last executing test programs: 7.531683447s ago: executing program 2 (id=2956): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f00000001c0)='x', 0x1, 0x8091, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b0006006500"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000180)=0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) socket$inet6(0xa, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"/2169], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r10}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.066479969s ago: executing program 2 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400006000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 4.475672156s ago: executing program 1 (id=2984): unshare(0x42000000) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r2, 0x89e8, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3a) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) 3.561370074s ago: executing program 1 (id=2991): socket$xdp(0x2c, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0381, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3}, 0x8) close(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x2, 'veth0_to_batadv\x00'}) 3.161715086s ago: executing program 1 (id=2995): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x11, 0x4a, 0x1, 0x1, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x0, 0x1, @private1}]}, 0x24}}, 0x4040090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) splice(r0, &(0x7f0000000600)=0x5, r0, &(0x7f0000000640)=0x7, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x140, 0x18c, 0x203, 0x140, 0x19030000, 0x230, 0x2e0, 0x2e0, 0x230, 0x2e0, 0x3, 0x0, {[{{@ipv6={@mcast1, @loopback, [0xff000000, 0xffffff00, 0xff0000ff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 'pim6reg1\x00', 'tunl0\x00', {}, {}, 0x6c, 0x9, 0x0, 0x12}, 0x300, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x2, 0x2, 0x0, [0x8, 0x0, 0x2, 0x4, 0x1, 0x8c, 0x9, 0xfff8, 0x6, 0x9, 0x0, 0x7fff, 0x6, 0x2, 0xfe01, 0x9], 0x9}}, @common=@hl={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'xfrm0\x00'}) 3.003741964s ago: executing program 0 (id=2997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) epoll_create(0x7ff) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="1700000001a401000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000002fc0)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x159, 0x1, {{0x1e, 0x4, 0x1, 0x0, 0x78, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop, @lsrr={0x83, 0xb, 0x56, [@broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x4, [{@empty, 0x8}, {@loopback, 0x6}, {@broadcast, 0x7ff000}, {@multicast1, 0x2}, {@broadcast, 0x400}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}]}, @noop, @generic={0x86, 0xf, "136628ba987e3e784a47f31cad"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xd6, 0x0, 0x0, [0x5]}]}}}}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9, @null, @bpq0, 0x8, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x53}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000200001002abd7000fcdbdf250a00141c050000ff030000000000000000000000000000000000ffffac1414aa050016001d0000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x3}, 0x6}) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) bind$inet6(r7, &(0x7f0000000800)={0xa, 0xe22, 0x0, @mcast2, 0xffffffff}, 0x18) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @empty}, {0x1, @local}, 0x2a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) recvmmsg(r5, &(0x7f0000002f00)=[{{&(0x7f0000000240)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000700)=""/177, 0xb1}], 0x6, &(0x7f0000000300)}, 0x100}, {{&(0x7f00000018c0)=@ax25={{0x3, @rose}, [@remote, @rose, @rose, @netrom, @rose, @null, @rose, @rose]}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001940)=""/155, 0x9b}, {&(0x7f00000007c0)=""/37, 0x25}, {&(0x7f0000001a00)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/103, 0x67}], 0x5, &(0x7f0000002bc0)=""/40, 0x28}, 0x6}, {{&(0x7f0000002c00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c80)=""/225, 0xe1}, {&(0x7f0000002d80)=""/62, 0x3e}, {&(0x7f0000002dc0)=""/144, 0x90}], 0x3, &(0x7f0000002ec0)=""/29, 0x1d}, 0x7}], 0x3, 0x12140, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x4000) 2.73473593s ago: executing program 1 (id=2998): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000902000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 2.42118159s ago: executing program 1 (id=3000): unshare(0x42000000) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25CTLCON(r2, 0x89e8, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3a) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) syz_genetlink_get_family_id$nl80211(0x0, r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) 2.216880452s ago: executing program 3 (id=3003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r0, 0x0, 0x0}, 0x20) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x100800) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xb8, 0xb8, 0x200, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @empty, 0xff000000, 0xffffffff, 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0xff}, 0x84, 0x2, 0x9}, 0x287, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r3, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xa7, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xa7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xff80, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r5}, 0x18) 2.095486656s ago: executing program 3 (id=3004): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x30, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK, @IPSET_ATTR_ETHER={0x0, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IFACE={0x0, 0x17, 'veth0\x00'}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}]}, 0x26}}, 0x40c4) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0xc}, {}, {0xa, 0x2}}}, 0x24}}, 0x404c080) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x5, 0x4}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x2, 0xa, 0x9a807f839144420f, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.877383751s ago: executing program 4 (id=3005): socket$xdp(0x2c, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$can_bcm(0x1d, 0x2, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0381, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xb, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x2}, {0xf, 0xc}, {0xf, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x24000000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x104, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd4, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x7, 0x0, 0x8, 0x8001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x11, 0xfffffffc, 0x0, 0xbac}}, @NETEM_LOSS_GE={0x14, 0x2, {0xa, 0x1, 0x1, 0x8001}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x800, 0xc}}, @TCA_NETEM_DELAY_DIST={0x33, 0x2, "9f2b57f6fd6d293bfe5b6d9a96ed3dddee6b7e412e5f234d15c69e5d9c27c84e38c1aec4c41bc1aca5f6f367d423db"}, @TCA_NETEM_CORR={0x10, 0x1, {0x7, 0xd654, 0x101}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x0, 0xfffffffb, 0x7}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000100000000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) 1.586504891s ago: executing program 4 (id=3006): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[], 0x10}}, {{&(0x7f0000000900)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x18}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c80)=[{0x0}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000fc0)=[{0x0}], 0x1}}, {{&(0x7f0000001140)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001200)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x7, 0x2804) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.442664985s ago: executing program 4 (id=3007): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000ac0)=""/4080, 0x103b}], 0x1}}], 0x1, 0x22041, 0x0) 1.406752372s ago: executing program 0 (id=3008): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.404997302s ago: executing program 1 (id=3009): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000002002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 1.2361704s ago: executing program 2 (id=2966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x80) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0x8}, 0x8) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000011000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x2000004) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) 1.191613035s ago: executing program 4 (id=3010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) listen(r1, 0x1ff) (async) r2 = accept(r1, 0x0, &(0x7f0000000040)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0x9f, 0x3ff, @vifc_lcl_addr=@empty, @remote}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="45fe", 0x2, 0x240448c0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x3, &(0x7f0000000000)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x94}, 0x20000000) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1.077372709s ago: executing program 3 (id=3012): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x2, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x4e22, [0xc, 0x9, 0x81], [0x0, 0xfffffff9, 0x2], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x2c, 0x65, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x3}, {0xf, 0xfff1}, {0xb, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x9e}}]}, 0x2c}}, 0x0) 964.1917ms ago: executing program 4 (id=3013): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[], 0x10}}, {{&(0x7f0000000900)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x18}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c80)=[{0x0}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000fc0)=[{0x0}], 0x1}}, {{&(0x7f0000001140)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001200)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x7, 0x2804) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 900.937921ms ago: executing program 2 (id=3014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000380080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480"], 0xd4}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040815}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r8) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x1, 0x70bd05, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4040080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r9, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x20048000) 898.243171ms ago: executing program 0 (id=3015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400016000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 791.544031ms ago: executing program 3 (id=3016): socket$xdp(0x2c, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0381, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) close(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x2, 'veth0_to_batadv\x00'}) 713.211288ms ago: executing program 4 (id=3017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400010000"], 0x14}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000009}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000085c0)={0x6, 0x3, &(0x7f0000006ac0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x8000001, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xe, 0x0, &(0x7f0000000540)="4287e3db1be1bd62277a91c8b559", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@dev, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=@delchain={0xa18, 0x65, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff3}, {0xd}, {0x2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x35}}, @filter_kind_options=@f_flower={{0xb}, {0x174, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x100}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x63}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x87}, @TCA_FLOWER_ACT={0x138, 0x3, [@m_vlan={0xcc, 0xf, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5ad}]}, {0x97, 0x6, "4c443b2b2109f7219f87b1f5d65174bd36c448991d328972ed229ec9eb450b1acade21541f0e62d31c2bb27fc0e9f7162374a2d4715d373054a8f0c20f39dd159a7922801e6a91c4203786cbd2c632070263cde4f130624bb7bcca481cd568c47ba2d9f36a50bdb0248d135cdafdb4c47e92543a4eb5dcd62b41ac04e81131332e19c40dfaed8c395ce1e7a4665eb383294b5b"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x68, 0x15, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xffff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x726f}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x61f}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xffff}}]}, {0x13, 0x6, "801fd5d824d71bf770ca023d5eec3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @remote}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0x830, 0x2, [@TCA_FLOW_POLICE={0x824, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xff, 0xf4f, 0x6, 0x60, 0x8f6, 0x6, 0x10, 0x80, 0x100, 0x8, 0x44f, 0xa6, 0x101, 0xd422, 0x30, 0xf4, 0x0, 0xf, 0x7, 0x57, 0x80000000, 0xfffffffa, 0x100, 0x6, 0x6, 0x7, 0x1, 0x5, 0x4, 0x6791f5a0, 0xff, 0x0, 0xf2c, 0x32, 0xeb0d, 0x9a, 0x0, 0x8, 0x7ff, 0x5, 0xcf900, 0x6, 0x1, 0xffffffff, 0x7, 0x2, 0x10001, 0x0, 0x3, 0xff, 0x200, 0xff, 0xc, 0x400, 0x80000000, 0x6, 0x3ff, 0x6, 0x2, 0x1, 0x1, 0x9, 0x3, 0x4, 0x4, 0x1d3, 0x4, 0x7, 0xd22, 0x7, 0x8, 0x8, 0x80, 0x7fffffff, 0x8, 0x6, 0x7ff, 0xbc9, 0x3, 0x6, 0x5, 0x0, 0xfffffe79, 0x7, 0x5, 0x10000, 0x9, 0x101, 0xe1, 0x1, 0x5, 0x6, 0xcef3, 0xe, 0x1ff, 0xf49, 0x1000, 0x4, 0x7, 0x2, 0x9b85, 0x2, 0x120000, 0x6, 0x10000, 0x7, 0xffff, 0x2, 0x9, 0x4, 0x3, 0x0, 0x9c, 0xaded, 0xe, 0x401, 0x1, 0x6, 0x9, 0x9, 0x9cb5, 0x3, 0x8, 0x0, 0x2, 0x99d, 0x8, 0x4, 0x0, 0x5, 0xfffff05c, 0xb0, 0x8000, 0x6c3c, 0xbb77, 0x9, 0x6, 0x59, 0x7, 0x10000, 0x4, 0xdd, 0x68, 0x4, 0x3, 0x7, 0xe9, 0x6ec, 0x40, 0xb, 0x1ff, 0x4, 0x6, 0x3, 0x7, 0xffffb479, 0x100, 0x7, 0xff, 0x5, 0x2, 0x53c5, 0x7, 0x2, 0x80000000, 0x9, 0x6, 0xab5c, 0x10001, 0x2, 0x7, 0x6, 0xa21, 0x35e0, 0x3, 0x1, 0x0, 0x1944343e, 0x8, 0x100, 0x3c13, 0x0, 0xa8000000, 0x3, 0xfffffffb, 0xa6, 0x5, 0x8, 0x1, 0x1000, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x2, 0x2, 0x200, 0x0, 0x20, 0x2, 0x1, 0x8, 0x8bdb, 0x8, 0x200, 0x1, 0xffffffff, 0x40, 0xe, 0x0, 0x2, 0x8d, 0x7, 0xff, 0xfffffff8, 0x800, 0x1, 0x0, 0x4, 0x4, 0x7f, 0x101, 0x3, 0x6, 0x196b, 0x7, 0x5, 0x1ff0, 0x6, 0x0, 0x11a5, 0x80000000, 0x0, 0x1, 0x0, 0x101, 0xb0cb, 0x800, 0x6, 0x3, 0x7, 0x0, 0x5, 0x3, 0x1000, 0x1, 0xfffffffa, 0xffff, 0x4, 0xffffffff, 0x5, 0x1ff, 0x8e8, 0xa1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x6, 0x3, 0x100000, 0x7, 0x7, 0x2, 0x9f, 0x80, 0x9, 0x9, 0x4, 0xffffff82, 0x6, 0x6, 0xa, 0x1b, 0x5, 0x8, 0x558, 0x4, 0x101, 0x27, 0x6, 0x401, 0x9, 0x8, 0x73ec, 0x11b2, 0x3, 0xf08, 0x5, 0xfffeffff, 0x8e, 0x6, 0xd6d, 0x40, 0x3, 0xfffffff9, 0x2, 0x3, 0x4b6, 0x8, 0x3, 0x2, 0x4, 0x4, 0x26a, 0x1, 0xa416, 0x1e21, 0x9, 0x0, 0x6, 0x7, 0xffff, 0x4, 0x2, 0x3, 0x1ff, 0x100, 0xd1cecfe, 0x8, 0x1, 0x2, 0x8, 0xd, 0x6, 0xcc, 0x9, 0x80, 0x100, 0xfffffffb, 0x9, 0xfffffffe, 0xd851, 0x3, 0xb8, 0x38, 0x8, 0x2afa, 0x40, 0xf, 0xc1e, 0x4, 0x7, 0x3, 0x10001, 0xeb, 0x6, 0x0, 0x0, 0x6, 0x1, 0x7f, 0x400, 0x5, 0x3, 0x9, 0x781, 0x8, 0x8, 0x75f5fc3a, 0x10, 0x9, 0x7, 0x3, 0x2, 0x8f, 0x3, 0x7, 0x6, 0x80000000, 0xa, 0x1, 0xe047, 0x2, 0x4, 0x9, 0x0, 0x6, 0x7, 0x200, 0xfffffffb, 0xb81, 0x4, 0x2, 0x4, 0x7, 0x1, 0x7, 0xc, 0x3, 0x4, 0x9, 0x7f, 0xfffff001, 0x0, 0x7fffffff, 0x0, 0x431, 0xff, 0x1, 0x9, 0x0, 0x6, 0x18c, 0x10001, 0x8001, 0x7, 0x9, 0x2, 0x4, 0x3, 0x6, 0xca, 0x2, 0xd4, 0xfffffff8, 0x8, 0x6, 0x75, 0x6, 0x72bf, 0xffffffff, 0x7, 0x4, 0x3ff, 0x2, 0x6, 0x7acd55d3, 0x4, 0x5, 0x30000, 0xd7cf, 0x3, 0x7fff, 0x4, 0x1, 0xf1, 0x5, 0xfff, 0x4, 0xc7, 0x7, 0x0, 0x80000000, 0x8, 0x3, 0x1000, 0xcb, 0x5f, 0x100, 0x7, 0xc, 0x79, 0x7, 0x8000, 0xfffffff8, 0xfff, 0x200, 0x2, 0xfffffff8, 0x804b, 0xfffffffb, 0xfe, 0x1ff, 0x1, 0x7fffffff, 0x51171783, 0x9, 0x9, 0xfffffff8, 0x9, 0x4, 0x0, 0x2, 0x1, 0x5, 0x401, 0x80000000, 0x7, 0x80000000, 0xff, 0x8, 0x8, 0x4, 0x5, 0x0, 0xf, 0x2, 0x9, 0x0, 0xffffff01, 0x2, 0xbfd9b3b, 0x6, 0x6, 0x80, 0x3ff, 0x2, 0x9, 0x800, 0x5e8f, 0x0, 0x2, 0x8, 0x10001, 0x2, 0x3ff, 0x38, 0x0, 0xfff, 0x5, 0x7fff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_FLOW_MODE={0x8}]}}]}, 0xa18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002a40)={'vlan0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000008400)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0x7, @loopback, 0x7fff}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="6ca48f1ab4dc7095e5b7b2477b495fe523e7a9bf1a96217f3958ad94f7f528939bbd0718a7bb59c21a09a3d3dc36a3884b813fba9b30ccb3", 0x38}, {&(0x7f0000001100)="db2532477c1f84097c707fcaefd6d01c1e3c9414d0237758125ebd739994e219bad69de852b1e1c65866ef5c24a1273dd1304d17ae285f593be8c3609e458dff7a49586c5ab10b457a6bcab33993b3135650b3474e9063772433c00cac185a5b018a2d62b3e8c9a25ce79e5d4c33cbf2ae8e88752711a013855011695517367f47529c714b63b39466162572ee97379fc8ccdf9f8cf936a6870ffc8330dabf3d4c461846eaf6af", 0xa7}, {&(0x7f00000011c0)="01355eb2e0c8cc8d414a5a5900901decaf578107e5714fda1331a2908c429deca347a4f312c48ecae3f5b48464494167cefb88eb070ac4869a333c6c33ea787a67ac6183c30cee8f28460dd87a9247f270a47273bc5af5f52b12431c62c1adb46f", 0x61}, {&(0x7f0000001240)="fca76c6a74605679bcc9a223", 0xc}], 0x4, &(0x7f00000012c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf04}}, @hoplimit={{0x14, 0x29, 0x34, 0x1000}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x33, 0x20, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0x7b6a}, @pad1, @pad1, @generic={0x4, 0xee, "45156cc85a906a4d4af9192d47014cdd6fdf5bf0eed9ba7fe8a014a744c77c092f63b88d44822c5a5df44bb73b29d6b18d36d770dd3901376dceec3b2af83eea690b8389bd30e3c5b9f3fae0e4382980064c3c74c5562f58d50eb4ba3f972427a09ea334d003c2a0ab91d6368c6e4375e19b3b281948300d62e3ae79df1b1033a3832ba0f7717ca442efca485a9e3eaabbf4f80c6efc134f3dc65bbd0ba6d8a1dfdfead93abcc3e592ba1aa1732009993caccdfb09d77e7e93262826597dbdcf0411783bd2e094b0162b85e77f25ede3a7f76447dc843722ef6a2988019dee540268aa4cf05b94211e694d19ba6b"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf0}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x1c0}}, {{&(0x7f0000001480)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400e}, 0x1c, &(0x7f00000029c0)=[{&(0x7f00000014c0)="1e07ba4929c17ddf87e5a2a7be10d5768a14c4d3bfeef70e9687feca927989f9dbc63ae8026dc24319e646962c836c4c1df44c2c191781230626c6d293c6b2f62e5ddd884aa741c12a25ea3a86eac198ec0256c83619e71299290dd5543b23156d9471cea0572c9192bd6db72c6229798d7adbdf08d37ddaa0a2ab10262c80f5154ef99d8be8c2a7becd412f5a81ebd3816f761bd8a9672c36ad2d6501ebec8ff03131444a3e4d7a1c122f311e035803407dab254a5afc5c77af49f36db51529b4cfded92376a7c762dde6e3f692196746850c0e9d100495527549c127d5f0cf692a21726b7b8532df8c5500ffc33308816aaa12", 0xf4}, {&(0x7f00000015c0)="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", 0xfa}, {&(0x7f00000016c0)="f1e90fac5a06e6d2bdcfc74581bc3c8ba7ed0f2512ee00f4fcfe4b9eb3a84ab61519380893b1cd0240dd7b7aa20dbe04485c99e0bb6955e075519cf47e4411483e31d5ca60b86da7d19dd92d79b2c8bb79aa8130a7915979f506f16248077402d4f111d1167d9e86f9b96554980b687577c0a916c6787928c28c07a439154d05c7ed9f0e635c1bf6b035ffa32027c67519921bdde1c46414e96262e9284a42512343f194989b5419abeb9d612a0f125df70ea6e8f746b493c3151a0d8ccd7e7793c58bee2211428ed6cd8c3a1c3be7ead1a1e933ee964d1ead6acb34560ac07df11fc93d8ed3cf3014b30d87581b5fcac3af1a723a654f430e", 0xf9}, {&(0x7f00000017c0)="69c83b987339afd96ddd58ea56b85002cdcda97e373e642bbf8a3704d616d208c32de287e6a44a86d45be26eaa1227006e91826e2dbce19be67994c4955a44c100af1b5b144cf1eb56052b7cb56621061fa0b77cc3c463b557b6b86d6a04a65a9723c505b4733688b175a0741e9c5552cf7ae56b4c725b3a9d7bd027fe0bb1262241bea3f1ef2ef9b13b725db206a6a2ed295f8f6aac2d9a02ec2605a29b241948d852317d9bfc940a3476e32fb2e31bce7727d9b885bf2ec80562738ae17cee8076c5542786f07cbb61f86b24dd396b87d3a774080aa1e93f8748ed959e2779198fe7b7c2959c6700d6fc4334799ec84a8e15", 0xf3}, {&(0x7f00000018c0)="909ebe15b708d747803f116b6c2cae818076ec473ea3c52f31e1a9a9411911c833b346a678026223401a1a17471ed6d86e8cc1b1d578557df201e9384b837683907146dd4314871b1c4ac1ad6c6fe1e12905bbcf06505c075496e1c078eedeb70ba1df3f6ff63ec702bd6b5299a866d370bdbb3d89763c32492817d4af6cf3", 0x7f}, {&(0x7f0000001940)="77b26a9d736a3b08fa1a31fa85857aeeec6b7d100479865433e14607008ad0e962071be8ae4ffb25e6ff719dc040778e537093f7a37bc89dcb1194ccdcffcca32664ad6bea21142b", 0x48}, {&(0x7f00000019c0)="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", 