T7564] ? __fget_files+0x2a/0x410 [ 139.881936][ T7564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.881970][ T7564] ? do_syscall_64+0x100/0x230 [ 139.882000][ T7564] ? do_syscall_64+0xb6/0x230 [ 139.882029][ T7564] do_syscall_64+0xf3/0x230 [ 139.882054][ T7564] ? clear_bhb_loop+0x35/0x90 [ 139.882087][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.882115][ T7564] RIP: 0033:0x7f6b3d58d169 [ 139.882133][ T7564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.882149][ T7564] RSP: 002b:00007f6b3b3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 139.882169][ T7564] RAX: ffffffffffffffda RBX: 00007f6b3d7a5fa0 RCX: 00007f6b3d58d169 [ 139.882183][ T7564] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 139.882196][ T7564] RBP: 00007f6b3b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.882209][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.882220][ T7564] R13: 0000000000000000 R14: 00007f6b3d7a5fa0 R15: 00007ffdb8d00f28 [ 139.882253][ T7564] [ 140.478757][ T7573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 141.184340][ T7589] netlink: 'syz.2.446': attribute type 3 has an invalid length. [ 141.271986][ T7593] Bluetooth: MGMT ver 1.23 [ 141.408167][ T7600] netlink: 'syz.2.449': attribute type 10 has an invalid length. [ 141.433167][ T7600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.449'. [ 141.470461][ T7600] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 141.519370][ T7604] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 141.536946][ T7604] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.565470][ T7604] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.566339][ T7603] syzkaller1: entered promiscuous mode [ 141.598216][ T7603] syzkaller1: entered allmulticast mode [ 141.614568][ T7603] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 141.781993][ T7606] bridge_slave_0: left allmulticast mode [ 141.788768][ T7606] bridge_slave_0: left promiscuous mode [ 141.795344][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.812258][ T7606] bridge_slave_1: left allmulticast mode [ 141.821728][ T7608] FAULT_INJECTION: forcing a failure. [ 141.821728][ T7608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.843172][ T7606] bridge_slave_1: left promiscuous mode [ 141.853108][ T7608] CPU: 0 UID: 0 PID: 7608 Comm: syz.3.453 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 141.853152][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.853164][ T7608] Call Trace: [ 141.853170][ T7608] [ 141.853178][ T7608] dump_stack_lvl+0x241/0x360 [ 141.853208][ T7608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.853230][ T7608] ? __pfx__printk+0x10/0x10 [ 141.853249][ T7608] ? __lock_acquire+0x1397/0x2100 [ 141.853281][ T7608] should_fail_ex+0x40a/0x550 [ 141.853311][ T7608] prepare_alloc_pages+0x1da/0x5b0 [ 141.853338][ T7608] __alloc_frozen_pages_noprof+0x16f/0x710 [ 141.853362][ T7608] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.853412][ T7608] alloc_pages_mpol+0x311/0x660 [ 141.853445][ T7608] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 141.853481][ T7608] vma_alloc_folio_noprof+0x12b/0x260 [ 141.853509][ T7608] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 141.853536][ T7608] ? do_raw_spin_unlock+0x13c/0x8b0 [ 141.853566][ T7608] folio_prealloc+0x2e/0x170 [ 141.853589][ T7608] do_wp_page+0x1253/0x49b0 [ 141.853635][ T7608] ? __pfx_do_wp_page+0x10/0x10 [ 141.853683][ T7608] ? __pfx_validate_chain+0x10/0x10 [ 141.853709][ T7608] ? __pfx_lock_acquire+0x10/0x10 [ 141.853737][ T7608] ? rcu_is_watching+0x15/0xb0 [ 141.853764][ T7608] ? do_raw_spin_lock+0x14f/0x370 [ 141.853790][ T7608] ? __pfx____pte_offset_map+0x10/0x10 [ 141.853838][ T7608] __handle_mm_fault+0x24d5/0x70f0 [ 141.853869][ T7608] ? mark_lock+0x9a/0x360 [ 141.853917][ T7608] ? __pfx___handle_mm_fault+0x10/0x10 [ 141.853961][ T7608] ? mt_find+0x2a9/0x920 [ 141.853986][ T7608] ? __pfx_lock_release+0x10/0x10 [ 141.854029][ T7608] ? mt_find+0x2a9/0x920 [ 141.854056][ T7608] ? mt_find+0x6c8/0x920 [ 141.854082][ T7608] ? mt_find+0x2a9/0x920 [ 141.854112][ T7608] ? __pfx_mt_find+0x10/0x10 [ 141.854158][ T7608] ? find_vma+0xf9/0x170 [ 141.854176][ T7608] ? __pfx_find_vma+0x10/0x10 [ 141.854193][ T7608] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.854228][ T7608] handle_mm_fault+0x3e5/0x8d0 [ 141.854272][ T7608] exc_page_fault+0x2b9/0x8b0 [ 141.854303][ T7608] asm_exc_page_fault+0x26/0x30 [ 141.854331][ T7608] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 141.854363][ T7608] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 141.854380][ T7608] RSP: 0018:ffffc9001ab9f738 EFLAGS: 00050206 [ 141.854406][ T7608] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 000000000000e5d0 [ 141.854420][ T7608] RDX: 0000000000000000 RSI: ffff88805dec1ce8 RDI: 0000400000002000 [ 141.854433][ T7608] RBP: ffffc9001ab9f8b8 R08: ffff88805ded02b7 R09: 1ffff1100bbda056 [ 141.854448][ T7608] R10: dffffc0000000000 R11: ffffed100bbda057 R12: ffffc9001ab9fe18 [ 141.854462][ T7608] R13: 1ffff92003573fc3 R14: ffff88805dec00e8 R15: 00000000000101d0 [ 141.854486][ T7608] ? _copy_to_iter+0x1a1/0x1c40 [ 141.854519][ T7608] _copy_to_iter+0x260/0x1c40 [ 141.854542][ T7608] ? __virt_addr_valid+0x183/0x530 [ 141.854563][ T7608] ? __pfx_lock_release+0x10/0x10 [ 141.854605][ T7608] ? __pfx__copy_to_iter+0x10/0x10 [ 141.854633][ T7608] ? __virt_addr_valid+0x183/0x530 [ 141.854651][ T7608] ? __virt_addr_valid+0x183/0x530 [ 141.854669][ T7608] ? __virt_addr_valid+0x45f/0x530 [ 141.854691][ T7608] ? __check_object_size+0x47a/0x730 [ 141.854725][ T7608] __skb_datagram_iter+0x107/0x900 [ 141.854751][ T7608] ? __local_bh_enable_ip+0x168/0x200 [ 141.854775][ T7608] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 141.854803][ T7608] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 141.854832][ T7608] skb_copy_datagram_iter+0xd1/0x250 [ 141.854863][ T7608] tipc_recvstream+0x7a8/0xf80 [ 141.854904][ T7608] ? __pfx_tipc_recvstream+0x10/0x10 [ 141.854925][ T7608] ? aa_sock_msg_perm+0x91/0x160 [ 141.854959][ T7608] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 141.854983][ T7608] ? __pfx_tipc_recvstream+0x10/0x10 [ 141.855005][ T7608] sock_recvmsg+0x22f/0x280 [ 141.855039][ T7608] ____sys_recvmsg+0x1c6/0x480 [ 141.855071][ T7608] ? __pfx_____sys_recvmsg+0x10/0x10 [ 141.855120][ T7608] __sys_recvmsg+0x291/0x390 [ 141.855150][ T7608] ? __pfx___sys_recvmsg+0x10/0x10 [ 141.855191][ T7608] ? __fget_files+0x2a/0x410 [ 141.855236][ T7608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.855270][ T7608] ? do_syscall_64+0x100/0x230 [ 141.855299][ T7608] ? do_syscall_64+0xb6/0x230 [ 141.855327][ T7608] do_syscall_64+0xf3/0x230 [ 141.855351][ T7608] ? clear_bhb_loop+0x35/0x90 [ 141.855382][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.855416][ T7608] RIP: 0033:0x7fae8678d169 [ 141.855434][ T7608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.855450][ T7608] RSP: 002b:00007fae845f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 141.855471][ T7608] RAX: ffffffffffffffda RBX: 00007fae869a5fa0 RCX: 00007fae8678d169 [ 141.855486][ T7608] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 141.855498][ T7608] RBP: 00007fae845f6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.855509][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.855519][ T7608] R13: 0000000000000000 R14: 00007fae869a5fa0 R15: 00007ffdd3057738 [ 141.855545][ T7608] [ 142.382464][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.795324][ T7606] bond0: (slave bond_slave_1): Releasing backup interface [ 142.888908][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.933285][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.991749][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.050927][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.182094][ T7606] bond2: (slave ip6gre1): Releasing backup interface [ 143.196841][ T7606] ip6gre1: left promiscuous mode [ 143.210609][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 143.241133][ T7631] netlink: 'syz.4.457': attribute type 11 has an invalid length. [ 143.249726][ T7631] netlink: 224 bytes leftover after parsing attributes in process `syz.4.457'. [ 143.263442][ T7610] pim6reg: left allmulticast mode [ 143.289181][ T7643] netlink: 'syz.3.459': attribute type 10 has an invalid length. [ 143.339516][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 143.510081][ T7648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.462'. [ 143.568825][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 143.616662][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 143.674176][ T7648] netlink: 332 bytes leftover after parsing attributes in process `syz.4.462'. [ 143.733368][ T7648] netlink: 104 bytes leftover after parsing attributes in process `syz.4.462'. [ 143.739521][ T7651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.462'. [ 143.742356][ T7648] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'. [ 143.825643][ T7657] xt_hashlimit: size too large, truncated to 1048576 [ 143.901460][ T7663] xt_hashlimit: size too large, truncated to 1048576 [ 144.061026][ T7666] FAULT_INJECTION: forcing a failure. [ 144.061026][ T7666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.113864][ T7666] CPU: 0 UID: 0 PID: 7666 Comm: syz.4.466 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 144.113895][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.113908][ T7666] Call Trace: [ 144.113915][ T7666] [ 144.113924][ T7666] dump_stack_lvl+0x241/0x360 [ 144.113968][ T7666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.113992][ T7666] ? __pfx__printk+0x10/0x10 [ 144.114013][ T7666] ? __lock_acquire+0x1397/0x2100 [ 144.114052][ T7666] should_fail_ex+0x40a/0x550 [ 144.114088][ T7666] prepare_alloc_pages+0x1da/0x5b0 [ 144.114120][ T7666] __alloc_frozen_pages_noprof+0x16f/0x710 [ 144.114148][ T7666] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 144.114193][ T7666] alloc_pages_mpol+0x311/0x660 [ 144.114226][ T7666] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 144.114264][ T7666] vma_alloc_folio_noprof+0x12b/0x260 [ 144.114296][ T7666] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 144.114327][ T7666] ? do_raw_spin_unlock+0x13c/0x8b0 [ 144.114358][ T7666] folio_prealloc+0x2e/0x170 [ 144.114382][ T7666] do_wp_page+0x1253/0x49b0 [ 144.114430][ T7666] ? __pfx_do_wp_page+0x10/0x10 [ 144.114461][ T7666] ? __pfx_validate_chain+0x10/0x10 [ 144.114489][ T7666] ? __pfx_lock_acquire+0x10/0x10 [ 144.114516][ T7666] ? rcu_is_watching+0x15/0xb0 [ 144.114543][ T7666] ? do_raw_spin_lock+0x14f/0x370 [ 144.114567][ T7666] ? __pfx____pte_offset_map+0x10/0x10 [ 144.114615][ T7666] __handle_mm_fault+0x24d5/0x70f0 [ 144.114645][ T7666] ? mark_lock+0x9a/0x360 [ 144.114695][ T7666] ? __pfx___handle_mm_fault+0x10/0x10 [ 144.114739][ T7666] ? mt_find+0x2a9/0x920 [ 144.114764][ T7666] ? __pfx_lock_release+0x10/0x10 [ 144.114807][ T7666] ? mt_find+0x2a9/0x920 [ 144.114832][ T7666] ? mt_find+0x6c8/0x920 [ 144.114856][ T7666] ? mt_find+0x2a9/0x920 [ 144.114883][ T7666] ? __pfx_mt_find+0x10/0x10 [ 144.114926][ T7666] ? find_vma+0xf9/0x170 [ 144.114943][ T7666] ? __pfx_find_vma+0x10/0x10 [ 144.114967][ T7666] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.115002][ T7666] handle_mm_fault+0x3e5/0x8d0 [ 144.115044][ T7666] exc_page_fault+0x2b9/0x8b0 [ 144.115073][ T7666] asm_exc_page_fault+0x26/0x30 [ 144.115100][ T7666] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 144.115132][ T7666] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 144.115149][ T7666] RSP: 0018:ffffc90005837738 EFLAGS: 00050206 [ 144.115168][ T7666] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 000000000000d5d0 [ 144.115183][ T7666] RDX: 0000000000000000 RSI: ffff88805b5e2ce8 RDI: 0000400000003000 [ 144.115196][ T7666] RBP: ffffc900058378b8 R08: ffff88805b5f02b7 R09: 1ffff1100b6be056 [ 144.115211][ T7666] R10: dffffc0000000000 R11: ffffed100b6be057 R12: ffffc90005837e18 [ 144.115225][ T7666] R13: 1ffff92000b06fc3 R14: ffff88805b5e00e8 R15: 00000000000101d0 [ 144.115247][ T7666] ? _copy_to_iter+0x1a1/0x1c40 [ 144.115278][ T7666] _copy_to_iter+0x260/0x1c40 [ 144.115301][ T7666] ? __virt_addr_valid+0x183/0x530 [ 144.115322][ T7666] ? __pfx_lock_release+0x10/0x10 [ 144.115361][ T7666] ? __pfx__copy_to_iter+0x10/0x10 [ 144.115387][ T7666] ? __virt_addr_valid+0x183/0x530 [ 144.115405][ T7666] ? __virt_addr_valid+0x183/0x530 [ 144.115422][ T7666] ? __virt_addr_valid+0x45f/0x530 [ 144.115444][ T7666] ? __check_object_size+0x47a/0x730 [ 144.115476][ T7666] __skb_datagram_iter+0x107/0x900 [ 144.115501][ T7666] ? __local_bh_enable_ip+0x168/0x200 [ 144.115524][ T7666] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 144.115551][ T7666] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 144.115578][ T7666] skb_copy_datagram_iter+0xd1/0x250 [ 144.115606][ T7666] tipc_recvstream+0x7a8/0xf80 [ 144.115645][ T7666] ? __pfx_tipc_recvstream+0x10/0x10 [ 144.115665][ T7666] ? aa_sock_msg_perm+0x91/0x160 [ 144.115698][ T7666] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 144.115723][ T7666] ? __pfx_tipc_recvstream+0x10/0x10 [ 144.115746][ T7666] sock_recvmsg+0x22f/0x280 [ 144.115778][ T7666] ____sys_recvmsg+0x1c6/0x480 [ 144.115827][ T7666] ? __pfx_____sys_recvmsg+0x10/0x10 [ 144.115873][ T7666] __sys_recvmsg+0x291/0x390 [ 144.115901][ T7666] ? __pfx___sys_recvmsg+0x10/0x10 [ 144.115942][ T7666] ? __fget_files+0x2a/0x410 [ 144.115991][ T7666] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.116024][ T7666] ? do_syscall_64+0x100/0x230 [ 144.116054][ T7666] ? do_syscall_64+0xb6/0x230 [ 144.116083][ T7666] do_syscall_64+0xf3/0x230 [ 144.116108][ T7666] ? clear_bhb_loop+0x35/0x90 [ 144.116140][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.116167][ T7666] RIP: 0033:0x7f6b3d58d169 [ 144.116185][ T7666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.116201][ T7666] RSP: 002b:00007f6b3b3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 144.116222][ T7666] RAX: ffffffffffffffda RBX: 00007f6b3d7a5fa0 RCX: 00007f6b3d58d169 [ 144.116236][ T7666] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 144.116249][ T7666] RBP: 00007f6b3b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.116261][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.116272][ T7666] R13: 0000000000000000 R14: 00007f6b3d7a5fa0 R15: 00007ffdb8d00f28 [ 144.116303][ T7666] [ 144.291483][ T7542] Set syz1 is full, maxelem 65536 reached [ 144.534952][ T7680] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 147.878310][ T7818] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 148.477358][ T7835] FAULT_INJECTION: forcing a failure. [ 148.477358][ T7835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.525230][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.3.506 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 148.525262][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.525274][ T7835] Call Trace: [ 148.525280][ T7835] [ 148.525288][ T7835] dump_stack_lvl+0x241/0x360 [ 148.525320][ T7835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.525344][ T7835] ? __pfx__printk+0x10/0x10 [ 148.525368][ T7835] ? __lock_acquire+0x1397/0x2100 [ 148.525409][ T7835] should_fail_ex+0x40a/0x550 [ 148.525445][ T7835] prepare_alloc_pages+0x1da/0x5b0 [ 148.525479][ T7835] __alloc_frozen_pages_noprof+0x16f/0x710 [ 148.525508][ T7835] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.525554][ T7835] alloc_pages_mpol+0x311/0x660 [ 148.525589][ T7835] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.525629][ T7835] vma_alloc_folio_noprof+0x12b/0x260 [ 148.525662][ T7835] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 148.525693][ T7835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 148.525725][ T7835] folio_prealloc+0x2e/0x170 [ 148.525749][ T7835] do_wp_page+0x1253/0x49b0 [ 148.525796][ T7835] ? __pfx_do_wp_page+0x10/0x10 [ 148.525829][ T7835] ? __pfx_validate_chain+0x10/0x10 [ 148.525856][ T7835] ? __pfx_lock_acquire+0x10/0x10 [ 148.525886][ T7835] ? rcu_is_watching+0x15/0xb0 [ 148.525914][ T7835] ? do_raw_spin_lock+0x14f/0x370 [ 148.525948][ T7835] ? __pfx____pte_offset_map+0x10/0x10 [ 148.526000][ T7835] __handle_mm_fault+0x24d5/0x70f0 [ 148.526031][ T7835] ? mark_lock+0x9a/0x360 [ 148.526081][ T7835] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.526125][ T7835] ? mt_find+0x2a9/0x920 [ 148.526152][ T7835] ? __pfx_lock_release+0x10/0x10 [ 148.526197][ T7835] ? mt_find+0x2a9/0x920 [ 148.526224][ T7835] ? mt_find+0x6c8/0x920 [ 148.526249][ T7835] ? mt_find+0x2a9/0x920 [ 148.526280][ T7835] ? __pfx_mt_find+0x10/0x10 [ 148.526328][ T7835] ? find_vma+0xf9/0x170 [ 148.526346][ T7835] ? __pfx_find_vma+0x10/0x10 [ 148.526363][ T7835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.526400][ T7835] handle_mm_fault+0x3e5/0x8d0 [ 148.526444][ T7835] exc_page_fault+0x2b9/0x8b0 [ 148.526476][ T7835] asm_exc_page_fault+0x26/0x30 [ 148.526504][ T7835] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 148.526536][ T7835] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 148.526552][ T7835] RSP: 0018:ffffc9000524f738 EFLAGS: 00050206 [ 148.526570][ T7835] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 000000000000b5d0 [ 148.526584][ T7835] RDX: 0000000000000000 RSI: ffff88805af24ce8 RDI: 0000400000005000 [ 148.526597][ T7835] RBP: ffffc9000524f8b8 R08: ffff88805af302b7 R09: 1ffff1100b5e6056 [ 148.526612][ T7835] R10: dffffc0000000000 R11: ffffed100b5e6057 R12: ffffc9000524fe18 [ 148.526626][ T7835] R13: 1ffff92000a49fc3 R14: ffff88805af200e8 R15: 00000000000101d0 [ 148.526648][ T7835] ? _copy_to_iter+0x1a1/0x1c40 [ 148.526681][ T7835] _copy_to_iter+0x260/0x1c40 [ 148.526704][ T7835] ? __virt_addr_valid+0x183/0x530 [ 148.526725][ T7835] ? __pfx_lock_release+0x10/0x10 [ 148.526765][ T7835] ? __pfx__copy_to_iter+0x10/0x10 [ 148.526792][ T7835] ? __virt_addr_valid+0x183/0x530 [ 148.526811][ T7835] ? __virt_addr_valid+0x183/0x530 [ 148.526829][ T7835] ? __virt_addr_valid+0x45f/0x530 [ 148.526851][ T7835] ? __check_object_size+0x47a/0x730 [ 148.526884][ T7835] __skb_datagram_iter+0x107/0x900 [ 148.526911][ T7835] ? __local_bh_enable_ip+0x168/0x200 [ 148.526941][ T7835] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 148.526969][ T7835] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 148.526998][ T7835] skb_copy_datagram_iter+0xd1/0x250 [ 148.527029][ T7835] tipc_recvstream+0x7a8/0xf80 [ 148.527067][ T7835] ? __pfx_tipc_recvstream+0x10/0x10 [ 148.527085][ T7835] ? aa_sock_msg_perm+0x91/0x160 [ 148.527118][ T7835] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 148.527142][ T7835] ? __pfx_tipc_recvstream+0x10/0x10 [ 148.527165][ T7835] sock_recvmsg+0x22f/0x280 [ 148.527199][ T7835] ____sys_recvmsg+0x1c6/0x480 [ 148.527231][ T7835] ? __pfx_____sys_recvmsg+0x10/0x10 [ 148.527280][ T7835] __sys_recvmsg+0x291/0x390 [ 148.527310][ T7835] ? __pfx___sys_recvmsg+0x10/0x10 [ 148.527349][ T7835] ? __fget_files+0x2a/0x410 [ 148.527394][ T7835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.527428][ T7835] ? do_syscall_64+0x100/0x230 [ 148.527458][ T7835] ? do_syscall_64+0xb6/0x230 [ 148.527486][ T7835] do_syscall_64+0xf3/0x230 [ 148.527512][ T7835] ? clear_bhb_loop+0x35/0x90 [ 148.527544][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.527570][ T7835] RIP: 0033:0x7fae8678d169 [ 148.527600][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.527615][ T7835] RSP: 002b:00007fae845f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 148.527635][ T7835] RAX: ffffffffffffffda RBX: 00007fae869a5fa0 RCX: 00007fae8678d169 [ 148.527650][ T7835] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 148.527662][ T7835] RBP: 00007fae845f6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.527673][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.527686][ T7835] R13: 0000000000000000 R14: 00007fae869a5fa0 R15: 00007ffdd3057738 [ 148.527717][ T7835] [ 150.087274][ T7876] __nla_validate_parse: 16 callbacks suppressed [ 150.087296][ T7876] netlink: 176 bytes leftover after parsing attributes in process `syz.4.517'. [ 150.766093][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 150.874440][ T7893] FAULT_INJECTION: forcing a failure. [ 150.874440][ T7893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.953126][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.0.522 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 150.953156][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.953168][ T7893] Call Trace: [ 150.953175][ T7893] [ 150.953183][ T7893] dump_stack_lvl+0x241/0x360 [ 150.953214][ T7893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.953237][ T7893] ? __pfx__printk+0x10/0x10 [ 150.953258][ T7893] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.953299][ T7893] should_fail_ex+0x40a/0x550 [ 150.953335][ T7893] prepare_alloc_pages+0x1da/0x5b0 [ 150.953366][ T7893] __alloc_frozen_pages_noprof+0x16f/0x710 [ 150.953404][ T7893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.953447][ T7893] alloc_pages_mpol+0x311/0x660 [ 150.953497][ T7893] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 150.953535][ T7893] vma_alloc_folio_noprof+0x12b/0x260 [ 150.953565][ T7893] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 150.953595][ T7893] ? do_raw_spin_unlock+0x13c/0x8b0 [ 150.953625][ T7893] folio_prealloc+0x2e/0x170 [ 150.953646][ T7893] do_wp_page+0x1253/0x49b0 [ 150.953691][ T7893] ? __pfx_do_wp_page+0x10/0x10 [ 150.953719][ T7893] ? __pfx_validate_chain+0x10/0x10 [ 150.953744][ T7893] ? __pfx_lock_acquire+0x10/0x10 [ 150.953770][ T7893] ? rcu_is_watching+0x15/0xb0 [ 150.953808][ T7893] ? do_raw_spin_lock+0x14f/0x370 [ 150.953834][ T7893] ? __pfx____pte_offset_map+0x10/0x10 [ 150.953882][ T7893] __handle_mm_fault+0x24d5/0x70f0 [ 150.953910][ T7893] ? mark_lock+0x9a/0x360 [ 150.953956][ T7893] ? __pfx___handle_mm_fault+0x10/0x10 [ 150.953997][ T7893] ? mt_find+0x2a9/0x920 [ 150.954023][ T7893] ? __pfx_lock_release+0x10/0x10 [ 150.954067][ T7893] ? mt_find+0x2a9/0x920 [ 150.954092][ T7893] ? mt_find+0x6c8/0x920 [ 150.954116][ T7893] ? mt_find+0x2a9/0x920 [ 150.954144][ T7893] ? __pfx_mt_find+0x10/0x10 [ 150.954187][ T7893] ? find_vma+0xf9/0x170 [ 150.954203][ T7893] ? __pfx_find_vma+0x10/0x10 [ 150.954218][ T7893] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.954252][ T7893] handle_mm_fault+0x3e5/0x8d0 [ 150.954293][ T7893] exc_page_fault+0x2b9/0x8b0 [ 150.954322][ T7893] asm_exc_page_fault+0x26/0x30 [ 150.954348][ T7893] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 150.954379][ T7893] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 150.954394][ T7893] RSP: 0018:ffffc9000523f738 EFLAGS: 00050206 [ 150.954412][ T7893] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 000000000000a5d0 [ 150.954426][ T7893] RDX: 0000000000000000 RSI: ffff88805af25ce8 RDI: 0000400000006000 [ 150.954440][ T7893] RBP: ffffc9000523f8b8 R08: ffff88805af302b7 R09: 1ffff1100b5e6056 [ 150.954453][ T7893] R10: dffffc0000000000 R11: ffffed100b5e6057 R12: ffffc9000523fe18 [ 150.954467][ T7893] R13: 1ffff92000a47fc3 R14: ffff88805af200e8 R15: 00000000000101d0 [ 150.954490][ T7893] ? _copy_to_iter+0x1a1/0x1c40 [ 150.954521][ T7893] _copy_to_iter+0x260/0x1c40 [ 150.954544][ T7893] ? __virt_addr_valid+0x183/0x530 [ 150.954565][ T7893] ? __pfx_lock_release+0x10/0x10 [ 150.954604][ T7893] ? __pfx__copy_to_iter+0x10/0x10 [ 150.954629][ T7893] ? __virt_addr_valid+0x183/0x530 [ 150.954648][ T7893] ? __virt_addr_valid+0x183/0x530 [ 150.954664][ T7893] ? __virt_addr_valid+0x45f/0x530 [ 150.954685][ T7893] ? __check_object_size+0x47a/0x730 [ 150.954718][ T7893] __skb_datagram_iter+0x107/0x900 [ 150.954743][ T7893] ? __local_bh_enable_ip+0x168/0x200 [ 150.954765][ T7893] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 150.954799][ T7893] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 150.954826][ T7893] skb_copy_datagram_iter+0xd1/0x250 [ 150.954855][ T7893] tipc_recvstream+0x7a8/0xf80 [ 150.954895][ T7893] ? __pfx_tipc_recvstream+0x10/0x10 [ 150.954915][ T7893] ? aa_sock_msg_perm+0x91/0x160 [ 150.954947][ T7893] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 150.954970][ T7893] ? __pfx_tipc_recvstream+0x10/0x10 [ 150.954992][ T7893] sock_recvmsg+0x22f/0x280 [ 150.955024][ T7893] ____sys_recvmsg+0x1c6/0x480 [ 150.955056][ T7893] ? __pfx_____sys_recvmsg+0x10/0x10 [ 150.955104][ T7893] __sys_recvmsg+0x291/0x390 [ 150.955131][ T7893] ? __pfx___sys_recvmsg+0x10/0x10 [ 150.955166][ T7893] ? __fget_files+0x2a/0x410 [ 150.955214][ T7893] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.955276][ T7893] ? do_syscall_64+0x100/0x230 [ 150.955306][ T7893] ? do_syscall_64+0xb6/0x230 [ 150.955353][ T7893] do_syscall_64+0xf3/0x230 [ 150.955379][ T7893] ? clear_bhb_loop+0x35/0x90 [ 150.955412][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.955440][ T7893] RIP: 0033:0x7f6d82b8d169 [ 150.955457][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.955474][ T7893] RSP: 002b:00007f6d83ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 150.955494][ T7893] RAX: ffffffffffffffda RBX: 00007f6d82da5fa0 RCX: 00007f6d82b8d169 [ 150.955509][ T7893] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 150.955521][ T7893] RBP: 00007f6d83ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 150.955534][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.955545][ T7893] R13: 0000000000000000 R14: 00007f6d82da5fa0 R15: 00007fffade77368 [ 150.955578][ T7893] [ 151.760447][ T7907] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 151.918010][ T7914] xt_CT: No such helper "pptp" [ 151.927009][ T7907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.972771][ T7913] bond3: (slave bridge1): making interface the new active one [ 151.982470][ T7913] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 152.094160][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.529'. [ 152.536200][ T7942] FAULT_INJECTION: forcing a failure. [ 152.536200][ T7942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.563108][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.0.538 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 152.563137][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.563149][ T7942] Call Trace: [ 152.563156][ T7942] [ 152.563165][ T7942] dump_stack_lvl+0x241/0x360 [ 152.563196][ T7942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.563219][ T7942] ? __pfx__printk+0x10/0x10 [ 152.563242][ T7942] ? __lock_acquire+0x1397/0x2100 [ 152.563279][ T7942] should_fail_ex+0x40a/0x550 [ 152.563313][ T7942] prepare_alloc_pages+0x1da/0x5b0 [ 152.563351][ T7942] __alloc_frozen_pages_noprof+0x16f/0x710 [ 152.563380][ T7942] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.563425][ T7942] alloc_pages_mpol+0x311/0x660 [ 152.563458][ T7942] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.563496][ T7942] vma_alloc_folio_noprof+0x12b/0x260 [ 152.563526][ T7942] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 152.563558][ T7942] ? do_raw_spin_unlock+0x13c/0x8b0 [ 152.563589][ T7942] folio_prealloc+0x2e/0x170 [ 152.563612][ T7942] do_wp_page+0x1253/0x49b0 [ 152.563659][ T7942] ? __pfx_do_wp_page+0x10/0x10 [ 152.563689][ T7942] ? __pfx_validate_chain+0x10/0x10 [ 152.563716][ T7942] ? __pfx_lock_acquire+0x10/0x10 [ 152.563743][ T7942] ? rcu_is_watching+0x15/0xb0 [ 152.563770][ T7942] ? do_raw_spin_lock+0x14f/0x370 [ 152.563795][ T7942] ? __pfx____pte_offset_map+0x10/0x10 [ 152.563844][ T7942] __handle_mm_fault+0x24d5/0x70f0 [ 152.563874][ T7942] ? mark_lock+0x9a/0x360 [ 152.563921][ T7942] ? __pfx___handle_mm_fault+0x10/0x10 [ 152.563962][ T7942] ? mt_find+0x2a9/0x920 [ 152.563986][ T7942] ? __pfx_lock_release+0x10/0x10 [ 152.564029][ T7942] ? mt_find+0x2a9/0x920 [ 152.564054][ T7942] ? mt_find+0x6c8/0x920 [ 152.564080][ T7942] ? mt_find+0x2a9/0x920 [ 152.564108][ T7942] ? __pfx_mt_find+0x10/0x10 [ 152.564154][ T7942] ? find_vma+0xf9/0x170 [ 152.564172][ T7942] ? __pfx_find_vma+0x10/0x10 [ 152.564188][ T7942] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.564222][ T7942] handle_mm_fault+0x3e5/0x8d0 [ 152.564265][ T7942] exc_page_fault+0x2b9/0x8b0 [ 152.564296][ T7942] asm_exc_page_fault+0x26/0x30 [ 152.564323][ T7942] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 