last executing test programs: 4.750976263s ago: executing program 4 (id=1243): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 4.479719697s ago: executing program 4 (id=1248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000008d269f6600020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003a305000120000000000c0002"], 0xc0}}, 0x0) 4.007992868s ago: executing program 4 (id=1256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000fe0100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x38, 0x20008880}}], 0x2, 0x4c050) 3.879250049s ago: executing program 1 (id=1258): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)="f6", 0x1}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004881}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) write$cgroup_subtree(r0, 0x0, 0xd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000}, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x1, 0x5) write$cgroup_subtree(r10, 0x0, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 3.834004435s ago: executing program 4 (id=1259): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)="f6", 0x1}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) write$cgroup_subtree(r0, 0x0, 0xd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000}, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x1, 0x5) write$cgroup_subtree(r10, 0x0, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2.487956967s ago: executing program 0 (id=1274): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x713, 0xfffffffd, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x32}, @in=@multicast2, {0x200, 0x0, 0x0, 0x4, 0x0, 0x1400, 0x8000000000000003}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) 2.367762025s ago: executing program 2 (id=1276): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0xffffffffffffffff, 0x8, 0x8, 0x3290}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x64}}, 0xc801) 2.280123516s ago: executing program 0 (id=1277): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000600)="a90900000000746400006277000000003552bde5c064c6", 0x17}, {&(0x7f0000000640)="174640b6d80fb2e6dca3af8832", 0xd}], 0x2}}], 0x1, 0xfeffffff) 2.130712933s ago: executing program 0 (id=1279): syz_emit_ethernet(0x22, &(0x7f0000000000)={@empty, @random="d2ca3a5c5ca9", @val={@void, {0x8100, 0x1, 0x1}}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "35e67c62bd32edea"}}}}, &(0x7f0000000040)={0x0, 0x3, [0x612, 0x1b0, 0x811, 0xda1]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7fffffffffffffff}, @DEVLINK_ATTR_RATE_NODE_NAME={0x59, 0xa8, @random="3534f4964614e128ecb04d5bbe82050918371a4cc2bd16116ef061bdcf322b78d908c8f0787e16bc755ccb6c66bd3a0e81b5b0ad8a0f0545faec474b86940f01dad68244519d52692bd87d45ec6c7d8f428947e161"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @handle=@pci={{0x8}, {0x11}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc800}, 0x24040800) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x234, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x494}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa49}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46d0}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "d0fa778c7cf6490a684b807d8672b60a88f4f9aa1442f98addecf67a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7d49cfe9}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8b78d63b635043c0402628904337ab04f9de12b7da4e9064f61e6bc0e8b72d"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd32}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x1}, 0xc801) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@bridge_delvlan={0x8c, 0x71, 0x728, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x45}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000780)={{0x2, 0x4e22, @multicast1}, {0x6, @remote}, 0x48, {0x2, 0x4e22, @local}, 'dummy0\x00'}) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000800)={0x0, 0x0, 0x7fffffffffffffff}) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000c00)={0x0, "0f64fed58049977abec6251a09c7598e"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001c00)={0x0, 0x3ff8, 0x0, [0x4, 0x10000, 0x0, 0x2ee6, 0xc], [0x101, 0x8000000000000001, 0x6, 0x6, 0x5, 0x3, 0x5, 0x100000001, 0xfffffffffffffffd, 0x4, 0x5, 0x3, 0x2d, 0x2e1, 0x7fff, 0x6, 0x7, 0x6, 0x8, 0xffffffffffff5e15, 0xee8, 0x6, 0xa, 0x1, 0xc6e, 0x9, 0x0, 0x2, 0x57be, 0x80000000, 0x81, 0x6, 0x4, 0x7, 0xf, 0x81, 0x0, 0x100, 0x7, 0x9, 0x1, 0x5, 0x47, 0x1, 0x4, 0x3, 0x2, 0x3, 0x7, 0xfffffffffffffffb, 0x4, 0xf776, 0x53, 0x3, 0x9, 0x1000, 0x2, 0xcff6, 0x9, 0x0, 0x4c5bbd8a, 0x4, 0x0, 0x4, 0x1, 0xfffffffffffffc01, 0x3, 0x1, 0x8, 0x9, 0x9, 0x1, 0x1, 0x80000000, 0x28000, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7ff, 0x8000000000000000, 0x2, 0x5de1, 0x9, 0x7, 0x8000000000000000, 0x1, 0x1, 0x8000000000000000, 0x9f43, 0x1, 0x6, 0x10, 0x0, 0x4, 0x9, 0x7, 0x7, 0xfff, 0xd, 0x0, 0x6, 0x6, 0x5, 0x4, 0x3, 0x507f887c, 0x10001, 0xb25e, 0x7, 0x67, 0x8, 0x5, 0x40000000000, 0x1, 0x80000000, 0xfd, 0x8000, 0x7, 0x2, 0x8, 0xfffffffffffffff9]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002040)={0x0, 0x6, {0x9, @struct={0x5, 0x6}, r5, 0x8, 0x800, 0x80000000, 0x4, 0xe, 0x72, @usage=0x4, 0x8, 0x0, [0xdd, 0x4, 0x1, 0xffffffffffffffff, 0xb69, 0x9]}, {0x8, @struct={0xd, 0xc74}, r6, 0x0, 0x7, 0xfffffffffffffff2, 0x4, 0x5, 0x8, @usage=0x6, 0xffffffff, 0xd317, [0x2, 0x8, 0xfff, 0x5, 0x9]}, {0xffffffffffffffff, @struct={0x2, 0x2}, r7, 0x5, 0x7ff, 0x4, 0xa02, 0x7fffffffffffffff, 0x50, @struct={0x2, 0x20000}, 0x2, 0x800, [0x4, 0x3, 0x8000, 0x8, 0xed11, 0xd0f7]}, {0x2, 0x8000, 