last executing test programs: 21.232919613s ago: executing program 4 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0x11, 0x148, 0x100, 0x0, 0x200, 0x2a8, 0x2a8, 0x200, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x200}}}, {{@ip={@empty, @local, 0x0, 0x0, 'gretap0\x00', 'pimreg1\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r4}, {r2}], 0x2, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x453, 0x100, 0x70bd29, 0x25dfdbfe, "ec7a09c9b40ce1b29e46dced318abaccbe5260fa5cf16e7d86d781d6d24a7f6936291b0133a730c46de25db6ee76d37585b0546b9d929e691cd7743a69c8bf2c724bcb157dfed2581d9fe25a8185d9560af2d52c7fd46fce1667b9c6df539e6d0c2409e392f2a356a1", [""]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) listen(r1, 0x0) r7 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, 0x800) getsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000140), 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000180)={@local, @broadcast, @void, {@llc_tr={0x11, {@llc={0xf0, 0x1, '\x00', "768974d26a91f417ac622352913aad8d4efae520a2da2293a50a04783b9986eb4bd1059e222fabd48bad299ab720dbe9db0228824449cfe9616c9b2be5ab71d3eebd2d19f967d3bbc6f82f6483b8f4a7d5a8d1eff52ef53686315ac9a47d07e90e20e772c6e143385f1e30895c7517f7167229e0345beee3cf4ed838"}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20.272078102s ago: executing program 4 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x41c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x3f4, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x3a4, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x398, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x15c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "05e360daecd801f90ff50e7867639552061035aae3941922608264ecf394e527910b35a04a8c2ee09bca2321664867ab813098b2b89326563abea550c6404ca3b76a63445bc14f9f14cb86b921761c298411310fe8d36c32ab1055d646f8897f049eb7e1b770a0cae61be6fe46fbfbbbaa"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x208, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xbf, 0x1, "1cacb4a3a68b031c68acdd1dc0ba5f9ccfb8efd02baaf5b5a41baf6213998b62e2b369fd53c6c4e56a7d6976e372a2d7691f11c917f5b03285d260fe1e9d85fa62fa3070a4a00d245052e901b0f34749b187fd2ad9e3995889edb70a3e1b6d276f33b7f62da25d7d22b1f4c4e35d76f55a1a07e65e1017060481714edcb2bfec1f0ad4c48f69ef2b9d88af5c57cf688a92564f3d65d224707d96328e1d8c3e78bccb14874d17ad08857c4bc29a958490fbd5cadef449e09e1a7b48"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "6bd01f0aaf422d7f052b2fc60c3d9d93cf4634e4b2d4a116bf7aae32643de2fb9c91b8082e44a1664aad3afd061706fffcc142a3da7c339454c0355210a6282d1276887ddcf9d4409d1d0faa5bf3adf6ccfd0ed2ae52f9ae3e6ceca1452505ba79588af434c8700fe2b7f8c53eb505949465db2cbf5aed0c809933f90a05307bf8a2d3cd8af64e303d0da044623b0d84ce368938a7f96fc033"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf, 0x1, "efbb17b799969e4ce91e47"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x498}}, 0x0) 20.065501939s ago: executing program 4 (id=626): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002000000e3b4fcbba26a0c0000080d0000006f35ccd62129946645e593cf745a815c8c695e56966d7e3f63dd81f71dcf964d194b08e308fabbd33ee9831b618ee90e1a1e02111932dc3436670bca112987bbc6027c58be67cd319d54e9abfcab0a7499b4aa02266db962c4f4f12cf0c31933a8bdf964288bf5af3ab2bd63cfa9db607c800d8287bd74a171d260992a85bf3068b36e866f5e000afe49d09a7bfa92a89750ef2df81ca6cc2a960e06c14b38f864cd0f5d7057422790bb5a2852bcf067785cdf01", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) 19.837787001s ago: executing program 4 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xea, &(0x7f0000000000), &(0x7f0000000280)=0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB="4c00008b", @ANYRES16=r3, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d30000019fe87006c325f64726f7073000000000500830000000000"], 0x4c}, 0x1, 0x300}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x6c, 0x0, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x6c}}, 0x0) r4 = socket(0x11, 0x3, 0x0) sendmmsg$sock(r4, &(0x7f0000000b80)=[{{&(0x7f0000000040)=@phonet={0x23, 0xf9, 0x8, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x51, 0x40}}], 0x18}}], 0x1, 0x2000000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0xa, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x48015) 19.571972901s ago: executing program 4 (id=633): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="bf00020201"], 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xf3, 0x3, 0x8, [{@empty, 0x5}, {@empty, 0x1}, {@private=0xa010102, 0x422}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xf, 0x6a, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2b}, @empty]}]}}}], 0x58}}], 0x1, 0x24000050) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080), 0x0, 0x4004800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[], 0x44}}, 0x14) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x700}, 0x0, &(0x7f00000002c0)={0x0}) bind$netlink(r5, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x200}, 0x31) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES16=r6], 0xd) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="07000000000000000b00000000000000060000000000000007000000000000000002000000000000730000000000000000040000000000000b00000000000000000001000000000003000000000000000100000000000000090000000000000061000000b46b6e00000001010000000014000e0000000000000000000000000000000000080016000004000008000c0003000000e40006007f000001000000000000000000000000ac14143d0000000000000000000000004e2200654e2100000800008004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d3ff0000002001000000000000000000000000000101000000010000000d00000000000000e8050000000000000000000000000000060000000000000001000000000000006a0f000000000000040000000000000005000000000000005a21000000000000020000000000000009000000000000000500000003000000ff01000026bd7000063500000a0004c22900000000000000305bea9d25d22cc4e5f4c5b0039d64749db95c95f7dd39ef05fed7715de0b1e80bb8b2123accb616fd5fda3ae135f33d30f91e6c911542dbf4a0ddff87928342e4b20d46ebd0f9ca5503381d4871245f83f471d22ffe55a63c6733a771bc7ad2f232bf7c53a3e90735c808f7d67006da2c5521e350b478a0e727a2fb08fbca123704cc9a131fbb627e1ed6bc8c1e278b5cc7acfc31e56c678c7653b8b40dd32d7776e37814a210a23c2bcbedcf89681f659223238b1954473159bc5f14876affa498cd9b23b7b46097f08d393aeec6e7f90942779e27cac54ff2a73c53fb1de514c547dbc5785d8440f40722d563ab63f675695b3b8dfc21ea9d85eb5f776c"], 0x1c0}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 11.674908915s ago: executing program 4 (id=633): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="bf00020201"], 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xf3, 0x3, 0x8, [{@empty, 0x5}, {@empty, 0x1}, {@private=0xa010102, 0x422}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xf, 0x6a, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2b}, @empty]}]}}}], 0x58}}], 0x1, 0x24000050) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080), 0x0, 0x4004800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[], 0x44}}, 0x14) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x700}, 0x0, &(0x7f00000002c0)={0x0}) bind$netlink(r5, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x200}, 0x31) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES16=r6], 0xd) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="07000000000000000b00000000000000060000000000000007000000000000000002000000000000730000000000000000040000000000000b00000000000000000001000000000003000000000000000100000000000000090000000000000061000000b46b6e00000001010000000014000e0000000000000000000000000000000000080016000004000008000c0003000000e40006007f000001000000000000000000000000ac14143d0000000000000000000000004e2200654e2100000800008004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 6.178101177s ago: executing program 0 (id=729): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0xf3, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}, {"12ce23ad1b5a3cdd821255e60ce3cbd7a79388c3ff6e3f2d9f1592b76c873278862fdc10a8ec067878dfd19debe5d54a37afe02282b26a28edc4d8964c90d4df839c8996a4ab225ea89673cdfe0d857861908f4955caad5aeb7767a4a43ca9c45b75aa13080046af67446049cde34ffbed67aa48efe5f2c6edf0b0f9b34928d64c6c53adb8c8f03593487bdb933e0e81471a137d1feb5d6d56a76fb7feb46f7222f9884021f668aadd5e87512ffd8493e745795168c48cd9ab6929fe21"}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xffffffff}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "9fca59893b5031248415bc"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x9, 0xf989, "43ecdca921"}, @generic={0x2, 0xd, "a6e77f98ea5ecbfd3fa9b3"}]}}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x51, 0x0, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={r4}, &(0x7f0000000100)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x1008}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd406410a6001c000000000000000000000000000000000000000000aa22000000000000001ce302df4f6ae54b8ea6e556cdf9a157b64679a9"], 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190a010200000000000000000000fffe0900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) 5.16820074s ago: executing program 0 (id=738): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000d003d00070101e3727200000000047c000008000880040008000c04000017ead520"], 0x38}}, 0xc000) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYBLOB="f00737e3f85b25067a76a0577e6378e5c4fd637d863f64bca9341fe6cf9de0618a2f405358b98b2eb98027788709771391582d7ea8b264663719aa"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x491, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket(0x22, 0x2, 0x3) getpeername$packet(r8, 0x0, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r11, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r12 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r12, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) 3.409343093s ago: executing program 1 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000040)=""/19, &(0x7f0000000240)=0x13) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 3.195631218s ago: executing program 1 (id=746): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) listen(r0, 0xffffffe6) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0x7ff, 0x4) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa73, @dev={0xfe, 0x80, '\x00', 0xf}, 0x2}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x1, 0x20, 0x8f, 0x2, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x64, 0x4, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@end, @lsrr={0x83, 0x13, 0x31, [@empty, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}]}]}}}}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @initdev}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4f, 0x1, 0x7, 0x6, {{0xe, 0x4, 0x1, 0x6, 0x38, 0x66, 0x0, 0xd, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0x26, [@empty, @remote, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @remote]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x1c, 0x61, 0x56, 0x1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8000, 0x5, 0x8}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x6, 0x5, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x20, 0x2d9e, 0x5}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000940)={@initdev, @rand_addr, 0x0}, &(0x7f0000000980)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x3, 0xfa, {{0x23, 0x4, 0x0, 0x35, 0x8c, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @local, {[@end, @cipso={0x86, 0x73, 0x1, [{0x7, 0x11, "c240a4e46a88476270a3d070d4e205"}, {0x6, 0xe, "d9e63795b2c2a8b9cb14ac35"}, {0x0, 0xe, "571b08aeb5c805be889ff559"}, {0x6, 0x12, "51fa4862f24bab96ecb942ce27959d5f"}, {0x2, 0xd, "4e6a83482ae0b778251146"}, {0x7, 0xd, "5055660a5ad27160ea2349"}, {0x2, 0x3, "cd"}, {0x6, 0x11, "ad60b85221cbc6a594eb9f83159acf"}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000d00)={&(0x7f0000000180), 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1b0, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r3) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r15, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r16, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8c010) sendto$netrom(0xffffffffffffffff, &(0x7f0000000ec0)="36e385345515b84786597d3bf9dd7f5263409d47b2ac84fbe41750a6e14b6ed661ba0e29e72b84e38e0e140131e60cb0b3cf23a55ffbf062c1d3217d26b70909540f1b891b42659be681bc266c4b749efed87d485530d04c79be61a8732729fb76d12149d3a2caf56cba6bc30aeeab9a41c31dfeb84f812f1e3cd76344128845ff37ab85513d1dd097c5e1d2769af352b0338076721831deffc51f668d13729bc3fa6db4bfecfdf970bb98337786153b7c06e7ece577485f1fc020e683ae40f1fb0f4ec87f8c03db61651dfe5c7dfa9b9a7cc6afed991b090ad785f8b7e63afb2578d6ed463ef9c9d178d4a3fa88982c8bc99d3d664aff84", 0xf8, 0x8894, &(0x7f0000000fc0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000001040)=0x5, 0x4) socket$packet(0x11, 0x3, 0x300) r17 = syz_open_procfs$namespace(0x0, &(0x7f0000001080)='ns/cgroup\x00') ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r17, 0x80286722, &(0x7f0000001180)={&(0x7f00000010c0)=""/161, 0xa1, 0x1, 0xfffff7b8}) socket$kcm(0x29, 0x0, 0x0) 2.668876789s ago: executing program 1 (id=751): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2.52932841s ago: executing program 1 (id=753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2040400) bind$xdp(r1, &(0x7f0000000000), 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.146781592s ago: executing program 0 (id=756): r0 = socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) recvfrom$inet6(r0, 0x0, 0xfffffe7d, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x40c8000) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080003000100000008004b001300000800150003000000080001000000000008004a0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24044826}, 0xc094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x12, 0x1009c, r1, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES64=r3], 0x20) 1.70787306s ago: executing program 3 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xc, 0xe0, 0x7, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7, 0x8, 0x2, 0x401}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@polexpire={0x1a4, 0x1b, 0x400, 0x70bd25, 0x25dfdbfc, {{{@in=@broadcast, @in=@local, 0x4e23, 0x80, 0x4e22, 0x0, 0x18b5c5c68a0240de, 0x20, 0x0, 0x3b, r1, r2}, {0x5, 0x80000000, 0x5, 0x7, 0x7, 0x6, 0x3, 0x3}, {0x100000001, 0x709, 0x3bb, 0x3}, 0x0, 0x6e6bbd, 0x2, 0x1, 0x3, 0x3}, 0x3}, [@etimer_thresh={0x8, 0xc, 0x7fffffff}, @algo_aead={0x63, 0x12, {{'generic-gcm-aesni\x00'}, 0xb8, 0xa0, "e2d3cbf7e996d7198da86e209e23fda4fcb654afb79da6"}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x7, @in=@empty}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@private=0xa010101, 0x0, 0xa}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80000001}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa, 0x7, 0x7b}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000001308000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0xa, 0x7, 0x1}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.658939769s ago: executing program 2 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, 0x0, 0x0) (async, rerun: 64) bind$can_raw(r1, &(0x7f0000000000), 0x10) (rerun: 64) close(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x54, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1004, 0x48143}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe891}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x54}}, 0x24000044) 1.573656816s ago: executing program 1 (id=762): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) (async) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1004}, 0x4) (async) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r4, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010024bd7000fcdbdf25f800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x4, 0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) (async) socket(0x8000000010, 0x2, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) 1.46458848s ago: executing program 3 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getroute={0x2c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x113dcfed14a2b03b}, @RTA_IIF={0x8}]}, 0x2c}}, 0x8000800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) 1.464158265s ago: executing program 2 (id=764): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000580)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x204, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x50}], 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01000a00ffffffffffffbbbbbbbbbbbbaaaaaaaaaa170000000000000180c2000003aaaaaaaaaaaaffffffffffffffffffffff00"/64]) 1.368094551s ago: executing program 3 (id=765): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0xdf, 0x0, &(0x7f0000000280)="f8ad48cc02cb29dcc8007f5b08009f59d351f20c4daa323693dc0632850f170b71a2f7fed7ffebce9ee657d2f2e0c66696ecbedb1d3eefefedcb355a3a4d062cc89dfe52c0b205587d006c322ff8308ecc5a56ccfa019f254d56ba484c7e7f954a78d429aee58ff38755a769ed97feb4c8530069afb4f981d68c02fc80c850a68a9ad1f543933ccccfd0baee661344b814c85500d7302599", 