152.564381][ T7942] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 152.564398][ T7942] RSP: 0018:ffffc9000434f738 EFLAGS: 00050206 [ 152.564417][ T7942] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 00000000000095d0 [ 152.564432][ T7942] RDX: 0000000000000000 RSI: ffff888056f06ce8 RDI: 0000400000007000 [ 152.564445][ T7942] RBP: ffffc9000434f8b8 R08: ffff888056f102b7 R09: 1ffff1100ade2056 [ 152.564460][ T7942] R10: dffffc0000000000 R11: ffffed100ade2057 R12: ffffc9000434fe18 [ 152.564475][ T7942] R13: 1ffff92000869fc3 R14: ffff888056f000e8 R15: 00000000000101d0 [ 152.564499][ T7942] ? _copy_to_iter+0x1a1/0x1c40 [ 152.564532][ T7942] _copy_to_iter+0x260/0x1c40 [ 152.564556][ T7942] ? __virt_addr_valid+0x183/0x530 [ 152.564581][ T7942] ? __pfx_lock_release+0x10/0x10 [ 152.564624][ T7942] ? __pfx__copy_to_iter+0x10/0x10 [ 152.564651][ T7942] ? __virt_addr_valid+0x183/0x530 [ 152.564671][ T7942] ? __virt_addr_valid+0x183/0x530 [ 152.564689][ T7942] ? __virt_addr_valid+0x45f/0x530 [ 152.564711][ T7942] ? __check_object_size+0x47a/0x730 [ 152.564745][ T7942] __skb_datagram_iter+0x107/0x900 [ 152.564771][ T7942] ? __local_bh_enable_ip+0x168/0x200 [ 152.564796][ T7942] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 152.564824][ T7942] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 152.564852][ T7942] skb_copy_datagram_iter+0xd1/0x250 [ 152.564883][ T7942] tipc_recvstream+0x7a8/0xf80 [ 152.564925][ T7942] ? __pfx_tipc_recvstream+0x10/0x10 [ 152.564945][ T7942] ? aa_sock_msg_perm+0x91/0x160 [ 152.564980][ T7942] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 152.565004][ T7942] ? __pfx_tipc_recvstream+0x10/0x10 [ 152.565026][ T7942] sock_recvmsg+0x22f/0x280 [ 152.565060][ T7942] ____sys_recvmsg+0x1c6/0x480 [ 152.565093][ T7942] ? __pfx_____sys_recvmsg+0x10/0x10 [ 152.565141][ T7942] __sys_recvmsg+0x291/0x390 [ 152.565171][ T7942] ? __pfx___sys_recvmsg+0x10/0x10 [ 152.565211][ T7942] ? __fget_files+0x2a/0x410 [ 152.565258][ T7942] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.565292][ T7942] ? do_syscall_64+0x100/0x230 [ 152.565321][ T7942] ? do_syscall_64+0xb6/0x230 [ 152.565358][ T7942] do_syscall_64+0xf3/0x230 [ 152.565383][ T7942] ? clear_bhb_loop+0x35/0x90 [ 152.565416][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.565444][ T7942] RIP: 0033:0x7f6d82b8d169 [ 152.565462][ T7942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.565479][ T7942] RSP: 002b:00007f6d83ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 152.565499][ T7942] RAX: ffffffffffffffda RBX: 00007f6d82da5fa0 RCX: 00007f6d82b8d169 [ 152.565514][ T7942] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 152.565527][ T7942] RBP: 00007f6d83ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 152.565539][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.565550][ T7942] R13: 0000000000000000 R14: 00007f6d82da5fa0 R15: 00007fffade77368 [ 152.565582][ T7942] [ 153.557213][ T7970] syz1: rxe_newlink: already configured on team_slave_0 [ 153.625719][ T7974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.547'. [ 153.843137][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.550'. [ 153.855285][ T7985] Set syz1 is full, maxelem 65536 reached [ 154.092521][ T7994] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 154.137353][ T7994] bond2: (slave gretap1): making interface the new active one [ 154.145868][ T7994] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 154.318676][ T8003] netlink: 'syz.4.554': attribute type 11 has an invalid length. [ 154.327297][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.554'. [ 154.367998][ T8005] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 154.375964][ T8005] netlink: 224 bytes leftover after parsing attributes in process `syz.2.555'. [ 154.951297][ T8024] Cannot find add_set index 0 as target [ 155.092664][ T8037] netlink: 'syz.4.563': attribute type 8 has an invalid length. [ 155.139599][ T8037] openvswitch: netlink: IPv4 tun info is not correct [ 155.576789][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 155.606292][ T8056] ksmbd: Unknown IPC event: 8, ignore. [ 156.110849][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 156.123335][ T8031] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 156.619131][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.570'. [ 156.890528][ T8088] netlink: 'syz.0.575': attribute type 1 has an invalid length. [ 157.461584][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.469136][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.555302][ T8091] batman_adv: batadv0: Interface deactivated: dummy0 [ 157.593751][ T8100] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 157.744298][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.779676][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.946087][ T8091] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.955278][ T8091] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.963898][ T8091] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.973316][ T8091] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.024219][ T8091] veth0_to_batadv: left allmulticast mode [ 158.030785][ T8091] vlan2: left allmulticast mode [ 158.046188][ T8091] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 158.056887][ T8091] macsec1: left promiscuous mode [ 158.066347][ T8091] macsec1: left allmulticast mode [ 158.348562][ T8099] tun1: tun_chr_ioctl cmd 35108 [ 158.384966][ T8100] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 158.909358][ T8124] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 159.034691][ T8125] netlink: 'syz.3.582': attribute type 64 has an invalid length. [ 159.056944][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 159.235071][ T8130] netlink: 'syz.0.583': attribute type 5 has an invalid length. [ 159.321117][ T8138] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 159.421945][ T8138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.492073][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 159.521085][ T8138] macvlan5: entered promiscuous mode [ 159.531498][ T8138] macvlan5: entered allmulticast mode [ 159.827743][ T29] audit: type=1107 audit(1741804302.939:9): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 160.167467][ T8164] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 160.314418][ T8164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.360715][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 160.402578][ T8173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.559015][ T8173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.624571][ T8173] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 160.909593][ T8194] ip6t_srh: unknown srh match flags 4000 [ 161.236162][ T8203] bond0: entered promiscuous mode [ 161.267088][ T8203] bond0: left promiscuous mode [ 161.344835][ T8208] netlink: 124 bytes leftover after parsing attributes in process `syz.1.605'. [ 161.647863][ T8216] FAULT_INJECTION: forcing a failure. [ 161.647863][ T8216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.693141][ T8216] CPU: 0 UID: 0 PID: 8216 Comm: syz.1.607 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 161.693174][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.693188][ T8216] Call Trace: [ 161.693198][ T8216] [ 161.693207][ T8216] dump_stack_lvl+0x241/0x360 [ 161.693240][ T8216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.693263][ T8216] ? __pfx__printk+0x10/0x10 [ 161.693285][ T8216] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 161.693326][ T8216] should_fail_ex+0x40a/0x550 [ 161.693362][ T8216] prepare_alloc_pages+0x1da/0x5b0 [ 161.693394][ T8216] __alloc_frozen_pages_noprof+0x16f/0x710 [ 161.693422][ T8216] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 161.693467][ T8216] alloc_pages_mpol+0x311/0x660 [ 161.693502][ T8216] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 161.693539][ T8216] vma_alloc_folio_noprof+0x12b/0x260 [ 161.693571][ T8216] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 161.693603][ T8216] ? do_raw_spin_unlock+0x13c/0x8b0 [ 161.693634][ T8216] folio_prealloc+0x2e/0x170 [ 161.693658][ T8216] do_wp_page+0x1253/0x49b0 [ 161.693705][ T8216] ? __pfx_do_wp_page+0x10/0x10 [ 161.693735][ T8216] ? __pfx_validate_chain+0x10/0x10 [ 161.693762][ T8216] ? __pfx_lock_acquire+0x10/0x10 [ 161.693789][ T8216] ? rcu_is_watching+0x15/0xb0 [ 161.693817][ T8216] ? do_raw_spin_lock+0x14f/0x370 [ 161.693842][ T8216] ? __pfx____pte_offset_map+0x10/0x10 [ 161.693891][ T8216] __handle_mm_fault+0x24d5/0x70f0 [ 161.693921][ T8216] ? mark_lock+0x9a/0x360 [ 161.693969][ T8216] ? __pfx___handle_mm_fault+0x10/0x10 [ 161.694011][ T8216] ? mt_find+0x2a9/0x920 [ 161.694044][ T8216] ? __pfx_lock_release+0x10/0x10 [ 161.694088][ T8216] ? mt_find+0x2a9/0x920 [ 161.694114][ T8216] ? mt_find+0x6c8/0x920 [ 161.694139][ T8216] ? mt_find+0x2a9/0x920 [ 161.694169][ T8216] ? __pfx_mt_find+0x10/0x10 [ 161.694215][ T8216] ? find_vma+0xf9/0x170 [ 161.694232][ T8216] ? __pfx_find_vma+0x10/0x10 [ 161.694250][ T8216] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 161.694284][ T8216] handle_mm_fault+0x3e5/0x8d0 [ 161.694327][ T8216] exc_page_fault+0x2b9/0x8b0 [ 161.694358][ T8216] asm_exc_page_fault+0x26/0x30 [ 161.694385][ T8216] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 161.694417][ T8216] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 