0x1000}], 0x7, &(0x7f0000002a80)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r7}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x0, 0xff, 0x0, [@loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x56}}, @dstopts={{0x110, 0x29, 0x37, {0x11, 0x1e, '\x00', [@generic={0x81, 0xc6, "ce1cd86229a2068c3047157254b3324592f947051758097f00304f6c548dcafb5156055df08e3b4dffbf5e4d4e1a9238be917ec934ed4b00f383688f20133c3febb12ae4f347a3ed3435e800a03aff206aef949fdefb97e3055a75afbb46fd50aea67057eb5745e9a85a684d007d8fb9a0508a4a99f5b382085ced3ae92a08fce70c26459637f4901ab1ccebd056fdc91a7c0ee53ec6bfa8021ca553a9cf9ac2b6fe66458c00d1fc3dde4237c68d12665b9281f36dfe7e47c6bf636f3442c77e6d7901dd9718"}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xfffffff9}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x0, [0x10, 0xc, 0x6]}}]}}}, @hopopts={{0x50, 0x29, 0x36, {0x6, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x4000}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xd98}, @pad1, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @rthdrdstopts={{0x1080, 0x29, 0x37, {0x2c, 0x20c, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @generic={0x2, 0x1000, "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"}, @generic={0x80, 0x2c, "0446bbf9089c61ecbd2a5173640cb123fd8e55f28b807b91b1ff9d135059db68ecc195e976bb682402744043"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xfff4}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x19}]}}}, @tclass={{0x14, 0x29, 0x43, 0xd}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}], 0x12e0}}, {{&(0x7f0000003d80)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}, 0x1c, &(0x7f0000004e80)=[{&(0x7f0000003dc0)="dbd0d02ab7210e41639baf8208b0f2c1650bbe2447f3b70b4ec1ef9b87e4e8ad043bbb024321439e7be4443686e9430d62e31c03b7c45ada72d15c47ee", 0x3d}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="0c7ba93fd815f4d9a378fb382c5703c2aac3eec524e2478599dbf4b293ceeecb7e9ddc1e75a481405d2d815557b180c705123b00b3a193f8b5ea50ea0509456e5d575b87cad21d3d97dd31fb39", 0x4d}], 0x3}}, {{&(0x7f0000004ec0)={0xa, 0x4e20, 0xbcf, @private0={0xfc, 0x0, '\x00', 0x2}, 0x52b}, 0x1c, &(0x7f0000004f40)=[{&(0x7f0000004f00)="4700519035dacf021738559efee907347856d6", 0x13}], 0x1, &(0x7f0000004f80)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x0, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}, {{&(0x7f0000004fc0)={0xa, 0x4e20, 0x4, @empty, 0xff}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000005000)="2f4f85314c466108e011734c415bdcdc20d9ed377c453d91ad23ba82d9806c66c1c3536951a6d29a2951b251e9663c52a5b498949a2e0674754bd49f2b0d89929c91b835a3d9f7873616ac40909dc3249f96b508074b616404b219dbf54d0fe279121431113ad08901b4c6ee8e9322f48254877ede285b2c91e0755d85e26d97a7dcba", 0x83}, {&(0x7f00000050c0)="3ae63f2a8e7be5cb50e9d15311785f0b6163f0d9e3c0727f1b51d6c2c6a638362419580d10f735d327f1701c31ef9c48a0a6f26d0247936f0cc37ecd9263b7992a9c280445", 0x45}, {&(0x7f0000005140)="827764db6b23111bd6f9dc197589a1eb66a986fca73e6dca7d93bb970a26229ee7cdbcecf3c6a9f94e51018d40b8fd5160ba41aa745f283932d4d8fccdd436be2224de8eb8768d0ef51389efd034d697196a29c9fd6bbd1d9ecbc642bf8f7d356d58647f39aea1b2f3f6a765c95356386d70", 0x72}, {&(0x7f00000051c0)="46a0edeeb96698f18b43b4a802b936093d0c2c621e14d01fb534a08b2fcb6991dea4e4200f7f93f924e8062d386ab0db9ddab163921ca3384fa3502f9e6fa06fdb25b9f7581b", 0x46}, {&(0x7f0000005240)="7c0556ce7af1fee1b5834e7598ae6cdc87617590c2e648eb1cd8069a9048dda56a356ee076b90a4c40132ad6ac27fbdb76d3b04667149d714dcacaf6fda3edca4ca6aa0d771f618a19a2e915a23149b41a3cce094136f8a8baee4cd23305e3ec1dd2b54ad23e08329d115ac3b769c2949239dcc06ed48d96a857e602e3d0165dab9981740142fb0595030834ec11526bd21fc6569d346569b95a615e51723dcd33b90c4d3578b312fbaba2974a9493f5aa5e87cb30efe95a766356498d252c30f025f75f7670d8d6e18730f37ec378fc8eec37d8523f6856846e354230881c6110117dab08b9a00d24", 0xe9}, {&(0x7f0000005340)="333a15d2a4556ceefbbe192d43ac4c8de3cff421b6e0a2d55307350a092c2d6ca3f08284f60598f2603227a1bbad0b848c44eefd794a86142777ef4f367d3d0a4da923d2f27918e7f28bea1b87119d2b8a73168a6e98c7339aee937c99a8f65bd7730072acba3d52e931415ad05389283f31ac2f806b259f5c52af58b31c523dab16c5556c38248c0d99e54168c12ab3d0c861f868ba2a4cdc9fc429de49fdd96fe617aaccb85dff4294a5b39fbf9f313932ce37de55962a310858768490543d78c7fbdeb899629349dcb721dd", 0xcd}, {&(0x7f0000005440)="2e55bbb594922c43b823b69253c5b558d7cede2a8251df3909ebd0010f145c08f04b97aebbb01116670ab5f5657982be3100bcf3f82a7ca67406255d2ac2ae3c0ff2c9930811aed16e356cbbe037a3f4f3ad234b5a2350f40b9a4ed5f7f7", 0x5e}], 0x7, &(0x7f0000008680)=ANY=[@ANYBLOB="70000000000000002900000037000000ff0a0000000000008054abfa239e057a527db8559334568dbd9d46cd0cd920b28298ce28c5cdeaa3bacfc3c2badb9e3736d30ac9b9359100123e305c7d780388b744e712f6dd1ec921d7ac0d3490f5fbe785a43dcb30bab7e28588bc308b0000c80000000000000029000000370000000016000000000000c2040000caa404a83ffb7c5db0645076c5d41ea31fbe5589d5416383e6e873ac5ed86129b01265d16288425cb418b16de435d1510f5432383bf6c7f1e94dee70529a1846b95ee93ac79829ed2b89c303c5e17b04f165041848491a42b76acd8106ae4acc746f50c6d8d3306fcdefac0577b21f28192008cd59f8d1a3e874f18fdddec1578fe31f3780311a20dd13705283c764e470305d28eb63577d9109b270785b9290c0f3a20360fba8710c0b351b24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=r5, @ANYBLOB="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"], 0x220}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f0000005780)="0719bd2e3adc7098a7e713377f4198f8412003077620b79125a34a827be87a95bf64ac37b6a243f9ffa404519b2c4e85890e98c08ed64af798462b884e8c587c061ed2960277eae3a8d48f57fff84a606450", 0x52}, {&(0x7f0000005800)="34e58044ba31dcafee2c4dbac386e0664885256d25c292fc64640535b1c22589307bf03c24e734b3c046218310177de2ad6ddca3140e6a34ac0f409ceb727f248dde0ccbcaf803397e86eef38c641e525a9f57eb6f08f70161ea488cf86887dcb40829cbd62b624b59b535ce5c265bda4ef40057dbac8ee50dab32b0a8ca20a54aad2c3cbafd4247cafb4960a6450d971856db0edb0089c18044425c4f80d16069dcb21ee69a94965b393dfc69713f08b4dee7", 0xb3}, {&(0x7f00000058c0)="c7d96101b46b08aa1da94bed6441e7e28f942fa5e86e07f521ab96df0d1afae5ad0562d1ed421e3d0d6167b5a8ca622c47ad4f44", 0x34}, {&(0x7f0000005900)="446a129e2a7d2fd43cf37937da47ec58b8eadcbcd6d41d706db9452b820e642a320791a499ea998d034b1f6659facec072d1addab7d6ec46f9f301ca54100aac63e14ea35183be961cb8d79b3538b061efd8d572918d132445288b12c07f931fb2d66495bd3c34b62e4f81cb88385f6be7f6ae134d425b4b6bb0690d6c1f633d7b74a6a22d7ed4ef97221664ca177bdd0a670dd6bb6619cf623552cb8646b024320828ba1d93903a5e0102fd1e7e5a558f307820e6fac3b13067506b08c3596673df4754dd2520e3eb253df209e3e0c075986f3b2016d9cacf7eb930737247b7a22b12a0f6a74f45fe500d648dc37738b7fa82a985f1eccc0f58bdb7ca24878ed9691ee3cce560d970cb4f5f7095d6ed5f1321a51640da1be0fa1d638ae161aa87f3c74c547ebb30a7edfadd23c32f6732a8284835bf8de30f7f3499fc185f7bf82874f0d3b77af097941f4f50dd1fa26df2b8989ae9caea1e6b4530183b5683f8f14fbf553a62a37b4521d57224d01fac650b4a1501f66593dd3eae1842fce64c4e3f3438bb681edd6715cd13a1d1266205a5219369a2bb234be35c864e27925bec157bb35e7b283a96e2610c223222a4579607c6e85d883d977f88ec110abf73e28a1878d16acca931c83ab495bbc1ee4f944f7ea9fc4c46367ef227d840061c50e6643b78f18659b58c6563241a12d74776bfcd32624d88461b08aded6abc454e13d88494cced56d1d901f92674085f3ad2fb95eaccfa6d0726899c6dfe482c68c7008c22ed0ee3ba5c1e17f5e90cc7313eb4b195659ec03b1c9fc692cb2489dd3e075650b9739014e205873e379c8959902a999e19a73745e3644f434b630c7f91e215cabd07dd98a31f7805930f6ed4ad269373aad05cc170a3e4d64f02263d0aa434ae8ef9b1b34497a8e7036eb7f929f70a24026111de3169de1d4e3507b1a8f6a55100bf74fbe7189437af166b305fa609c683c150c5a9a2e19f42e4f808ec5343fb9f8cd8be6308c14b7df2b622f5d85bd31dd57d123f345918d2373694f2c1ce5298946e5c9a4909a2b64a6d2a27a2ca554753bcac8012ab13484d1a000293525e6cc04e8a4439860843faecbe6ffad34845fc54a73ce1c4528de7e7a68fb020b6ceb720aaf9306d7c2d74e09ba3e81666edbc8d9ceacf915fad8c37dad1345c00db64efcda0aa633dca821f0b86c4f8421dc9cc4dcbac290ecc1005a83d5d10f977897287a453f92631ab772e25a722f0e69e01fbfb2d01d9af1b02352101a44fa452bd569e9367143d81ab4e864064c2929d79e54d40b00762fb972ceafdae851499f5312e8247febfbc27bf4a43df6f3c1e2ab92cff53ebbaa707bbefb5e16b6afe06729a1bc7b1beef4a0452025439613369166d7b4abd31c941f5572d93c3f1fa3d93e052d62b3e353ddbb6852b710ebce052b820983035113782a6da00467e81ea9e0d8c34dd36eca5b107c87cb0e6a958ce13304b91c8b7dc77d6e8cb3d14ef2e1ce1f07780147b377bf60d591d0214ed9f9d2108ad8349c4c7ffdf6007ed467119014ef3ac7184d4ad999f66be4d63ab0bd64e97cdfa0fd133e40b59c42f749aa64fc5d39e162c4bd8a3d247dcf4e590991040c1f76f5e133e2eb1ca0ffec9585e191322ebe5774c41ead2970aed648edaf665253238c75fea56dc901d3522b15bead47ee7a4eb552857839bc82c4cdfd8957ec59361cc3bb8a2600e9d761ab7cdd8a404e7fa297cb5e183288c3bc7c077157ff116b4e42c55a886b1e23313e6aeae15624e2be9c26aec6152952403d96ffdbf6f256046e7e6d25bd72b3083b8c76a4d584747a0429729afa18307cf469341ef2c77c22ff592044ac41c3dbf68bcd6d47cc8847ed9d14f32bce91392026e513b0849b84b10293dc55ff2b2717088e8a6c4bff8f174ec69ca35a75ba9f2f22bad623cfa8c85d641ecfdd37f9bedef445d56dbc7e7cd412db8539fc1841bd78813186086fed3da89c4891693148f8ac97dbdee6c50fab7274418b7cc8c65432eab73d0771c511e7646d3726edd322e8459a3efb458d2e6af4e1eade702707d0814e34af8aa939285677d13529fd3832c8fa5f73ed9fa6060c550f43c7815b3fbda7db303fd5e9eb785d2ccdef91d5e0a7c932f986033b3950c484380acf833ee5e1dc449c316ac679be7672f1a3508f144bd2fe187053129b1cb134a5b3ce4c6be3912ef4f5b324c0a1b0c820e41e1ae08a1ea670d3347945883264fa7d5d5372192ad92c67330ffe2f6ade35025e2c02866477ff526c6af68366eaf92c329a980d7f9d030741ac76a10b4284548007f608b98299f3d8c9fbd9de47cd869012090ee1e92a45ea429f9f5688ef0a1fcc8ff942ddcbe7acae7e3e18c2a81b32cabd22b41383118fa97874c06fe3ea667912157e4554ccaebbddc0520d61ae8097c1c279dff858bb6f109134e2281a8bf43dbb3fa7743823665cd4371f8e239e3c4ed861456511729122ad54ebd94d62fc71dc5632a4f3e48714e8fc0316cd314c430aeccf6f84b898f262a7e653208e3086c46c1b09feb6d30036313b30ff2cb86b7d81ffb1d40a891384f422d02291588cba6333b6c043cb5749756d343865660a01f56ce9463dcce453bb739365584eb9a6fbe975430609252781ab1bdbf22a1304ec68d66dcf822869467f167592e7701c81f9913c79dc968ee18836ed98aefabd84ec71e3142d764dadaa3e59440d69c58739d6c76add6e5e209fa905ef338d1494c78ece7b88f47d593fd9b099cd36f912332ac1d81c5cd2fa7aff131d114f35e5171da230bd8baaf85bcc30a2c66d3f7ef84ccc7b86e44a8d5d23d5830d25b3c39f84a1d0cfbefe3d786886d026182dcf36550093e6e2be2a1db23d704da3aee3d807b6db48f44c1fe9d649b576d67206324c9defbd7aed41181d5b011f7ebb73e6c433270d4ad17b5b386921f5a2cae17f8f67ea16de12c8bba42b524ef067ea9309a0abbc287417550f1a190d3f4d0b8b60147f8e91788bc63326943e3085eb981ae0198fb79b9a834e6c5b0675e5f304e939706aaed9adec22e4b20ecb014b86ef54513a8e4757127c450889290963f5cfb66c59b5b8a298179bbcc61694aea39109d7590cc93c65a1f731f1b9e18c8429eb39721c5b58425c1c4b21dab696254a6c6e4ecd58157ecf8f2b132a08b87f0af67c2c9759f2c5e26c52bbd55f28993e371f0b164ad37c5733a2030678818f7731405efdc7b0d5839b519d58cc315247d4ba0c6ba31e0e0818b6926311f43894a662a9195649719856d187394041fe9b080d004ebfdf6932a95f3ecabe52f82ef7a983d181f1098ec6a570de04104680f1f90cc4330ea2091717c42b569a9f86fe27b0a524873e2230566c182c0c7b0028bd71f1396eeee6c1572b029ca0f586d1b329c5e8d6cb727b14c683f7d5b4d8f3b293efa2fc8e0eb43d3ec93e350247232fa883f3b48b4ad1bb029b2e765d3bfd7350bd712c460d7fda666d127e23f6a7130c809e744831942154f6a65a52f1e97d51eb52ca6eb7fef3bb4e6ca03751b44904ddbee04c6c682e15d0bee53a622f13e27a3504212f3669bc715c88ff6099148d6946ea7c8246672f279b30005df2ba44cc57079a861d6888966b0f5c142ff106df561e1d21153a05c8582911dac563ee5411a215b23b2d3eb6b8389ecb069ef15adc1d033ec5a674e29e4de79a0fb758721efa59805efccd9ead4a655724e8dbcaee40b0df8964cb730f2e925662372bfcc51e5d77d7b72cde1e5e5908ffd6286f32517c49e7d0d5d686836538addf0dfb41440f34a470b7916567652cb30a90a6a86ea0b960f33d96b3c14ea2e2ef582cab58b39563eeea4f96a9d671bb8c04c949375f6c91ae0afc58aa99041036ca981b11c2a49caaa74af9ab338c72442c3b894efd536a0dcebc89e38f8bb2fec74c24c16c9164e1572f34a4b4e0de88c99b1cdd2bbcebfc804110002a0937f2115695ac8c73b4382110a42f69fb9764d690249963a6d14f333f2c9049c8826ebe6ee4d4ed9c4c28640e80d7340846f1fb4846e7847214e6f28def5176d5da01b54c2e486436e0d8bcfd741dc528ea5ea52022f47df4d1ec4599cfff823a0121548ed8fc48d9861bd7dd6737b338c91b50724646a6b4595ef07d200ce96105f024e83e9b841599169b84397ea25cd231b08ffc4ac2d5ea154ecba1bbf86725cfded3b54a67c7d1351e843143584cda93947ca3e97af3ebcff7065c01aa0f2f2d7d4e28282e20c3bcb0a79d4e216ab73a0cb37ee6844dc9632e9f20be74374f0623cf38175da180a8d6fcf18c2ab2bb5b82caf0b01c3e4c777c759581e0a2642f363ac762da9b97526992cf4406d11c3472afcaddde20a5192ec76af7214378e950296a8351629a8c8d9fef53f20e01874c7d4f313145ca51f912f3cb39632c296c305c7806caebd1685f16deb20fea577afc26aacabaae0ff0482d847bc7e32f1b0c27cd7a9b6d6a82b0992c13a23b07f0aa9cf61d6e138be43006790288aca76f62245c08e1d19815a8b5cec7fffff74af0f531da49cc1e0939d22118b2043aa3cf8a45db11c2b7b3ec0617131d4ff18abd147629e13c9ca81da2c399ba83f690598b016152ab18ae0564a51a99e5578caf9fa47215f1a993372b0276df49c5354df78e2b28be70f4940685db3741efbcdc2dd8c0bea4ce4f8ace402f1d9203882e13b445702d36b7032f7bf39c3e68e87f7226cf7c49a24eb24d68481717e6dc9dc19d827adb4c542872ae839387a524e97867e6cb60594907836eefa4fcc8d3713eabc2a62711812dc7a8ac07ebe5c4891d7834f2b76c12885f40d7fa020bae00a8a31e8ee2df2094778770033cb9cf3fa59b645bda90a9af40e2e49610e976e57f7a925986779a75074a81598aa7ffb649b8ce1dd8d425f4fa2c9491f1b54379396978bb12790b7d47a749f300b96ad6b3f84abd0e084183eb9851244ea47063b96d4fb00d146a1f55660c52d5d468d6a031b5baa1ab95de125e06109a0a3fbb4b23ba0b2c9d3ddca5dd5f59010a552198ba54154e0d4c96500eecf0f710b3621695a091e3c34270ce168cf9b126803c078ea83140144d0314c98b12b9aba710a790479338fa49ebf07ec30f41149a5b7455db5bddf9eb74d6f6d5d2a9bb645cf0c609677447564a83ae11ab008f83c4215aea1f2da39726bfa85b003722208bebe813cc45110ee1cc5611f43e74bb78ee76c3b39811a69b9b98daf8ec8ce339c2f6fdfed85830890332e0e62d6d56b626b0c05cbb8f8a8e3040adad82f6d84c2e5073a9ef31233cc3bc3c7ef97ca16a14041416cb02c13901b36f3d222bb592943e93a81780b8daafff3a8c3c4f4f1d59c6db634be144708857fea90a35368d32a9139742c7545b9cda4e0617e50b34fd257d861935c71ffdbe8f6393b4d9df7763dc26cd01f942bd632c2cf281ddd7e84086dd2e9be0f53467d100e041800b4d68d15359fe29b1b82f63606a465b46c519a6394cdc2174fe774e1cc4765281d9af8e99dcc29df1fab22e27c266879225b174be25b3c2148ab2bbb3ae88ad978876db0755d4a6b6a2a34489791fa192a2bb645d7e93d34c4a047d39db0b027d1670f19effec3a193a2f3c629e01665b91a9c26e58216fc3f7f2e7edbef0de9561f966e77e4cbd5226ec489983478fe5c453432b1601c9728daba63e7aa77d4a1d328306e5fba738c071b6abf6f16b5b2df88a6e48c13009cd94955b75a324ce97fc2051dad6664bbb09b1894109fb8045f0b6fc6b78bc4e88217c3fb", 0x1000}, {&(0x7f0000006900)="49e65e0800f24b30eb747b1902cfe9b9dd7b210ea2f0e85d4eb0e877ad172e5874527f083f198ab365b30caa6d55928304cf32382feffcc4c0fce400d7aaa01966a8f24d2c68aa8d7425dc05f2729a7eb4c3db4cca71968edf0d7a3253885d8ae37d65368717834902b17ac7cea2ec4b52630b81b2ba2e7cb802dc60e2520305922fa5e9d57b87fc3bb1d03be4e656686c2f1cccf98db5111001001d61e025e6711ab1136a5ae6bf372199de86d42c4ffe04c18848b15736cfa81fc7fcba3d36bddd82f984c24e385d8af9fd4b326205bc0e0f61b188c8732d19b7aa328da2b2e521bf76", 0xe4}, {&(0x7f0000006a00)="a334cae8ab2b8dc595b8f5858ebe16554968c68a73470295619d0b9aaa63d8ea5800ab4a075bc6cc57248b27cab92c05db4c22684d3bbe2812fcc6b6a387ae7e935d4258ac3ba10804f5e109b3c753609239e59e9d4ec1be65ad9609a764a434b59164dc457e285defecbd8053e088d9aa685d1b15413f0f91f5f185471ce906c16512d04a5a7066db0eebeb381f4626d68f80c2", 0x94}, {&(0x7f0000006ac0)}, {&(0x7f0000006b00)="78402094554afeaf39e204480670562c9239b79792d7e4b0939d834a0f73026419b999236dd4bc33e37c43ca5a48428965946fa67b2f6a62dcd4c611aea4d76bb536e6931dc16104f0b659f6d46862742359e2c1f713d9a45d96aefc5a336ccb28fe5f752a5b1620dfe08b49f35bcd8147a4f94364d5226249c39b38761cb44f64fd7289eb78b72d5023a8bf01f1a7d23e4c0a7f701333ba0f32b1d29b6d2a4cbc962a74a091e3688c27bc5173daf2856d9a309aaf1b6ca6970f066eeef184b7e726602db81c43d4fd32aded79c2c5b905cf5ef0691c38a928", 0xd9}, {&(0x7f0000006c00)="2cb9c51fe3771ee52af8ed0c16002838054754714e8a7d6189c8da2e8df32a51aaf98c8a9c2b30df5e6aa8705518a82f1d591546e3af108da4626d18487abea1612407fcc0", 0x45}], 0x9, &(0x7f0000006d40)=[@rthdr={{0x48, 0x29, 0x39, {0x2, 0x6, 0x1, 0x9, 0x0, [@empty, @mcast2, @local]}}}, @rthdrdstopts={{0xc8, 0x29, 0x37, {0x5c, 0x15, '\x00', [@generic={0x3, 0x7, "e2ed67f11510d5"}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0xfff8, [0x4, 0xffffffffffffff57, 0x7fff, 0x101, 0xfffffffffffffffe]}}, @generic={0x5, 0x21, "75d8acaec9bfbb20d6f54cdee5f6becf2accc20f59b8ce9d2db85b6513d8577b39"}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xa8}, @ra, @jumbo={0xc2, 0x4, 0x58}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd5, 0x9, [0x0, 0xa, 0x10001]}}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x62, 0x12, 0x0, 0x8, 0x0, [@loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1a}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x0, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0xb}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x4, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x80, [0x80000000, 0x7, 0x4, 0x4, 0x2]}}, @hao={0xc9, 0x10, @empty}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdrdstopts={{0x168, 0x29, 0x37, {0x3a, 0x29, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2b, 0x0, [0x9]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0xf6, 0x7, [0x4, 0x8, 0x9, 0x454, 0x8001, 0x7]}}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x81}, @generic={0x8, 0xd2, "054c2dd900340d5c1375a45da1e835cf80066e5be7666b6089d044485a6eb7800a94a2fa246245926998f219e28700412b71dc36bb22bd0cbcd5b5e45ed315856365e930e34a7046aaf01cdb318a2d5f531b29d34e53fbc3c3d4f929522b555ca6f2350dad0d7d7de59a0de9e377b4703d639add5782554faf45dd5f6e61f746cc7bd47799236057c019aecabff648f8ef53287d07ba3e467442cf3e9dd451a14f5e24e496ad3e19e66091eb59194339313b533c416bbc86aacebcc5c5236b84ab152ccc3b50380c315270f654d5e003911d"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x1, 0x5, "447fd0d5fb"}, @jumbo={0xc2, 0x4, 0xff}]}}}], 0x410}}, {{&(0x7f0000007180)={0xa, 0x4e23, 0x5, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000008380)=[@tclass={{0x14}}], 0x18}}], 0x7, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=r10], 0x1b8}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) socket$pppoe(0x18, 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x61, 0x0, 0x2}, {0x6}]}, 0x10) 702.214945ms ago: executing program 0 (id=3018): r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket(0x1d, 0x2, 0x6) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001500)={0x0, 0x1, 0x6, @random="859668cfa963"}, 0x10) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002a0000002800000004000000090000000000000a030000000300000000000001000000003e000f0601000000f7000000612e2e00a637fe19cb56e6ffff7638c160d5a921840ed753001062bb22f0d70166b160fcf9e41b80078ecd7b8eab40"], &(0x7f0000000380)=""/4096, 0x44, 0x1000, 0x1, 0x3, 0x0, @void, @value}, 0x50) (rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040) r5 = socket(0x2, 0x3, 0x7ff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000300)={0x2e, 0x7, '\x00', [@generic={0x39, 0x39, "c65cf836016e5991bb807ba91b75e8f9fa5dcc4a4c2bb175a30e88bd0889d3824c55a0acb820e3c025dd3050bb3cd33923ddab789b2699a7d4"}]}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) unshare(0xa020480) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 383.555561ms ago: executing program 3 (id=3019): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[], 0x10}}, {{&(0x7f0000000900)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000ac0)=[{0x0}], 0x1, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x18}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c80)=[{0x0}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000fc0)=[{0x0}], 0x1}}, {{&(0x7f0000001140)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001200)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x7, 0x2804) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 345.125437ms ago: executing program 2 (id=3020): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001240)={'vxcan1\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000013c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000001440)=0x8, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendto$inet6(r5, &(0x7f00000003c0)="d4d3", 0x2, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) shutdown(r5, 0x1) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000e00)="cb", 0x1}], 0x1, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000007, 0x10010, r3, 0x74f9b000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003100)=ANY=[], 0x10448) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c6394f90324fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0xffffffff}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 