0x0, 0x4203, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x944}, 0x2c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000), 0x7}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f9e207c34e171e0306d2716ce564929332369020700000011c048fa172fe4194803754c91d082e88ee021bfbdda701c6c8af6f4fed98aae35a964ce00d5", 0x6b}], 0x1}, 0x48040) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r1], 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 1.22438218s ago: executing program 2 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e0000001600ffff8000fdff95000000000000006884d1d9fe4c9ce4c8b7a8e93bb957f5ac915f7683352dbbdb85d8965f40a9372a85319dc353a5b7b7bf0365836f54ae60375c46827cb4d9f8a15bddba79096be7d495c19b3afaa67d2aea409ea69c67cc026d1f0d509b0055e7a371960c7eef346408d031b1249592ccc129485120730762afd7006f54bd541f8be0902162f15e7539ad6623a985526464b4539a3c1d1514fe832e9c47f1c53ca2614ff008000000000000009a86746c75adf63fe215c2b2ca38e4f62f682ef561ee6352c07f000000000000008f31663bd222d47fd495ad27124c6b0ccd41"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 1.104052147s ago: executing program 0 (id=767): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000340)={0x7, '\x00', {0xb7}, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/50, &(0x7f0000000300)=0x32) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) listen(0xffffffffffffffff, 0x208) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000100)=0x8) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000740)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x80, 0x0}, 0x4800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) 978.936473ms ago: executing program 2 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000440)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000004}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={r6, 0x28b72f28}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r6}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_newaddrlabel={0x1c, 0x48, 0x3}, 0x1c}}, 0x8000) 879.661482ms ago: executing program 3 (id=769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, 0xb, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x4800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) r3 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80800) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'bond_slave_0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "9098f35a9c58f9da7e098f255ff2efdf8d1acf377e81ede30b9da708f448e295", "c522219473777804b3558d7ff34afe8a8c8f06012e9dd392777fe606cca313c9", "850c4efff38a040f2e199c60dc1827b0fc88a413045f7b8cc311b512967abbbb", "8cd1faa7f243db19047220a8264676b1ed11fc40e7dc157871cd1d20a383b066", "18e73e69f8b889dae5bbd84dec82623f2fdab9906e3ca0f1a1b2c1160c7508eb", "d494971e8aee869b573e69d0", 0x99a8, 0xffff, 0x0, 0x6, 0x81}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4067, 0xfe3}, {&(0x7f00000018c0)=""/147, 0x93}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8060, 0x0) 568.173569ms ago: executing program 2 (id=770): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001ffffcffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000300000008000500", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x8000) 567.68053ms ago: executing program 3 (id=771): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="480002"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000014001c000000000000000000000014"], 0x30}}, 0x0) 405.574826ms ago: executing program 0 (id=772): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl(r0, 0x7ff, &(0x7f0000000140)="d4530c5f18812982f2fe913c504e133c565c627fa8e7f08063654a850ff235fbd58e5a5ae0e2f6f6282958989f954a53cc8ab56bd2cc0fec2563d4be4fb77a810bb6f9a9") splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="f2c4a6a27b6e", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010101}}}}}}, 0x0) connect$rxrpc(r3, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x80, @remote, 0x6}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}}, 0x40) 349.877015ms ago: executing program 3 (id=773): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xe4200, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000383a00fe800000000000000000000000000002ff0200000000000000000000000000010300907801000000614c4a6e000533fffe80000010000000000000000000002afe8000000000000000000000009820aa3c00040002080700"], 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="fe000005000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b000000"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000020601080000000000000000020000000c000300686173683a6970008900020073bd000000000000000007800800064000000007050005000200000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x5, 0x0, 0x0, 0x0, {0xa, 0x1, 0x0, @loopback}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 189.301097ms ago: executing program 0 (id=774): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010110104fe"], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00"], 0x1c}}, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x11, @broadcast, 'sit0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45310, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x8080) 188.511895ms ago: executing program 2 (id=775): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c0000040008802000018006000600800a0000140019"], 0x38}}, 0xc000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x38}}, 0x44080) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000004c000180380004001400010009004d21e00000020000000000000000200002000a004e2400000002200300000000000000000000000000020044906fe20001007564703a730859fcbf"], 0x60}}, 0x40000080) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=776): socket$nl_route(0x10, 0x3, 0x0) unshare(0x4000400) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc0000001100010025bd7000fbdbdf2500000000", @ANYRES32=r3], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0), 0x4) r6 = socket(0x840000000002, 0x1, 0xfa) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x0, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b942ee3, @void, @value}, 0x90) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="00008510000025000000180000000000000000000000000000009500000000000000ddaa0000000000009500"/64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0x9, 0xfffffffc, 0x5, 0xfe, 0x5, 0xf0, 0x2, 0x1ff}}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@mcast1, r11}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 64.031362][ T5826] cgroup: Unknown subsys name 'net' [ 64.172222][ T5826] cgroup: Unknown subsys name 'cpuset' [ 64.180750][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.756617][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.274807][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.284032][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.291727][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.300556][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.308809][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.317177][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.324532][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.343906][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.351746][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.362409][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.370754][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.380339][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.388496][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.395580][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.396290][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.404945][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.411339][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.417957][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.432357][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.441204][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.448718][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.457295][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.459867][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.464851][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.473636][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.479992][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.493694][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.501742][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.509639][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.516939][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.974491][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 70.036468][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 70.074870][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 70.084821][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 70.096452][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 70.189886][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.197818][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.205986][ T5840] bridge_slave_0: entered allmulticast mode [ 70.213838][ T5840] bridge_slave_0: entered promiscuous mode [ 70.223848][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.231335][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.238467][ T5840] bridge_slave_1: entered allmulticast mode [ 70.245353][ T5840] bridge_slave_1: entered promiscuous mode [ 70.331982][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.373546][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.419101][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.426567][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.433875][ T5844] bridge_slave_0: entered allmulticast mode [ 70.442398][ T5844] bridge_slave_0: entered promiscuous mode [ 70.458032][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.465252][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.472470][ T5846] bridge_slave_0: entered allmulticast mode [ 70.479072][ T5846] bridge_slave_0: entered promiscuous mode [ 70.486812][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.493935][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.501324][ T5846] bridge_slave_1: entered allmulticast mode [ 70.508195][ T5846] bridge_slave_1: entered promiscuous mode [ 70.537560][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.544743][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.552014][ T5844] bridge_slave_1: entered allmulticast mode [ 70.559141][ T5844] bridge_slave_1: entered promiscuous mode [ 70.568598][ T5840] team0: Port device team_slave_0 added [ 70.577306][ T5840] team0: Port device team_slave_1 added [ 70.598202][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.605451][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.612898][ T5850] bridge_slave_0: entered allmulticast mode [ 70.620114][ T5850] bridge_slave_0: entered promiscuous mode [ 70.627331][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.635348][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.642727][ T5836] bridge_slave_0: entered allmulticast mode [ 70.649689][ T5836] bridge_slave_0: entered promiscuous mode [ 70.672278][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.681648][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.688737][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.696261][ T5850] bridge_slave_1: entered allmulticast mode [ 70.703249][ T5850] bridge_slave_1: entered promiscuous mode [ 70.718990][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.726112][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.733603][ T5836] bridge_slave_1: entered allmulticast mode [ 70.740856][ T5836] bridge_slave_1: entered promiscuous mode [ 70.766344][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.796250][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.816578][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.827484][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.837794][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.844854][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.870938][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.893066][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.924431][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.931859][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.958295][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.979571][ T5846] team0: Port device team_slave_0 added [ 70.996769][ T5850] team0: Port device team_slave_0 added [ 71.004736][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.027367][ T5844] team0: Port device team_slave_0 added [ 71.040432][ T5846] team0: Port device team_slave_1 added [ 71.047480][ T5850] team0: Port device team_slave_1 added [ 71.065997][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.080657][ T5844] team0: Port device team_slave_1 added [ 71.126845][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.134079][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.160501][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.191414][ T5836] team0: Port device team_slave_0 added [ 71.206833][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.213926][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.240300][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.259796][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.266773][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.292812][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.306729][ T5836] team0: Port device team_slave_1 added [ 71.328393][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.335689][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.362010][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.380002][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.387005][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.410860][ T5147] Bluetooth: hci0: command tx timeout [ 71.413009][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.446200][ T5840] hsr_slave_0: entered promiscuous mode [ 71.452552][ T5840] hsr_slave_1: entered promiscuous mode [ 71.471585][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.478558][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.505482][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.533361][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.540422][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.566390][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.577051][ T5147] Bluetooth: hci3: command tx timeout [ 71.577126][ T5838] Bluetooth: hci1: command tx timeout [ 71.585010][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.588989][ T5851] Bluetooth: hci2: command tx timeout [ 71.595588][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.601216][ T5852] Bluetooth: hci4: command tx timeout [ 71.632876][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.654743][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.661235][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.687541][ T5844] hsr_slave_0: entered promiscuous mode [ 71.693896][ T5844] hsr_slave_1: entered promiscuous mode [ 71.700707][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.708537][ T5844] Cannot create hsr debugfs directory [ 71.762926][ T5850] hsr_slave_0: entered promiscuous mode [ 71.769179][ T5850] hsr_slave_1: entered promiscuous mode [ 71.775648][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.783592][ T5850] Cannot create hsr debugfs directory [ 71.815603][ T5846] hsr_slave_0: entered promiscuous mode [ 71.822301][ T5846] hsr_slave_1: entered promiscuous mode [ 71.828258][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.835983][ T5846] Cannot create hsr debugfs directory [ 71.894213][ T5836] hsr_slave_0: entered promiscuous mode [ 71.901562][ T5836] hsr_slave_1: entered promiscuous mode [ 71.907459][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.915160][ T5836] Cannot create hsr debugfs directory [ 72.222546][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.240475][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.255612][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.270767][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.320608][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.342474][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.365269][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.378021][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.416719][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.436721][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.460438][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.471009][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.537640][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.546891][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.578318][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.589232][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.621162][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.661939][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.696823][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.704578][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.736995][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.752961][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.760222][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.775005][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.785835][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.812476][ T1897] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.819619][ T1897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.848268][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.880176][ T1897] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.887467][ T1897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.898418][ T1897] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.905576][ T1897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.929216][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.939948][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.963566][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.049143][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.085084][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.113674][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.123304][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.130513][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.168369][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.175639][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.198154][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.205332][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.214770][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.221872][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.273460][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.353795][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.401696][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.463490][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.471158][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.492886][ T5852] Bluetooth: hci0: command tx timeout [ 73.511088][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.518223][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.638479][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.653883][ T5852] Bluetooth: hci2: command tx timeout [ 73.653914][ T5851] Bluetooth: hci3: command tx timeout [ 73.659432][ T5838] Bluetooth: hci4: command tx timeout [ 73.659482][ T5838] Bluetooth: hci1: command tx timeout [ 73.775395][ T5846] veth0_vlan: entered promiscuous mode [ 73.847489][ T5846] veth1_vlan: entered promiscuous mode [ 73.878205][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.961490][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.005242][ T5846] veth0_macvtap: entered promiscuous mode [ 74.028491][ T5846] veth1_macvtap: entered promiscuous mode [ 74.046886][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.057066][ T5840] veth0_vlan: entered promiscuous mode [ 74.074893][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.090494][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.099811][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.108520][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.117793][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141184][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.158778][ T5840] veth1_vlan: entered promiscuous mode [ 74.190571][ T5836] veth0_vlan: entered promiscuous mode [ 74.223076][ T5836] veth1_vlan: entered promiscuous mode [ 74.248305][ T5844] veth0_vlan: entered promiscuous mode [ 74.306515][ T5840] veth0_macvtap: entered promiscuous mode [ 74.338418][ T5836] veth0_macvtap: entered promiscuous mode [ 74.345640][ T5840] veth1_macvtap: entered promiscuous mode [ 74.356581][ T5844] veth1_vlan: entered promiscuous mode [ 74.379647][ T5850] veth0_vlan: entered promiscuous mode [ 74.398060][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.402903][ T5836] veth1_macvtap: entered promiscuous mode [ 74.413958][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.436401][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.450911][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.462540][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.489757][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.503730][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.515150][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.526265][ T5850] veth1_vlan: entered promiscuous mode [ 74.547180][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.556421][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.560354][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.578428][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.587945][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.597700][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.635572][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.649180][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.662134][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.672678][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.684765][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.724806][ T5844] veth0_macvtap: entered promiscuous mode [ 74.748894][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.751584][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.761242][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.785646][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.796150][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.807302][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.818518][ T5850] veth0_macvtap: entered promiscuous mode [ 74.831003][ T5850] veth1_macvtap: entered promiscuous mode [ 74.844979][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.854842][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863983][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.872842][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.899611][ T5844] veth1_macvtap: entered promiscuous mode [ 74.998425][ T5921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.017999][ T5922] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.058953][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.072859][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.083307][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.094616][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.104620][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.115868][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.127126][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.153551][ T5921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.186750][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.197516][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.208099][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.218680][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.228908][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.243195][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.254204][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.265432][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.276689][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.292891][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.303526][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.313703][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.324297][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.334757][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.345258][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.355881][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.374463][ T5921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.396199][ T1897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.407238][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.416738][ T1897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.424228][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.433397][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.444964][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.459710][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.475043][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.485054][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.496729][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.506661][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.517233][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.527169][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.537777][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.549949][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.574958][ T5921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.585459][ T5851] Bluetooth: hci0: command tx timeout [ 75.609075][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.620014][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.628883][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.641311][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.653896][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.662691][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.722177][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.729637][ T5851] Bluetooth: hci3: command tx timeout [ 75.733085][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.735447][ T5147] Bluetooth: hci2: command tx timeout [ 75.742799][ T5852] Bluetooth: hci1: command tx timeout [ 75.742841][ T5852] Bluetooth: hci4: command tx timeout [ 75.852788][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.862231][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.863591][ T5921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.917698][ T1897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.956538][ T1897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.989483][ T5921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.033906][ T5921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.059926][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.072360][ T5921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.094818][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.098360][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.112847][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.153562][ T5926] netlink: 'syz.4.5': attribute type 16 has an invalid length. [ 76.170365][ T5926] netlink: 'syz.4.5': attribute type 17 has an invalid length. [ 76.252984][ T5931] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 76.267648][ T5931] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.281583][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.310093][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.428364][ T5935] bridge_slave_0: left allmulticast mode [ 76.459791][ T5935] bridge_slave_0: left promiscuous mode [ 76.466260][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.521986][ T5935] bridge_slave_1: left allmulticast mode [ 76.555783][ T5935] bridge_slave_1: left promiscuous mode [ 76.583876][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.623724][ T5939] netlink: 'syz.4.7': attribute type 27 has an invalid length. [ 76.638109][ T5935] bond0: (slave bond_slave_0): Releasing backup interface [ 76.651581][ T5935] bond0: (slave bond_slave_1): Releasing backup interface [ 76.673082][ T5935] team0: Port device team_slave_0 removed [ 76.684015][ T5935] team0: Port device team_slave_1 removed [ 76.691794][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.700094][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.708456][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.716187][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.734046][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.751378][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.913788][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.921857][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.044337][ T5945] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.309876][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.362233][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.649637][ T5147] Bluetooth: hci0: command tx timeout [ 77.728093][ T5939] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.738892][ T5939] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.750210][ T5939] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.762568][ T5939] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.810336][ T5851] Bluetooth: hci1: command tx timeout [ 77.812919][ T5838] Bluetooth: hci2: command tx timeout [ 77.816385][ T5851] Bluetooth: hci3: command tx timeout [ 77.827335][ T5147] Bluetooth: hci4: command tx timeout [ 77.895771][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.904206][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.915816][ T5941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.931647][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 77.940390][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 77.949102][ T5942] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8'. [ 78.059661][ T5941] syz.4.7 (5941) used greatest stack depth: 17568 bytes left [ 78.268928][ T5962] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13'. [ 78.317073][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 78.613608][ T5973] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.855016][ T5891] IPVS: starting estimator thread 0... [ 78.894125][ T5984] netlink: 88 bytes leftover after parsing attributes in process `syz.0.19'. [ 78.914256][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 78.949546][ T5982] IPVS: using max 20 ests per chain, 48000 per kthread [ 79.058284][ T5987] FAULT_INJECTION: forcing a failure. [ 79.058284][ T5987] name failslab, interval 1, probability 0, space 0, times 1 [ 79.071207][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.2.20 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 79.071232][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.071242][ T5987] Call Trace: [ 79.071249][ T5987] [ 79.071258][ T5987] dump_stack_lvl+0x241/0x360 [ 79.071296][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.071318][ T5987] ? __pfx__printk+0x10/0x10 [ 79.071354][ T5987] should_fail_ex+0x40a/0x550 [ 79.071385][ T5987] ? __pfx_ip6_dst_gc+0x10/0x10 [ 79.071407][ T5987] should_failslab+0xac/0x100 [ 79.071433][ T5987] ? dst_alloc+0x12b/0x190 [ 79.071453][ T5987] kmem_cache_alloc_noprof+0x70/0x380 [ 79.071478][ T5987] ? __pfx_rt6_find_cached_rt+0x10/0x10 [ 79.071500][ T5987] ? __pfx_ip6_dst_gc+0x10/0x10 [ 79.071521][ T5987] dst_alloc+0x12b/0x190 [ 79.071549][ T5987] ip6_pol_route+0xb87/0x15d0 [ 79.071578][ T5987] ? ip6_pol_route+0x198/0x15d0 [ 79.071604][ T5987] ? __pfx_ip6_pol_route+0x10/0x10 [ 79.071632][ T5987] ? __local_bh_enable_ip+0x168/0x200 [ 79.071655][ T5987] ? ip6t_do_table+0x205/0x18a0 [ 79.071679][ T5987] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 79.071703][ T5987] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.071735][ T5987] fib6_rule_lookup+0x58c/0x790 [ 79.071763][ T5987] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 79.071787][ T5987] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 79.071811][ T5987] ? ip6t_do_table+0x205/0x18a0 [ 79.071844][ T5987] ? __inet6_lookup_established+0xd28/0xdc0 [ 79.071881][ T5987] ip6_route_input+0x859/0xd90 [ 79.071916][ T5987] ? __pfx_ip6_route_input+0x10/0x10 [ 79.071974][ T5987] ? ip6_rcv_finish_core+0x20f/0x410 [ 79.072007][ T5987] ip6_rcv_finish+0x140/0x3d0 [ 79.072035][ T5987] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 79.072062][ T5987] NF_HOOK+0x3a4/0x450 [ 79.072088][ T5987] ? skb_orphan+0x4b/0xd0 [ 79.072108][ T5987] ? NF_HOOK+0x9a/0x450 [ 79.072135][ T5987] ? __pfx_NF_HOOK+0x10/0x10 [ 79.072166][ T5987] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 79.072203][ T5987] ? __pfx_ipv6_rcv+0x10/0x10 [ 79.072232][ T5987] __netif_receive_skb+0x1ea/0x650 [ 79.072263][ T5987] ? __pfx_lock_acquire+0x10/0x10 [ 79.072295][ T5987] ? kasan_save_track+0x51/0x80 [ 79.072317][ T5987] ? __pfx___netif_receive_skb+0x10/0x10 [ 79.072341][ T5987] ? build_skb+0x52/0x2a0 [ 79.072359][ T5987] ? tun_get_user+0x200c/0x45b0 [ 79.072380][ T5987] ? tun_chr_write_iter+0x10d/0x1f0 [ 79.072402][ T5987] ? do_syscall_64+0xf3/0x230 [ 79.072425][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.072448][ T5987] ? tun_rx_batched+0x160/0x8f0 [ 79.072471][ T5987] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 79.072505][ T5987] ? netif_receive_skb+0x131/0x890 [ 79.072528][ T5987] ? netif_receive_skb+0x131/0x890 [ 79.072555][ T5987] netif_receive_skb+0x1e8/0x890 [ 79.072580][ T5987] ? tun_rx_batched+0x160/0x8f0 [ 79.072603][ T5987] ? __pfx_netif_receive_skb+0x10/0x10 [ 79.072641][ T5987] ? tun_rx_batched+0x160/0x8f0 [ 79.072664][ T5987] tun_rx_batched+0x1b7/0x8f0 [ 79.072686][ T5987] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.072718][ T5987] ? __pfx_lock_acquire+0x10/0x10 [ 79.072744][ T5987] ? __pfx_tun_rx_batched+0x10/0x10 [ 79.072791][ T5987] ? tun_get_user+0x29a7/0x45b0 [ 79.072813][ T5987] tun_get_user+0x2ed0/0x45b0 [ 79.072840][ T5987] ? tun_get_user+0x838/0x45b0 [ 79.072875][ T5987] ? __lock_acquire+0x1397/0x2100 [ 79.072913][ T5987] ? __pfx_tun_get_user+0x10/0x10 [ 79.072961][ T5987] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 79.072981][ T5987] ? tun_get+0x1e/0x2f0 [ 79.073004][ T5987] ? __pfx_lock_release+0x10/0x10 [ 79.073050][ T5987] ? tun_get+0x1e/0x2f0 [ 79.073071][ T5987] ? tun_get+0x27d/0x2f0 [ 79.073096][ T5987] tun_chr_write_iter+0x10d/0x1f0 [ 79.073123][ T5987] vfs_write+0xacf/0xd10 [ 79.073150][ T5987] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 79.073175][ T5987] ? __pfx_vfs_write+0x10/0x10 [ 79.073192][ T5987] ? do_sys_openat2+0x17a/0x1d0 [ 79.073223][ T5987] ? __fget_files+0x2a/0x410 [ 79.073252][ T5987] ? __fget_files+0x2a/0x410 [ 79.073295][ T5987] ksys_write+0x18f/0x2b0 [ 79.073319][ T5987] ? __pfx_ksys_write+0x10/0x10 [ 79.073341][ T5987] ? do_syscall_64+0x100/0x230 [ 79.073368][ T5987] ? do_syscall_64+0xb6/0x230 [ 79.073396][ T5987] do_syscall_64+0xf3/0x230 [ 79.073420][ T5987] ? clear_bhb_loop+0x35/0x90 [ 79.073449][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.073473][ T5987] RIP: 0033:0x7f6cf7b8bc1f [ 79.073490][ T5987] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 79.073505][ T5987] RSP: 002b:00007f6cf8a8e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 79.073527][ T5987] RAX: ffffffffffffffda RBX: 00007f6cf7da5fa0 RCX: 00007f6cf7b8bc1f [ 79.073541][ T5987] RDX: 000000000000004e RSI: 0000400000000080 RDI: 00000000000000c8 [ 79.073553][ T5987] RBP: 00007f6cf8a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 79.073565][ T5987] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 79.073576][ T5987] R13: 0000000000000001 R14: 00007f6cf7da5fa0 R15: 00007ffedb064628 [ 79.073610][ T5987] [ 79.779727][ T5992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.006524][ T6001] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 80.021188][ T6001] lo speed is unknown, defaulting to 1000 [ 80.027629][ T6001] lo speed is unknown, defaulting to 1000 [ 80.035583][ T6001] lo speed is unknown, defaulting to 1000 [ 80.045552][ T6001] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.060248][ T6001] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.090066][ T6001] lo speed is unknown, defaulting to 1000 [ 80.097145][ T6001] lo speed is unknown, defaulting to 1000 [ 80.106251][ T6001] lo speed is unknown, defaulting to 1000 [ 80.116233][ T6001] lo speed is unknown, defaulting to 1000 [ 80.126639][ T6001] lo speed is unknown, defaulting to 1000 [ 80.153739][ T6010] __nla_validate_parse: 1 callbacks suppressed [ 80.153758][ T6010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28'. [ 80.169215][ T6010] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 80.429696][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 80.472259][ T6020] Zero length message leads to an empty skb [ 80.686683][ T6033] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 80.764811][ T6035] syz.4.34 uses obsolete (PF_INET,SOCK_PACKET) [ 80.893938][ T6041] netlink: 'syz.0.36': attribute type 13 has an invalid length. [ 80.997227][ T6041] gretap0: refused to change device tx_queue_len [ 81.017684][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 81.056251][ T6041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.220056][ T6052] netlink: 'syz.4.39': attribute type 7 has an invalid length. [ 81.285931][ T6043] team0: Port device gtp0 added [ 81.378639][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 81.440436][ T6054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 81.770866][ T6054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 81.806820][ T6070] veth1_to_bridge: mtu less than device minimum [ 82.125159][ T6072] xt_nat: multiple ranges no longer supported [ 82.265331][ T6072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.545773][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 82.680759][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 82.790169][ T6097] x_tables: duplicate underflow at hook 1 [ 82.962908][ T6103] netlink: 'syz.4.56': attribute type 2 has an invalid length. [ 83.273008][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.870456][ T6133] netlink: 'syz.1.64': attribute type 2 has an invalid length. [ 83.901482][ T6134] netlink: 'syz.4.65': attribute type 39 has an invalid length. [ 84.007186][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 84.438744][ T6149] netlink: 152 bytes leftover after parsing attributes in process `syz.3.68'. [ 84.570634][ T6153] pimreg: entered allmulticast mode [ 84.910228][ T6169] can: request_module (can-proto-0) failed. [ 85.041468][ T6178] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.045221][ T6143] pimreg: left allmulticast mode [ 85.212741][ T6187] __nla_validate_parse: 4 callbacks suppressed [ 85.212761][ T6187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.82'. [ 85.298524][ T6187] netlink: 43 bytes leftover after parsing attributes in process `syz.1.82'. [ 85.380483][ T6187] netlink: 'syz.1.82': attribute type 6 has an invalid length. [ 85.388744][ T6187] netlink: 'syz.1.82': attribute type 5 has an invalid length. [ 85.412157][ T6187] netlink: 43 bytes leftover after parsing attributes in process `syz.1.82'. [ 85.437326][ T6195] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 85.446463][ T6202] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'. [ 85.606494][ T6207] FAULT_INJECTION: forcing a failure. [ 85.606494][ T6207] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.640222][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.3.88 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 85.640250][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.640261][ T6207] Call Trace: [ 85.640268][ T6207] [ 85.640277][ T6207] dump_stack_lvl+0x241/0x360 [ 85.640307][ T6207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.640328][ T6207] ? __pfx__printk+0x10/0x10 [ 85.640350][ T6207] ? __pfx_lock_release+0x10/0x10 [ 85.640378][ T6207] ? __lock_acquire+0x1397/0x2100 [ 85.640413][ T6207] should_fail_ex+0x40a/0x550 [ 85.640448][ T6207] _copy_from_user+0x2d/0xb0 [ 85.640474][ T6207] kstrtouint_from_user+0xc6/0x190 [ 85.640499][ T6207] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 85.640525][ T6207] ? __pfx_lock_acquire+0x10/0x10 [ 85.640565][ T6207] proc_fail_nth_write+0xaa/0x2d0 [ 85.640592][ T6207] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 85.640615][ T6207] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.640648][ T6207] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.640676][ T6207] vfs_write+0x29f/0xd10 [ 85.640699][ T6207] ? fdget_pos+0x254/0x320 [ 85.640724][ T6207] ? __mutex_unlock_slowpath+0x227/0x800 [ 85.640754][ T6207] ? __pfx_vfs_write+0x10/0x10 [ 85.640772][ T6207] ? do_sys_openat2+0x17a/0x1d0 [ 85.640803][ T6207] ? __fget_files+0x2a/0x410 [ 85.640832][ T6207] ? __fget_files+0x395/0x410 [ 85.640857][ T6207] ? __fget_files+0x2a/0x410 [ 85.640894][ T6207] ksys_write+0x18f/0x2b0 [ 85.640918][ T6207] ? __pfx_ksys_write+0x10/0x10 [ 85.640941][ T6207] ? do_syscall_64+0x100/0x230 [ 85.640970][ T6207] ? do_syscall_64+0xb6/0x230 [ 85.640998][ T6207] do_syscall_64+0xf3/0x230 [ 85.641022][ T6207] ? clear_bhb_loop+0x35/0x90 [ 85.641061][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.641084][ T6207] RIP: 0033:0x7f91b058bc1f [ 85.641101][ T6207] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 85.641116][ T6207] RSP: 002b:00007f91b1431030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 85.641138][ T6207] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91b058bc1f [ 85.641151][ T6207] RDX: 0000000000000001 RSI: 00007f91b14310a0 RDI: 0000000000000003 [ 85.641162][ T6207] RBP: 00007f91b1431090 R08: 0000000000000000 R09: 0000000000000000 [ 85.641173][ T6207] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 85.641185][ T6207] R13: 0000000000000001 R14: 00007f91b07a5fa0 R15: 00007ffe0ea31c28 [ 85.641216][ T6207] [ 85.956275][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 86.102700][ T6217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.111129][ T6217] bond0: (slave bond1): Enslaving as an active interface with an up link [ 86.291041][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 86.316055][ T6230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 86.341704][ T6237] ip6t_srh: unknown srh invflags 4000 [ 86.341989][ T6230] gtp0: entered promiscuous mode [ 86.373279][ T6230] gtp0: entered allmulticast mode [ 86.590603][ T6246] vxcan1: entered allmulticast mode [ 86.613149][ T6246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.100'. [ 86.674226][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 87.023760][ T26] cfg80211: failed to load regulatory.db [ 87.534177][ T6277] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 87.685632][ T6282] netlink: 'syz.0.110': attribute type 3 has an invalid length. [ 87.843368][ T6284] lo speed is unknown, defaulting to 1000 [ 88.288109][ T6284] Bluetooth: MGMT ver 1.23 [ 88.634144][ T6320] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 88.701257][ T975] lo speed is unknown, defaulting to 1000 [ 88.732397][ T6322] syz_tun: entered allmulticast mode [ 89.002014][ T6304] FAULT_INJECTION: forcing a failure. [ 89.002014][ T6304] name fail_futex, interval 1, probability 0, space 0, times 1 [ 89.059425][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.4.118 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 89.059451][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.059462][ T6304] Call Trace: [ 89.059469][ T6304] [ 89.059477][ T6304] dump_stack_lvl+0x241/0x360 [ 89.059508][ T6304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.059528][ T6304] ? __pfx__printk+0x10/0x10 [ 89.059551][ T6304] ? __pfx_register_lock_class+0x10/0x10 [ 89.059589][ T6304] should_fail_ex+0x40a/0x550 [ 89.059623][ T6304] get_futex_key+0x1a4/0xf40 [ 89.059655][ T6304] ? __pfx_get_futex_key+0x10/0x10 [ 89.059686][ T6304] ? __lock_acquire+0x1397/0x2100 [ 89.059722][ T6304] futex_wake+0x12a/0x5c0 [ 89.059759][ T6304] ? __pfx_futex_wake+0x10/0x10 [ 89.059804][ T6304] do_futex+0x392/0x560 [ 89.059834][ T6304] ? __pfx_do_futex+0x10/0x10 [ 89.059854][ T6304] ? __mutex_unlock_slowpath+0x227/0x800 [ 89.059882][ T6304] ? __might_fault+0xaa/0x120 [ 89.059906][ T6304] mm_release+0x193/0x430 [ 89.059929][ T6304] ? exit_robust_list+0x2cf/0x2f0 [ 89.059952][ T6304] ? __pfx_mm_release+0x10/0x10 [ 89.059970][ T6304] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.059990][ T6304] ? lockdep_hardirqs_on+0x99/0x150 [ 89.060025][ T6304] exit_mm+0xb0/0x310 [ 89.060055][ T6304] ? __pfx_exit_mm+0x10/0x10 [ 89.060080][ T6304] ? taskstats_exit+0x326/0xa60 [ 89.060114][ T6304] do_exit+0x9ad/0x28e0 [ 89.060150][ T6304] ? __pfx_do_exit+0x10/0x10 [ 89.060175][ T6304] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.060203][ T6304] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.060234][ T6304] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.060260][ T6304] ? _raw_spin_lock_irq+0xdf/0x120 [ 89.060286][ T6304] do_group_exit+0x207/0x2c0 [ 89.060311][ T6304] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.060331][ T6304] ? lockdep_hardirqs_on+0x99/0x150 [ 89.060367][ T6304] get_signal+0x168c/0x1720 [ 89.060405][ T6304] ? __pfx_get_signal+0x10/0x10 [ 89.060437][ T6304] arch_do_signal_or_restart+0x96/0x860 [ 89.060464][ T6304] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.060486][ T6304] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.060527][ T6304] ? syscall_exit_to_user_mode+0xa3/0x340 [ 89.060554][ T6304] syscall_exit_to_user_mode+0xce/0x340 [ 89.060581][ T6304] do_syscall_64+0x100/0x230 [ 89.060606][ T6304] ? clear_bhb_loop+0x35/0x90 [ 89.060635][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.060659][ T6304] RIP: 0033:0x7fc438d8d169 [ 89.060676][ T6304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.060691][ T6304] RSP: 002b:00007fc439b69038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 89.060712][ T6304] RAX: fffffffffffffe00 RBX: 00007fc438fa5fa0 RCX: 00007fc438d8d169 [ 89.060725][ T6304] RDX: 0000000000000001 RSI: 0000400000003440 RDI: 0000000000000003 [ 89.060736][ T6304] RBP: 00007fc439b69090 R08: 0000000000000000 R09: 0000000000000000 [ 89.060747][ T6304] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 89.060759][ T6304] R13: 0000000000000000 R14: 00007fc438fa5fa0 R15: 00007ffc66548318 [ 89.060789][ T6304] [ 89.404414][ T6339] netlink: 'syz.1.127': attribute type 8 has an invalid length. [ 89.822882][ T6358] syz.0.135 uses old SIOCAX25GETINFO [ 89.897769][ T6361] netlink: 'syz.2.136': attribute type 9 has an invalid length. [ 89.919206][ T6361] hsr0: entered promiscuous mode [ 89.924854][ T6361] macvlan2: entered promiscuous mode [ 89.932887][ T6361] macvlan2: entered allmulticast mode [ 89.938622][ T6361] hsr0: entered allmulticast mode [ 89.943856][ T6361] hsr_slave_0: entered allmulticast mode [ 89.950934][ T6361] hsr_slave_1: entered allmulticast mode [ 90.088619][ T6368] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.096589][ T6366] batman_adv: batadv0: Adding interface: dummy0 [ 90.116596][ T6366] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.151157][ T6366] batman_adv: batadv0: Interface activated: dummy0 [ 90.179071][ T6369] batadv0: mtu less than device minimum [ 90.207028][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.220181][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.233019][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.245857][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.258685][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.271588][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.284385][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.297182][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.310104][ T6369] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 90.591650][ T6376] xt_hashlimit: size too large, truncated to 1048576 [ 90.658383][ T6381] xt_hashlimit: size too large, truncated to 1048576 [ 90.671620][ T6379] bridge_slave_0: left allmulticast mode [ 90.677331][ T6379] bridge_slave_0: left promiscuous mode [ 90.706872][ T6384] __nla_validate_parse: 12 callbacks suppressed [ 90.706895][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 90.724332][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.727566][ T6389] IPVS: length: 78 != 8 [ 90.773933][ T6379] bridge_slave_1: left allmulticast mode [ 90.785197][ T6379] bridge_slave_1: left promiscuous mode [ 90.825938][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.929442][ T6379] bond0: (slave bond_slave_0): Releasing backup interface [ 90.953474][ T6379] bond0: (slave bond_slave_1): Releasing backup interface [ 90.982764][ T6379] team0: Failed to send options change via netlink (err -105) [ 90.991166][ T6379] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 91.002495][ T6379] team0: Port device team_slave_0 removed [ 91.011543][ T6379] team0: Failed to send options change via netlink (err -105) [ 91.019979][ T6379] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 91.030160][ T6379] team0: Port device team_slave_1 removed [ 91.036398][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.044137][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.052953][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.061700][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.088747][ T6390] : renamed from bond0 (while UP) [ 91.110275][ T6388] team0: Failed to send options change via netlink (err -105) [ 91.129427][ T6388] team0: Mode changed to "activebackup" [ 91.494031][ T5147] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 91.501669][ T5147] Bluetooth: hci0: command 0x0401 tx timeout [ 91.518348][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 91.580414][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 91.589648][ T6420] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.635737][ T6426] FAULT_INJECTION: forcing a failure. [ 91.635737][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.650083][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.2.151 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 91.650107][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.650116][ T6426] Call Trace: [ 91.650123][ T6426] [ 91.650130][ T6426] dump_stack_lvl+0x241/0x360 [ 91.650157][ T6426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.650177][ T6426] ? __pfx__printk+0x10/0x10 [ 91.650206][ T6426] should_fail_ex+0x40a/0x550 [ 91.650237][ T6426] _copy_from_user+0x2d/0xb0 [ 91.650261][ T6426] get_user_ifreq+0xc3/0x200 [ 91.650286][ T6426] sock_ioctl+0x793/0x8e0 [ 91.650311][ T6426] ? __pfx_sock_ioctl+0x10/0x10 [ 91.650348][ T6426] ? __pfx_sock_ioctl+0x10/0x10 [ 91.650373][ T6426] __se_sys_ioctl+0xf5/0x170 [ 91.650396][ T6426] do_syscall_64+0xf3/0x230 [ 91.650420][ T6426] ? clear_bhb_loop+0x35/0x90 [ 91.650447][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.650470][ T6426] RIP: 0033:0x7f6cf7b8d169 [ 91.650488][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.650502][ T6426] RSP: 002b:00007f6cf8a6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.650524][ T6426] RAX: ffffffffffffffda RBX: 00007f6cf7da6080 RCX: 00007f6cf7b8d169 [ 91.650538][ T6426] RDX: 0000400000000100 RSI: 00000000000089f1 RDI: 0000000000000003 [ 91.650550][ T6426] RBP: 00007f6cf8a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 91.650561][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.650572][ T6426] R13: 0000000000000000 R14: 00007f6cf7da6080 R15: 00007ffedb064628 [ 91.650600][ T6426] [ 92.347982][ T6451] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 92.356199][ T6451] netlink: 208292 bytes leftover after parsing attributes in process `syz.3.156'. [ 92.401328][ T6451] netlink: 'syz.3.156': attribute type 2 has an invalid length. [ 92.414298][ T6451] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 92.595725][ T6462] netlink: 84 bytes leftover after parsing attributes in process `syz.0.160'. [ 92.651487][ T6463] team0: No ports can be present during mode change [ 92.662376][ T6463] netlink: 'syz.2.159': attribute type 1 has an invalid length. [ 92.723935][ T6468] netlink: 164 bytes leftover after parsing attributes in process `syz.1.163'. [ 92.823531][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 92.870745][ T6471] FAULT_INJECTION: forcing a failure. [ 92.870745][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.908651][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.0.164 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 92.908679][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.908690][ T6471] Call Trace: [ 92.908697][ T6471] [ 92.908706][ T6471] dump_stack_lvl+0x241/0x360 [ 92.908736][ T6471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.908757][ T6471] ? __pfx__printk+0x10/0x10 [ 92.908779][ T6471] ? __pfx_lock_release+0x10/0x10 [ 92.908818][ T6471] should_fail_ex+0x40a/0x550 [ 92.908852][ T6471] _copy_from_user+0x2d/0xb0 [ 92.908879][ T6471] vti6_siocdevprivate+0x1ea/0x11c0 [ 92.908919][ T6471] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 92.908970][ T6471] ? full_name_hash+0xb1/0xe0 [ 92.909007][ T6471] dev_ifsioc+0xcac/0x1130 [ 92.909032][ T6471] ? __pfx___mutex_lock+0x10/0x10 [ 92.909064][ T6471] ? __pfx_dev_ifsioc+0x10/0x10 [ 92.909095][ T6471] ? dev_load+0x21/0x1f0 [ 92.909124][ T6471] dev_ioctl+0x881/0x1340 [ 92.909155][ T6471] sock_ioctl+0x7ef/0x8e0 [ 92.909184][ T6471] ? __pfx_sock_ioctl+0x10/0x10 [ 92.909225][ T6471] ? __pfx_sock_ioctl+0x10/0x10 [ 92.909257][ T6471] __se_sys_ioctl+0xf5/0x170 [ 92.909290][ T6471] do_syscall_64+0xf3/0x230 [ 92.909313][ T6471] ? clear_bhb_loop+0x35/0x90 [ 92.909341][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.909363][ T6471] RIP: 0033:0x7fcd9458d169 [ 92.909401][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.909417][ T6471] RSP: 002b:00007fcd953a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.909439][ T6471] RAX: ffffffffffffffda RBX: 00007fcd947a5fa0 RCX: 00007fcd9458d169 [ 92.909452][ T6471] RDX: 0000400000000100 RSI: 00000000000089f1 RDI: 0000000000000003 [ 92.909463][ T6471] RBP: 00007fcd953a6090 R08: 0000000000000000 R09: 0000000000000000 [ 92.909473][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.909485][ T6471] R13: 0000000000000000 R14: 00007fcd947a5fa0 R15: 00007ffd90c435e8 [ 92.909517][ T6471] [ 93.160735][ T6474] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 93.245255][ T6474] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 93.290999][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 94.363844][ T6520] lo speed is unknown, defaulting to 1000 [ 94.391670][ T6521] lo speed is unknown, defaulting to 1000 [ 94.573235][ T6531] netlink: 104 bytes leftover after parsing attributes in process `syz.2.186'. [ 94.667329][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.186'. [ 95.634167][ T6577] x_tables: duplicate underflow at hook 1 [ 95.677635][ T6581] IPv6: Can't replace route, no match found [ 95.720595][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 95.887338][ T6588] net_ratelimit: 10 callbacks suppressed [ 95.887359][ T6588] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 95.976155][ T6598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.204'. [ 95.997121][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 96.022281][ T6598] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 96.070686][ T6598] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 96.071044][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 96.155254][ T6607] pimreg: entered allmulticast mode [ 96.399623][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 96.470446][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 96.609474][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 96.625763][ T6620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.708721][ T6620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.027644][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 97.479103][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 97.888895][ T6668] tipc: Enabling of bearer rejected, failed to enable media [ 98.005491][ T6670] team_slave_0: entered promiscuous mode [ 98.011632][ T6670] team_slave_1: entered promiscuous mode [ 98.021759][ T6670] macsec1: entered promiscuous mode [ 98.027028][ T6670] team0: entered promiscuous mode [ 98.042863][ T6670] team0: left promiscuous mode [ 98.048205][ T6670] team_slave_0: left promiscuous mode [ 98.053753][ T6670] team_slave_1: left promiscuous mode [ 98.093533][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 98.391354][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 98.667776][ T6714] netlink: 'syz.3.236': attribute type 4 has an invalid length. [ 98.768010][ T6716] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 98.794992][ T6716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.817177][ T6716] bond1: (slave bridge1): making interface the new active one [ 98.826824][ T6716] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 99.053293][ T6727] syzkaller0: entered promiscuous mode [ 99.058849][ T6727] syzkaller0: entered allmulticast mode [ 99.495058][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 100.847143][ T6730] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 100.859017][ T6730] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 101.060519][ T6762] __nla_validate_parse: 8 callbacks suppressed [ 101.060541][ T6762] netlink: 48 bytes leftover after parsing attributes in process `syz.4.249'. [ 101.091090][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 101.128245][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 101.620994][ T6779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.760059][ T10] IPVS: starting estimator thread 0... [ 101.839496][ T30] audit: type=1804 audit(1742415118.752:2): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.255" name="/newroot/57/memory.events" dev="tmpfs" ino=308 res=1 errno=0 [ 101.849413][ T6786] IPVS: using max 21 ests per chain, 50400 per kthread [ 101.918072][ T30] audit: type=1800 audit(1742415118.762:3): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.255" name="memory.events" dev="tmpfs" ino=308 res=0 errno=0 [ 103.005886][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 103.260832][ T6842] ax25_connect(): syz.4.267 uses autobind, please contact jreuter@yaina.de [ 103.608421][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 104.325537][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 104.339785][ T6894] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 104.381758][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 104.673178][ T6907] netlink: 32 bytes leftover after parsing attributes in process `syz.2.286'. [ 106.066218][ T6959] macsec1: entered promiscuous mode [ 106.089482][ T6959] gretap0: entered promiscuous mode [ 106.105854][ T6959] macsec1: entered allmulticast mode [ 106.120732][ T6959] gretap0: entered allmulticast mode [ 106.128318][ T6959] gretap0: left allmulticast mode [ 106.134384][ T6959] gretap0: left promiscuous mode [ 106.416727][ T6983] vlan2: entered allmulticast mode [ 106.435062][ T6983] veth0_to_batadv: entered allmulticast mode [ 106.465959][ T6983] veth0_to_batadv: left allmulticast mode [ 106.535746][ T6990] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 106.557084][ T6983] vlan2: entered allmulticast mode [ 106.576774][ T6983] veth0_to_batadv: entered allmulticast mode [ 106.584430][ T6990] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 106.596512][ T6983] veth0_to_batadv: left allmulticast mode [ 106.999924][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 107.012505][ T7014] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 107.135363][ T7018] netlink: 277 bytes leftover after parsing attributes in process `syz.3.324'. [ 107.229231][ T7024] syzkaller0: Caught tx_queue_len zero misconfig [ 107.233323][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.326'. [ 107.383046][ T7033] xt_socket: unknown flags 0x4 [ 107.838028][ T7052] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 107.887080][ T7054] netlink: 116 bytes leftover after parsing attributes in process `syz.4.335'. [ 108.150370][ T7062] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 108.372628][ T7067] lo speed is unknown, defaulting to 1000 [ 109.062432][ T7108] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.107571][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 109.126398][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 109.129122][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 109.159428][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 109.178154][ T7108] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.315566][ T7108] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.399164][ T7117] vlan2: entered promiscuous mode [ 109.408362][ T7117] macvtap0: entered promiscuous mode [ 109.441364][ T7108] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.559226][ T7108] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.577950][ T7108] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.594519][ T7108] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.628024][ T7108] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.650858][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 109.673181][ T7132] lo speed is unknown, defaulting to 1000 [ 110.227456][ T7161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.366'. [ 110.650189][ T7171] xt_ecn: cannot match TCP bits for non-tcp packets [ 110.732542][ T7176] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 111.107473][ T7189] bond1: (slave bridge1): Releasing active interface [ 111.175811][ T7189] team0: Mode changed to "loadbalance" [ 111.252163][ T7202] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 111.358889][ T7208] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.390759][ T7208] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.400025][ T7208] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.409076][ T7208] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.422339][ T7208] bond0: (slave geneve2): making interface the new active one [ 111.431455][ T7208] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 111.502292][ T7208] syz.0.381 (7208) used greatest stack depth: 16560 bytes left [ 112.207929][ T7230] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 113.033350][ T7236] __nla_validate_parse: 1 callbacks suppressed [ 113.033381][ T7236] netlink: 92 bytes leftover after parsing attributes in process `syz.1.389'. [ 113.372901][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'. [ 113.667457][ T7248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'. [ 113.835607][ T7260] netlink: 'syz.4.396': attribute type 58 has an invalid length. [ 113.847341][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 114.109901][ T7274] FAULT_INJECTION: forcing a failure. [ 114.109901][ T7274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.158943][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.1.402 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 114.158971][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.158982][ T7274] Call Trace: [ 114.158989][ T7274] [ 114.158996][ T7274] dump_stack_lvl+0x241/0x360 [ 114.159024][ T7274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.159045][ T7274] ? __pfx__printk+0x10/0x10 [ 114.159075][ T7274] ? __pfx_lock_release+0x10/0x10 [ 114.159110][ T7274] should_fail_ex+0x40a/0x550 [ 114.159141][ T7274] _copy_from_user+0x2d/0xb0 [ 114.159167][ T7274] copy_msghdr_from_user+0xae/0x680 [ 114.159199][ T7274] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 114.159223][ T7274] ? __fget_files+0x2a/0x410 [ 114.159259][ T7274] ? __fget_files+0x2a/0x410 [ 114.159293][ T7274] __sys_sendmsg+0x209/0x350 [ 114.159319][ T7274] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.159354][ T7274] ? do_sys_openat2+0x17a/0x1d0 [ 114.159407][ T7274] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.159433][ T7274] ? do_syscall_64+0x100/0x230 [ 114.159458][ T7274] ? do_syscall_64+0xb6/0x230 [ 114.159482][ T7274] do_syscall_64+0xf3/0x230 [ 114.159506][ T7274] ? clear_bhb_loop+0x35/0x90 [ 114.159533][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.159556][ T7274] RIP: 0033:0x7fd13f18d169 [ 114.159573][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.159588][ T7274] RSP: 002b:00007fd13ff86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.159608][ T7274] RAX: ffffffffffffffda RBX: 00007fd13f3a5fa0 RCX: 00007fd13f18d169 [ 114.159621][ T7274] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 114.159633][ T7274] RBP: 00007fd13ff86090 R08: 0000000000000000 R09: 0000000000000000 [ 114.159645][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.159656][ T7274] R13: 0000000000000000 R14: 00007fd13f3a5fa0 R15: 00007ffd2e816998 [ 114.159685][ T7274] [ 114.160740][ T7275] netlink: 152 bytes leftover after parsing attributes in process `syz.2.401'. [ 114.294959][ T7279] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.400'. [ 114.409857][ T7279] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.400'. [ 114.567561][ T7272] pimreg: entered allmulticast mode [ 114.671748][ T7294] GUP no longer grows the stack in syz.0.409 (7294): 400000006000-40000000a000 (400000005000) [ 114.688145][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: syz.0.409 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 114.688175][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.688186][ T7294] Call Trace: [ 114.688193][ T7294] [ 114.688201][ T7294] dump_stack_lvl+0x241/0x360 [ 114.688233][ T7294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.688256][ T7294] ? __pfx__printk+0x10/0x10 [ 114.688273][ T7294] ? find_vma+0xf9/0x170 [ 114.688307][ T7294] __get_user_pages+0x3b07/0x4140 [ 114.688340][ T7294] ? mark_lock+0x9a/0x360 [ 114.688388][ T7294] ? __pfx___get_user_pages+0x10/0x10 [ 114.688406][ T7294] ? __gup_longterm_locked+0xd2f/0x17f0 [ 114.688429][ T7294] ? __pfx_down_read_killable+0x10/0x10 [ 114.688463][ T7294] ? __pfx_lock_acquire+0x10/0x10 [ 114.688490][ T7294] ? try_get_folio+0xf1/0x6f0 [ 114.688511][ T7294] ? __pfx_lock_release+0x10/0x10 [ 114.688548][ T7294] __gup_longterm_locked+0xe64/0x17f0 [ 114.688582][ T7294] ? mark_lock+0x9a/0x360 [ 114.688606][ T7294] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.688633][ T7294] ? __pfx___gup_longterm_locked+0x10/0x10 [ 114.688654][ T7294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.688687][ T7294] ? gup_fast_fallback+0x207e/0x29c0 [ 114.688711][ T7294] gup_fast_fallback+0x2266/0x29c0 [ 114.688768][ T7294] ? __pfx_gup_fast_fallback+0x10/0x10 [ 114.688829][ T7294] ? __mutex_trylock_common+0x183/0x2e0 [ 114.688852][ T7294] ? __pfx___might_resched+0x10/0x10 [ 114.688875][ T7294] ? is_valid_gup_args+0x124/0x200 [ 114.688899][ T7294] get_user_pages_fast+0xcc/0x160 [ 114.688924][ T7294] ? __pfx_get_user_pages_fast+0x10/0x10 [ 114.688943][ T7294] ? rcu_is_watching+0x15/0xb0 [ 114.688965][ T7294] ? trace_contention_end+0x3c/0x120 [ 114.688988][ T7294] ? __mutex_lock+0x397/0x1010 [ 114.689019][ T7294] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 114.689062][ T7294] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 114.689095][ T7294] iov_iter_get_pages2+0xcf/0x130 [ 114.689124][ T7294] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 114.689161][ T7294] __se_sys_vmsplice+0x739/0x14a0 [ 114.689192][ T7294] ? plist_del+0x3f1/0x410 [ 114.689239][ T7294] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 114.689268][ T7294] ? __pfx_futex_wake+0x10/0x10 [ 114.689347][ T7294] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.689384][ T7294] ? do_syscall_64+0x100/0x230 [ 114.689412][ T7294] ? do_syscall_64+0xb6/0x230 [ 114.689440][ T7294] do_syscall_64+0xf3/0x230 [ 114.689465][ T7294] ? clear_bhb_loop+0x35/0x90 [ 114.689495][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.689519][ T7294] RIP: 0033:0x7fcd9458d169 [ 114.689536][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.689552][ T7294] RSP: 002b:00007fcd953a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 114.689573][ T7294] RAX: ffffffffffffffda RBX: 00007fcd947a5fa0 RCX: 00007fcd9458d169 [ 114.689587][ T7294] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000009 [ 114.689598][ T7294] RBP: 00007fcd9460e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.689610][ T7294] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 114.689620][ T7294] R13: 0000000000000000 R14: 00007fcd947a5fa0 R15: 00007ffd90c435e8 [ 114.689651][ T7294] [ 115.017781][ T7267] pimreg: left allmulticast mode [ 115.317710][ T7307] lo speed is unknown, defaulting to 1000 [ 115.453664][ T7311] netlink: 56 bytes leftover after parsing attributes in process `syz.2.412'. [ 115.486134][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.416'. [ 115.581961][ T7320] FAULT_INJECTION: forcing a failure. [ 115.581961][ T7320] name failslab, interval 1, probability 0, space 0, times 0 [ 115.629461][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.0.417 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 115.629493][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.629503][ T7320] Call Trace: [ 115.629511][ T7320] [ 115.629518][ T7320] dump_stack_lvl+0x241/0x360 [ 115.629547][ T7320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.629567][ T7320] ? __pfx__printk+0x10/0x10 [ 115.629587][ T7320] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 115.629614][ T7320] ? __pfx___might_resched+0x10/0x10 [ 115.629642][ T7320] should_fail_ex+0x40a/0x550 [ 115.629674][ T7320] should_failslab+0xac/0x100 [ 115.629700][ T7320] kmem_cache_alloc_node_noprof+0x77/0x380 [ 115.629724][ T7320] ? __alloc_skb+0x1c3/0x440 [ 115.629749][ T7320] __alloc_skb+0x1c3/0x440 [ 115.629779][ T7320] ? __pfx___alloc_skb+0x10/0x10 [ 115.629802][ T7320] ? netlink_autobind+0xd6/0x2f0 [ 115.629818][ T7320] ? netlink_autobind+0x2b0/0x2f0 [ 115.629841][ T7320] netlink_sendmsg+0x634/0xcb0 [ 115.629880][ T7320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.629910][ T7320] ? aa_sock_msg_perm+0x91/0x160 [ 115.629942][ T7320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.629966][ T7320] __sock_sendmsg+0x221/0x270 [ 115.629995][ T7320] ____sys_sendmsg+0x53a/0x860 [ 115.630027][ T7320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.630045][ T7320] ? __fget_files+0x2a/0x410 [ 115.630075][ T7320] ? __fget_files+0x2a/0x410 [ 115.630112][ T7320] __sys_sendmsg+0x269/0x350 [ 115.630139][ T7320] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.630176][ T7320] ? do_sys_openat2+0x17a/0x1d0 [ 115.630233][ T7320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.630263][ T7320] ? do_syscall_64+0x100/0x230 [ 115.630300][ T7320] ? do_syscall_64+0xb6/0x230 [ 115.630328][ T7320] do_syscall_64+0xf3/0x230 [ 115.630352][ T7320] ? clear_bhb_loop+0x35/0x90 [ 115.630380][ T7320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.630403][ T7320] RIP: 0033:0x7fcd9458d169 [ 115.630421][ T7320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.630436][ T7320] RSP: 002b:00007fcd953a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.630458][ T7320] RAX: ffffffffffffffda RBX: 00007fcd947a5fa0 RCX: 00007fcd9458d169 [ 115.630472][ T7320] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 115.630484][ T7320] RBP: 00007fcd953a6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.630495][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.630506][ T7320] R13: 0000000000000000 R14: 00007fcd947a5fa0 R15: 00007ffd90c435e8 [ 115.630537][ T7320] [ 115.990726][ T7329] tipc: Failed to remove unknown binding: 66,3,3/0:3484561532/3484561533 [ 116.523662][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 116.736622][ T7360] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 116.746272][ T7361] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 116.787387][ T7362] Driver unsupported XDP return value 0 on prog (id 153) dev N/A, expect packet loss! [ 117.238858][ T7383] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 117.281390][ T7390] trusted_key: syz.3.439 sent an empty control message without MSG_MORE. [ 117.303652][ T7389] netlink: 'syz.4.438': attribute type 2 has an invalid length. [ 117.325728][ T7383] lo speed is unknown, defaulting to 1000 [ 117.825653][ T7413] lo speed is unknown, defaulting to 1000 [ 117.854198][ T7412] lo speed is unknown, defaulting to 1000 [ 117.946119][ T7425] tipc: Can't bind to reserved service type 2 [ 118.022388][ T7426] sctp: [Deprecated]: syz.3.445 (pid 7426) Use of int in max_burst socket option. [ 118.022388][ T7426] Use struct sctp_assoc_value instead [ 118.084586][ T7426] bridge2: entered promiscuous mode [ 118.105738][ T7426] bridge2: entered allmulticast mode [ 118.276694][ T7383] __nla_validate_parse: 3 callbacks suppressed [ 118.276715][ T7383] netlink: 64 bytes leftover after parsing attributes in process `syz.2.437'. [ 118.310970][ T7429] netlink: 'syz.0.446': attribute type 39 has an invalid length. [ 118.508730][ T7431] lo speed is unknown, defaulting to 1000 [ 118.952312][ T7439] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.032283][ T7441] team0: No ports can be present during mode change [ 119.580925][ T7465] lo speed is unknown, defaulting to 1000 [ 120.181718][ T7472] team0 (unregistering): Port device gtp0 removed [ 120.454541][ T7495] bond1: entered promiscuous mode [ 120.460571][ T7495] bond1: entered allmulticast mode [ 120.466066][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.695416][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 120.947974][ T7512] netlink: 56 bytes leftover after parsing attributes in process `syz.2.467'. [ 121.283479][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.473'. [ 121.347870][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 121.387401][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 121.396821][ T7537] bridge_slave_1: left allmulticast mode [ 121.422032][ T7537] bridge_slave_1: left promiscuous mode [ 121.440831][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.469008][ T7537] bridge_slave_0: left allmulticast mode [ 121.476061][ T7537] bridge_slave_0: left promiscuous mode [ 121.486430][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.528972][ T7549] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 121.651296][ T7549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.861467][ T7565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.481'. [ 121.953701][ T7566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.481'. [ 121.967640][ T7571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'. [ 121.976924][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.481'. [ 122.216604][ T7591] bridge_slave_0: left allmulticast mode [ 122.238707][ T7591] bridge_slave_0: left promiscuous mode [ 122.267144][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.301217][ T7598] sctp: [Deprecated]: syz.4.491 (pid 7598) Use of int in max_burst socket option. [ 122.301217][ T7598] Use struct sctp_assoc_value instead [ 122.341058][ T7591] bridge_slave_1: left allmulticast mode [ 122.359582][ T7591] bridge_slave_1: left promiscuous mode [ 122.371103][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.401497][ T7591] bond0: (slave bond_slave_0): Releasing backup interface [ 122.426981][ T7591] bond0: (slave bond_slave_1): Releasing backup interface [ 122.458395][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 122.472085][ T7591] team0: Port device team_slave_0 removed [ 122.490512][ T7591] team0: Port device team_slave_1 removed [ 122.497515][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.506110][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.514892][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.524791][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.545361][ T7609] xt_hashlimit: size too large, truncated to 1048576 [ 122.602499][ T7591] bond0: (slave bond1): Releasing backup interface [ 122.708065][ T5889] IPVS: starting estimator thread 0... [ 122.713991][ T7614] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.849739][ T7618] IPVS: using max 17 ests per chain, 40800 per kthread [ 123.028655][ T7584] infiniband syz0: set down [ 123.043290][ T7584] infiniband syz0: added bond0 [ 123.054603][ T7584] syz0: rxe_create_cq: returned err = -12 [ 123.072006][ T7584] infiniband syz0: Couldn't create ib_mad CQ [ 123.091017][ T7584] infiniband syz0: Couldn't open port 1 [ 123.143886][ T7584] RDS/IB: syz0: added [ 123.157970][ T7584] smc: adding ib device syz0 with port count 1 [ 123.180412][ T7584] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 123.810879][ T7653] lo speed is unknown, defaulting to 1000 [ 123.925811][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 123.950956][ T7658] ip_vti0: entered promiscuous mode [ 123.986647][ T7658] netlink: 52 bytes leftover after parsing attributes in process `syz.1.512'. [ 124.007733][ T7660] netlink: 'syz.3.513': attribute type 3 has an invalid length. [ 124.028588][ T7656] lo speed is unknown, defaulting to 1000 [ 124.200891][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 124.214094][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 124.224162][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 124.239841][ T7667] netlink: 332 bytes leftover after parsing attributes in process `syz.1.515'. [ 124.491025][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 125.429134][ T7679] syz.1.519 (7679) used greatest stack depth: 15920 bytes left [ 125.794572][ T7686] openvswitch: netlink: IPv6 tunnel dst address is zero [ 126.170173][ T7699] ipt_rpfilter: unknown options [ 126.182475][ T7707] lo speed is unknown, defaulting to 1000 [ 126.195706][ T7699] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 126.613919][ T7719] ipt_ECN: cannot use operation on non-tcp rule [ 126.729785][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 126.842439][ T7719] syzkaller0: entered allmulticast mode [ 126.972998][ T7719] syzkaller0 (unregistering): left allmulticast mode [ 127.558558][ T7743] sctp: [Deprecated]: syz.1.538 (pid 7743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.558558][ T7743] Use struct sctp_sack_info instead [ 127.668915][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'. [ 127.692355][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 128.352886][ T7760] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.385781][ T7760] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.423069][ T7760] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.445222][ T7760] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.455987][ T7769] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.589060][ T7760] hsr0: left allmulticast mode [ 128.597178][ T7777] netlink: 'syz.4.548': attribute type 39 has an invalid length. [ 128.610295][ T7760] hsr_slave_0: left allmulticast mode [ 128.622783][ T7760] hsr_slave_1: left allmulticast mode [ 128.657409][ T7775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.902431][ T7789] dummy0: entered promiscuous mode [ 128.915060][ T7789] macvtap0: entered promiscuous mode [ 128.923536][ T7789] macvtap0: entered allmulticast mode [ 128.929146][ T7789] dummy0: entered allmulticast mode [ 129.128326][ T7802] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 129.154554][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb52000: rx timeout, send abort [ 129.348677][ T7816] __nla_validate_parse: 4 callbacks suppressed [ 129.348692][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 129.365619][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 129.375709][ T7816] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 129.384056][ T7816] netlink: 10 bytes leftover after parsing attributes in process `syz.4.561'. [ 129.431256][ T7816] nbd: socks must be embedded in a SOCK_ITEM attr [ 129.438076][ T7816] block nbd0: shutting down sockets [ 129.663778][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb52000: abort rx timeout. Force session deactivation [ 130.130670][ T7847] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 130.170066][ T7847] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 130.385982][ T7857] lo speed is unknown, defaulting to 1000 [ 130.448572][ T30] audit: type=1800 audit(1742415147.372:4): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="memory.events" dev="tmpfs" ino=569 res=0 errno=0 [ 130.727979][ T7862] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 130.737568][ T7862] macvlan2: entered promiscuous mode [ 130.860593][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 130.870116][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.576'. [ 130.886201][ T7867] gtp1: entered promiscuous mode [ 130.904841][ T7867] gtp1: entered allmulticast mode [ 130.953161][ T7872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 130.965570][ T7872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 131.187988][ T7881] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.579'. [ 131.239678][ T7881] openvswitch: netlink: Flow actions attr not present in new flow. [ 131.352124][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 131.362470][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 131.393495][ T7889] tipc: Started in network mode [ 131.415858][ T7889] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 131.440859][ T7889] tipc: Enabled bearer , priority 10 [ 131.496721][ T7878] batadv_slave_1: entered promiscuous mode [ 131.521268][ T7878] batadv_slave_1: entered allmulticast mode [ 131.548475][ T7878] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 131.577684][ T7857] netlink: 'syz.4.573': attribute type 13 has an invalid length. [ 131.737806][ T7898] netlink: 'syz.0.584': attribute type 2 has an invalid length. [ 131.803021][ T7898] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 131.870131][ T7900] netlink: 'syz.3.585': attribute type 9 has an invalid length. [ 132.080579][ T7906] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 132.561138][ T975] tipc: Node number set to 43690 [ 133.094549][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.148974][ T7928] team0 (unregistering): Port device team_slave_0 removed [ 133.184813][ T7928] team0 (unregistering): Port device team_slave_1 removed [ 133.310465][ T7935] team0: Port device gtp2 added [ 133.326845][ T7937] tipc: Started in network mode [ 133.333319][ T7937] tipc: Node identity 8e7440614a7a, cluster identity 4711 [ 133.350193][ T7937] tipc: Enabled bearer , priority 0 [ 133.443797][ T7945] syzkaller0: entered promiscuous mode [ 133.455814][ T7945] syzkaller0: entered allmulticast mode [ 133.498658][ T7945] tipc: Resetting bearer [ 133.588129][ T7934] tipc: Resetting bearer [ 134.435102][ T5888] tipc: Node number set to 3289268321 [ 135.486900][ T7934] tipc: Disabling bearer [ 135.495793][ T7929] lo speed is unknown, defaulting to 1000 [ 135.510558][ T7984] __nla_validate_parse: 11 callbacks suppressed [ 135.510577][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'. [ 135.834710][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 135.906284][ T7996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.011278][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'. [ 136.073126][ T8007] netdevsim netdevsim1: Direct firmware load for / [ 136.073126][ T8007] failed with error -2 [ 136.085405][ T8007] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 136.085405][ T8007] [ 136.185744][ T8012] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 136.194420][ T8013] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 136.450725][ T30] audit: type=1107 audit(1742415153.372:5): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='z ɴ ᲞF1̾R`\n}ׁJi6)30m]vuTkit:iȿ,rK}XZV [ 136.450725][ T30] ,ogSm $ V' [ 136.848384][ T8035] No such timeout policy "syz0" [ 137.046686][ T8035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.054026][ T8035] IPv6: NLM_F_CREATE should be set when creating new route [ 137.061374][ T8035] IPv6: NLM_F_CREATE should be set when creating new route [ 137.623360][ T8073] ip_vti0: left promiscuous mode [ 137.659793][ T8073] netlink: 148 bytes leftover after parsing attributes in process `syz.1.628'. [ 137.668816][ T8073] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 137.750989][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 137.762551][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 138.084338][ T8093] ip6t_REJECT: ECHOREPLY is not supported [ 138.138526][ T8093] netlink: 11 bytes leftover after parsing attributes in process `syz.3.634'. [ 138.166464][ T8092] lo speed is unknown, defaulting to 1000 [ 