161.694434][ T8216] RSP: 0018:ffffc90003507738 EFLAGS: 00050206 [ 161.694453][ T8216] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 00000000000055d0 [ 161.694468][ T8216] RDX: 0000000000000000 RSI: ffff88805b52ace8 RDI: 000040000000b000 [ 161.694482][ T8216] RBP: ffffc900035078b8 R08: ffff88805b5302b7 R09: 1ffff1100b6a6056 [ 161.694497][ T8216] R10: dffffc0000000000 R11: ffffed100b6a6057 R12: ffffc90003507e18 [ 161.694511][ T8216] R13: 1ffff920006a0fc3 R14: ffff88805b5200e8 R15: 00000000000101d0 [ 161.694550][ T8216] ? _copy_to_iter+0x1a1/0x1c40 [ 161.694600][ T8216] _copy_to_iter+0x260/0x1c40 [ 161.694624][ T8216] ? __virt_addr_valid+0x183/0x530 [ 161.694646][ T8216] ? __pfx_lock_release+0x10/0x10 [ 161.694688][ T8216] ? __pfx__copy_to_iter+0x10/0x10 [ 161.694715][ T8216] ? __virt_addr_valid+0x183/0x530 [ 161.694734][ T8216] ? __virt_addr_valid+0x183/0x530 [ 161.694752][ T8216] ? __virt_addr_valid+0x45f/0x530 [ 161.694774][ T8216] ? __check_object_size+0x47a/0x730 [ 161.694808][ T8216] __skb_datagram_iter+0x107/0x900 [ 161.694835][ T8216] ? __local_bh_enable_ip+0x168/0x200 [ 161.694859][ T8216] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 161.694887][ T8216] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 161.694915][ T8216] skb_copy_datagram_iter+0xd1/0x250 [ 161.694946][ T8216] tipc_recvstream+0x7a8/0xf80 [ 161.694987][ T8216] ? __pfx_tipc_recvstream+0x10/0x10 [ 161.695008][ T8216] ? aa_sock_msg_perm+0x91/0x160 [ 161.695049][ T8216] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 161.695074][ T8216] ? __pfx_tipc_recvstream+0x10/0x10 [ 161.695097][ T8216] sock_recvmsg+0x22f/0x280 [ 161.695131][ T8216] ____sys_recvmsg+0x1c6/0x480 [ 161.695165][ T8216] ? __pfx_____sys_recvmsg+0x10/0x10 [ 161.695215][ T8216] __sys_recvmsg+0x291/0x390 [ 161.695247][ T8216] ? __pfx___sys_recvmsg+0x10/0x10 [ 161.695286][ T8216] ? __fget_files+0x2a/0x410 [ 161.695333][ T8216] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.695368][ T8216] ? do_syscall_64+0x100/0x230 [ 161.695397][ T8216] ? do_syscall_64+0xb6/0x230 [ 161.695426][ T8216] do_syscall_64+0xf3/0x230 [ 161.695453][ T8216] ? clear_bhb_loop+0x35/0x90 [ 161.695485][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.695514][ T8216] RIP: 0033:0x7fedd2b8d169 [ 161.695532][ T8216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.695550][ T8216] RSP: 002b:00007fedd3aba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 161.695571][ T8216] RAX: ffffffffffffffda RBX: 00007fedd2da5fa0 RCX: 00007fedd2b8d169 [ 161.695585][ T8216] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 161.695598][ T8216] RBP: 00007fedd3aba090 R08: 0000000000000000 R09: 0000000000000000 [ 161.695611][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.695623][ T8216] R13: 0000000000000000 R14: 00007fedd2da5fa0 R15: 00007fffceb5fe18 [ 161.695656][ T8216] [ 162.704238][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 162.878524][ T8234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.058747][ T8240] sctp: [Deprecated]: syz.1.613 (pid 8240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.058747][ T8240] Use struct sctp_sack_info instead [ 163.444267][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'. [ 163.499031][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 163.537410][ T8259] netlink: 'syz.1.620': attribute type 32 has an invalid length. [ 163.554810][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 163.571072][ T8259] (unnamed net_device) (uninitialized): option coupled_control: invalid value (119) [ 163.656920][ T8264] FAULT_INJECTION: forcing a failure. [ 163.656920][ T8264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.670849][ T8264] CPU: 1 UID: 0 PID: 8264 Comm: syz.2.621 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 163.670876][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.670887][ T8264] Call Trace: [ 163.670894][ T8264] [ 163.670902][ T8264] dump_stack_lvl+0x241/0x360 [ 163.670931][ T8264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.670953][ T8264] ? __pfx__printk+0x10/0x10 [ 163.670975][ T8264] ? __lock_acquire+0x1397/0x2100 [ 163.671012][ T8264] should_fail_ex+0x40a/0x550 [ 163.671045][ T8264] prepare_alloc_pages+0x1da/0x5b0 [ 163.671075][ T8264] __alloc_frozen_pages_noprof+0x16f/0x710 [ 163.671101][ T8264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.671145][ T8264] alloc_pages_mpol+0x311/0x660 [ 163.671177][ T8264] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.671213][ T8264] vma_alloc_folio_noprof+0x12b/0x260 [ 163.671242][ T8264] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 163.671273][ T8264] ? do_raw_spin_unlock+0x13c/0x8b0 [ 163.671303][ T8264] folio_prealloc+0x2e/0x170 [ 163.671325][ T8264] do_wp_page+0x1253/0x49b0 [ 163.671369][ T8264] ? __pfx_do_wp_page+0x10/0x10 [ 163.671398][ T8264] ? __pfx_validate_chain+0x10/0x10 [ 163.671423][ T8264] ? __pfx_lock_acquire+0x10/0x10 [ 163.671449][ T8264] ? rcu_is_watching+0x15/0xb0 [ 163.671475][ T8264] ? do_raw_spin_lock+0x14f/0x370 [ 163.671499][ T8264] ? __pfx____pte_offset_map+0x10/0x10 [ 163.671546][ T8264] __handle_mm_fault+0x24d5/0x70f0 [ 163.671574][ T8264] ? mark_lock+0x9a/0x360 [ 163.671619][ T8264] ? __pfx___handle_mm_fault+0x10/0x10 [ 163.671679][ T8264] ? mt_find+0x2a9/0x920 [ 163.671704][ T8264] ? __pfx_lock_release+0x10/0x10 [ 163.671749][ T8264] ? mt_find+0x2a9/0x920 [ 163.671775][ T8264] ? mt_find+0x6c8/0x920 [ 163.671809][ T8264] ? mt_find+0x2a9/0x920 [ 163.671839][ T8264] ? __pfx_mt_find+0x10/0x10 [ 163.671886][ T8264] ? find_vma+0xf9/0x170 [ 163.671904][ T8264] ? __pfx_find_vma+0x10/0x10 [ 163.671920][ T8264] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.671956][ T8264] handle_mm_fault+0x3e5/0x8d0 [ 163.671999][ T8264] exc_page_fault+0x2b9/0x8b0 [ 163.672029][ T8264] asm_exc_page_fault+0x26/0x30 [ 163.672057][ T8264] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 163.672089][ T8264] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 163.672106][ T8264] RSP: 0018:ffffc90003407738 EFLAGS: 00050206 [ 163.672124][ T8264] RAX: ffffffff84f2ef01 RBX: 00000000000101d0 RCX: 00000000000045d0 [ 163.672139][ T8264] RDX: 0000000000000000 RSI: ffff888059e4bce8 RDI: 000040000000c000 [ 163.672152][ T8264] RBP: ffffc900034078b8 R08: ffff888059e502b7 R09: 1ffff1100b3ca056 [ 163.672167][ T8264] R10: dffffc0000000000 R11: ffffed100b3ca057 R12: ffffc90003407e18 [ 163.672182][ T8264] R13: 1ffff92000680fc3 R14: ffff888059e400e8 R15: 00000000000101d0 [ 163.672205][ T8264] ? _copy_to_iter+0x1a1/0x1c40 [ 163.672236][ T8264] _copy_to_iter+0x260/0x1c40 [ 163.672259][ T8264] ? __virt_addr_valid+0x183/0x530 [ 163.672281][ T8264] ? __pfx_lock_release+0x10/0x10 [ 163.672322][ T8264] ? __pfx__copy_to_iter+0x10/0x10 [ 163.672349][ T8264] ? __virt_addr_valid+0x183/0x530 [ 163.672368][ T8264] ? __virt_addr_valid+0x183/0x530 [ 163.672385][ T8264] ? __virt_addr_valid+0x45f/0x530 [ 163.672418][ T8264] ? __check_object_size+0x47a/0x730 [ 163.672448][ T8264] __skb_datagram_iter+0x107/0x900 [ 163.672472][ T8264] ? __local_bh_enable_ip+0x168/0x200 [ 163.672495][ T8264] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 163.672520][ T8264] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 163.672547][ T8264] skb_copy_datagram_iter+0xd1/0x250 [ 163.672574][ T8264] tipc_recvstream+0x7a8/0xf80 [ 163.672612][ T8264] ? __pfx_tipc_recvstream+0x10/0x10 [ 163.672631][ T8264] ? aa_sock_msg_perm+0x91/0x160 [ 163.672663][ T8264] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 163.672685][ T8264] ? __pfx_tipc_recvstream+0x10/0x10 [ 163.672705][ T8264] sock_recvmsg+0x22f/0x280 [ 163.672737][ T8264] ____sys_recvmsg+0x1c6/0x480 [ 163.672768][ T8264] ? __pfx_____sys_recvmsg+0x10/0x10 [ 163.672820][ T8264] __sys_recvmsg+0x291/0x390 [ 163.672847][ T8264] ? __pfx___sys_recvmsg+0x10/0x10 [ 163.672884][ T8264] ? trace_sys_enter+0x74/0x120 [ 163.672903][ T8264] ? __pfx_lock_release+0x10/0x10 [ 163.672942][ T8264] ? trace_sys_enter+0x74/0x120 [ 163.672960][ T8264] ? rcu_is_watching+0x15/0xb0 [ 163.672982][ T8264] ? trace_sys_enter+0x25/0x120 [ 163.673006][ T8264] do_syscall_64+0xf3/0x230 [ 163.673030][ T8264] ? clear_bhb_loop+0x35/0x90 [ 163.673060][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.673086][ T8264] RIP: 0033:0x7f4be958d169 [ 163.673102][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.673118][ T8264] RSP: 002b:00007f4bea351038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 163.673137][ T8264] RAX: ffffffffffffffda RBX: 00007f4be97a5fa0 RCX: 00007f4be958d169 [ 163.673150][ T8264] RDX: 0000000000001f00 RSI: 0000400000000500 RDI: 0000000000000004 [ 163.673163][ T8264] RBP: 00007f4bea351090 R08: 0000000000000000 R09: 0000000000000000 [ 163.673175][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.673186][ T8264] R13: 0000000000000000 R14: 00007f4be97a5fa0 R15: 00007ffc6831a178 [ 163.673215][ T8264] [ 164.499395][ T8273] netlink: 328 bytes leftover after parsing attributes in process `syz.0.624'. [ 164.508987][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 165.974783][ T8276] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 166.118625][ T8289] ip6gre1: entered promiscuous mode [ 166.940582][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 167.020581][ T8320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.295676][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 