305.29386ms ago: executing program 0 (id=3021): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000006}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="8000f7ffffffffff", 0x8}], 0x1, &(0x7f0000000480)=ANY=[], 0xe}}], 0x1, 0x840) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 215.208406ms ago: executing program 3 (id=3022): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x204f0c8220df40af}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1b0}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xad87}, @CTA_TIMEOUT_DCCP_PARTOPEN={0xffffffffffffff39, 0x3, 0x1, 0x0, 0xfffffff8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="66060900000800006800128009000100766c616e00000000580002804c0003803500010008000000090000000c000100fcffff7f050000000c00010073000000040000000c00010003000000050000000c00010005000000000000800c00010000010000ffffff7f060001000100000008000500", @ANYRES32=r3, @ANYBLOB="08000a00218c192e7586608da0de760f9ee15be81c673ab250ec95509b931e9abf23c203c82b8d617cc98108f05c7c193ad1050bb77954f0c7411b00", @ANYRES32=r3, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7.621449ms ago: executing program 2 (id=3023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c7fdd2f67821a614a97f7e7ad70266f0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 0 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x80) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0x8}, 0x8) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b00000000020009000000000000000000000000000500060000ff80000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x2000004) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) kernel console output (not intermixed with test programs): tribute type 1 has an invalid length. [ 232.949697][T12108] bridge0: port 1(team0) entered blocking state [ 232.959194][T12108] bridge0: port 1(team0) entered disabled state [ 233.003475][T12082] lo speed is unknown, defaulting to 1000 [ 233.217979][T12113] Cannot find del_set index 286 as target [ 233.352260][T12118] netlink: 'syz.1.1798': attribute type 1 has an invalid length. [ 235.664865][T12113] pimreg: entered allmulticast mode [ 235.670997][T12117] 8021q: VLANs not supported on pimreg [ 235.677653][T12116] netlink: 'syz.0.1799': attribute type 4 has an invalid length. [ 235.763668][T12146] batadv_slave_1: entered promiscuous mode [ 235.905485][T12145] batadv_slave_1: left promiscuous mode [ 236.093410][T12162] net_ratelimit: 77 callbacks suppressed [ 236.093428][T12162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.288128][T12171] __nla_validate_parse: 67 callbacks suppressed [ 236.288145][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 236.345279][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1814'. [ 236.632892][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 236.657149][T12194] netlink: 'syz.1.1822': attribute type 2 has an invalid length. [ 236.847895][T12203] IPVS: set_ctl: invalid protocol: 43 172.20.20.63:20001 [ 237.255096][T12224] netlink: 'syz.0.1830': attribute type 4 has an invalid length. [ 237.307566][T12226] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 237.356506][T12226] dummy0: entered promiscuous mode [ 237.387326][T12226] dummy0: entered allmulticast mode [ 237.418622][T12226] team0: Port device dummy0 added [ 237.421999][T12230] netlink: 'syz.3.1832': attribute type 9 has an invalid length. [ 237.445288][T12229] team0: left allmulticast mode [ 237.450791][T12229] dummy0: left allmulticast mode [ 237.472633][T12229] bridge1: port 1(team0) entered disabled state [ 237.488295][T12229] dummy0: left promiscuous mode [ 237.515120][T12229] team0: Port device dummy0 removed [ 237.599344][T12237] sctp: [Deprecated]: syz.0.1834 (pid 12237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.599344][T12237] Use struct sctp_sack_info instead [ 237.724885][T12234] lo speed is unknown, defaulting to 1000 [ 237.791275][T12242] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 237.809304][T12244] netlink: 'syz.0.1834': attribute type 4 has an invalid length. [ 237.823845][T12242] team0: left promiscuous mode [ 237.835150][T12242] batman_adv: batadv0: Adding interface: team0 [ 237.860451][T12247] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 237.865048][T12242] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.869718][T12247] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1837'. [ 237.939023][T12242] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 238.013811][ T7692] lo speed is unknown, defaulting to 1000 [ 238.027899][T12247] team0: entered promiscuous mode [ 238.062723][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.072325][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1833'. [ 238.086635][T12247] batman_adv: batadv0: Interface activated: team0 [ 238.094932][T12247] batman_adv: batadv0: Interface deactivated: team0 [ 238.109654][T12247] batman_adv: batadv0: Removing interface: team0 [ 238.116327][T12261] netlink: 'syz.3.1836': attribute type 16 has an invalid length. [ 238.126731][T12247] bridge1: port 1(team0) entered blocking state [ 238.128924][T12261] netlink: 'syz.3.1836': attribute type 17 has an invalid length. [ 238.133903][T12247] bridge1: port 1(team0) entered disabled state [ 238.147782][T12247] team0: entered allmulticast mode [ 238.221624][T12261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.247370][T12261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.322083][T12263] can: request_module (can-proto-5) failed. [ 238.345233][T12261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.356257][T12261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.391551][T12261] veth1_macvtap: left promiscuous mode [ 238.398331][T12261] veth0_macvtap: left promiscuous mode [ 238.406422][T12261] veth0_macvtap: entered promiscuous mode [ 238.413086][T12261] veth1_macvtap: entered promiscuous mode [ 238.420362][T12261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.429369][T12261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.438050][T12261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.446883][T12261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.498938][T12255] batadv_slave_1: entered promiscuous mode [ 238.583866][T12245] batadv_slave_1: left promiscuous mode [ 238.739643][T12267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1839'. [ 239.192456][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1846'. [ 239.335930][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1848'. [ 239.445787][T12300] IPVS: Unknown mcast interface: vlan0 [ 239.980969][T12320] IPv6: sit1: Disabled Multicast RS [ 239.999737][T12320] sit1: entered allmulticast mode [ 240.093006][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1856'. [ 240.280465][T12324] bond7: entered promiscuous mode [ 240.285806][T12324] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.299673][ T7696] IPVS: starting estimator thread 0... [ 240.403533][T12334] IPVS: using max 23 ests per chain, 55200 per kthread [ 240.497752][T12342] sctp: [Deprecated]: syz.0.1861 (pid 12342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.497752][T12342] Use struct sctp_sack_info instead [ 240.737439][T12324] bond7 (unregistering): Released all slaves [ 240.778988][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 241.227557][T12363] lo speed is unknown, defaulting to 1000 [ 241.906765][T12377] validate_nla: 2 callbacks suppressed [ 241.906784][T12377] netlink: 'syz.3.1871': attribute type 1 has an invalid length. [ 241.917139][T12375] netlink: 'syz.0.1870': attribute type 11 has an invalid length. [ 242.079462][T12385] netlink: 'syz.1.1874': attribute type 10 has an invalid length. [ 242.161042][T12393] netlink: 'syz.1.1874': attribute type 10 has an invalid length. [ 242.187525][T12393] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1874'. [ 242.247003][T12385] team0: left promiscuous mode [ 242.268429][T12385] bridge1: port 1(team0) entered disabled state [ 242.289571][T12398] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 242.312963][T12385] team0: left allmulticast mode [ 242.317940][T12385] bridge1: port 1(team0) entered disabled state [ 242.351879][T12385] batman_adv: batadv0: Adding interface: team0 [ 242.358099][T12385] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.390741][T12385] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 242.406524][T12393] team0: entered promiscuous mode [ 242.414949][T12393] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.423366][T12393] batman_adv: batadv0: Interface activated: team0 [ 242.431729][T12393] batman_adv: batadv0: Interface deactivated: team0 [ 242.438529][T12393] batman_adv: batadv0: Removing interface: team0 [ 242.447654][T12393] bridge1: port 1(team0) entered blocking state [ 242.454300][T12393] bridge1: port 1(team0) entered disabled state [ 242.461256][T12393] team0: entered allmulticast mode [ 242.490302][T12398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.502282][T12387] pimreg: entered allmulticast mode [ 242.523782][T12403] bond7: (slave gretap5): making interface the new active one [ 242.533975][T12403] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 242.544646][T12394] 8021q: VLANs not supported on pimreg [ 242.561318][T12391] lo speed is unknown, defaulting to 1000 [ 242.856732][T12426] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1885'. [ 242.886619][T12426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1885'. [ 243.073741][T12432] lo speed is unknown, defaulting to 1000 [ 243.237892][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1892'. [ 243.505899][T12464] sctp: [Deprecated]: syz.4.1897 (pid 12464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.505899][T12464] Use struct sctp_sack_info instead [ 243.659586][T12466] syz.0.1896 uses old SIOCAX25GETINFO [ 243.966088][T12482] siw: device registration error -23 [ 244.005892][T12480] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 244.035382][T12482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1901'. [ 244.806490][T12511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1908'. [ 244.855597][T12515] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 244.941546][T12515] 8021q: adding VLAN 0 to HW filter on device bond12 [ 245.060486][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 245.086720][T12522] bond12: (slave gretap9): making interface the new active one [ 245.104076][T12522] bond12: (slave gretap9): Enslaving as an active interface with an up link [ 245.205463][T12523] bond8: (slave gretap4): Releasing active interface [ 245.280430][T12526] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 245.565276][T12545] FAULT_INJECTION: forcing a failure. [ 245.565276][T12545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.581563][T12545] CPU: 1 UID: 0 PID: 12545 Comm: syz.2.1921 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 245.581591][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.581601][T12545] Call Trace: [ 245.581607][T12545] [ 245.581615][T12545] dump_stack_lvl+0x241/0x360 [ 245.581644][T12545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.581663][T12545] ? __pfx__printk+0x10/0x10 [ 245.581688][T12545] ? snprintf+0xda/0x120 [ 245.581711][T12545] should_fail_ex+0x40a/0x550 [ 245.581740][T12545] _copy_to_user+0x31/0xb0 [ 245.581764][T12545] simple_read_from_buffer+0xca/0x150 [ 245.581790][T12545] proc_fail_nth_read+0x1e9/0x250 [ 245.581816][T12545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.581842][T12545] ? rw_verify_area+0x243/0x630 [ 245.581860][T12545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.581884][T12545] vfs_read+0x1f8/0xb40 [ 245.581904][T12545] ? fdget_pos+0x254/0x320 [ 245.581928][T12545] ? __pfx___mutex_lock+0x10/0x10 [ 245.581951][T12545] ? __pfx_vfs_read+0x10/0x10 [ 245.581972][T12545] ? __fget_files+0x2a/0x410 [ 245.581997][T12545] ? __fget_files+0x395/0x410 [ 245.582018][T12545] ? __fget_files+0x2a/0x410 [ 245.582051][T12545] ksys_read+0x18f/0x2b0 [ 245.582071][T12545] ? __pfx_ksys_read+0x10/0x10 [ 245.582097][T12545] ? do_syscall_64+0x100/0x230 [ 245.582124][T12545] ? do_syscall_64+0xb6/0x230 [ 245.582149][T12545] do_syscall_64+0xf3/0x230 [ 245.582172][T12545] ? clear_bhb_loop+0x35/0x90 [ 245.582198][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.582219][T12545] RIP: 0033:0x7f3ca318bb7c [ 245.582235][T12545] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.582249][T12545] RSP: 002b:00007f3ca3f35030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.582269][T12545] RAX: ffffffffffffffda RBX: 00007f3ca33a5fa0 RCX: 00007f3ca318bb7c [ 245.582282][T12545] RDX: 000000000000000f RSI: 00007f3ca3f350a0 RDI: 0000000000000004 [ 245.582293][T12545] RBP: 00007f3ca3f35090 R08: 0000000000000000 R09: 0000000000000000 [ 245.582304][T12545] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 245.582315][T12545] R13: 0000000000000000 R14: 00007f3ca33a5fa0 R15: 00007ffedd3f98a8 [ 245.582343][T12545] [ 246.156017][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 246.290312][T12578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 246.336486][ T7687] IPVS: starting estimator thread 0... [ 246.336747][T12578] nbd: socks must be embedded in a SOCK_ITEM attr [ 246.374494][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 246.428861][T12584] IPVS: using max 24 ests per chain, 57600 per kthread [ 247.317881][T12622] veth1_vlan: mtu less than device minimum [ 247.336105][T12626] x_tables: duplicate underflow at hook 1 [ 247.658619][T12639] lo speed is unknown, defaulting to 1000 [ 247.781045][ T30] audit: type=1800 audit(1742593301.963:4): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1950" name="(" dev="tmpfs" ino=2027 res=0 errno=0 [ 247.821586][T12650] __nla_validate_parse: 1 callbacks suppressed [ 247.821605][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1954'. [ 247.917930][T12650] nbd: socks must be embedded in a SOCK_ITEM attr [ 248.245016][T12669] sctp: [Deprecated]: syz.1.1960 (pid 12669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.245016][T12669] Use struct sctp_sack_info instead [ 248.699944][T12693] syz_tun: entered promiscuous mode [ 248.713916][T12695] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 248.780873][T12700] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 248.794742][T12700] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1971'. [ 248.969831][T12695] team0: left promiscuous mode [ 248.988044][T12695] bridge1: port 1(team0) entered disabled state [ 248.999449][T12695] team0: left allmulticast mode [ 249.005425][T12695] bridge1: port 1(team0) entered disabled state [ 249.020148][T12695] batman_adv: batadv0: Adding interface: team0 [ 249.026740][T12695] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.062840][T12695] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 249.110381][T12700] team0: entered promiscuous mode [ 249.116227][T12700] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.128239][T12700] batman_adv: batadv0: Interface activated: team0 [ 249.136368][T12700] batman_adv: batadv0: Interface deactivated: team0 [ 249.151162][T12700] batman_adv: batadv0: Removing interface: team0 [ 249.158530][T12700] bridge1: port 1(team0) entered blocking state [ 249.172595][T12700] bridge1: port 1(team0) entered disabled state [ 249.179239][T12700] team0: entered allmulticast mode [ 249.186302][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1968'. [ 249.201436][T12687] syz_tun: left promiscuous mode [ 250.122345][T12740] netlink: 'syz.2.1986': attribute type 2 has an invalid length. [ 250.541503][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 250.754084][T12762] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 250.780067][T12762] bridge0: port 1(team0) entered disabled state [ 250.786796][T12762] team0: left promiscuous mode [ 250.799229][T12762] bridge0: port 1(team0) entered disabled state [ 250.817303][T12762] batman_adv: batadv0: Adding interface: team0 [ 250.820107][T12770] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 250.828220][T12762] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.852467][T12770] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1996'. [ 250.884169][T12762] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 250.914513][T12770] team0: entered promiscuous mode [ 250.942124][T12770] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.970234][T12770] batman_adv: batadv0: Interface activated: team0 [ 250.995151][T12770] batman_adv: batadv0: Interface deactivated: team0 [ 251.018482][T12770] batman_adv: batadv0: Removing interface: team0 [ 251.050811][T12770] bridge0: port 1(team0) entered blocking state [ 251.057206][T12770] bridge0: port 1(team0) entered disabled state [ 251.095699][T12777] lo speed is unknown, defaulting to 1000 [ 251.115427][T12783] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 251.188851][T12783] 8021q: adding VLAN 0 to HW filter on device bond10 [ 251.235683][T12786] bond10: (slave gretap5): making interface the new active one [ 251.247621][T12786] bond10: (slave gretap5): Enslaving as an active interface with an up link [ 251.594925][T12803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2010'. [ 251.637219][T12803] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.740092][T12803] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.894791][T12803] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.918522][T12818] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 252.022650][T12818] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.105119][T12822] bond9: (slave gretap7): making interface the new active one [ 252.124016][T12822] bond9: (slave gretap7): Enslaving as an active interface with an up link [ 252.166255][T12803] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.487885][T12803] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.546337][T12803] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.591201][T12803] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.616476][T12803] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.670757][T12837] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2022'. [ 252.687317][T12838] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2022'. [ 252.867222][T12851] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 252.876225][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 253.235338][T12865] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 253.308494][T12865] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.330247][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2033'. [ 253.412985][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 253.450434][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2033'. [ 253.470477][T12877] bond7: (slave gretap5): making interface the new active one [ 253.495355][T12882] openvswitch: netlink: Missing valid actions attribute. [ 253.507080][T12877] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 253.508866][T12870] netlink: 'syz.0.2033': attribute type 7 has an invalid length. [ 253.525277][T12870] netlink: 'syz.0.2033': attribute type 8 has an invalid length. [ 253.536337][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 253.539305][T12882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.003260][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2042'. [ 254.092217][T12902] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 254.111374][T12903] lo speed is unknown, defaulting to 1000 [ 254.185845][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2045'. [ 254.277887][T12913] netlink: 'syz.1.2046': attribute type 10 has an invalid length. [ 254.308570][T12913] team0: left promiscuous mode [ 254.334942][T12913] bridge1: port 1(team0) entered disabled state [ 254.364325][T12922] netlink: 'syz.1.2046': attribute type 10 has an invalid length. [ 254.389721][T12913] team0: left allmulticast mode [ 254.424355][T12922] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2046'. [ 254.447164][T12913] bridge1: port 1(team0) entered disabled state [ 254.465510][T12913] batman_adv: batadv0: Adding interface: team0 [ 254.477528][T12913] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.507160][T12913] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 254.616322][T12922] team0: entered promiscuous mode [ 254.644059][T12922] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.669581][T12922] batman_adv: batadv0: Interface activated: team0 [ 254.676180][T12922] batman_adv: batadv0: Interface deactivated: team0 [ 254.688873][T12922] batman_adv: batadv0: Removing interface: team0 [ 254.709530][T12922] bridge1: port 1(team0) entered blocking state [ 254.715971][T12922] bridge1: port 1(team0) entered disabled state [ 254.722831][T12922] team0: entered allmulticast mode [ 254.743197][T12931] lo speed is unknown, defaulting to 1000 [ 254.744045][T12933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.209146][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2057'. [ 255.526121][T12962] netlink: 'syz.2.2062': attribute type 10 has an invalid length. [ 255.580447][T12966] netlink: 'syz.2.2062': attribute type 10 has an invalid length. [ 255.608981][T12966] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2062'. [ 255.652546][T12962] team0: left promiscuous mode [ 255.672993][T12968] sctp: [Deprecated]: syz.1.2064 (pid 12968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.672993][T12968] Use struct sctp_sack_info instead [ 255.675790][T12962] batman_adv: batadv0: Adding interface: team0 [ 255.701603][T12962] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.735718][T12962] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 255.789230][T12966] team0: entered promiscuous mode [ 255.795456][T12966] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.843361][T12966] batman_adv: batadv0: Interface activated: team0 [ 255.878622][T12966] batman_adv: batadv0: Interface deactivated: team0 [ 255.898078][T12966] batman_adv: batadv0: Removing interface: team0 [ 255.908536][T12966] bridge0: port 1(team0) entered blocking state [ 255.937748][T12966] bridge0: port 1(team0) entered disabled state [ 255.961894][T12966] team0: entered allmulticast mode [ 256.003550][T12973] lo speed is unknown, defaulting to 1000 [ 256.397372][T12997] bond10: (slave gretap5): Releasing active interface [ 256.553544][T13000] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.576668][T13000] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.586806][T13000] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.606048][T13000] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.306266][T13046] x_tables: ip_tables: ah match: only valid for protocol 51 [ 257.643430][T13067] block nbd0: not configured, cannot reconfigure [ 257.663415][ T30] audit: type=1800 audit(1742593311.853:5): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2095" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2065 res=0 errno=0 [ 257.724749][ T30] audit: type=1800 audit(1742593311.853:6): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2095" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2065 res=0 errno=0 [ 257.929407][T13073] sctp: [Deprecated]: syz.4.2097 (pid 13073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.929407][T13073] Use struct sctp_sack_info instead [ 257.997975][T13077] __nla_validate_parse: 7 callbacks suppressed [ 257.997990][T13077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2099'. [ 258.195680][T13086] sit0: left promiscuous mode [ 258.297240][T13086] team0: left promiscuous mode [ 258.314088][T13086] bridge1: port 1(team0) entered disabled state [ 258.496894][T13086] bridge_slave_0: left promiscuous mode [ 258.529466][T13086] bridge_slave_0: left allmulticast mode [ 259.036944][T13086] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.058932][T13086] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.078391][T13086] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.106546][T13086] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.242134][T13086] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 259.255986][T13086] macsec1: left promiscuous mode [ 259.278896][T13086] macsec1: left allmulticast mode [ 259.285717][T13086] veth2: left promiscuous mode [ 259.298888][T13086] veth2: left allmulticast mode [ 259.372045][T13086] gretap3: left promiscuous mode [ 259.757316][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 259.814022][T13126] warn_alloc: 1 callbacks suppressed [ 259.814041][T13126] syz.3.2112: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 259.841644][T13124] team0: left allmulticast mode [ 259.847175][T13126] ,cpuset=/,mems_allowed=0-1 [ 259.909424][T13124] bridge0: port 1(team0) entered disabled state [ 259.941614][T13126] CPU: 1 UID: 0 PID: 13126 Comm: syz.3.2112 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 259.941643][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.941655][T13126] Call Trace: [ 259.941661][T13126] [ 259.941669][T13126] dump_stack_lvl+0x241/0x360 [ 259.941697][T13126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.941716][T13126] ? __pfx__printk+0x10/0x10 [ 259.941742][T13126] ? __rcu_read_unlock+0xa1/0x110 [ 259.941769][T13126] warn_alloc+0x278/0x410 [ 259.941790][T13126] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 259.941810][T13126] ? __pfx_warn_alloc+0x10/0x10 [ 259.941829][T13126] ? kasan_save_track+0x3f/0x80 [ 259.941846][T13126] ? __kasan_kmalloc+0x98/0xb0 [ 259.941866][T13126] ? xsk_setsockopt+0x4aa/0x810 [ 259.941883][T13126] ? do_sock_setsockopt+0x3af/0x720 [ 259.941900][T13126] ? __x64_sys_setsockopt+0x1ee/0x280 [ 259.941918][T13126] ? do_syscall_64+0xf3/0x230 [ 259.941947][T13126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.941980][T13126] __vmalloc_node_range_noprof+0x126/0x1380 [ 259.942024][T13126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.942046][T13126] ? __kasan_kmalloc+0x98/0xb0 [ 259.942069][T13126] vmalloc_user_noprof+0x74/0x80 [ 259.942086][T13126] ? xskq_create+0xb6/0x170 [ 259.942103][T13126] xskq_create+0xb6/0x170 [ 259.942125][T13126] xsk_init_queue+0xa1/0x100 [ 259.942146][T13126] xsk_setsockopt+0x4aa/0x810 [ 259.942166][T13126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 259.942185][T13126] ? __pfx_aa_sk_perm+0x10/0x10 [ 259.942213][T13126] ? aa_sock_opt_perm+0x79/0x120 [ 259.942243][T13126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 259.942260][T13126] do_sock_setsockopt+0x3af/0x720 [ 259.942286][T13126] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 259.942311][T13126] ? __fget_files+0x395/0x410 [ 259.942334][T13126] ? __fget_files+0x2a/0x410 [ 259.942366][T13126] __x64_sys_setsockopt+0x1ee/0x280 [ 259.942393][T13126] do_syscall_64+0xf3/0x230 [ 259.942416][T13126] ? clear_bhb_loop+0x35/0x90 [ 259.942442][T13126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.942464][T13126] RIP: 0033:0x7fd4a4f8d169 [ 259.942480][T13126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.942493][T13126] RSP: 002b:00007fd4a2dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.942512][T13126] RAX: ffffffffffffffda RBX: 00007fd4a51a6080 RCX: 00007fd4a4f8d169 [ 259.942525][T13126] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 259.942536][T13126] RBP: 00007fd4a500e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 259.942547][T13126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.942562][T13126] R13: 0000000000000000 R14: 00007fd4a51a6080 R15: 00007fffcf9cf168 [ 259.942591][T13126] [ 259.942676][T13126] Mem-Info: [ 260.003901][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 260.188792][T13126] active_anon:5622 inactive_anon:0 isolated_anon:0 [ 260.188792][T13126] active_file:1818 inactive_file:38377 isolated_file:0 [ 260.188792][T13126] unevictable:768 dirty:356 writeback:0 [ 260.188792][T13126] slab_reclaimable:10828 slab_unreclaimable:109022 [ 260.188792][T13126] mapped:29840 shmem:1412 pagetables:806 [ 260.188792][T13126] sec_pagetables:0 bounce:0 [ 260.188792][T13126] kernel_misc_reclaimable:0 [ 260.188792][T13126] free:1333489 free_pcp:477 free_cma:0 [ 260.290115][T13126] Node 0 active_anon:22496kB inactive_anon:0kB active_file:7272kB inactive_file:153440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119336kB dirty:1436kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13296kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no [ 260.360163][T13126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 260.406706][T13126] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.448192][T13126] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 260.477538][T13126] Node 0 DMA32 free:1405584kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:22360kB inactive_anon:0kB active_file:7272kB inactive_file:153112kB unevictable:1536kB writepending:1436kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:4952kB free_cma:0kB [ 260.509229][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 260.522431][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2114'. [ 260.529010][T13144] netlink: 'syz.0.2116': attribute type 10 has an invalid length. [ 260.548628][T13144] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 260.580636][T13126] lowmem_reserve[]: [ 260.596356][T13144] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2116'. [ 260.618853][T13126] 0 0 0 0 0 [ 260.631023][T13126] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.690847][T13126] lowmem_reserve[]: 0 0 0 0 0 [ 260.695882][T13144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2116'. [ 260.716622][T13126] Node 1 Normal free:3908916kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.808033][T13126] lowmem_reserve[]: 0 0 0 0 0 [ 260.856731][T13126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.889545][T13126] Node 0 DMA32: 14*4kB (UM) 443*8kB (UME) 375*16kB (UME) 2444*32kB (UME) 1584*64kB (UME) 299*128kB (UME) 90*256kB (UM) 25*512kB (UM) 15*1024kB (UME) 5*2048kB (UM) 273*4096kB (UM) = 1407104kB [ 260.918141][T13154] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2119'. [ 260.942847][T13126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.963374][T13154] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 260.979203][T13126] Node 1 Normal: 209*4kB (UE) 58*8kB (UME) 48*16kB (UME) 225*32kB (UME) 110*64kB (UME) 25*128kB (UME) 15*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (UM) = 3908916kB [ 261.006260][T13159] syzkaller1: entered promiscuous mode [ 261.007062][T13126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.011976][T13159] syzkaller1: entered allmulticast mode [ 261.028542][T13126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.047655][T13126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.057647][T13126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.118899][T13126] 41589 total pagecache pages [ 261.123641][T13126] 0 pages in swap cache [ 261.127850][T13126] Free swap = 124996kB [ 261.142998][T13126] Total swap = 124996kB [ 261.147214][T13126] 2097051 pages RAM [ 261.157284][T13126] 0 pages HighMem/MovableOnly [ 261.164922][T13126] 427906 pages reserved [ 261.173710][T13126] 0 pages cma reserved [ 261.424508][T13177] sctp: [Deprecated]: syz.2.2126 (pid 13177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.424508][T13177] Use struct sctp_sack_info instead [ 261.561178][T13181] netlink: 'syz.4.2127': attribute type 61 has an invalid length. [ 261.581255][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 262.497836][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2139'. [ 262.628825][T13223] nbd: socks must be embedded in a SOCK_ITEM attr [ 263.252160][T13248] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2148'. [ 263.399859][T13251] 8021q: adding VLAN 0 to HW filter on device bond11 [ 264.074212][T13278] netlink: 'syz.4.2159': attribute type 2 has an invalid length. [ 264.082288][T13278] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2159'. [ 264.226506][T13285] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 264.263994][T13285] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.323103][T13287] bond8: (slave gretap6): making interface the new active one [ 264.332551][T13287] bond8: (slave gretap6): Enslaving as an active interface with an up link [ 264.561686][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2161'. [ 264.595948][T13291] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.194245][T13315] IPVS: length: 142 != 24 [ 265.213106][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 265.535258][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2170'. [ 266.132719][T13338] netlink: 'syz.3.2176': attribute type 10 has an invalid length. [ 266.173845][T13338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.202615][T13338] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.350615][T13340] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2176'. [ 266.417086][T13350] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 266.426747][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 266.438205][T13350] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2181'. [ 266.449985][T13350] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 266.457871][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 266.494628][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2180'. [ 266.546762][T13355] nbd: socks must be embedded in a SOCK_ITEM attr [ 266.590030][T13361] sctp: [Deprecated]: syz.2.2183 (pid 13361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.590030][T13361] Use struct sctp_sack_info instead [ 266.867100][T13371] sctp: [Deprecated]: syz.1.2187 (pid 13371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.867100][T13371] Use struct sctp_sack_info instead [ 267.249140][T13390] xt_CONNSECMARK: invalid mode: 0 [ 267.274375][T13392] xt_CONNSECMARK: invalid mode: 0 [ 267.325054][T13396] sctp: [Deprecated]: syz.4.2195 (pid 13396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.325054][T13396] Use struct sctp_sack_info instead [ 267.773211][T13423] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 267.782751][T13423] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 267.835943][T13420] syzkaller1: entered promiscuous mode [ 267.843734][T13420] syzkaller1: entered allmulticast mode [ 267.856168][T13420] nbd: must specify at least one socket [ 267.896410][T13427] nbd: socks must be embedded in a SOCK_ITEM attr [ 268.869985][T13465] lo speed is unknown, defaulting to 1000 [ 268.909446][T13466] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 268.944615][T13470] __nla_validate_parse: 5 callbacks suppressed [ 268.944634][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2221'. [ 268.961476][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 269.259831][T13483] FAULT_INJECTION: forcing a failure. [ 269.259831][T13483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.280956][T13483] CPU: 1 UID: 0 PID: 13483 Comm: syz.4.2225 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 269.280991][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.281002][T13483] Call Trace: [ 269.281008][T13483] [ 269.281015][T13483] dump_stack_lvl+0x241/0x360 [ 269.281042][T13483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.281060][T13483] ? __pfx__printk+0x10/0x10 [ 269.281080][T13483] ? __pfx_lock_release+0x10/0x10 [ 269.281111][T13483] should_fail_ex+0x40a/0x550 [ 269.281140][T13483] _copy_from_user+0x2d/0xb0 [ 269.281163][T13483] copy_msghdr_from_user+0xae/0x680 [ 269.281192][T13483] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 269.281213][T13483] ? __fget_files+0x2a/0x410 [ 269.281239][T13483] ? __fget_files+0x2a/0x410 [ 269.281269][T13483] __sys_sendmsg+0x209/0x350 [ 269.281295][T13483] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.281326][T13483] ? do_sys_openat2+0x17a/0x1d0 [ 269.281374][T13483] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.281399][T13483] ? do_syscall_64+0x100/0x230 [ 269.281425][T13483] ? do_syscall_64+0xb6/0x230 [ 269.281449][T13483] do_syscall_64+0xf3/0x230 [ 269.281471][T13483] ? clear_bhb_loop+0x35/0x90 [ 269.281495][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.281516][T13483] RIP: 0033:0x7fa6b518d169 [ 269.281531][T13483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.281545][T13483] RSP: 002b:00007fa6b5f15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.281563][T13483] RAX: ffffffffffffffda RBX: 00007fa6b53a5fa0 RCX: 00007fa6b518d169 [ 269.281576][T13483] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 269.281587][T13483] RBP: 00007fa6b5f15090 R08: 0000000000000000 R09: 0000000000000000 [ 269.281597][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.281607][T13483] R13: 0000000000000000 R14: 00007fa6b53a5fa0 R15: 00007ffd0ea509c8 [ 269.281633][T13483] [ 269.694623][T13494] lo speed is unknown, defaulting to 1000 [ 269.703913][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2227'. [ 269.768166][T13499] nbd: socks must be embedded in a SOCK_ITEM attr [ 269.843402][T13508] tipc: Enabling of bearer rejected, failed to enable media [ 270.433341][T13518] netlink: 'syz.1.2236': attribute type 10 has an invalid length. [ 270.441507][T13518] team0: left allmulticast mode [ 270.446477][T13518] bridge1: port 1(team0) entered disabled state [ 270.459600][T13518] batman_adv: batadv0: Adding interface: team0 [ 270.465796][T13518] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.498310][T13518] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 270.510566][T13519] netlink: 'syz.1.2236': attribute type 10 has an invalid length. [ 270.518500][T13519] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2236'. [ 270.528879][T13519] team0: entered promiscuous mode [ 270.537442][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.544952][T13519] batman_adv: batadv0: Interface activated: team0 [ 270.551810][T13519] batman_adv: batadv0: Interface deactivated: team0 [ 270.558471][T13519] batman_adv: batadv0: Removing interface: team0 [ 270.615183][T13519] bridge1: port 1(team0) entered blocking state [ 270.632289][T13519] bridge1: port 1(team0) entered disabled state [ 270.645796][T13519] team0: entered allmulticast mode [ 270.665182][T13525] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 270.765430][T13531] xt_TCPMSS: Only works on TCP SYN packets [ 270.839661][T13534] FAULT_INJECTION: forcing a failure. [ 270.839661][T13534] name failslab, interval 1, probability 0, space 0, times 0 [ 270.858225][T13534] CPU: 1 UID: 0 PID: 13534 Comm: syz.0.2241 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 270.858249][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.858258][T13534] Call Trace: [ 270.858264][T13534] [ 270.858271][T13534] dump_stack_lvl+0x241/0x360 [ 270.858294][T13534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.858310][T13534] ? __pfx__printk+0x10/0x10 [ 270.858328][T13534] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 270.858349][T13534] ? __pfx___might_resched+0x10/0x10 [ 270.858375][T13534] should_fail_ex+0x40a/0x550 [ 270.858402][T13534] should_failslab+0xac/0x100 [ 270.858425][T13534] kmem_cache_alloc_node_noprof+0x77/0x380 [ 270.858446][T13534] ? __alloc_skb+0x1c3/0x440 [ 270.858468][T13534] __alloc_skb+0x1c3/0x440 [ 270.858489][T13534] ? __pfx___alloc_skb+0x10/0x10 [ 270.858509][T13534] ? netlink_autobind+0xd6/0x2f0 [ 270.858545][T13534] ? netlink_autobind+0x2b0/0x2f0 [ 270.858563][T13534] netlink_sendmsg+0x634/0xcb0 [ 270.858588][T13534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.858606][T13534] ? aa_sock_msg_perm+0x91/0x160 [ 270.858637][T13534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.858650][T13534] __sock_sendmsg+0x221/0x270 [ 270.858675][T13534] ____sys_sendmsg+0x53a/0x860 [ 270.858702][T13534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.858719][T13534] ? __fget_files+0x2a/0x410 [ 270.858744][T13534] ? __fget_files+0x2a/0x410 [ 270.858773][T13534] __sys_sendmsg+0x269/0x350 [ 270.858795][T13534] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.858827][T13534] ? do_sys_openat2+0x17a/0x1d0 [ 270.858878][T13534] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.858903][T13534] ? do_syscall_64+0x100/0x230 [ 270.858930][T13534] ? do_syscall_64+0xb6/0x230 [ 270.858954][T13534] do_syscall_64+0xf3/0x230 [ 270.858976][T13534] ? clear_bhb_loop+0x35/0x90 [ 270.859002][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.859023][T13534] RIP: 0033:0x7f0179f8d169 [ 270.859038][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.859053][T13534] RSP: 002b:00007f017ad35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.859072][T13534] RAX: ffffffffffffffda RBX: 00007f017a1a5fa0 RCX: 00007f0179f8d169 [ 270.859084][T13534] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 270.859095][T13534] RBP: 00007f017ad35090 R08: 0000000000000000 R09: 0000000000000000 [ 