138.840931][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.872563][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.881907][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.891389][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.915634][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.927915][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.982611][ T8115] lo speed is unknown, defaulting to 1000 [ 139.956362][ T8115] chnl_net:caif_netlink_parms(): no params data found [ 140.256599][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.288058][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.331169][ T8115] bridge_slave_0: entered allmulticast mode [ 140.351804][ T8115] bridge_slave_0: entered promiscuous mode [ 140.392144][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.410555][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.427894][ T8115] bridge_slave_1: entered allmulticast mode [ 140.441700][ T8115] bridge_slave_1: entered promiscuous mode [ 140.565685][ T8115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.627377][ T8115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.783679][ T8115] team0: Port device team_slave_0 added [ 140.832878][ T8115] team0: Port device team_slave_1 added [ 141.015920][ T5851] Bluetooth: hci1: command tx timeout [ 141.192280][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.209207][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.254857][ T8115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.277060][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 141.304698][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.318896][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.429878][ T8115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.524182][ T8115] hsr_slave_0: entered promiscuous mode [ 141.531618][ T8115] hsr_slave_1: entered promiscuous mode [ 141.547063][ T8115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.556860][ T8115] Cannot create hsr debugfs directory [ 141.744097][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 141.820091][ T8235] xt_connbytes: Forcing CT accounting to be enabled [ 141.834873][ T8235] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.847340][ T8235] xt_bpf: check failed: parse error [ 142.073620][ T8244] netlink: zone id is out of range [ 142.079158][ T8244] netlink: zone id is out of range [ 142.086363][ T8244] netlink: zone id is out of range [ 142.097676][ T8244] netlink: zone id is out of range [ 142.104002][ T8244] netlink: zone id is out of range [ 142.124507][ T8244] netlink: zone id is out of range [ 142.149098][ T8244] netlink: zone id is out of range [ 142.168274][ T8244] netlink: zone id is out of range [ 142.177667][ T8244] netlink: zone id is out of range [ 142.476918][ T8115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.488658][ T8115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.506052][ T8115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.517997][ T8115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.646324][ T8115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.701424][ T8115] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.739692][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.746818][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.766065][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.773281][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.034240][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.667'. [ 143.063829][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.667'. [ 143.090038][ T5851] Bluetooth: hci1: command tx timeout [ 143.186159][ T8261] net_ratelimit: 307 callbacks suppressed [ 143.186182][ T8261] openvswitch: netlink: ct_state flags 04d30007 unsupported [ 143.225672][ T8261] netlink: 148 bytes leftover after parsing attributes in process `syz.3.668'. [ 143.257590][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.371649][ T8272] netlink: 88 bytes leftover after parsing attributes in process `syz.2.669'. [ 143.418312][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'. [ 144.071370][ T8115] veth0_vlan: entered promiscuous mode [ 144.112410][ T8115] veth1_vlan: entered promiscuous mode [ 144.197549][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 144.206521][ T8115] veth0_macvtap: entered promiscuous mode [ 144.233104][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.677'. [ 144.242859][ T8115] veth1_macvtap: entered promiscuous mode [ 144.247572][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 144.315307][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.369317][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.410604][ T8115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.451942][ T8115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.500112][ T8115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.508878][ T8115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.559646][ T8115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.568406][ T8115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.866225][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.887624][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.980077][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.007349][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.169524][ T5851] Bluetooth: hci1: command tx timeout [ 146.082698][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.471788][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.584974][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.592364][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 146.599676][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 146.729189][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.972283][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.100785][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.118992][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.128707][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.148698][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.157899][ T8379] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 147.171398][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.180131][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.281719][ T8379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.307782][ T8373] lo speed is unknown, defaulting to 1000 [ 147.380590][ T8385] netlink: 'syz.1.703': attribute type 20 has an invalid length. [ 147.629761][ T12] bridge_slave_1: left allmulticast mode [ 147.635750][ T12] bridge_slave_1: left promiscuous mode [ 147.662198][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.691974][ T12] bridge_slave_0: left allmulticast mode [ 147.708098][ T12] bridge_slave_0: left promiscuous mode [ 147.723788][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.106517][ T8383] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 148.438118][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.466450][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.479922][ T12] bond0 (unregistering): Released all slaves [ 148.504665][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 148.608909][ T8409] netlink: 96 bytes leftover after parsing attributes in process `syz.1.708'. [ 148.994895][ T8432] netlink: 'syz.1.714': attribute type 10 has an invalid length. [ 149.040210][ T8437] sctp: [Deprecated]: syz.2.715 (pid 8437) Use of int in maxseg socket option. [ 149.040210][ T8437] Use struct sctp_assoc_value instead [ 149.044276][ T8432] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 149.094061][ T8437] vlan2: entered allmulticast mode [ 149.100153][ T8437] hsr0: entered allmulticast mode [ 149.105332][ T8437] hsr_slave_0: entered allmulticast mode [ 149.112680][ T8437] hsr_slave_1: entered allmulticast mode [ 149.127889][ T8437] hsr0: left allmulticast mode [ 149.154730][ T8437] hsr_slave_0: left allmulticast mode [ 149.178380][ T8437] hsr_slave_1: left allmulticast mode [ 149.253165][ T5147] Bluetooth: hci1: command tx timeout [ 149.295862][ T8439] netlink: 'syz.2.715': attribute type 12 has an invalid length. [ 149.327242][ T8439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.715'. [ 149.380722][ T8437] netlink: 'syz.2.715': attribute type 12 has an invalid length. [ 149.388524][ T8437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.715'. [ 149.504930][ T8443] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 149.720735][ T8373] chnl_net:caif_netlink_parms(): no params data found [ 149.791997][ T12] hsr_slave_0: left promiscuous mode [ 149.798579][ T12] hsr_slave_1: left promiscuous mode [ 149.823383][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.832016][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 149.848380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.870632][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.878391][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.934115][ T12] veth1_macvtap: left promiscuous mode [ 149.970211][ T12] veth0_macvtap: left promiscuous mode [ 149.987020][ T12] veth1_vlan: left promiscuous mode [ 149.998160][ T12] veth0_vlan: left promiscuous mode [ 150.025138][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 150.556879][ T12] team0 (unregistering): Port device team_slave_1 removed [ 150.600858][ T12] team0 (unregistering): Port device team_slave_0 removed [ 151.057043][ T8462] sit0: mtu less than device minimum [ 151.261147][ T8477] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 151.329534][ T5147] Bluetooth: hci1: command tx timeout [ 151.458690][ T8483] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.460837][ T8492] netlink: 72 bytes leftover after parsing attributes in process `syz.3.731'. [ 151.486607][ T8483] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.496465][ T8483] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.506531][ T8483] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.518189][ T8483] bond2: (slave geneve2): making interface the new active one [ 151.527432][ T8483] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 151.538336][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.580064][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.587340][ T8373] bridge_slave_0: entered allmulticast mode [ 151.613826][ T8373] bridge_slave_0: entered promiscuous mode [ 151.619912][ T8493] netlink: 152 bytes leftover after parsing attributes in process `syz.0.729'. [ 151.647998][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.663219][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.680819][ T8373] bridge_slave_1: entered allmulticast mode [ 151.711130][ T8373] bridge_slave_1: entered promiscuous mode [ 151.795127][ T8499] ipt_ECN: cannot use operation on non-tcp rule [ 151.816539][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.848967][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.933724][ T8373] team0: Port device team_slave_0 added [ 151.959993][ T8505] syzkaller0: entered allmulticast mode [ 151.977752][ T8373] team0: Port device team_slave_1 added [ 152.039930][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.046945][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.089082][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.111731][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.118729][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.154764][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.271753][ T8373] hsr_slave_0: entered promiscuous mode [ 152.278165][ T8373] hsr_slave_1: entered promiscuous mode [ 152.302830][ T8373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.326489][ T8373] Cannot create hsr debugfs directory [ 152.458577][ T8515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.470030][ T8515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.677976][ T8499] syzkaller0: left allmulticast mode [ 153.012827][ T8515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.050933][ T8515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 153.424218][ T5147] Bluetooth: hci1: command tx timeout [ 153.527402][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 153.578425][ T8515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.590024][ T8515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 153.794812][ T8515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.868226][ T8515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 154.195803][ T8546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.744'. [ 154.686435][ T8558] nft_compat: unsupported protocol 1 [ 154.756332][ T8515] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.783128][ T8515] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.802786][ T8546] bridge_slave_0: entered allmulticast mode [ 154.886780][ T8515] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.907401][ T8515] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.923605][ T8515] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.932280][ T8515] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.006613][ T8515] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.031651][ T8515] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.104433][ T8373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.127711][ T8373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.156567][ T8373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.173571][ T8373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.344773][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.361517][ T8580] netlink: 19 bytes leftover after parsing attributes in process `syz.2.755'. [ 155.388061][ T8580] netlink: 19 bytes leftover after parsing attributes in process `syz.2.755'. [ 155.395790][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.425651][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.432976][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.443173][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'. [ 155.454593][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.461868][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.490964][ T5147] Bluetooth: hci1: command tx timeout [ 155.786803][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.016830][ T8610] netlink: 'syz.3.763': attribute type 21 has an invalid length. [ 156.084280][ T8605] lo speed is unknown, defaulting to 1000 [ 156.298903][ T8620] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 156.354017][ T8373] veth0_vlan: entered promiscuous mode [ 156.397895][ T8620] syz_tun: entered promiscuous mode [ 156.440387][ T8620] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.449086][ T8626] IPVS: length: 50 != 8 [ 156.517060][ T8373] veth1_vlan: entered promiscuous mode [ 156.632488][ T8373] veth0_macvtap: entered promiscuous mode [ 156.686017][ T8373] veth1_macvtap: entered promiscuous mode [ 156.822096][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.869834][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.896347][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.943124][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.991796][ T8373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.019488][ T8373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.029834][ T8373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.038655][ T8373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.038710][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 157.522167][ T8656] netlink: 'syz.2.775': attribute type 10 has an invalid length. [ 157.537431][ T8657] netlink: 156 bytes leftover after parsing attributes in process `syz.1.776'. [ 157.570197][ T5147] Bluetooth: hci1: command tx timeout [ 157.616739][ T8645] syz_tun: left promiscuous mode [ 157.865520][ T8645] ================================================================== [ 157.873649][ T8645] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 157.882542][ T8645] Read of size 8 at addr ffff88805d53b5a8 by task syz.3.773/8645 [ 157.890286][ T8645] [ 157.892647][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.3.773 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 157.892670][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.892682][ T8645] Call Trace: [ 157.892690][ T8645] [ 157.892698][ T8645] dump_stack_lvl+0x241/0x360 [ 157.892726][ T8645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.892747][ T8645] ? __pfx__printk+0x10/0x10 [ 157.892766][ T8645] ? _printk+0xd5/0x120 [ 157.892783][ T8645] ? __virt_addr_valid+0x183/0x530 [ 157.892802][ T8645] ? __virt_addr_valid+0x183/0x530 [ 157.892822][ T8645] print_report+0x16e/0x5b0 [ 157.892847][ T8645] ? __virt_addr_valid+0x183/0x530 [ 157.892864][ T8645] ? __virt_addr_valid+0x183/0x530 [ 157.892881][ T8645] ? __virt_addr_valid+0x45f/0x530 [ 157.892898][ T8645] ? __phys_addr+0xba/0x170 [ 157.892916][ T8645] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 157.892937][ T8645] kasan_report+0x143/0x180 [ 157.892962][ T8645] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 