167.693402][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.085086][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 168.401086][ T8378] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 168.465565][ T8380] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 168.716854][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.657'. [ 168.827172][ T8396] netlink: 'syz.4.658': attribute type 1 has an invalid length. [ 169.033289][ T8405] FAULT_INJECTION: forcing a failure. [ 169.033289][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 169.066391][ T8405] CPU: 1 UID: 0 PID: 8405 Comm: syz.0.661 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 169.066431][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.066456][ T8405] Call Trace: [ 169.066462][ T8405] [ 169.066470][ T8405] dump_stack_lvl+0x241/0x360 [ 169.066500][ T8405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.066521][ T8405] ? __pfx__printk+0x10/0x10 [ 169.066553][ T8405] should_fail_ex+0x40a/0x550 [ 169.066586][ T8405] should_failslab+0xac/0x100 [ 169.066611][ T8405] ? skb_clone+0x20c/0x390 [ 169.066632][ T8405] kmem_cache_alloc_noprof+0x70/0x380 [ 169.066664][ T8405] skb_clone+0x20c/0x390 [ 169.066690][ T8405] __netlink_deliver_tap+0x3c4/0x7f0 [ 169.066729][ T8405] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.066755][ T8405] netlink_deliver_tap+0x19d/0x1b0 [ 169.066783][ T8405] netlink_unicast+0x7c4/0x990 [ 169.066815][ T8405] ? __pfx_netlink_unicast+0x10/0x10 [ 169.066838][ T8405] ? __virt_addr_valid+0x45f/0x530 [ 169.066858][ T8405] ? __phys_addr_symbol+0x2f/0x70 [ 169.066875][ T8405] ? __check_object_size+0x47a/0x730 [ 169.066905][ T8405] netlink_sendmsg+0x8de/0xcb0 [ 169.066945][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.066977][ T8405] ? aa_sock_msg_perm+0x91/0x160 [ 169.067011][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.067036][ T8405] __sock_sendmsg+0x221/0x270 [ 169.067064][ T8405] ____sys_sendmsg+0x53a/0x860 [ 169.067093][ T8405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.067113][ T8405] ? __fget_files+0x2a/0x410 [ 169.067144][ T8405] ? __fget_files+0x2a/0x410 [ 169.067180][ T8405] __sys_sendmsg+0x269/0x350 [ 169.067207][ T8405] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.067241][ T8405] ? do_sys_openat2+0x17a/0x1d0 [ 169.067294][ T8405] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.067326][ T8405] ? do_syscall_64+0x100/0x230 [ 169.067352][ T8405] ? do_syscall_64+0xb6/0x230 [ 169.067378][ T8405] do_syscall_64+0xf3/0x230 [ 169.067409][ T8405] ? clear_bhb_loop+0x35/0x90 [ 169.067440][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.067466][ T8405] RIP: 0033:0x7f6d82b8d169 [ 169.067483][ T8405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.067499][ T8405] RSP: 002b:00007f6d83ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.067520][ T8405] RAX: ffffffffffffffda RBX: 00007f6d82da5fa0 RCX: 00007f6d82b8d169 [ 169.067534][ T8405] RDX: 000000002004c0a0 RSI: 0000400000000100 RDI: 0000000000000003 [ 169.067546][ T8405] RBP: 00007f6d83ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 169.067558][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.067569][ T8405] R13: 0000000000000000 R14: 00007f6d82da5fa0 R15: 00007fffade77368 [ 169.067598][ T8405] [ 169.138838][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 169.158729][ T8410] netlink: 88 bytes leftover after parsing attributes in process `syz.4.663'. [ 169.221373][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 169.508661][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 169.565294][ T8423] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 169.576012][ T8422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.667'. [ 169.616071][ T8422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.667'. [ 169.706017][ T8436] netlink: 'syz.0.667': attribute type 12 has an invalid length. [ 169.979196][ T8444] ip6t_rpfilter: unknown options [ 170.060233][ T8449] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 170.211154][ T8456] FAULT_INJECTION: forcing a failure. [ 170.211154][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 170.233091][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: syz.2.677 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 170.233119][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.233131][ T8456] Call Trace: [ 170.233137][ T8456] [ 170.233145][ T8456] dump_stack_lvl+0x241/0x360 [ 170.233176][ T8456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.233197][ T8456] ? __pfx__printk+0x10/0x10 [ 170.233219][ T8456] ? __kmalloc_noprof+0xb5/0x4c0 [ 170.233247][ T8456] ? __pfx___might_resched+0x10/0x10 [ 170.233272][ T8456] ? aa_get_newest_label+0xff/0x6f0 [ 170.233300][ T8456] ? genl_get_cmd+0x19e/0xce0 [ 170.233324][ T8456] should_fail_ex+0x40a/0x550 [ 170.233357][ T8456] should_failslab+0xac/0x100 [ 170.233383][ T8456] __kmalloc_noprof+0xdd/0x4c0 [ 170.233408][ T8456] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 170.233429][ T8456] ? apparmor_capable+0x13b/0x1b0 [ 170.233452][ T8456] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 170.233481][ T8456] genl_rcv_msg+0x80b/0xec0 [ 170.233510][ T8456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.233556][ T8456] ? __pfx_lock_acquire+0x10/0x10 [ 170.233585][ T8456] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 170.233616][ T8456] ? __pfx___might_resched+0x10/0x10 [ 170.233652][ T8456] netlink_rcv_skb+0x206/0x480 [ 170.233680][ T8456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.233702][ T8456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.233741][ T8456] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 170.233782][ T8456] genl_rcv+0x28/0x40 [ 170.233800][ T8456] netlink_unicast+0x7f6/0x990 [ 170.233833][ T8456] ? __pfx_netlink_unicast+0x10/0x10 [ 170.233855][ T8456] ? __virt_addr_valid+0x45f/0x530 [ 170.233875][ T8456] ? __phys_addr_symbol+0x2f/0x70 [ 170.233893][ T8456] ? __check_object_size+0x47a/0x730 [ 170.233972][ T8456] netlink_sendmsg+0x8de/0xcb0 [ 170.234016][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.234059][ T8456] ? aa_sock_msg_perm+0x91/0x160 [ 170.234097][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.234126][ T8456] __sock_sendmsg+0x221/0x270 [ 170.234161][ T8456] ____sys_sendmsg+0x53a/0x860 [ 170.234194][ T8456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.234216][ T8456] ? __fget_files+0x2a/0x410 [ 170.234250][ T8456] ? __fget_files+0x2a/0x410 [ 170.234291][ T8456] __sys_sendmsg+0x269/0x350 [ 170.234319][ T8456] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.234358][ T8456] ? do_sys_openat2+0x17a/0x1d0 [ 170.234418][ T8456] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.234461][ T8456] ? do_syscall_64+0x100/0x230 [ 170.234492][ T8456] ? do_syscall_64+0xb6/0x230 [ 170.234521][ T8456] do_syscall_64+0xf3/0x230 [ 170.234547][ T8456] ? clear_bhb_loop+0x35/0x90 [ 170.234581][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.234610][ T8456] RIP: 0033:0x7f4be958d169 [ 170.234630][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.234649][ T8456] RSP: 002b:00007f4bea351038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.234672][ T8456] RAX: ffffffffffffffda RBX: 00007f4be97a5fa0 RCX: 00007f4be958d169 [ 170.234687][ T8456] RDX: 000000002004c0a0 RSI: 0000400000000100 RDI: 0000000000000003 [ 170.234701][ T8456] RBP: 00007f4bea351090 R08: 0000000000000000 R09: 0000000000000000 [ 170.234715][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.234727][ T8456] R13: 0000000000000000 R14: 00007f4be97a5fa0 R15: 00007ffc6831a178 [ 170.234760][ T8456] [ 170.650886][ T8463] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 171.067817][ T8475] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 171.093694][ T8474] batadv_slave_1: entered promiscuous mode [ 171.139260][ T8478] openvswitch: netlink: Actions may not be safe on all matching packets [ 171.153791][ T8480] xt_recent: Unsupported userspace flags (00000042) [ 171.178529][ T8478] netlink: 'syz.2.684': attribute type 39 has an invalid length. [ 171.376230][ T8490] netlink: 'syz.3.689': attribute type 39 has an invalid length. [ 171.929847][ T8521] bond0: (slave team0): Releasing backup interface [ 171.974353][ T8521] batman_adv: batadv0: Removing interface: dummy0 [ 172.060650][ T8521] bridge_slave_0: left allmulticast mode [ 172.103024][ T8521] bridge_slave_0: left promiscuous mode [ 172.108812][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.174014][ T8521] bridge_slave_1: left allmulticast mode [ 172.191619][ T8521] bridge_slave_1: left promiscuous mode [ 172.202575][ T8536] __nla_validate_parse: 4 callbacks suppressed [ 172.202594][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 172.223814][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.248295][ T8521] bond0: (slave bond_slave_0): Releasing backup interface [ 172.261068][ T8521] bond0: (slave bond_slave_1): Releasing backup interface [ 172.282529][ T8521] team0: Port device team_slave_0 removed [ 172.305793][ T8521] team0: Port device team_slave_1 removed [ 172.307678][ T8539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.311986][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.334454][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.349050][ T8521] bond2: (slave macvlan2): Releasing backup interface [ 172.420892][ T8525] vlan2: entered allmulticast mode [ 172.467031][ T8536] vlan0: entered allmulticast mode [ 172.534534][ T8536] gretap0: entered allmulticast mode [ 172.580904][ T8536] gretap0: left allmulticast mode [ 172.600070][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.703'. [ 172.625719][ T8546] netlink: 52 bytes leftover after parsing attributes in process `syz.3.706'. [ 172.652597][ T8552] netlink: 'syz.4.703': attribute type 7 has an invalid length. [ 172.673188][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 172.857738][ T8559] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 172.878374][ T8561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.945579][ T8567] batadv_slave_0: entered promiscuous mode [ 172.951679][ T8567] batadv_slave_0: entered allmulticast mode [ 173.316298][ T8580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.713'. [ 173.358964][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 173.408798][ T8582] validate_nla: 1 callbacks suppressed [ 173.408825][ T8582] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 173.409406][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 173.437179][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 173.457203][ T8586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.515643][ T8586] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 173.524524][ T8586] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 173.722275][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 173.770359][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 173.828254][ T8596] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 173.873928][ T8596] gretap2: entered promiscuous mode [ 173.912173][ T8610] macsec2: entered promiscuous mode [ 173.923332][ T8610] dummy0: entered promiscuous mode [ 173.929392][ T8610] macsec2: entered allmulticast mode [ 173.955269][ T8610] dummy0: entered allmulticast mode [ 174.009335][ T8610] dummy0: left allmulticast mode [ 174.015030][ T8610] dummy0: left promiscuous mode [ 174.395365][ T8629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.435162][ T8629] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 174.444112][ T8629] bond5: (slave macvlan5): Enslaving as an active interface with an up link [ 175.061720][ T8675] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.562421][ T8690] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 175.853325][ T8693] syz1: rxe_newlink: already configured on team_slave_0 [ 175.949628][ T8699] netlink: 'syz.2.746': attribute type 9 has an invalid length. [ 175.962107][ T8699] netlink: 'syz.2.746': attribute type 6 has an invalid length. [ 175.981558][ T8699] netlink: 'syz.2.746': attribute type 7 has an invalid length. [ 175.989797][ T8699] netlink: 'syz.2.746': attribute type 8 has an invalid length. [ 176.310540][ T8709] netlink: 'syz.2.749': attribute type 2 has an invalid length. [ 176.338847][ T8709] netlink: 'syz.2.749': attribute type 9 has an invalid length. [ 178.021550][ T8756] tipc: Started in network mode [ 178.037751][ T8756] tipc: Node identity 960b4bfbd472, cluster identity 4711 [ 178.050429][ T8756] tipc: Enabled bearer , priority 0 [ 178.143861][ T8771] pimreg: entered allmulticast mode [ 178.385768][ T8777] batadv_slave_0: entered promiscuous mode [ 178.392095][ T8777] batadv_slave_0: entered allmulticast mode [ 178.405788][ T8749] tipc: Disabling bearer [ 178.692258][ T8780] __nla_validate_parse: 8 callbacks suppressed [ 178.692300][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 178.721850][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 178.734535][ T8780] netlink: 'syz.3.764': attribute type 14 has an invalid length. [ 178.768055][ T8780] netlink: 'syz.3.764': attribute type 13 has an invalid length. [ 178.877479][ T8786] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 178.888228][ T8786] gretap3: entered promiscuous mode [ 178.897772][ T8786] gretap3: entered allmulticast mode [ 179.048829][ T8792] FAULT_INJECTION: forcing a failure. [ 179.048829][ T8792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.068482][ T8792] CPU: 1 UID: 0 PID: 8792 Comm: syz.2.769 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 179.068512][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.068528][ T8792] Call Trace: [ 179.068535][ T8792] [ 179.068543][ T8792] dump_stack_lvl+0x241/0x360 [ 179.068585][ T8792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.068607][ T8792] ? __pfx__printk+0x10/0x10 [ 179.068640][ T8792] ? snprintf+0xda/0x120 [ 179.068672][ T8792] should_fail_ex+0x40a/0x550 [ 179.068706][ T8792] _copy_to_user+0x31/0xb0 [ 179.068734][ T8792] simple_read_from_buffer+0xca/0x150 [ 179.068763][ T8792] proc_fail_nth_read+0x1e9/0x250 [ 179.068793][ T8792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.068824][ T8792] ? rw_verify_area+0x243/0x630 [ 179.068843][ T8792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.068871][ T8792] vfs_read+0x1f8/0xb40 [ 179.068892][ T8792] ? fdget_pos+0x254/0x320 [ 179.068921][ T8792] ? __pfx___mutex_lock+0x10/0x10 [ 179.068945][ T8792] ? __pfx_vfs_read+0x10/0x10 [ 179.068962][ T8792] ? do_sys_openat2+0x17a/0x1d0 [ 179.069002][ T8792] ? __fget_files+0x2a/0x410 [ 179.069030][ T8792] ? __fget_files+0x395/0x410 [ 179.069054][ T8792] ? __fget_files+0x2a/0x410 [ 179.069087][ T8792] ksys_read+0x18f/0x2b0 [ 179.069109][ T8792] ? __pfx_ksys_read+0x10/0x10 [ 179.069131][ T8792] ? do_syscall_64+0x100/0x230 [ 179.069156][ T8792] ? do_syscall_64+0xb6/0x230 [ 179.069181][ T8792] do_syscall_64+0xf3/0x230 [ 179.069203][ T8792] ? clear_bhb_loop+0x35/0x90 [ 179.069231][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.069255][ T8792] RIP: 0033:0x7f4be958bb7c [ 179.069274][ T8792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.069290][ T8792] RSP: 002b:00007f4bea351030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.069316][ T8792] RAX: ffffffffffffffda RBX: 00007f4be97a5fa0 RCX: 00007f4be958bb7c [ 179.069329][ T8792] RDX: 000000000000000f RSI: 00007f4bea3510a0 RDI: 0000000000000004 [ 179.069340][ T8792] RBP: 00007f4bea351090 R08: 0000000000000000 R09: 0000000000000000 [ 179.069351][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.069362][ T8792] R13: 0000000000000000 R14: 00007f4be97a5fa0 R15: 00007ffc6831a178 [ 179.069388][ T8792] [ 179.607673][ T8805] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 179.672671][ T8804] bond4: (slave gretap1): making interface the new active one [ 179.681263][ T8804] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 179.760274][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.809864][ T8808] team0: Port device bond0 added [ 180.937120][ T8839] ipt_ECN: cannot use operation on non-tcp rule [ 181.223203][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 181.238596][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 181.281475][ T8848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.313186][ T8848] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 181.322503][ T8848] bond4: (slave macvlan0): Enslaving as an active interface with an up link [ 181.485511][ T8860] netlink: 184 bytes leftover after parsing attributes in process `syz.3.786'. [ 181.525514][ T8861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.787'. [ 181.579479][ T8862] netlink: 48 bytes leftover after parsing attributes in process `syz.0.787'. [ 181.630845][ T8861] [ 181.633232][ T8861] ====================================================== [ 181.640250][ T8861] WARNING: possible circular locking dependency detected [ 181.647277][ T8861] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Not tainted [ 181.654401][ T8861] ------------------------------------------------------ [ 181.661434][ T8861] syz.0.787/8861 is trying to acquire lock: [ 181.667329][ T8861] ffff88807c024d28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 181.677619][ T8861] [ 181.677619][ T8861] but task is already holding lock: [ 181.684981][ T8861] ffff888061a4cd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 181.694646][ T8861] [ 181.694646][ T8861] which lock already depends on the new lock. [ 181.694646][ T8861] [ 181.705044][ T8861] [ 181.705044][ T8861] the existing dependency chain (in reverse order) is: [ 181.714058][ T8861] [ 181.714058][ T8861] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 181.722517][ T8861] lock_acquire+0x1ed/0x550 [ 181.727572][ T8861] __mutex_lock+0x19c/0x1010 [ 181.732696][ T8861] __dev_open+0x5cb/0x8a0 [ 181.737567][ T8861] netif_open+0xae/0x1b0 [ 181.742350][ T8861] dev_open+0x13e/0x260 [ 181.747044][ T8861] team_add_slave+0xabe/0x28a0 [ 181.752336][ T8861] do_set_master+0x579/0x730 [ 181.757456][ T8861] do_setlink+0xfee/0x40f0 [ 181.762412][ T8861] rtnl_newlink+0x15a6/0x1d90 [ 181.767627][ T8861] rtnetlink_rcv_msg+0x791/0xcf0 [ 181.773118][ T8861] netlink_rcv_skb+0x206/0x480 [ 181.778411][ T8861] netlink_unicast+0x7f6/0x990 [ 181.783698][ T8861] netlink_sendmsg+0x8de/0xcb0 [ 181.788989][ T8861] __sock_sendmsg+0x221/0x270 [ 181.794195][ T8861] ____sys_sendmsg+0x53a/0x860 [ 181.799483][ T8861] __sys_sendmsg+0x269/0x350 [ 181.804589][ T8861] do_syscall_64+0xf3/0x230 [ 181.809642][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.816063][ T8861] [ 181.816063][ T8861] -> #1 (team->team_lock_key){+.+.