270.859106][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.859116][T13534] R13: 0000000000000000 R14: 00007f017a1a5fa0 R15: 00007ffdac4666b8 [ 270.859143][T13534] [ 270.869067][T13515] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 271.167166][T13544] lo speed is unknown, defaulting to 1000 [ 271.326140][T13552] lo speed is unknown, defaulting to 1000 [ 271.584246][T13567] raw_sendmsg: syz.4.2251 forgot to set AF_INET. Fix it! [ 271.927396][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'. [ 271.957653][T13577] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 272.014606][T13577] 8021q: adding VLAN 0 to HW filter on device team1 [ 272.080794][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 272.336225][T13605] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2259'. [ 272.643805][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 272.757296][T13627] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2267'. [ 272.957174][T13633] lo speed is unknown, defaulting to 1000 [ 272.957224][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 273.003953][T13638] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2271'. [ 273.185321][T13648] netlink: 'syz.4.2274': attribute type 21 has an invalid length. [ 273.235427][T13648] netlink: 'syz.4.2274': attribute type 20 has an invalid length. [ 273.252018][T13651] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 273.509344][T13662] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 273.516920][T13659] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 273.523455][T13659] syzkaller1: Refused to change device type [ 273.535075][T13662] bridge0: port 1(team0) entered disabled state [ 273.551541][T13662] team0: left promiscuous mode [ 273.556654][T13662] bridge0: port 1(team0) entered disabled state [ 273.561083][T13666] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 273.577552][T13662] batman_adv: batadv0: Adding interface: team0 [ 273.585867][T13662] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.613529][T13662] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 273.626247][T13666] team0: entered promiscuous mode [ 273.635780][T13666] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.643007][T13666] batman_adv: batadv0: Interface activated: team0 [ 273.649872][T13666] batman_adv: batadv0: Interface deactivated: team0 [ 273.656657][T13666] batman_adv: batadv0: Removing interface: team0 [ 273.665788][T13666] bridge0: port 1(team0) entered blocking state [ 273.672545][T13666] bridge0: port 1(team0) entered disabled state [ 274.282483][T13692] __nla_validate_parse: 4 callbacks suppressed [ 274.282501][T13692] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2288'. [ 274.413410][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2290'. [ 274.612243][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 274.739279][T13720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2297'. [ 274.930144][T13730] sctp: [Deprecated]: syz.2.2299 (pid 13730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.930144][T13730] Use struct sctp_sack_info instead [ 275.034841][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 275.048835][T13734] netlink: 'syz.3.2301': attribute type 2 has an invalid length. [ 275.140125][T13736] pim6reg1: entered promiscuous mode [ 275.145514][T13736] pim6reg1: entered allmulticast mode [ 278.262741][T13792] syzkaller0: entered promiscuous mode [ 278.294299][T13792] syzkaller0: entered allmulticast mode [ 286.434490][T13999] lo speed is unknown, defaulting to 1000 [ 286.756310][T14015] lo speed is unknown, defaulting to 1000 [ 287.114856][T14024] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 287.187948][T14032] ipip0: entered promiscuous mode [ 287.200544][T14032] ipip0: entered allmulticast mode [ 287.234313][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 287.429642][T14041] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2420'. [ 287.872862][T14060] lo speed is unknown, defaulting to 1000 [ 288.209808][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2429'. [ 288.256301][T14080] netlink: 'syz.0.2431': attribute type 10 has an invalid length. [ 288.611798][T14086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.078994][T14108] x_tables: duplicate underflow at hook 2 [ 289.342318][T14122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2445'. [ 289.400052][T14122] netlink: 'syz.4.2445': attribute type 1 has an invalid length. [ 289.411195][T14122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 289.459983][T14131] FAULT_INJECTION: forcing a failure. [ 289.459983][T14131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.473368][T14131] CPU: 1 UID: 0 PID: 14131 Comm: syz.1.2447 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 289.473393][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.473404][T14131] Call Trace: [ 289.473411][T14131] [ 289.473418][T14131] dump_stack_lvl+0x241/0x360 [ 289.473445][T14131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.473463][T14131] ? __pfx__printk+0x10/0x10 [ 289.473482][T14131] ? __pfx_lock_release+0x10/0x10 [ 289.473514][T14131] should_fail_ex+0x40a/0x550 [ 289.473543][T14131] _copy_from_iter+0x1df/0x1c40 [ 289.473563][T14131] ? __virt_addr_valid+0x183/0x530 [ 289.473580][T14131] ? __pfx_lock_release+0x10/0x10 [ 289.473609][T14131] ? __alloc_skb+0x28f/0x440 [ 289.473628][T14131] ? __pfx__copy_from_iter+0x10/0x10 [ 289.473649][T14131] ? __virt_addr_valid+0x183/0x530 [ 289.473664][T14131] ? __virt_addr_valid+0x183/0x530 [ 289.473679][T14131] ? __virt_addr_valid+0x45f/0x530 [ 289.473695][T14131] ? __phys_addr_symbol+0x2f/0x70 [ 289.473708][T14131] ? __check_object_size+0x47a/0x730 [ 289.473732][T14131] netlink_sendmsg+0x742/0xcb0 [ 289.473760][T14131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.473781][T14131] ? aa_sock_msg_perm+0x91/0x160 [ 289.473810][T14131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.473824][T14131] __sock_sendmsg+0x221/0x270 [ 289.473855][T14131] ____sys_sendmsg+0x53a/0x860 [ 289.473883][T14131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.473899][T14131] ? __fget_files+0x2a/0x410 [ 289.473923][T14131] ? __fget_files+0x2a/0x410 [ 289.473961][T14131] __sys_sendmsg+0x269/0x350 [ 289.473986][T14131] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.474018][T14131] ? do_sys_openat2+0x17a/0x1d0 [ 289.474065][T14131] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.474090][T14131] ? do_syscall_64+0x100/0x230 [ 289.474116][T14131] ? do_syscall_64+0xb6/0x230 [ 289.474141][T14131] do_syscall_64+0xf3/0x230 [ 289.474163][T14131] ? clear_bhb_loop+0x35/0x90 [ 289.474188][T14131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.474208][T14131] RIP: 0033:0x7f83a1b8d169 [ 289.474223][T14131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.474236][T14131] RSP: 002b:00007f83a2933038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.474255][T14131] RAX: ffffffffffffffda RBX: 00007f83a1da5fa0 RCX: 00007f83a1b8d169 [ 289.474271][T14131] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 289.474282][T14131] RBP: 00007f83a2933090 R08: 0000000000000000 R09: 0000000000000000 [ 289.474293][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.474302][T14131] R13: 0000000000000000 R14: 00007f83a1da5fa0 R15: 00007ffec6a51628 [ 289.474328][T14131] [ 289.765853][T14133] netlink: 'syz.2.2446': attribute type 10 has an invalid length. [ 290.942974][T14134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2448'. [ 291.155916][T14152] openvswitch: netlink: IP tunnel TTL not specified. [ 291.447943][T14170] FAULT_INJECTION: forcing a failure. [ 291.447943][T14170] name failslab, interval 1, probability 0, space 0, times 0 [ 291.467654][T14170] CPU: 1 UID: 0 PID: 14170 Comm: syz.3.2459 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 291.467680][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.467691][T14170] Call Trace: [ 291.467697][T14170] [ 291.467704][T14170] dump_stack_lvl+0x241/0x360 [ 291.467732][T14170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.467750][T14170] ? __pfx__printk+0x10/0x10 [ 291.467781][T14170] should_fail_ex+0x40a/0x550 [ 291.467811][T14170] should_failslab+0xac/0x100 [ 291.467833][T14170] ? skb_clone+0x20c/0x390 [ 291.467852][T14170] kmem_cache_alloc_noprof+0x70/0x380 [ 291.467879][T14170] skb_clone+0x20c/0x390 [ 291.467901][T14170] __netlink_deliver_tap+0x3c4/0x7f0 [ 291.467936][T14170] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.467958][T14170] netlink_deliver_tap+0x19d/0x1b0 [ 291.467982][T14170] netlink_unicast+0x7c4/0x990 [ 291.468011][T14170] ? __pfx_netlink_unicast+0x10/0x10 [ 291.468031][T14170] ? __virt_addr_valid+0x45f/0x530 [ 291.468048][T14170] ? __phys_addr_symbol+0x2f/0x70 [ 291.468063][T14170] ? __check_object_size+0x47a/0x730 [ 291.468089][T14170] netlink_sendmsg+0x8de/0xcb0 [ 291.468115][T14170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.468136][T14170] ? aa_sock_msg_perm+0x91/0x160 [ 291.468165][T14170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.468180][T14170] __sock_sendmsg+0x221/0x270 [ 291.468206][T14170] ____sys_sendmsg+0x53a/0x860 [ 291.468232][T14170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.468250][T14170] ? __fget_files+0x2a/0x410 [ 291.468274][T14170] ? __fget_files+0x2a/0x410 [ 291.468305][T14170] __sys_sendmsg+0x269/0x350 [ 291.468329][T14170] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.468359][T14170] ? do_sys_openat2+0x17a/0x1d0 [ 291.468406][T14170] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.468432][T14170] ? do_syscall_64+0x100/0x230 [ 291.468457][T14170] ? do_syscall_64+0xb6/0x230 [ 291.468482][T14170] do_syscall_64+0xf3/0x230 [ 291.468513][T14170] ? clear_bhb_loop+0x35/0x90 [ 291.468538][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.468559][T14170] RIP: 0033:0x7fd4a4f8d169 [ 291.468571][T14170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.468584][T14170] RSP: 002b:00007fd4a2df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.468604][T14170] RAX: ffffffffffffffda RBX: 00007fd4a51a5fa0 RCX: 00007fd4a4f8d169 [ 291.468616][T14170] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 291.468630][T14170] RBP: 00007fd4a2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.468639][T14170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.468648][T14170] R13: 0000000000000000 R14: 00007fd4a51a5fa0 R15: 00007fffcf9cf168 [ 291.468673][T14170] [ 291.484493][T14171] lo speed is unknown, defaulting to 1000 [ 292.030109][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2463'. [ 292.215327][T14198] openvswitch: netlink: Multiple metadata blocks provided [ 292.364373][T14202] FAULT_INJECTION: forcing a failure. [ 292.364373][T14202] name failslab, interval 1, probability 0, space 0, times 0 [ 292.386800][T14202] CPU: 0 UID: 0 PID: 14202 Comm: syz.4.2471 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 292.386826][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.386836][T14202] Call Trace: [ 292.386842][T14202] [ 292.386850][T14202] dump_stack_lvl+0x241/0x360 [ 292.386875][T14202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.386893][T14202] ? __pfx__printk+0x10/0x10 [ 292.386911][T14202] ? __kmalloc_cache_noprof+0x48/0x390 [ 292.386934][T14202] ? __pfx___might_resched+0x10/0x10 [ 292.386957][T14202] should_fail_ex+0x40a/0x550 [ 292.386986][T14202] should_failslab+0xac/0x100 [ 292.387008][T14202] __kmalloc_cache_noprof+0x70/0x390 [ 292.387029][T14202] ? hash_ipmac_create+0x2fa/0x1040 [ 292.387052][T14202] hash_ipmac_create+0x2fa/0x1040 [ 292.387077][T14202] ? __pfx_hash_ipmac_create+0x10/0x10 [ 292.387095][T14202] ip_set_create+0xa78/0x1960 [ 292.387118][T14202] ? ip_set_create+0x48a/0x1960 [ 292.387142][T14202] ? __pfx_ip_set_create+0x10/0x10 [ 292.387192][T14202] ? nfnetlink_rcv_msg+0x225/0x1180 [ 292.387210][T14202] nfnetlink_rcv_msg+0xbec/0x1180 [ 292.387228][T14202] ? nfnetlink_rcv_msg+0x225/0x1180 [ 292.387271][T14202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 292.387333][T14202] netlink_rcv_skb+0x206/0x480 [ 292.387356][T14202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 292.387375][T14202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.387407][T14202] ? apparmor_capable+0x13b/0x1b0 [ 292.387426][T14202] ? bpf_lsm_capable+0x9/0x10 [ 292.387445][T14202] ? security_capable+0x7e/0x2d0 [ 292.387471][T14202] nfnetlink_rcv+0x297/0x2ab0 [ 292.387489][T14202] ? __pfx_validate_chain+0x10/0x10 [ 292.387520][T14202] ? mark_lock+0x9a/0x360 [ 292.387534][T14202] ? __pfx_validate_chain+0x10/0x10 [ 292.387553][T14202] ? __lock_acquire+0x1397/0x2100 [ 292.387582][T14202] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 292.387601][T14202] ? mark_lock+0x9a/0x360 [ 292.387621][T14202] ? __lock_acquire+0x1397/0x2100 [ 292.387676][T14202] ? __pfx_lock_release+0x10/0x10 [ 292.387699][T14202] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.387733][T14202] ? __pfx_lock_release+0x10/0x10 [ 292.387768][T14202] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.387793][T14202] netlink_unicast+0x7f6/0x990 [ 292.387821][T14202] ? __pfx_netlink_unicast+0x10/0x10 [ 292.387840][T14202] ? __virt_addr_valid+0x45f/0x530 [ 292.387856][T14202] ? __phys_addr_symbol+0x2f/0x70 [ 292.387869][T14202] ? __check_object_size+0x47a/0x730 [ 292.387895][T14202] netlink_sendmsg+0x8de/0xcb0 [ 292.387922][T14202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.387941][T14202] ? aa_sock_msg_perm+0x91/0x160 [ 292.387969][T14202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.387982][T14202] __sock_sendmsg+0x221/0x270 [ 292.388008][T14202] ____sys_sendmsg+0x53a/0x860 [ 292.388035][T14202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.388052][T14202] ? __fget_files+0x2a/0x410 [ 292.388076][T14202] ? __fget_files+0x2a/0x410 [ 292.388106][T14202] __sys_sendmsg+0x269/0x350 [ 292.388130][T14202] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.388161][T14202] ? do_sys_openat2+0x17a/0x1d0 [ 292.388205][T14202] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.388229][T14202] ? do_syscall_64+0x100/0x230 [ 292.388254][T14202] ? do_syscall_64+0xb6/0x230 [ 292.388277][T14202] do_syscall_64+0xf3/0x230 [ 292.388297][T14202] ? clear_bhb_loop+0x35/0x90 [ 292.388322][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.388341][T14202] RIP: 0033:0x7fa6b518d169 [ 292.388355][T14202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.388368][T14202] RSP: 002b:00007fa6b5f15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.388386][T14202] RAX: ffffffffffffffda RBX: 00007fa6b53a5fa0 RCX: 00007fa6b518d169 [ 292.388397][T14202] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 292.388406][T14202] RBP: 00007fa6b5f15090 R08: 0000000000000000 R09: 0000000000000000 [ 292.388415][T14202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.388424][T14202] R13: 0000000000000000 R14: 00007fa6b53a5fa0 R15: 00007ffd0ea509c8 [ 292.388450][T14202] [ 292.959503][T14214] sctp: [Deprecated]: syz.0.2476 (pid 14214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.959503][T14214] Use struct sctp_sack_info instead [ 293.057718][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2474'. [ 293.136660][T14221] netlink: 'syz.1.2475': attribute type 10 has an invalid length. [ 293.163855][T14220] nbd: socks must be embedded in a SOCK_ITEM attr [ 293.175515][T14221] team0: left promiscuous mode [ 293.202113][T14221] team0: left allmulticast mode [ 293.206754][T14230] netlink: 'syz.1.2475': attribute type 10 has an invalid length. [ 293.207196][T14221] bridge1: port 1(team0) entered disabled state [ 293.222409][T14230] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2475'. [ 293.261784][T14221] batman_adv: batadv0: Adding interface: team0 [ 293.268204][T14221] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.316434][T14221] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 293.328580][T14230] team0: entered promiscuous mode [ 293.335828][T14230] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.343212][T14230] batman_adv: batadv0: Interface activated: team0 [ 293.374140][T14230] batman_adv: batadv0: Interface deactivated: team0 [ 293.390098][T14230] batman_adv: batadv0: Removing interface: team0 [ 293.406878][T14230] bridge1: port 1(team0) entered blocking state [ 293.414184][T14230] bridge1: port 1(team0) entered disabled state [ 293.420750][T14230] team0: entered allmulticast mode [ 293.636458][T14246] FAULT_INJECTION: forcing a failure. [ 293.636458][T14246] name failslab, interval 1, probability 0, space 0, times 0 [ 293.654361][T14246] CPU: 1 UID: 0 PID: 14246 Comm: syz.3.2485 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 293.654387][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.654398][T14246] Call Trace: [ 293.654404][T14246] [ 293.654412][T14246] dump_stack_lvl+0x241/0x360 [ 293.654438][T14246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.654457][T14246] ? __pfx__printk+0x10/0x10 [ 293.654477][T14246] ? __kmalloc_cache_noprof+0x48/0x390 [ 293.654501][T14246] ? __pfx___might_resched+0x10/0x10 [ 293.654527][T14246] should_fail_ex+0x40a/0x550 [ 293.654561][T14246] should_failslab+0xac/0x100 [ 293.654584][T14246] __kmalloc_cache_noprof+0x70/0x390 [ 293.654604][T14246] ? ip_set_create+0x336/0x1960 [ 293.654628][T14246] ip_set_create+0x336/0x1960 [ 293.654649][T14246] ? rcu_needs_cpu+0x41/0xb0 [ 293.654667][T14246] ? trace_contention_end+0x3c/0x120 [ 293.654689][T14246] ? __pfx_ip_set_create+0x10/0x10 [ 293.654734][T14246] ? nfnetlink_rcv_msg+0x225/0x1180 [ 293.654754][T14246] nfnetlink_rcv_msg+0xbec/0x1180 [ 293.654775][T14246] ? nfnetlink_rcv_msg+0x225/0x1180 [ 293.654812][T14246] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 293.654830][T14246] ? stack_trace_save+0x118/0x1d0 [ 293.654870][T14246] ? dev_hard_start_xmit+0x27a/0x7d0 [ 293.654888][T14246] ? __dev_queue_xmit+0x1b73/0x3f40 [ 293.654907][T14246] ? __netlink_deliver_tap+0x561/0x7f0 [ 293.654929][T14246] ? netlink_deliver_tap+0x19d/0x1b0 [ 293.654950][T14246] ? netlink_unicast+0x7c4/0x990 [ 293.654968][T14246] ? netlink_sendmsg+0x8de/0xcb0 [ 293.654981][T14246] ? __sock_sendmsg+0x221/0x270 [ 293.655001][T14246] ? ____sys_sendmsg+0x53a/0x860 [ 293.655018][T14246] ? __sys_sendmsg+0x269/0x350 [ 293.655047][T14246] netlink_rcv_skb+0x206/0x480 [ 293.655070][T14246] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 293.655091][T14246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.655125][T14246] ? apparmor_capable+0x13b/0x1b0 [ 293.655146][T14246] ? bpf_lsm_capable+0x9/0x10 [ 293.655167][T14246] ? security_capable+0x7e/0x2d0 [ 293.655196][T14246] nfnetlink_rcv+0x297/0x2ab0 [ 293.655221][T14246] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 293.655246][T14246] ? __dev_queue_xmit+0x2f4/0x3f40 [ 293.655267][T14246] ? __dev_queue_xmit+0x1775/0x3f40 [ 293.655287][T14246] ? kasan_save_track+0x51/0x80 [ 293.655309][T14246] ? ____sys_sendmsg+0x53a/0x860 [ 293.655336][T14246] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 293.655354][T14246] ? __dev_queue_xmit+0x2f4/0x3f40 [ 293.655378][T14246] ? __pfx___dev_queue_xmit+0x10/0x10 [ 293.655412][T14246] ? ref_tracker_free+0x643/0x7e0 [ 293.655430][T14246] ? __asan_memcpy+0x40/0x70 [ 293.655446][T14246] ? __pfx_ref_tracker_free+0x10/0x10 [ 293.655461][T14246] ? __skb_clone+0x5c/0x6c0 [ 293.655491][T14246] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.655512][T14246] ? skb_clone+0x240/0x390 [ 293.655531][T14246] ? __pfx_lock_release+0x10/0x10 [ 293.655562][T14246] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 293.655594][T14246] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.655621][T14246] netlink_unicast+0x7f6/0x990 [ 293.655650][T14246] ? __pfx_netlink_unicast+0x10/0x10 [ 293.655670][T14246] ? __virt_addr_valid+0x45f/0x530 [ 293.655687][T14246] ? __phys_addr_symbol+0x2f/0x70 [ 293.655702][T14246] ? __check_object_size+0x47a/0x730 [ 293.655729][T14246] netlink_sendmsg+0x8de/0xcb0 [ 293.655757][T14246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.655778][T14246] ? aa_sock_msg_perm+0x91/0x160 [ 293.655805][T14246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.655819][T14246] __sock_sendmsg+0x221/0x270 [ 293.655846][T14246] ____sys_sendmsg+0x53a/0x860 [ 293.655874][T14246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.655892][T14246] ? __fget_files+0x2a/0x410 [ 293.655917][T14246] ? __fget_files+0x2a/0x410 [ 293.655945][T14246] __sys_sendmsg+0x269/0x350 [ 