157.892986][ T8645] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 157.893007][ T8645] ? udp_destroy_sock+0x2fa/0x340 [ 157.893035][ T8645] ? __pfx_udp_destroy_sock+0x10/0x10 [ 157.893059][ T8645] sk_common_release+0x71/0x2e0 [ 157.893089][ T8645] inet_release+0x17d/0x200 [ 157.893112][ T8645] sock_release+0x82/0x150 [ 157.893139][ T8645] wg_socket_reinit+0x215/0x380 [ 157.893167][ T8645] wg_stop+0x59f/0x600 [ 157.893189][ T8645] ? __pfx_wg_stop+0x10/0x10 [ 157.893208][ T8645] __dev_close_many+0x3a6/0x700 [ 157.893239][ T8645] ? __pfx___dev_close_many+0x10/0x10 [ 157.893268][ T8645] ? dev_set_rx_mode+0x23c/0x2e0 [ 157.893290][ T8645] __dev_change_flags+0x30e/0x6f0 [ 157.893321][ T8645] ? __pfx___dev_change_flags+0x10/0x10 [ 157.893342][ T8645] ? validate_linkmsg+0x828/0xa40 [ 157.893367][ T8645] ? netdev_state_change+0xa8/0x1a0 [ 157.893393][ T8645] ? __pfx_netdev_state_change+0x10/0x10 [ 157.893421][ T8645] ? __pfx_validate_linkmsg+0x10/0x10 [ 157.893445][ T8645] netif_change_flags+0x8b/0x1a0 [ 157.893467][ T8645] do_setlink+0xf42/0x40f0 [ 157.893493][ T8645] ? mark_lock+0x9a/0x360 [ 157.893513][ T8645] ? __pfx_do_setlink+0x10/0x10 [ 157.893531][ T8645] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.893560][ T8645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.893591][ T8645] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 157.893613][ T8645] ? lockdep_hardirqs_on+0x99/0x150 [ 157.893637][ T8645] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 157.893659][ T8645] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.893683][ T8645] ? rcu_is_watching+0x15/0xb0 [ 157.893706][ T8645] ? __mutex_lock+0xba3/0x1010 [ 157.893732][ T8645] ? __mutex_lock+0x602/0x1010 [ 157.893760][ T8645] ? rtnl_newlink+0xc4c/0x1d90 [ 157.893788][ T8645] ? __pfx___mutex_lock+0x10/0x10 [ 157.893817][ T8645] ? ns_capable+0x8a/0xf0 [ 157.893839][ T8645] ? rtnl_link_get_net_capable+0x168/0x340 [ 157.893861][ T8645] rtnl_newlink+0x141c/0x1d90 [ 157.893889][ T8645] ? stack_depot_save_flags+0x37/0x940 [ 157.893925][ T8645] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.893953][ T8645] ? __netlink_deliver_tap+0x561/0x7f0 [ 157.893981][ T8645] ? __pfx_validate_chain+0x10/0x10 [ 157.894001][ T8645] ? __sock_sendmsg+0x221/0x270 [ 157.894026][ T8645] ? ____sys_sendmsg+0x53a/0x860 [ 157.894047][ T8645] ? __sys_sendmsg+0x269/0x350 [ 157.894066][ T8645] ? do_syscall_64+0xf3/0x230 [ 157.894090][ T8645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.894124][ T8645] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.894153][ T8645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.894185][ T8645] ? mark_lock+0x9a/0x360 [ 157.894204][ T8645] ? __lock_acquire+0x1397/0x2100 [ 157.894246][ T8645] ? __pfx_lock_release+0x10/0x10 [ 157.894280][ T8645] ? __pfx_rtnl_newlink+0x10/0x10 [ 157.894317][ T8645] rtnetlink_rcv_msg+0x791/0xcf0 [ 157.894344][ T8645] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 157.894373][ T8645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.894405][ T8645] ? ref_tracker_free+0x643/0x7e0 [ 157.894427][ T8645] netlink_rcv_skb+0x206/0x480 [ 157.894454][ T8645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.894483][ T8645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.894518][ T8645] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.894546][ T8645] netlink_unicast+0x7f6/0x990 [ 157.894574][ T8645] ? __pfx_netlink_unicast+0x10/0x10 [ 157.894596][ T8645] ? __virt_addr_valid+0x45f/0x530 [ 157.894615][ T8645] ? __phys_addr_symbol+0x2f/0x70 [ 157.894631][ T8645] ? __check_object_size+0x47a/0x730 [ 157.894658][ T8645] netlink_sendmsg+0x8de/0xcb0 [ 157.894691][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.894721][ T8645] ? aa_sock_msg_perm+0x91/0x160 [ 157.894752][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.894778][ T8645] __sock_sendmsg+0x221/0x270 [ 157.894805][ T8645] ____sys_sendmsg+0x53a/0x860 [ 157.894829][ T8645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.894850][ T8645] ? __fget_files+0x2a/0x410 [ 157.894877][ T8645] ? __fget_files+0x2a/0x410 [ 157.894907][ T8645] __sys_sendmsg+0x269/0x350 [ 157.894932][ T8645] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.894972][ T8645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.895001][ T8645] ? do_syscall_64+0x100/0x230 [ 157.895027][ T8645] ? do_syscall_64+0xb6/0x230 [ 157.895053][ T8645] do_syscall_64+0xf3/0x230 [ 157.895076][ T8645] ? clear_bhb_loop+0x35/0x90 [ 157.895105][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.895130][ T8645] RIP: 0033:0x7f91b058d169 [ 157.895146][ T8645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.895163][ T8645] RSP: 002b:00007f91b1431038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.895184][ T8645] RAX: ffffffffffffffda RBX: 00007f91b07a5fa0 RCX: 00007f91b058d169 [ 157.895198][ T8645] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000008 [ 157.895211][ T8645] RBP: 00007f91b060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.895222][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.895234][ T8645] R13: 0000000000000000 R14: 00007f91b07a5fa0 R15: 00007ffe0ea31c28 [ 157.895254][ T8645] [ 157.895261][ T8645] [ 158.481454][ T8645] Allocated by task 8190: [ 158.485785][ T8645] kasan_save_track+0x3f/0x80 [ 158.490475][ T8645] __kasan_slab_alloc+0x66/0x80 [ 158.495330][ T8645] kmem_cache_alloc_noprof+0x1d9/0x380 [ 158.500802][ T8645] sk_prot_alloc+0x58/0x210 [ 158.505398][ T8645] sk_alloc+0x3e/0x370 [ 158.509472][ T8645] inet_create+0x648/0xea0 [ 158.513990][ T8645] __sock_create+0x4c0/0xa30 [ 158.518588][ T8645] __sys_socket+0x150/0x3c0 [ 158.523105][ T8645] __x64_sys_socket+0x7a/0x90 [ 158.527791][ T8645] do_syscall_64+0xf3/0x230 [ 158.532305][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.538238][ T8645] [ 158.540580][ T8645] Freed by task 8189: [ 158.544561][ T8645] kasan_save_track+0x3f/0x80 [ 158.549251][ T8645] kasan_save_free_info+0x40/0x50 [ 158.554300][ T8645] __kasan_slab_free+0x59/0x70 [ 158.559072][ T8645] kmem_cache_free+0x195/0x410 [ 158.563846][ T8645] __sk_destruct+0x4fd/0x690 [ 158.568459][ T8645] inet_release+0x17d/0x200 [ 158.572984][ T8645] sock_close+0xbc/0x240 [ 158.577240][ T8645] __fput+0x3e9/0x9f0 [ 158.581228][ T8645] task_work_run+0x24f/0x310 [ 158.585833][ T8645] do_exit+0xa2a/0x28e0 [ 158.590018][ T8645] do_group_exit+0x207/0x2c0 [ 158.594638][ T8645] __x64_sys_exit_group+0x3f/0x40 [ 158.599686][ T8645] x64_sys_call+0x26a8/0x26b0 [ 158.604377][ T8645] do_syscall_64+0xf3/0x230 [ 158.608890][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.614795][ T8645] [ 158.617125][ T8645] The buggy address belongs to the object at ffff88805d53ae80 [ 158.617125][ T8645] which belongs to the cache UDP of size 1856 [ 158.630592][ T8645] The buggy address is located 1832 bytes inside of [ 158.630592][ T8645] freed 1856-byte region [ffff88805d53ae80, ffff88805d53b5c0) [ 158.644586][ T8645] [ 158.646930][ T8645] The buggy address belongs to the physical page: [ 158.653341][ T8645] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d53ae80 pfn:0x5d538 [ 158.663428][ T8645] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.671933][ T8645] memcg:ffff88803491e601 [ 158.676176][ T8645] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 158.683724][ T8645] page_type: f5(slab) [ 158.687712][ T8645] raw: 00fff00000000040 ffff888020ac0b40 dead000000000122 0000000000000000 [ 158.696304][ T8645] raw: ffff88805d53ae80 000000008010000b 00000000f5000000 ffff88803491e601 [ 158.704898][ T8645] head: 00fff00000000040 ffff888020ac0b40 dead000000000122 0000000000000000 [ 158.713577][ T8645] head: ffff88805d53ae80 000000008010000b 00000000f5000000 ffff88803491e601 [ 158.722250][ T8645] head: 00fff00000000003 ffffea0001754e01 ffffffffffffffff 0000000000000000 [ 158.730921][ T8645] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 158.739592][ T8645] page dumped because: kasan: bad access detected [ 158.746012][ T8645] page_owner tracks the page as allocated [ 158.751728][ T8645] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7431, tgid 7430 (syz.4.447), ts 118464427617, free_ts 118450905594 [ 158.773005][ T8645] post_alloc_hook+0x1f4/0x240 [ 158.777789][ T8645] get_page_from_freelist+0x365c/0x37a0 [ 158.783337][ T8645] __alloc_frozen_pages_noprof+0x292/0x710 [ 158.789144][ T8645] alloc_pages_mpol+0x311/0x660 [ 158.794001][ T8645] allocate_slab+0x8f/0x3a0 [ 158.798592][ T8645] ___slab_alloc+0xc27/0x14a0 [ 158.803267][ T8645] __slab_alloc+0x58/0xa0 [ 158.807596][ T8645] kmem_cache_alloc_noprof+0x268/0x380 [ 158.813070][ T8645] sk_prot_alloc+0x58/0x210 [ 158.817576][ T8645] sk_alloc+0x3e/0x370 [ 158.821646][ T8645] inet_create+0x648/0xea0 [ 158.826072][ T8645] __sock_create+0x4c0/0xa30 [ 158.830671][ T8645] inet_ctl_sock_create+0xc2/0x250 [ 158.835787][ T8645] igmp_net_init+0xbb/0x150 [ 158.840294][ T8645] ops_init+0x349/0x5b0 [ 158.844450][ T8645] setup_net+0x287/0x9e0 [ 158.848703][ T8645] page last free pid 7429 tgid 7428 stack trace: [ 158.855031][ T8645] free_frozen_pages+0xe0d/0x10e0 [ 158.860063][ T8645] __folio_put+0x2b3/0x360 [ 158.864582][ T8645] free_large_kmalloc+0xfe/0x180 [ 158.869532][ T8645] kfree+0x212/0x430 [ 158.873445][ T8645] wg_destruct+0x278/0x2e0 [ 158.877862][ T8645] netdev_run_todo+0xd46/0xf30 [ 158.882632][ T8645] rtnl_dellink+0x761/0x8c0 [ 158.887142][ T8645] rtnetlink_rcv_msg+0x791/0xcf0 [ 158.892091][ T8645] netlink_rcv_skb+0x206/0x480 [ 158.896886][ T8645] netlink_unicast+0x7f6/0x990 [ 158.901658][ T8645] netlink_sendmsg+0x8de/0xcb0 [ 158.906427][ T8645] __sock_sendmsg+0x221/0x270 [ 158.911113][ T8645] ____sys_sendmsg+0x53a/0x860 [ 158.915879][ T8645] __sys_sendmsg+0x269/0x350 [ 158.920471][ T8645] do_syscall_64+0xf3/0x230 [ 158.924978][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.930881][ T8645] [ 158.933211][ T8645] Memory state around the buggy address: [ 158.938837][ T8645] ffff88805d53b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.946898][ T8645] ffff88805d53b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.954964][ T8645] >ffff88805d53b580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 158.963024][ T8645] ^ [ 158.968391][ T8645] ffff88805d53b600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 158.976451][ T8645] ffff88805d53b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.984511][ T8645] ================================================================== [ 158.994541][ T8645] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.001783][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.3.773 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 159.012403][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.022498][ T8645] Call Trace: [ 159.025802][ T8645] [ 159.028742][ T8645] dump_stack_lvl+0x241/0x360 [ 159.033436][ T8645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.038649][ T8645] ? __pfx__printk+0x10/0x10 [ 159.043253][ T8645] ? vscnprintf+0x5d/0x90 [ 159.047595][ T8645] panic+0x349/0x880 [ 159.051503][ T8645] ? check_panic_on_warn+0x21/0xb0 [ 159.056631][ T8645] ? __pfx_panic+0x10/0x10 [ 159.061053][ T8645] ? mark_lock+0x9a/0x360 [ 159.065398][ T8645] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 159.071303][ T8645] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 159.077206][ T8645] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 159.083539][ T8645] ? print_report+0x519/0x5b0 [ 159.088227][ T8645] check_panic_on_warn+0x86/0xb0 [ 159.093175][ T8645] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 159.099251][ T8645] end_report+0x77/0x160 [ 159.103514][ T8645] kasan_report+0x154/0x180 [ 159.108024][ T8645] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 159.114118][ T8645] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 159.120017][ T8645] ? udp_destroy_sock+0x2fa/0x340 [ 159.125069][ T8645] ? __pfx_udp_destroy_sock+0x10/0x10 [ 159.130467][ T8645] sk_common_release+0x71/0x2e0 [ 159.135330][ T8645] inet_release+0x17d/0x200 [ 159.139839][ T8645] sock_release+0x82/0x150 [ 159.144292][ T8645] wg_socket_reinit+0x215/0x380 [ 159.149151][ T8645] wg_stop+0x59f/0x600 [ 159.153241][ T8645] ? __pfx_wg_stop+0x10/0x10 [ 159.157849][ T8645] __dev_close_many+0x3a6/0x700 [ 159.162733][ T8645] ? __pfx___dev_close_many+0x10/0x10 [ 159.168119][ T8645] ? dev_set_rx_mode+0x23c/0x2e0 [ 159.173094][ T8645] __dev_change_flags+0x30e/0x6f0 [ 159.178125][ T8645] ? __pfx___dev_change_flags+0x10/0x10 [ 159.183675][ T8645] ? validate_linkmsg+0x828/0xa40 [ 159.188709][ T8645] ? netdev_state_change+0xa8/0x1a0 [ 159.193917][ T8645] ? __pfx_netdev_state_change+0x10/0x10 [ 159.199567][ T8645] ? __pfx_validate_linkmsg+0x10/0x10 [ 159.204958][ T8645] netif_change_flags+0x8b/0x1a0 [ 159.209905][ T8645] do_setlink+0xf42/0x40f0 [ 159.214328][ T8645] ? mark_lock+0x9a/0x360 [ 159.218659][ T8645] ? __pfx_do_setlink+0x10/0x10 [ 159.223509][ T8645] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.229503][ T8645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.235852][ T8645] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 159.241747][ T8645] ? lockdep_hardirqs_on+0x99/0x150 [ 159.246948][ T8645] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 159.252842][ T8645] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 159.259178][ T8645] ? rcu_is_watching+0x15/0xb0 [ 159.263950][ T8645] ? __mutex_lock+0xba3/0x1010 [ 159.268721][ T8645] ? __mutex_lock+0x602/0x1010 [ 159.273491][ T8645] ? rtnl_newlink+0xc4c/0x1d90 [ 159.278267][ T8645] ? __pfx___mutex_lock+0x10/0x10 [ 159.283302][ T8645] ? ns_capable+0x8a/0xf0 [ 159.287635][ T8645] ? rtnl_link_get_net_capable+0x168/0x340 [ 159.293444][ T8645] rtnl_newlink+0x141c/0x1d90 [ 159.298132][ T8645] ? stack_depot_save_flags+0x37/0x940 [ 159.303602][ T8645] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.308633][ T8645] ? __netlink_deliver_tap+0x561/0x7f0 [ 159.314101][ T8645] ? __pfx_validate_chain+0x10/0x10 [ 159.319308][ T8645] ? __sock_sendmsg+0x221/0x270 [ 159.324173][ T8645] ? ____sys_sendmsg+0x53a/0x860 [ 159.329115][ T8645] ? __sys_sendmsg+0x269/0x350 [ 159.333884][ T8645] ? do_syscall_64+0xf3/0x230 [ 159.338586][ T8645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.344686][ T8645] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.350683][ T8645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.357026][ T8645] ? mark_lock+0x9a/0x360 [ 159.361364][ T8645] ? __lock_acquire+0x1397/0x2100 [ 159.366418][ T8645] ? __pfx_lock_release+0x10/0x10 [ 159.371461][ T8645] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.376506][ T8645] rtnetlink_rcv_msg+0x791/0xcf0 [ 159.381457][ T8645] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 159.386579][ T8645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.392050][ T8645] ? ref_tracker_free+0x643/0x7e0 [ 159.397104][ T8645] netlink_rcv_skb+0x206/0x480 [ 159.401906][ T8645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.407389][ T8645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.412703][ T8645] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.417922][ T8645] netlink_unicast+0x7f6/0x990 [ 159.422753][ T8645] ? __pfx_netlink_unicast+0x10/0x10 [ 159.428049][ T8645] ? __virt_addr_valid+0x45f/0x530 [ 159.433171][ T8645] ? __phys_addr_symbol+0x2f/0x70 [ 159.438208][ T8645] ? __check_object_size+0x47a/0x730 [ 159.443505][ T8645] netlink_sendmsg+0x8de/0xcb0 [ 159.448286][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.453585][ T8645] ? aa_sock_msg_perm+0x91/0x160 [ 159.458533][ T8645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.463832][ T8645] __sock_sendmsg+0x221/0x270 [ 159.468520][ T8645] ____sys_sendmsg+0x53a/0x860 [ 159.473298][ T8645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.478593][ T8645] ? __fget_files+0x2a/0x410 [ 159.483196][ T8645] ? __fget_files+0x2a/0x410 [ 159.487798][ T8645] __sys_sendmsg+0x269/0x350 [ 159.492398][ T8645] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.497541][ T8645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.503881][ T8645] ? do_syscall_64+0x100/0x230 [ 159.508651][ T8645] ? do_syscall_64+0xb6/0x230 [ 159.513335][ T8645] do_syscall_64+0xf3/0x230 [ 159.517848][ T8645] ? clear_bhb_loop+0x35/0x90 [ 159.522537][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.528442][ T8645] RIP: 0033:0x7f91b058d169 [ 159.532863][ T8645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.552473][ T8645] RSP: 002b:00007f91b1431038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.560898][ T8645] RAX: ffffffffffffffda RBX: 00007f91b07a5fa0 RCX: 00007f91b058d169 [ 159.568877][ T8645] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000008 [ 159.576853][ T8645] RBP: 00007f91b060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.584825][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.592813][ T8645] R13: 0000000000000000 R14: 00007f91b07a5fa0 R15: 00007ffe0ea31c28 [ 159.600807][ T8645] [ 159.603978][ T8645] Kernel Offset: disabled [ 159.608302][ T8645] Rebooting in 86400 seconds..