}-{4:4}: [ 181.824073][ T8861] lock_acquire+0x1ed/0x550 [ 181.829104][ T8861] __mutex_lock+0x19c/0x1010 [ 181.834221][ T8861] team_set_mac_address+0x122/0x280 [ 181.839950][ T8861] netif_set_mac_address+0x327/0x510 [ 181.845754][ T8861] do_setlink+0xaa6/0x40f0 [ 181.850697][ T8861] rtnl_newlink+0x15a6/0x1d90 [ 181.855905][ T8861] rtnetlink_rcv_msg+0x791/0xcf0 [ 181.861369][ T8861] netlink_rcv_skb+0x206/0x480 [ 181.866658][ T8861] netlink_unicast+0x7f6/0x990 [ 181.871965][ T8861] netlink_sendmsg+0x8de/0xcb0 [ 181.877254][ T8861] __sock_sendmsg+0x221/0x270 [ 181.882478][ T8861] __sys_sendto+0x363/0x4c0 [ 181.887525][ T8861] __x64_sys_sendto+0xde/0x100 [ 181.892823][ T8861] do_syscall_64+0xf3/0x230 [ 181.897858][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.904718][ T8861] [ 181.904718][ T8861] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 181.913271][ T8861] validate_chain+0x18ef/0x5920 [ 181.918747][ T8861] __lock_acquire+0x1397/0x2100 [ 181.924133][ T8861] lock_acquire+0x1ed/0x550 [ 181.929172][ T8861] __mutex_lock+0x19c/0x1010 [ 181.934303][ T8861] dev_set_mac_address+0x2a/0x50 [ 181.939762][ T8861] bond_set_mac_address+0x28e/0x830 [ 181.945489][ T8861] netif_set_mac_address+0x327/0x510 [ 181.951303][ T8861] do_setlink+0xaa6/0x40f0 [ 181.956248][ T8861] rtnl_newlink+0x15a6/0x1d90 [ 181.961457][ T8861] rtnetlink_rcv_msg+0x791/0xcf0 [ 181.966934][ T8861] netlink_rcv_skb+0x206/0x480 [ 181.972225][ T8861] netlink_unicast+0x7f6/0x990 [ 181.977544][ T8861] netlink_sendmsg+0x8de/0xcb0 [ 181.982840][ T8861] __sock_sendmsg+0x221/0x270 [ 181.988051][ T8861] ____sys_sendmsg+0x53a/0x860 [ 181.993342][ T8861] __sys_sendmsg+0x269/0x350 [ 181.998455][ T8861] do_syscall_64+0xf3/0x230 [ 182.003486][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.009911][ T8861] [ 182.009911][ T8861] other info that might help us debug this: [ 182.009911][ T8861] [ 182.020137][ T8861] Chain exists of: [ 182.020137][ T8861] &dev_instance_lock_key#12 --> team->team_lock_key --> &dev_instance_lock_key#2 [ 182.020137][ T8861] [ 182.035209][ T8861] Possible unsafe locking scenario: [ 182.035209][ T8861] [ 182.042677][ T8861] CPU0 CPU1 [ 182.048041][ T8861] ---- ---- [ 182.053406][ T8861] lock(&dev_instance_lock_key#2); [ 182.058620][ T8861] lock(team->team_lock_key); [ 182.065907][ T8861] lock(&dev_instance_lock_key#2); [ 182.073638][ T8861] lock(&dev_instance_lock_key#12); [ 182.078937][ T8861] [ 182.078937][ T8861] *** DEADLOCK *** [ 182.078937][ T8861] [ 182.087095][ T8861] 2 locks held by syz.0.787/8861: [ 182.092118][ T8861] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 182.101190][ T8861] #1: ffff888061a4cd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 182.111306][ T8861] [ 182.111306][ T8861] stack backtrace: [ 182.117216][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.0.787 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 182.117239][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.117251][ T8861] Call Trace: [ 182.117259][ T8861] [ 182.117266][ T8861] dump_stack_lvl+0x241/0x360 [ 182.117290][ T8861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.117309][ T8861] ? __pfx__printk+0x10/0x10 [ 182.117330][ T8861] print_circular_bug+0x13a/0x1b0 [ 182.117353][ T8861] check_noncircular+0x36a/0x4a0 [ 182.117375][ T8861] ? __pfx_check_noncircular+0x10/0x10 [ 182.117394][ T8861] ? lockdep_lock+0x123/0x2b0 [ 182.117424][ T8861] validate_chain+0x18ef/0x5920 [ 182.117452][ T8861] ? __pfx_validate_chain+0x10/0x10 [ 182.117471][ T8861] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.117521][ T8861] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 182.117539][ T8861] ? lockdep_hardirqs_on+0x99/0x150 [ 182.117559][ T8861] ? mark_lock+0x9a/0x360 [ 182.117576][ T8861] ? __lock_acquire+0x1397/0x2100 [ 182.117606][ T8861] ? mark_lock+0x9a/0x360 [ 182.117622][ T8861] __lock_acquire+0x1397/0x2100 [ 182.117654][ T8861] lock_acquire+0x1ed/0x550 [ 182.117678][ T8861] ? dev_set_mac_address+0x2a/0x50 [ 182.117697][ T8861] ? __pfx_lock_acquire+0x10/0x10 [ 182.117722][ T8861] ? __pfx___might_resched+0x10/0x10 [ 182.117746][ T8861] ? dev_set_mac_address+0x42/0x50 [ 182.117762][ T8861] ? __pfx_lock_release+0x10/0x10 [ 182.117789][ T8861] __mutex_lock+0x19c/0x1010 [ 182.117809][ T8861] ? dev_set_mac_address+0x2a/0x50 [ 182.117824][ T8861] ? notifier_call_chain+0x3cc/0x3f0 [ 182.117849][ T8861] ? __mutex_unlock_slowpath+0x227/0x800 [ 182.117869][ T8861] ? dev_set_mac_address+0x2a/0x50 [ 182.117885][ T8861] ? __pfx___mutex_lock+0x10/0x10 [ 182.117905][ T8861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.117929][ T8861] ? net_generic+0x1f/0x240 [ 182.117948][ T8861] ? net_generic+0x1f0/0x240 [ 182.117968][ T8861] dev_set_mac_address+0x2a/0x50 [ 182.117984][ T8861] bond_set_mac_address+0x28e/0x830 [ 182.118008][ T8861] ? __pfx_bond_set_mac_address+0x10/0x10 [ 182.118028][ T8861] ? hsr_netdev_notify+0x295/0xb50 [ 182.118053][ T8861] ? notifier_call_chain+0x15a/0x3f0 [ 182.118077][ T8861] ? notifier_call_chain+0x3cc/0x3f0 [ 182.118102][ T8861] netif_set_mac_address+0x327/0x510 [ 182.118122][ T8861] ? __pfx_netif_set_mac_address+0x10/0x10 [ 182.118141][ T8861] ? rcu_is_watching+0x15/0xb0 [ 182.118160][ T8861] ? trace_kmalloc+0x1f/0xd0 [ 182.118182][ T8861] ? do_setlink+0x7a7/0x40f0 [ 182.118199][ T8861] do_setlink+0xaa6/0x40f0 [ 182.118223][ T8861] ? __pfx_do_setlink+0x10/0x10 [ 182.118256][ T8861] ? __pfx___might_resched+0x10/0x10 [ 182.118298][ T8861] ? __pfx___mutex_trylock_common+0x10/0x10 [ 182.118320][ T8861] ? rcu_is_watching+0x15/0xb0 [ 182.118338][ T8861] ? trace_contention_end+0x3c/0x120 [ 182.118358][ T8861] ? __mutex_lock+0x397/0x1010 [ 182.118379][ T8861] ? __pfx_aa_get_newest_label+0x10/0x10 [ 182.118408][ T8861] ? rtnl_newlink+0xc4c/0x1d90 [ 182.118433][ T8861] ? __pfx___mutex_lock+0x10/0x10 [ 182.118457][ T8861] ? ns_capable+0x8a/0xf0 [ 182.118477][ T8861] ? rtnl_link_get_net_capable+0x168/0x340 [ 182.118511][ T8861] rtnl_newlink+0x15a6/0x1d90 [ 182.118536][ T8861] ? stack_depot_save_flags+0x37/0x940 [ 182.118568][ T8861] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.118592][ T8861] ? __netlink_deliver_tap+0x561/0x7f0 [ 182.118617][ T8861] ? __pfx_validate_chain+0x10/0x10 [ 182.118635][ T8861] ? __sock_sendmsg+0x221/0x270 [ 182.118657][ T8861] ? ____sys_sendmsg+0x53a/0x860 [ 182.118674][ T8861] ? __sys_sendmsg+0x269/0x350 [ 182.118690][ T8861] ? do_syscall_64+0xf3/0x230 [ 182.118711][ T8861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.118744][ T8861] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 182.118771][ T8861] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.118800][ T8861] ? mark_lock+0x9a/0x360 [ 182.118817][ T8861] ? __lock_acquire+0x1397/0x2100 [ 182.118855][ T8861] ? __pfx_lock_release+0x10/0x10 [ 182.118887][ T8861] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.118912][ T8861] rtnetlink_rcv_msg+0x791/0xcf0 [ 182.118936][ T8861] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 182.118962][ T8861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.118990][ T8861] ? ref_tracker_free+0x643/0x7e0 [ 182.119008][ T8861] netlink_rcv_skb+0x206/0x480 [ 182.119033][ T8861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.119058][ T8861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.119090][ T8861] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.119115][ T8861] netlink_unicast+0x7f6/0x990 [ 182.119140][ T8861] ? __pfx_netlink_unicast+0x10/0x10 [ 182.119160][ T8861] ? __virt_addr_valid+0x45f/0x530 [ 182.119177][ T8861] ? __phys_addr_symbol+0x2f/0x70 [ 182.119192][ T8861] ? __check_object_size+0x47a/0x730 [ 182.119217][ T8861] netlink_sendmsg+0x8de/0xcb0 [ 182.119247][ T8861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.119274][ T8861] ? aa_sock_msg_perm+0x91/0x160 [ 182.119301][ T8861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.119325][ T8861] __sock_sendmsg+0x221/0x270 [ 182.119349][ T8861] ____sys_sendmsg+0x53a/0x860 [ 182.119371][ T8861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.119388][ T8861] ? __fget_files+0x2a/0x410 [ 182.119414][ T8861] ? __fget_files+0x2a/0x410 [ 182.119442][ T8861] __sys_sendmsg+0x269/0x350 [ 182.119459][ T8861] ? __pfx_futex_wake+0x10/0x10 [ 182.119492][ T8861] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.119527][ T8861] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.119554][ T8861] ? do_syscall_64+0x100/0x230 [ 182.119576][ T8861] ? do_syscall_64+0xb6/0x230 [ 182.119598][ T8861] do_syscall_64+0xf3/0x230 [ 182.119618][ T8861] ? clear_bhb_loop+0x35/0x90 [ 182.119644][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.119668][ T8861] RIP: 0033:0x7f6d82b8d169 [ 182.119684][ T8861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.119699][ T8861] RSP: 002b:00007f6d83ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.119717][ T8861] RAX: ffffffffffffffda RBX: 00007f6d82da5fa0 RCX: 00007f6d82b8d169 [ 182.119730][ T8861] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000008 [ 182.119741][ T8861] RBP: 00007f6d82c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.119753][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.119763][ T8861] R13: 0000000000000000 R14: 00007f6d82da5fa0 R15: 00007fffade77368 [ 182.119781][ T8861] [ 182.753813][ T8861] bond_slave_0: left promiscuous mode [ 182.759526][ T8861] bond0: entered promiscuous mode [ 182.774994][ T8861] bond_slave_0: entered promiscuous mode [ 182.803397][ T8861] team0: entered promiscuous mode [ 182.808499][ T8861] team_slave_0: entered promiscuous mode [ 182.814411][ T8861] team_slave_1: entered promiscuous mode