293.655969][T14246] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.656002][T14246] ? do_sys_openat2+0x17a/0x1d0 [ 293.656048][T14246] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.656072][T14246] ? do_syscall_64+0x100/0x230 [ 293.656098][T14246] ? do_syscall_64+0xb6/0x230 [ 293.656122][T14246] do_syscall_64+0xf3/0x230 [ 293.656144][T14246] ? clear_bhb_loop+0x35/0x90 [ 293.656169][T14246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.656190][T14246] RIP: 0033:0x7fd4a4f8d169 [ 293.656206][T14246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.656218][T14246] RSP: 002b:00007fd4a2df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.656238][T14246] RAX: ffffffffffffffda RBX: 00007fd4a51a5fa0 RCX: 00007fd4a4f8d169 [ 293.656250][T14246] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 293.656279][T14246] RBP: 00007fd4a2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.656289][T14246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.656298][T14246] R13: 0000000000000000 R14: 00007fd4a51a5fa0 R15: 00007fffcf9cf168 [ 293.656323][T14246] [ 294.247293][T14251] FAULT_INJECTION: forcing a failure. [ 294.247293][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 294.261819][T14251] CPU: 1 UID: 0 PID: 14251 Comm: syz.3.2487 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 294.261843][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.261853][T14251] Call Trace: [ 294.261860][T14251] [ 294.261867][T14251] dump_stack_lvl+0x241/0x360 [ 294.261892][T14251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.261910][T14251] ? __pfx__printk+0x10/0x10 [ 294.261929][T14251] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 294.261953][T14251] ? __pfx___might_resched+0x10/0x10 [ 294.261978][T14251] should_fail_ex+0x40a/0x550 [ 294.262005][T14251] should_failslab+0xac/0x100 [ 294.262027][T14251] kmem_cache_alloc_node_noprof+0x77/0x380 [ 294.262048][T14251] ? __alloc_skb+0x1c3/0x440 [ 294.262065][T14251] ? stack_trace_save+0x118/0x1d0 [ 294.262088][T14251] __alloc_skb+0x1c3/0x440 [ 294.262110][T14251] ? __pfx___alloc_skb+0x10/0x10 [ 294.262133][T14251] ? netlink_ack_tlv_len+0x6e/0x200 [ 294.262158][T14251] netlink_ack+0x145/0xa60 [ 294.262178][T14251] ? netlink_sendmsg+0x8de/0xcb0 [ 294.262192][T14251] ? __sock_sendmsg+0x221/0x270 [ 294.262221][T14251] ? __sys_sendmsg+0x269/0x350 [ 294.262253][T14251] netlink_rcv_skb+0x294/0x480 [ 294.262277][T14251] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.262299][T14251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.262335][T14251] ? apparmor_capable+0x13b/0x1b0 [ 294.262356][T14251] ? bpf_lsm_capable+0x9/0x10 [ 294.262378][T14251] ? security_capable+0x7e/0x2d0 [ 294.262407][T14251] nfnetlink_rcv+0x297/0x2ab0 [ 294.262432][T14251] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 294.262457][T14251] ? __dev_queue_xmit+0x2f4/0x3f40 [ 294.262479][T14251] ? __dev_queue_xmit+0x1775/0x3f40 [ 294.262499][T14251] ? kasan_save_track+0x51/0x80 [ 294.262521][T14251] ? ____sys_sendmsg+0x53a/0x860 [ 294.262543][T14251] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 294.262562][T14251] ? __dev_queue_xmit+0x2f4/0x3f40 [ 294.262586][T14251] ? __pfx___dev_queue_xmit+0x10/0x10 [ 294.262622][T14251] ? ref_tracker_free+0x643/0x7e0 [ 294.262640][T14251] ? __asan_memcpy+0x40/0x70 [ 294.262656][T14251] ? __pfx_ref_tracker_free+0x10/0x10 [ 294.262671][T14251] ? __skb_clone+0x5c/0x6c0 [ 294.262704][T14251] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.262725][T14251] ? skb_clone+0x240/0x390 [ 294.262745][T14251] ? __pfx_lock_release+0x10/0x10 [ 294.262768][T14251] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 294.262801][T14251] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.262827][T14251] netlink_unicast+0x7f6/0x990 [ 294.262856][T14251] ? __pfx_netlink_unicast+0x10/0x10 [ 294.262875][T14251] ? __virt_addr_valid+0x45f/0x530 [ 294.262892][T14251] ? __phys_addr_symbol+0x2f/0x70 [ 294.262907][T14251] ? __check_object_size+0x47a/0x730 [ 294.262933][T14251] netlink_sendmsg+0x8de/0xcb0 [ 294.262960][T14251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.262981][T14251] ? aa_sock_msg_perm+0x91/0x160 [ 294.263009][T14251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.263023][T14251] __sock_sendmsg+0x221/0x270 [ 294.263049][T14251] ____sys_sendmsg+0x53a/0x860 [ 294.263074][T14251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.263092][T14251] ? __fget_files+0x2a/0x410 [ 294.263118][T14251] ? __fget_files+0x2a/0x410 [ 294.263148][T14251] __sys_sendmsg+0x269/0x350 [ 294.263172][T14251] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.263203][T14251] ? do_sys_openat2+0x17a/0x1d0 [ 294.263255][T14251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.263279][T14251] ? do_syscall_64+0x100/0x230 [ 294.263304][T14251] ? do_syscall_64+0xb6/0x230 [ 294.263329][T14251] do_syscall_64+0xf3/0x230 [ 294.263351][T14251] ? clear_bhb_loop+0x35/0x90 [ 294.263376][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.263396][T14251] RIP: 0033:0x7fd4a4f8d169 [ 294.263412][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.263426][T14251] RSP: 002b:00007fd4a2df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.263445][T14251] RAX: ffffffffffffffda RBX: 00007fd4a51a5fa0 RCX: 00007fd4a4f8d169 [ 294.263457][T14251] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 294.263467][T14251] RBP: 00007fd4a2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.263478][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.263488][T14251] R13: 0000000000000000 R14: 00007fd4a51a5fa0 R15: 00007fffcf9cf168 [ 294.263515][T14251] [ 294.808499][T14256] geneve3: entered promiscuous mode [ 294.829113][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 294.982910][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 294.998399][T14269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2496'. [ 295.020597][T14266] vlan4: entered allmulticast mode [ 295.025778][T14266] batadv0: entered allmulticast mode [ 295.093082][T14273] sctp: [Deprecated]: syz.1.2489 (pid 14273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.093082][T14273] Use struct sctp_sack_info instead [ 295.732348][T14297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2504'. [ 295.775265][T14300] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 295.795830][T14302] ipip0: entered promiscuous mode [ 295.806261][T14302] ipip0: entered allmulticast mode [ 295.935007][T14300] bond10: entered promiscuous mode [ 295.940835][T14300] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.209931][T14324] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2513'. [ 296.331700][T14327] netlink: 'syz.2.2516': attribute type 10 has an invalid length. [ 296.352851][T14327] team0: left promiscuous mode [ 296.367813][T14327] batman_adv: batadv0: Adding interface: team0 [ 296.383155][T14339] netlink: 'syz.2.2516': attribute type 10 has an invalid length. [ 296.394992][T14339] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2516'. [ 296.399173][T14327] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.469106][T14327] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 296.487462][T14339] team0: entered promiscuous mode [ 296.515810][T14339] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.532473][T14339] batman_adv: batadv0: Interface activated: team0 [ 296.581917][T14339] batman_adv: batadv0: Interface deactivated: team0 [ 296.699287][T14339] batman_adv: batadv0: Removing interface: team0 [ 296.884379][T14356] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2525'. [ 297.040297][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.593970][T14398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2534'. [ 297.634913][T14398] nbd: socks must be embedded in a SOCK_ITEM attr [ 297.698457][T14405] netlink: 'syz.0.2539': attribute type 1 has an invalid length. [ 297.781895][T14405] bond12: entered promiscuous mode [ 297.787084][T14405] bond12: entered allmulticast mode [ 297.798077][T14411] batadv1: entered promiscuous mode [ 297.806639][T14411] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 297.815290][T14411] bond12: (slave batadv1): making interface the new active one [ 297.823120][T14411] batadv1: entered allmulticast mode [ 297.830223][T14411] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 298.031406][T14424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.213459][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2549'. [ 299.421714][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2567'. [ 299.435243][T14477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.477872][T14477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.487592][T14477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.496660][T14477] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.640444][T14483] sctp: [Deprecated]: syz.0.2569 (pid 14483) Use of int in max_burst socket option. [ 299.640444][T14483] Use struct sctp_assoc_value instead [ 299.975994][T14497] lo speed is unknown, defaulting to 1000 [ 300.570931][T14521] sctp: [Deprecated]: syz.1.2583 (pid 14521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.570931][T14521] Use struct sctp_sack_info instead [ 300.611978][T14522] netlink: 'syz.2.2584': attribute type 58 has an invalid length. [ 300.654579][T14522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2584'. [ 300.887947][T14530] netlink: 'syz.2.2588': attribute type 10 has an invalid length. [ 300.948761][T14536] netlink: 'syz.2.2588': attribute type 10 has an invalid length. [ 300.967200][T14536] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2588'. [ 300.989936][T14530] team0: left promiscuous mode [ 301.017214][T14530] batman_adv: batadv0: Adding interface: team0 [ 301.019623][T14537] netlink: 'syz.3.2590': attribute type 10 has an invalid length. [ 301.045246][T14530] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.106806][T14541] netlink: 'syz.3.2590': attribute type 10 has an invalid length. [ 301.126998][T14530] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 301.156351][T14541] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2590'. [ 301.166126][T14536] team0: entered promiscuous mode [ 301.176806][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.200124][T14536] batman_adv: batadv0: Interface activated: team0 [ 301.217106][T14536] batman_adv: batadv0: Interface deactivated: team0 [ 301.226530][T14536] batman_adv: batadv0: Removing interface: team0 [ 301.259382][T14537] bridge0: port 1(team0) entered disabled state [ 301.271048][T14537] team0: left promiscuous mode [ 301.276284][T14537] bridge0: port 1(team0) entered disabled state [ 301.297538][T14537] batman_adv: batadv0: Adding interface: team0 [ 301.308901][T14537] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.341248][T14537] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 301.352786][T14547] nicvf0: tun_chr_ioctl cmd 1074025676 [ 301.358444][T14547] nicvf0: owner set to 0 [ 301.363348][T14541] team0: entered promiscuous mode [ 301.370639][T14541] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.407228][T14541] batman_adv: batadv0: Interface activated: team0 [ 301.456471][T14541] batman_adv: batadv0: Interface deactivated: team0 [ 301.488152][T14541] batman_adv: batadv0: Removing interface: team0 [ 301.499780][T14541] bridge0: port 1(team0) entered blocking state [ 301.519264][T14541] bridge0: port 1(team0) entered disabled state [ 301.755634][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'. [ 301.975198][T14568] lo speed is unknown, defaulting to 1000 [ 302.044235][T14565] lo speed is unknown, defaulting to 1000 [ 302.140825][T14573] batadv_slave_1: entered promiscuous mode [ 302.146795][T14573] batadv_slave_1: entered allmulticast mode [ 302.226197][T14573] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 302.434744][T14578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2602'. [ 302.719055][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 302.962379][T14588] lo speed is unknown, defaulting to 1000 [ 304.046342][T14622] openvswitch: netlink: Message has 8 unknown bytes. [ 304.091438][T14622] netlink: 'syz.0.2613': attribute type 12 has an invalid length. [ 304.168570][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 305.852548][T14695] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 305.897949][T14697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2633'. [ 305.907180][T14697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2633'. [ 305.932942][T14698] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2635'. [ 306.125561][T14701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.314743][T14701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.539359][T14723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2642'. [ 306.573517][T14701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.700448][T14724] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 306.708877][T14724] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2640'. [ 306.721031][T14731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2644'. [ 306.735302][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 306.745656][T14732] openvswitch: netlink: Tunnel attr 9 has unexpected len 5032 expected 2 [ 306.820616][T14701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.923792][T14737] netlink: 'syz.1.2646': attribute type 9 has an invalid length. [ 306.953232][T14701] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.066650][T14701] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.081741][T14701] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.101264][T14701] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.143479][T14741] netlink: 'syz.4.2647': attribute type 13 has an invalid length. [ 307.152740][T14741] gretap0: refused to change device tx_queue_len [ 307.178832][T14741] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.215994][T14743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.487194][T14756] sctp: [Deprecated]: syz.1.2653 (pid 14756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.487194][T14756] Use struct sctp_sack_info instead [ 307.581948][T14762] netlink: 'syz.1.2657': attribute type 10 has an invalid length. [ 307.594534][T14763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2655'. [ 307.701953][T14763] nbd: socks must be embedded in a SOCK_ITEM attr [ 307.782054][T14774] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 307.791970][T14774] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 307.801368][T14774] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 307.820162][T14774] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 307.846523][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 307.868308][T14774] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 307.902943][T14777] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 307.929216][T14777] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 308.143113][T14793] lo speed is unknown, defaulting to 1000 [ 308.565573][T14808] lo speed is unknown, defaulting to 1000 [ 309.313978][T14839] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 309.329327][T14839] team0: left promiscuous mode [ 309.349725][T14839] batman_adv: batadv0: Adding interface: team0 [ 309.363936][T14839] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.400692][T14841] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 309.405410][T14839] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 309.408532][T14841] __nla_validate_parse: 2 callbacks suppressed [ 309.408545][T14841] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2679'. [ 309.469881][T14841] team0: entered promiscuous mode [ 309.481682][T14841] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.527615][T14841] batman_adv: batadv0: Interface activated: team0 [ 309.538848][T14841] batman_adv: batadv0: Interface deactivated: team0 [ 309.545724][T14841] batman_adv: batadv0: Removing interface: team0 [ 309.553187][T14841] bridge0: port 1(team0) entered blocking state [ 309.561737][T14841] bridge0: port 1(team0) entered disabled state [ 309.568359][T14841] team0: entered allmulticast mode [ 309.675642][T14845] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 309.760745][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2680'. [ 310.108411][T14855] TCP: TCP_TX_DELAY enabled [ 310.409008][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 310.623425][T14875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2691'. [ 310.814417][T14883] lo speed is unknown, defaulting to 1000 [ 310.927263][T14888] lo speed is unknown, defaulting to 1000 [ 311.450855][T14914] openvswitch: netlink: Actions may not be safe on all matching packets [ 311.577789][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2700'. [ 311.639713][T14920] nbd: socks must be embedded in a SOCK_ITEM attr [ 311.679545][T14927] ªªªªªª: renamed from lo (while UP) [ 311.846711][T14930] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2702'. [ 311.898511][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'. [ 312.420340][T14954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2714'. [ 312.580359][T14962] lo speed is unknown, defaulting to 1000 [ 312.589806][T14959] netlink: 'syz.1.2716': attribute type 10 has an invalid length. [ 312.630986][T14959] team0: left promiscuous mode [ 312.642047][T14964] netlink: 'syz.1.2716': attribute type 10 has an invalid length. [ 312.643530][T14959] team0: left allmulticast mode [ 312.650410][T14964] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2716'. [ 312.667141][T14959] bridge1: port 1(team0) entered disabled state [ 312.689613][T14959] batman_adv: batadv0: Adding interface: team0 [ 312.695811][T14959] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.739442][T14959] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 312.777617][T14964] team0: entered promiscuous mode [ 312.799530][T14964] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.806599][T14964] batman_adv: batadv0: Interface activated: team0 [ 312.818775][T14964] batman_adv: batadv0: Interface deactivated: team0 [ 312.825448][T14964] batman_adv: batadv0: Removing interface: team0 [ 312.849826][T14964] bridge1: port 1(team0) entered blocking state [ 312.856375][T14964] bridge1: port 1(team0) entered disabled state [ 312.872185][T14964] team0: entered allmulticast mode [ 312.923217][T14960] lo speed is unknown, defaulting to 1000 [ 313.027014][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 313.494707][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 313.539078][T14985] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 313.609230][T14985] tipc: Enabled bearer , priority 10 [ 313.921544][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 314.261511][T15020] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 314.277162][T15020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.631260][T15029] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 314.655208][T15029] team0: left promiscuous mode [ 314.670384][T15029] team0: left allmulticast mode [ 314.683063][T15029] bridge1: port 1(team0) entered disabled state [ 314.690302][T15036] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 314.705998][T15036] __nla_validate_parse: 1 callbacks suppressed [ 314.706015][T15036] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2736'. [ 314.739883][T15029] batman_adv: batadv0: Adding interface: team0 [ 314.746071][T15029] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.772935][T15029] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 314.784179][T15036] team0: entered promiscuous mode [ 314.808007][T15036] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.825452][T15036] batman_adv: batadv0: Interface activated: team0 [ 314.837260][T15036] batman_adv: batadv0: Interface deactivated: team0 [ 314.852459][T15036] batman_adv: batadv0: Removing interface: team0 [ 314.864083][T15036] bridge1: port 1(team0) entered blocking state [ 314.872504][T15036] bridge1: port 1(team0) entered disabled state [ 314.883022][T15036] team0: entered allmulticast mode [ 315.035330][T15051] lo speed is unknown, defaulting to 1000 [ 315.556183][T15070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'. [ 315.614318][T15072] sctp: [Deprecated]: syz.4.2752 (pid 15072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.614318][T15072] Use struct sctp_sack_info instead [ 315.722048][T15076] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2753'. [ 315.893228][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2757'. [ 315.904136][T15088] netlink: 'syz.2.2757': attribute type 1 has an invalid length. [ 316.000604][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 316.058397][T15097] netlink: 'syz.4.2760': attribute type 10 has an invalid length. [ 316.085696][T15097] team0: left promiscuous mode [ 316.102253][T15097] netlink: 'syz.4.2760': attribute type 10 has an invalid length. [ 316.121001][T15100] lo speed is unknown, defaulting to 1000 [ 316.126943][T15097] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2760'. [ 316.154715][T15097] team0: entered promiscuous mode [ 316.167848][T15097] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.272157][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'. [ 316.282779][T15110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2765'. [ 316.545740][T15122] netlink: 'syz.1.2769': attribute type 10 has an invalid length. [ 316.558519][T15122] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 316.577013][T15122] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 316.585231][T15122] team0: Port device wlan1 added [ 316.978463][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2775'. [ 317.025287][T15137] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.034676][T15137] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.043847][T15137] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.052418][T15137] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.107426][T15143] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2777'. [ 317.134227][T15137] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.143115][T15137] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.151593][T15137] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.160063][T15137] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.174681][T15146] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2779'. [ 317.470808][T15147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.530705][T15147] team0: left promiscuous mode [ 317.586581][T15147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.675340][T15161] lo speed is unknown, defaulting to 1000 [ 317.796275][T15164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.251762][T15181] lo speed is unknown, defaulting to 1000 [ 318.399954][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 318.684814][T15204] gre1: entered promiscuous mode [ 318.845300][T15211] veth0_to_bond: entered promiscuous mode [ 319.001466][T15211] veth0_to_bond (unregistering): left promiscuous mode [ 319.089775][T15218] lo speed is unknown, defaulting to 1000 [ 319.684442][T15206] x_tables: duplicate entry at hook 2 [ 319.912374][T15234] __nla_validate_parse: 8 callbacks suppressed [ 319.912392][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'. [ 319.927758][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 320.230794][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2813'. [ 320.254517][T15249] lo speed is unknown, defaulting to 1000 [ 320.280185][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 320.302552][T15257] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.2816'. [ 320.333929][T15257] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 320.489436][T15267] sctp: [Deprecated]: syz.2.2817 (pid 15267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.489436][T15267] Use struct sctp_sack_info instead [ 320.747467][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2823'. [ 320.766969][T15282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.968043][T15289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2825'. [ 321.279524][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 321.479658][T15302] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 321.487954][T15302] team0: left promiscuous mode [ 321.497445][T15302] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 321.513718][T15302] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2832'. [ 321.526070][T15302] team0: entered promiscuous mode [ 321.533183][T15302] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.574402][T15304] netlink: 'syz.0.2833': attribute type 10 has an invalid length. [ 321.583331][T15304] team0: left promiscuous mode [ 321.595370][T15306] netlink: 'syz.1.2834': attribute type 10 has an invalid length. [ 321.596329][T15304] bridge0: port 1(team0) entered disabled state [ 321.610168][T15304] team0: left allmulticast mode [ 321.615090][T15304] bridge0: port 1(team0) entered disabled state [ 321.624172][T15304] batman_adv: batadv0: Adding interface: team0 [ 321.631762][T15304] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.658043][T15304] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 321.658190][T15308] netlink: 'syz.0.2833': attribute type 10 has an invalid length. [ 321.685328][T15308] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2833'. [ 321.701839][T15309] netlink: 'syz.1.2834': attribute type 10 has an invalid length. [ 321.722299][T15306] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 321.763293][T15306] team0: left allmulticast mode [ 321.768213][T15306] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 321.789684][T15306] bridge1: port 1(team0) entered disabled state [ 321.799272][T15306] batman_adv: batadv0: Adding interface: team0 [ 321.805457][T15306] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.841429][T15306] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 321.856557][T15309] team0: entered promiscuous mode [ 321.877287][T15309] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 321.886555][T15309] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.934767][T15309] batman_adv: batadv0: Interface activated: team0 [ 321.941595][T15309] batman_adv: batadv0: Interface deactivated: team0 [ 321.948275][T15309] batman_adv: batadv0: Removing interface: team0 [ 321.957666][T15309] bridge1: port 1(team0) entered blocking state [ 321.964432][T15309] bridge1: port 1(team0) entered disabled state [ 321.980232][T15309] team0: entered allmulticast mode [ 321.986342][T15309] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 322.005713][T15308] team0: entered promiscuous mode [ 322.011767][T15308] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.019164][T15308] batman_adv: batadv0: Interface activated: team0 [ 322.033617][T15308] batman_adv: batadv0: Interface deactivated: team0 [ 322.042770][T15308] batman_adv: batadv0: Removing interface: team0 [ 322.050503][T15308] bridge0: port 1(team0) entered blocking state [ 322.056997][T15308] bridge0: port 1(team0) entered disabled state [ 322.063640][T15308] team0: entered allmulticast mode [ 322.070293][T15315] batadv_slave_1: entered promiscuous mode [ 322.166932][T15325] nbd: socks must be embedded in a SOCK_ITEM attr [ 322.534719][T15336] lo speed is unknown, defaulting to 1000 [ 322.701215][T15314] batadv_slave_1: left promiscuous mode [ 322.870224][T15350] netlink: 'syz.0.2849': attribute type 6 has an invalid length. [ 323.680611][T15377] xt_cgroup: invalid path, errno=-2 [ 323.873917][T15382] sctp: [Deprecated]: syz.3.2860 (pid 15382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.873917][T15382] Use struct sctp_sack_info instead [ 323.958834][T15384] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 324.292172][T15406] lo speed is unknown, defaulting to 1000 [ 324.962155][T15435] __nla_validate_parse: 9 callbacks suppressed [ 324.962173][T15435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2876'. [ 324.968806][T15438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2878'. [ 325.066613][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 325.145018][T15444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2880'. [ 325.153205][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2881'. [ 325.154665][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 325.415812][T15454] netlink: 'syz.0.2885': attribute type 4 has an invalid length. [ 325.936243][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 326.001751][T15476] lo speed is unknown, defaulting to 1000 [ 326.114222][T15482] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.234004][T15482] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.265233][T15492] openvswitch: netlink: IP tunnel dst address not specified [ 326.323838][T15482] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.596518][T15501] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 326.609132][T15502] sctp: [Deprecated]: syz.1.2900 (pid 15502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.609132][T15502] Use struct sctp_sack_info instead [ 326.723558][T15508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2903'. [ 326.930080][T15511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2903'. [ 328.716954][T15482] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.890719][T15482] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.945656][T15518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2904'. [ 328.996458][T15482] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.095542][T15482] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.155404][T15482] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.206183][T15526] netlink: 'syz.4.2908': attribute type 10 has an invalid length. [ 329.218997][T15515] lo speed is unknown, defaulting to 1000 [ 329.249074][T15526] team0: left promiscuous mode [ 329.311610][T15526] netlink: 'syz.4.2908': attribute type 10 has an invalid length. [ 329.337226][T15526] team0: entered promiscuous mode [ 329.345359][T15526] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.649914][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.661667][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.669902][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.678500][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.687094][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.696889][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.743526][T15533] lo speed is unknown, defaulting to 1000 [ 330.090231][T15546] sctp: [Deprecated]: syz.4.2913 (pid 15546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.090231][T15546] Use struct sctp_sack_info instead [ 330.110808][T15533] chnl_net:caif_netlink_parms(): no params data found [ 330.254359][T15551] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 330.260064][T15533] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.289012][T15533] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.309004][T15533] bridge_slave_0: entered allmulticast mode [ 330.316121][T15533] bridge_slave_0: entered promiscuous mode [ 330.346119][T15533] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.355707][T15533] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.363884][T15533] bridge_slave_1: entered allmulticast mode [ 330.371260][T15533] bridge_slave_1: entered promiscuous mode [ 330.443774][T15533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.485544][T15533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.546337][T15533] team0: Port device team_slave_0 added [ 330.566304][T15533] team0: Port device team_slave_1 added [ 330.579465][T15559] __nla_validate_parse: 2 callbacks suppressed [ 330.579483][T15559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2918'. [ 330.647899][T15533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.657999][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.716590][T15533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.744394][T15533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.772539][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.808996][T15533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.902089][T15565] lo speed is unknown, defaulting to 1000 [ 330.925892][T15573] sctp: [Deprecated]: syz.2.2923 (pid 15573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.925892][T15573] Use struct sctp_sack_info instead [ 331.083078][T15533] hsr_slave_0: entered promiscuous mode [ 331.090215][T15533] hsr_slave_1: entered promiscuous mode [ 331.096343][T15533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.116521][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 331.134906][T15533] Cannot create hsr debugfs directory [ 331.426088][T15533] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.514590][T15533] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.576604][T15533] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.637752][T15599] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2932'. [ 331.723946][T15533] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.760417][ T5834] Bluetooth: hci0: command tx timeout [ 331.989754][T15613] sctp: [Deprecated]: syz.3.2936 (pid 15613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.989754][T15613] Use struct sctp_sack_info instead [ 332.024307][T15533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.045676][T15533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.065350][T15533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.080408][T15533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.186638][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2938'. [ 332.199862][T15617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2938'. [ 332.290549][T15620] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2939'. [ 332.309227][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2939'. [ 332.341953][T15620] delete_channel: no stack [ 332.449071][T15622] netlink: 'syz.2.2940': attribute type 10 has an invalid length. [ 332.544802][T15625] netlink: 'syz.2.2940': attribute type 10 has an invalid length. [ 332.552889][T15625] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2940'. [ 333.848858][ T5834] Bluetooth: hci0: command tx timeout [ 334.796863][T15622] team0: left promiscuous mode [ 334.809164][T15622] batman_adv: batadv0: Adding interface: team0 [ 334.815373][T15622] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.840902][T15622] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 334.851846][T15625] team0: entered promiscuous mode [ 334.857566][T15625] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.869078][T15625] batman_adv: batadv0: Interface activated: team0 [ 334.875595][T15625] batman_adv: batadv0: Interface deactivated: team0 [ 334.891900][T15625] batman_adv: batadv0: Removing interface: team0 [ 334.906419][T15628] lo speed is unknown, defaulting to 1000 [ 334.924367][T15646] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 335.135734][T15651] lo speed is unknown, defaulting to 1000 [ 335.201549][T15533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.241233][T15533] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.261076][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.269617][T11144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.295580][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.302786][T11144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.309308][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2949'. [ 335.432080][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 335.591905][T15533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.701706][T15533] veth0_vlan: entered promiscuous mode [ 335.719527][T15533] veth1_vlan: entered promiscuous mode [ 335.752847][T15533] veth0_macvtap: entered promiscuous mode [ 335.773047][T15533] veth1_macvtap: entered promiscuous mode [ 335.801965][T15533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.816491][T15533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.836813][T15533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.848916][T15533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.857761][T15533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.871828][T15533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.919971][ T5834] Bluetooth: hci0: command tx timeout [ 336.252787][ T6282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.298769][ T6282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.370084][T11144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.385742][T11144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.418204][T15698] netlink: 'syz.1.2962': attribute type 10 has an invalid length. [ 336.454459][T15698] team0: left promiscuous mode [ 336.484069][T15698] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 336.504479][T15704] netlink: 'syz.1.2962': attribute type 10 has an invalid length. [ 336.519918][T15698] team0: left allmulticast mode [ 336.526811][T15704] __nla_validate_parse: 1 callbacks suppressed [ 336.526828][T15704] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2962'. [ 336.553341][T15698] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 336.571300][T15698] bridge1: port 1(team0) entered disabled state [ 336.598278][T15698] batman_adv: batadv0: Adding interface: team0 [ 336.665811][T15698] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.711096][T15698] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 336.749352][T15704] team0: entered promiscuous mode [ 336.758988][T15704] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 336.776798][T15704] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.793225][T15704] batman_adv: batadv0: Interface activated: team0 [ 336.810619][T15704] batman_adv: batadv0: Interface deactivated: team0 [ 336.825468][T15704] batman_adv: batadv0: Removing interface: team0 [ 336.841017][T15704] bridge1: port 1(team0) entered blocking state [ 336.872343][T15704] bridge1: port 1(team0) entered disabled state [ 336.899420][T15704] team0: entered allmulticast mode [ 336.904887][T15704] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 337.065513][T15717] netlink: 'syz.4.2968': attribute type 10 has an invalid length. [ 337.102562][T15717] team0: left promiscuous mode [ 337.134116][T15720] netlink: 'syz.4.2968': attribute type 10 has an invalid length. [ 337.148042][T15720] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2968'. [ 337.204123][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.216029][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.216306][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2969'. [ 337.225045][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.243705][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.254485][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.262740][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.271245][T15720] team0: entered promiscuous mode [ 337.288309][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.323289][T15724] nbd: socks must be embedded in a SOCK_ITEM attr [ 337.353876][T15722] lo speed is unknown, defaulting to 1000 [ 337.432898][T15731] FAULT_INJECTION: forcing a failure. [ 337.432898][T15731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.447720][T15731] CPU: 0 UID: 0 PID: 15731 Comm: syz.1.2971 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 337.447745][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.447756][T15731] Call Trace: [ 337.447762][T15731] [ 337.447769][T15731] dump_stack_lvl+0x241/0x360 [ 337.447795][T15731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.447814][T15731] ? __pfx__printk+0x10/0x10 [ 337.447833][T15731] ? __pfx_lock_release+0x10/0x10 [ 337.447865][T15731] should_fail_ex+0x40a/0x550 [ 337.447893][T15731] _copy_from_user+0x2d/0xb0 [ 337.447916][T15731] copy_msghdr_from_user+0xae/0x680 [ 337.447945][T15731] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 337.447965][T15731] ? __fget_files+0x2a/0x410 [ 337.447997][T15731] ? __fget_files+0x2a/0x410 [ 337.448025][T15731] __sys_sendmsg+0x209/0x350 [ 337.448050][T15731] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.448082][T15731] ? do_sys_openat2+0x17a/0x1d0 [ 337.448128][T15731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.448153][T15731] ? do_syscall_64+0x100/0x230 [ 337.448179][T15731] ? do_syscall_64+0xb6/0x230 [ 337.448204][T15731] do_syscall_64+0xf3/0x230 [ 337.448226][T15731] ? clear_bhb_loop+0x35/0x90 [ 337.448251][T15731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.448271][T15731] RIP: 0033:0x7f83a1b8d169 [ 337.448287][T15731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.448301][T15731] RSP: 002b:00007f83a2933038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.448320][T15731] RAX: ffffffffffffffda RBX: 00007f83a1da5fa0 RCX: 00007f83a1b8d169 [ 337.448332][T15731] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 337.448342][T15731] RBP: 00007f83a2933090 R08: 0000000000000000 R09: 0000000000000000 [ 337.448353][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.448363][T15731] R13: 0000000000000000 R14: 00007f83a1da5fa0 R15: 00007ffec6a51628 [ 337.448389][T15731] [ 337.719067][T15722] chnl_net:caif_netlink_parms(): no params data found [ 337.824252][T15722] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.831986][T15722] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.845661][T15722] bridge_slave_0: entered allmulticast mode [ 337.852966][T15722] bridge_slave_0: entered promiscuous mode [ 337.861734][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'. [ 337.903700][T15722] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.911254][T15722] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.919165][T15722] bridge_slave_1: entered allmulticast mode [ 337.926392][T15722] bridge_slave_1: entered promiscuous mode [ 337.981703][T15722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.996713][T15722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.009600][ T5834] Bluetooth: hci0: command tx timeout [ 338.075459][T15722] team0: Port device team_slave_0 added [ 338.084169][T15722] team0: Port device team_slave_1 added [ 338.119433][T15750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2975'. [ 338.135218][T15722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.167800][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.194704][T15722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.255809][T15722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.270696][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.328210][T15722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.449667][T15722] hsr_slave_0: entered promiscuous mode [ 338.460068][T15722] hsr_slave_1: entered promiscuous mode [ 338.475385][T15722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.499799][T15722] Cannot create hsr debugfs directory [ 338.517002][T15758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2979'. [ 338.533713][T15758] tipc: Invalid UDP bearer configuration [ 338.533752][T15758] tipc: Enabling of bearer rejected, failed to enable media [ 338.569089][T15760] netlink: 'syz.0.2980': attribute type 10 has an invalid length. [ 338.601216][T15760] batman_adv: batadv0: Adding interface: team0 [ 338.608051][T15760] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.636549][T15760] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 338.696040][T15760] netlink: 'syz.0.2980': attribute type 10 has an invalid length. [ 338.714501][T15760] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2980'. [ 338.750223][T15760] team0: entered promiscuous mode [ 338.762094][T15760] team_slave_0: entered promiscuous mode [ 338.767975][T15760] team_slave_1: entered promiscuous mode [ 338.778273][T15760] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.778277][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 338.795623][T15760] batman_adv: batadv0: Interface activated: team0 [ 338.803645][T15760] batman_adv: batadv0: Interface deactivated: team0 [ 338.811300][T15760] batman_adv: batadv0: Removing interface: team0 [ 338.818433][T15760] bridge0: port 3(team0) entered blocking state [ 338.825217][T15760] bridge0: port 3(team0) entered disabled state [ 338.832233][T15760] team0: entered allmulticast mode [ 338.837607][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'. [ 338.846621][T15760] team_slave_0: entered allmulticast mode [ 338.852708][T15760] team_slave_1: entered allmulticast mode [ 338.860437][T15760] bridge0: port 3(team0) entered blocking state [ 338.866807][T15760] bridge0: port 3(team0) entered forwarding state [ 338.900574][T15764] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.977994][T15764] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.036676][T15722] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.076254][T15764] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.098587][T15775] lo speed is unknown, defaulting to 1000 [ 339.122402][T15722] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.158936][T15764] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.192043][T15722] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.251607][T11144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.260140][T11144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.276091][T15722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.286548][ T5884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.309477][T15764] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.329182][T15764] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.351273][T15764] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.359165][ T5834] Bluetooth: hci1: command tx timeout [ 339.403035][T15764] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.485457][T15722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.518372][T15722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.534272][T15722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.560516][T15722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.628808][ T5882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.671566][T15722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.714386][T15722] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.744811][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.752059][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.785038][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.792219][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.070292][T15800] sctp: [Deprecated]: syz.1.2991 (pid 15800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.070292][T15800] Use struct sctp_sack_info instead [ 340.197333][T15801] lo speed is unknown, defaulting to 1000 [ 340.319662][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.340954][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 340.440060][T15814] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 340.466561][T15722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.528285][T15722] veth0_vlan: entered promiscuous mode [ 340.578140][T15722] veth1_vlan: entered promiscuous mode [ 340.643451][T15822] lo speed is unknown, defaulting to 1000 [ 340.805885][T15722] veth0_macvtap: entered promiscuous mode [ 340.931454][T15722] veth1_macvtap: entered promiscuous mode [ 341.002021][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.013442][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.024987][T15722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.148107][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.183812][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.216450][T15722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.257857][T15722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.293386][T15722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.328841][T15722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.345940][T15722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.365265][T15831] lo speed is unknown, defaulting to 1000 [ 341.379045][T15837] tun0: tun_chr_ioctl cmd 1074025677 [ 341.384482][T15837] tun0: linktype set to 270 [ 341.440255][ T5834] Bluetooth: hci1: command 0x041b tx timeout [ 341.577409][T15823] __nla_validate_parse: 3 callbacks suppressed [ 341.577424][T15823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2997'. [ 341.610078][T15845] lo speed is unknown, defaulting to 1000 [ 341.752447][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.766782][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.861465][ T6282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.871639][ T6282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.090500][T15846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.252307][T15863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 342.358163][T15867] sctp: [Deprecated]: syz.2.2966 (pid 15867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.358163][T15867] Use struct sctp_sack_info instead [ 342.785450][T15879] hsr0: entered allmulticast mode [ 342.792317][T15879] hsr_slave_0: entered allmulticast mode [ 342.797982][T15879] hsr_slave_1: entered allmulticast mode [ 342.926199][T15888] sctp: [Deprecated]: syz.0.3018 (pid 15888) Use of int in maxseg socket option. [ 342.926199][T15888] Use struct sctp_assoc_value instead [ 343.038920][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.202189][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.212956][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.222233][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.257019][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 343.289957][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.302405][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'. [ 343.313621][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.325025][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.352904][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'. [ 343.402467][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 343.416941][T15906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3022'. [ 343.440799][T15895] lo speed is unknown, defaulting to 1000 [ 343.482011][ T6016] ================================================================== [ 343.490211][ T6016] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 343.499073][ T6016] Read of size 8 at addr ffff88805fd3fb68 by task kworker/u8:9/6016 [ 343.507051][ T6016] [ 343.509376][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: kworker/u8:9 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 343.509394][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.509403][ T6016] Workqueue: netns cleanup_net [ 343.509422][ T6016] Call Trace: [ 343.509427][ T6016] [ 343.509433][ T6016] dump_stack_lvl+0x241/0x360 [ 343.509450][ T6016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.509463][ T6016] ? __pfx__printk+0x10/0x10 [ 343.509476][ T6016] ? _printk+0xd5/0x120 [ 343.509487][ T6016] ? __virt_addr_valid+0x183/0x530 [ 343.509500][ T6016] ? __virt_addr_valid+0x183/0x530 [ 343.509512][ T6016] print_report+0x16e/0x5b0 [ 343.509528][ T6016] ? __virt_addr_valid+0x183/0x530 [ 343.509539][ T6016] ? __virt_addr_valid+0x183/0x530 [ 343.509550][ T6016] ? __virt_addr_valid+0x45f/0x530 [ 343.509562][ T6016] ? __phys_addr+0xba/0x170 [ 343.509574][ T6016] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 343.509589][ T6016] kasan_report+0x143/0x180 [ 343.509605][ T6016] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 343.509621][ T6016] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 343.509635][ T6016] ? udp_destroy_sock+0x2fa/0x340 [ 343.509653][ T6016] ? __pfx_udp_destroy_sock+0x10/0x10 [ 343.509670][ T6016] sk_common_release+0x71/0x2e0 [ 343.509682][ T6016] inet_release+0x17d/0x200 [ 343.509698][ T6016] sock_release+0x82/0x150 [ 343.509716][ T6016] wg_socket_reinit+0x215/0x380 [ 343.509735][ T6016] wg_netns_pre_exit+0xe0/0x1e0 [ 343.509749][ T6016] cleanup_net+0x625/0xd60 [ 343.509764][ T6016] ? __pfx_cleanup_net+0x10/0x10 [ 343.509780][ T6016] ? process_scheduled_works+0x9c6/0x18e0 [ 343.509796][ T6016] process_scheduled_works+0xabe/0x18e0 [ 343.509820][ T6016] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.509839][ T6016] ? assign_work+0x364/0x3d0 [ 343.509855][ T6016] worker_thread+0x870/0xd30 [ 343.509873][ T6016] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 343.509891][ T6016] ? __kthread_parkme+0x169/0x1d0 [ 343.509908][ T6016] ? __pfx_worker_thread+0x10/0x10 [ 343.509924][ T6016] kthread+0x7a9/0x920 [ 343.509934][ T6016] ? __pfx_kthread+0x10/0x10 [ 343.509946][ T6016] ? __pfx_worker_thread+0x10/0x10 [ 343.509961][ T6016] ? __pfx_kthread+0x10/0x10 [ 343.509972][ T6016] ? __pfx_kthread+0x10/0x10 [ 343.509984][ T6016] ? __pfx_kthread+0x10/0x10 [ 343.509994][ T6016] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.510008][ T6016] ? lockdep_hardirqs_on+0x99/0x150 [ 343.510024][ T6016] ? __pfx_kthread+0x10/0x10 [ 343.510035][ T6016] ret_from_fork+0x4b/0x80 [ 343.510051][ T6016] ? __pfx_kthread+0x10/0x10 [ 343.510062][ T6016] ret_from_fork_asm+0x1a/0x30 [ 343.510081][ T6016] [ 343.510086][ T6016] [ 343.763449][ T6016] Allocated by task 15479: [ 343.767860][ T6016] kasan_save_track+0x3f/0x80 [ 343.772535][ T6016] __kasan_slab_alloc+0x66/0x80 [ 343.777374][ T6016] kmem_cache_alloc_noprof+0x1d9/0x380 [ 343.782826][ T6016] sk_prot_alloc+0x58/0x210 [ 343.787314][ T6016] sk_alloc+0x3e/0x370 [ 343.791367][ T6016] inet_create+0x648/0xea0 [ 343.795776][ T6016] __sock_create+0x4c0/0xa30 [ 343.800359][ T6016] __sys_socket+0x150/0x3c0 [ 343.804844][ T6016] __x64_sys_socket+0x7a/0x90 [ 343.809503][ T6016] do_syscall_64+0xf3/0x230 [ 343.813998][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.819878][ T6016] [ 343.822186][ T6016] Freed by task 15476: [ 343.826234][ T6016] kasan_save_track+0x3f/0x80 [ 343.830895][ T6016] kasan_save_free_info+0x40/0x50 [ 343.835914][ T6016] __kasan_slab_free+0x59/0x70 [ 343.840663][ T6016] kmem_cache_free+0x195/0x410 [ 343.845422][ T6016] __sk_destruct+0x4fd/0x690 [ 343.850008][ T6016] inet_release+0x17d/0x200 [ 343.854503][ T6016] sock_close+0xbc/0x240 [ 343.858734][ T6016] __fput+0x3e9/0x9f0 [ 343.862705][ T6016] task_work_run+0x24f/0x310 [ 343.867281][ T6016] do_exit+0xa2a/0x2940 [ 343.871428][ T6016] do_group_exit+0x207/0x2c0 [ 343.876008][ T6016] get_signal+0x168c/0x1720 [ 343.880498][ T6016] arch_do_signal_or_restart+0x96/0x860 [ 343.886032][ T6016] syscall_exit_to_user_mode+0xce/0x340 [ 343.891569][ T6016] do_syscall_64+0x100/0x230 [ 343.896147][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.902115][ T6016] [ 343.904423][ T6016] The buggy address belongs to the object at ffff88805fd3f440 [ 343.904423][ T6016] which belongs to the cache UDP of size 1856 [ 343.917852][ T6016] The buggy address is located 1832 bytes inside of [ 343.917852][ T6016] freed 1856-byte region [ffff88805fd3f440, ffff88805fd3fb80) [ 343.931804][ T6016] [ 343.934112][ T6016] The buggy address belongs to the physical page: [ 343.940514][ T6016] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fd38 [ 343.949260][ T6016] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 343.957744][ T6016] memcg:ffff88803247f501 [ 343.961965][ T6016] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 343.969840][ T6016] page_type: f5(slab) [ 343.973808][ T6016] raw: 00fff00000000040 ffff8880206aa640 ffffea000180f400 dead000000000003 [ 343.982377][ T6016] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88803247f501 [ 343.990946][ T6016] head: 00fff00000000040 ffff8880206aa640 ffffea000180f400 dead000000000003 [ 343.999605][ T6016] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88803247f501 [ 344.008274][ T6016] head: 00fff00000000003 ffffea00017f4e01 ffffffffffffffff 0000000000000000 [ 344.016929][ T6016] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 344.025580][ T6016] page dumped because: kasan: bad access detected [ 344.031983][ T6016] page_owner tracks the page as allocated [ 344.037679][ T6016] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8554, tgid 8552 (syz.2.762), ts 138012953292, free_ts 138004482584 [ 344.058934][ T6016] post_alloc_hook+0x1f4/0x240 [ 344.063689][ T6016] get_page_from_freelist+0x365c/0x37a0 [ 344.069218][ T6016] __alloc_frozen_pages_noprof+0x292/0x710 [ 344.075013][ T6016] alloc_pages_mpol+0x311/0x660 [ 344.080290][ T6016] allocate_slab+0x8f/0x3a0 [ 344.084781][ T6016] ___slab_alloc+0xc27/0x14a0 [ 344.089450][ T6016] __slab_alloc+0x58/0xa0 [ 344.093770][ T6016] kmem_cache_alloc_noprof+0x268/0x380 [ 344.099214][ T6016] sk_prot_alloc+0x58/0x210 [ 344.103706][ T6016] sk_alloc+0x3e/0x370 [ 344.107757][ T6016] inet_create+0x648/0xea0 [ 344.112166][ T6016] __sock_create+0x4c0/0xa30 [ 344.116743][ T6016] __sys_socket+0x150/0x3c0 [ 344.121227][ T6016] __x64_sys_socket+0x7a/0x90 [ 344.125888][ T6016] do_syscall_64+0xf3/0x230 [ 344.130381][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.136264][ T6016] page last free pid 8553 tgid 8552 stack trace: [ 344.142568][ T6016] free_frozen_pages+0xe0d/0x10e0 [ 344.147571][ T6016] __folio_put+0x2b3/0x360 [ 344.151976][ T6016] skb_release_data+0x483/0x8a0 [ 344.156812][ T6016] napi_consume_skb+0x114/0x1e0 [ 344.161646][ T6016] __free_old_xmit+0x2f3/0x6f0 [ 344.166400][ T6016] virtnet_poll_tx+0x50d/0x1440 [ 344.171234][ T6016] __napi_poll+0xcb/0x480 [ 344.175568][ T6016] net_rx_action+0x89b/0x1240 [ 344.180230][ T6016] handle_softirqs+0x2d4/0x9b0 [ 344.184983][ T6016] __irq_exit_rcu+0xf7/0x220 [ 344.189559][ T6016] irq_exit_rcu+0x9/0x30 [ 344.193786][ T6016] common_interrupt+0xb9/0xd0 [ 344.198446][ T6016] asm_common_interrupt+0x26/0x40 [ 344.203554][ T6016] [ 344.205865][ T6016] Memory state around the buggy address: [ 344.211474][ T6016] ffff88805fd3fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.219519][ T6016] ffff88805fd3fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.227559][ T6016] >ffff88805fd3fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.235598][ T6016] ^ [ 344.243032][ T6016] ffff88805fd3fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.251076][ T6016] ffff88805fd3fc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.259121][ T6016] ================================================================== [ 344.269329][ T6016] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 344.276542][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: kworker/u8:9 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 344.287408][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.297466][ T6016] Workqueue: netns cleanup_net [ 344.302236][ T6016] Call Trace: [ 344.305500][ T6016] [ 344.308414][ T6016] dump_stack_lvl+0x241/0x360 [ 344.313081][ T6016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.318267][ T6016] ? __pfx__printk+0x10/0x10 [ 344.322850][ T6016] ? vscnprintf+0x5d/0x90 [ 344.327168][ T6016] panic+0x349/0x880 [ 344.331047][ T6016] ? check_panic_on_warn+0x21/0xb0 [ 344.336241][ T6016] ? __pfx_panic+0x10/0x10 [ 344.340641][ T6016] ? mark_lock+0x9a/0x360 [ 344.344957][ T6016] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 344.350838][ T6016] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 344.356715][ T6016] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 344.363030][ T6016] ? print_report+0x519/0x5b0 [ 344.367696][ T6016] check_panic_on_warn+0x86/0xb0 [ 344.372624][ T6016] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 344.378684][ T6016] end_report+0x77/0x160 [ 344.382922][ T6016] kasan_report+0x154/0x180 [ 344.387412][ T6016] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 344.393557][ T6016] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 344.399439][ T6016] ? udp_destroy_sock+0x2fa/0x340 [ 344.404452][ T6016] ? __pfx_udp_destroy_sock+0x10/0x10 [ 344.409815][ T6016] sk_common_release+0x71/0x2e0 [ 344.414650][ T6016] inet_release+0x17d/0x200 [ 344.419139][ T6016] sock_release+0x82/0x150 [ 344.423544][ T6016] wg_socket_reinit+0x215/0x380 [ 344.428383][ T6016] wg_netns_pre_exit+0xe0/0x1e0 [ 344.433226][ T6016] cleanup_net+0x625/0xd60 [ 344.437628][ T6016] ? __pfx_cleanup_net+0x10/0x10 [ 344.442551][ T6016] ? process_scheduled_works+0x9c6/0x18e0 [ 344.448256][ T6016] process_scheduled_works+0xabe/0x18e0 [ 344.453797][ T6016] ? __pfx_process_scheduled_works+0x10/0x10 [ 344.459764][ T6016] ? assign_work+0x364/0x3d0 [ 344.464342][ T6016] worker_thread+0x870/0xd30 [ 344.468923][ T6016] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 344.474807][ T6016] ? __kthread_parkme+0x169/0x1d0 [ 344.479820][ T6016] ? __pfx_worker_thread+0x10/0x10 [ 344.484921][ T6016] kthread+0x7a9/0x920 [ 344.488978][ T6016] ? __pfx_kthread+0x10/0x10 [ 344.493555][ T6016] ? __pfx_worker_thread+0x10/0x10 [ 344.498659][ T6016] ? __pfx_kthread+0x10/0x10 [ 344.503232][ T6016] ? __pfx_kthread+0x10/0x10 [ 344.507802][ T6016] ? __pfx_kthread+0x10/0x10 [ 344.512374][ T6016] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.517558][ T6016] ? lockdep_hardirqs_on+0x99/0x150 [ 344.522744][ T6016] ? __pfx_kthread+0x10/0x10 [ 344.527316][ T6016] ret_from_fork+0x4b/0x80 [ 344.531721][ T6016] ? __pfx_kthread+0x10/0x10 [ 344.536294][ T6016] ret_from_fork_asm+0x1a/0x30 [ 344.541047][ T6016] [ 344.544194][ T6016] Kernel Offset: disabled [ 344.548501][ T6016] Rebooting in 86400 seconds..