0x8}}) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002600)={&(0x7f0000002480)={0x150, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x62}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x35c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x703}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x631}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3bb}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x150624cd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x224}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40001}, 0x8041) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002680)={0x1b, 0x0, 0x0, 0x8b, 0x0, r2, 0xfff, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002840), 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002900)={0x5f9f, 0x0}, 0x8) (async, rerun: 64) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002940), 0x4) (async, rerun: 64) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002980)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x20, 0x13, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffff6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x59537dbf9e7cd24f, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000027c0)='GPL\x00', 0x80000000, 0x40, &(0x7f0000002800)=""/64, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1e, r9, 0x8, &(0x7f0000002880)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000028c0)={0x3, 0xc, 0xfffffff2, 0x2}, 0x10, r10, r11, 0x2, &(0x7f0000002a00)=[r4, r12], &(0x7f0000002a40)=[{0x3, 0x4, 0x4, 0x3}, {0x2, 0x1, 0x3, 0x6}], 0x10, 0xd, @void, @value}, 0x94) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002b80), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_CIPSOV4_C_LISTALL(r13, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x30, r14, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xc74b5568e043c4df}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002d80)={@fallback=r12, 0x24, 0x1, 0x3, &(0x7f0000002c80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002cc0)=[0x0], &(0x7f0000002d00), &(0x7f0000002d40)=[0x0, 0x0]}, 0x40) getsockopt$IP_SET_OP_GET_BYINDEX(r15, 0x1, 0x53, &(0x7f0000002dc0), &(0x7f0000002e00)=0x28) (async, rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000002e40), r0) (async, rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002f80)={r8, &(0x7f0000002e80)="1e0b9b563c8b49705b3c993c286e479f244d3fc81a757ef6564aa47f568f459ae9359b71b7be306e3be68cabfacebe0c8302ba9a98ef55c3be2af71b176262b6abc735de95ee936cf6b7a460eb2589fdd347b82f9336903b69ddd39013253772dcfb3785c140c1f45332224ae905ad6431cb16072fe55deb58e42eb546a8e9", &(0x7f0000002f00)=""/97}, 0x20) sendmsg$NL80211_CMD_SET_MCAST_RATE(r15, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3902, 0x8}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044810}, 0x4000) 1.996015563s ago: executing program 2 (id=1280): syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaa004500000600800000002c9000"/27, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f800000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000022b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000a0000000000000000000000000000000a0000000000000000000000080016"], 0xf8}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001b0000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, 0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000008800000008000300", @ANYRES32, @ANYBLOB="1a00"], 0x40}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 1.937169611s ago: executing program 2 (id=1282): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2c0000000f140100"], 0x2c}, 0x1, 0x0, 0x0, 0xc841}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c00028008000140000000030800034000000071db000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4e5e, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xff, 0x7fffffff, 0xf, @loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000, 0x8, 0xce6, 0x65b}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x9, [@enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x10, 0x10}, {0x7, 0x7}, {0x7, 0x7}, {0xe, 0xf07}]}, @var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x10, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x1, 0x1}, @datasec={0x6, 0x7, 0x0, 0xf, 0x1, [{0x1, 0x4, 0x2}, {0x2, 0x1000, 0x8}, {0x4, 0x2, 0xb}, {0x5, 0x5, 0x2}, {0x4, 0x6, 0x5}, {0x5, 0x570c, 0x1}, {0x5, 0x0, 0x3ff}], "aa"}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0xd, 0x4}, {0x3, 0x4}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x2e, 0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000240)=""/79, 0x149, 0x4f, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x1, '\x00', r6, r7, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 1.84396592s ago: executing program 0 (id=1283): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xcd, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000002000000000000002000100000000fffffffb1600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 1.769456686s ago: executing program 2 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x7, 0x0, 0x1, 0x8, 0x5}, 0x5e) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008014) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0514000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x40}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000000000f8ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24000018) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) r8 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r9 = socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x941) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0), 0x4) 1.609282382s ago: executing program 0 (id=1286): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x8847, &(0x7f0000000040)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000020000000455a12a0009000a000699e3ffffff14000500fe80817806000567b8b7b9400200000908001606000000000000003fd67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 1.441598937s ago: executing program 0 (id=1288): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tr\n'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000009900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x66040100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x10000880) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00'}, 0x18) 1.440830209s ago: executing program 2 (id=1289): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000000)="e32ee389c5ff13e37cde89e2c670d84348f8", 0x12}, {&(0x7f0000000280)="4b1d308285771b038950b85a41480c07df8dd4fb9149c80210e3cfea8337e8b6a1a5e36b3867f6f2c01d8a767111a4d3c46cba98ef660b66d3404ac01f409e9e84f138e1ee05b8f1ad51ac8b447a6bfcdf54db3357bc565775f21f9c33ec2bc10f16ff56121e1117b4aa347796c8a4b83b169278fe71f6f1a0639a896afea6c608e6d1c4d3ab17aa69eb214785396ef07a4368401c3f5863418210d01dc568fe0e74135d5cd0d3aebb9f3f1eaa0d232f3dbfc1fbfd3c2e7c503b6c9922e2f2a93183513b15c890c45647e37cd12c019a8cd756e79adb44101151cdb03442e4a5ed719a4382742ce3", 0xe8}], 0x3, &(0x7f0000001400)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xfffffff5}}, @mark={{0x14, 0x1, 0x24, 0xbe}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x567}}], 0xc0}, 0x4004010) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x3c, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x7c}}, 0x0) 1.1295264s ago: executing program 3 (id=1292): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x7000000, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 876.103326ms ago: executing program 3 (id=1293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000004020000002c0004802800018007000100637400001c0002800500030000000000080001400000000108000240000000140900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 804.944894ms ago: executing program 3 (id=1294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000ff8000000000000000000000000000004000000000000a"], 0xb8}}, 0x0) 804.196051ms ago: executing program 1 (id=1295): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f00000000c0)=0x1c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x9}, 0x8) accept(r1, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0xfffffffffffffffc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x7, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 697.117278ms ago: executing program 4 (id=1296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 643.893261ms ago: executing program 3 (id=1297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000910000050000000095"], &(0x7f0000000940)='syzkaller\x00', 0x8, 0xfe9, &(0x7f0000002e00)=""/4073, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 580.101883ms ago: executing program 1 (id=1298): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000b0000000200000008000300", @ANYRES32=r2, @ANYBLOB="080026007f170000080027"], 0x2c}}, 0x0) 542.497176ms ago: executing program 3 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x7, 0x0, 0x1, 0x8, 0x5}, 0x5e) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008014) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0514000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x40}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000000000f8ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24000018) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) r8 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r9 = socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x941) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0), 0x4) 303.896734ms ago: executing program 1 (id=1300): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b40)=ANY=[@ANYBLOB="70030000160001000000000004000000fc000000000000000019000000000001ac1414aa00000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff01000000000000000000000000000100000000320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058000000000000000000000000000080"], 0x370}}, 0x0) 303.529478ms ago: executing program 4 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000440)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x21, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0xfffffd8b, r4, 0xd, 0x0, 0x3, {0x1a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x0, 0x2, 0x29}, @ETHTOOL_A_LINKMODES_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x0, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x0, 0x7, 0x2}]}, 0x2c}}, 0x10) 239.979022ms ago: executing program 2 (id=1302): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) unshare(0x2040400) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x1c8, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x55}}}}, [@NL80211_ATTR_TID_CONFIG={0x1a8, 0x11d, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0x2, 0x0, 0xfff9, 0x0, 0x6, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x2}, {}, {0x7, 0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x3}, {0x5}, {0x4, 0x2}, {0x6}, {0x1, 0x7}, {0x5, 0x3}, {0x1}, {0x5, 0xa}, {0x6, 0x5}, {0x3}, {0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x7}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x5, 0x8}, {0x2, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x7}, {0x1, 0x3}, {0x4, 0x2}, {0x3}, {0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x6}, {0x3, 0x7}, {0x2, 0x8}, {0x3, 0x6}, {0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x3}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x5, 0x7}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x3}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x24, 0x12, 0x56, 0x48]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x4}, {0x3, 0x6}, {0x7, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x5, 0x9}, {0x5, 0xa}, {0x4}, {0x7, 0x5}, {0x5, 0x3}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x3ff, 0x9, 0x6, 0xb5a0, 0x8, 0x7]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x9, 0x12, 0x60, 0x30, 0x12, 0x3, 0x5, 0x24, 0x12, 0x2d511cfa5212aa71, 0x1b, 0xc, 0x6c, 0x6c, 0x9, 0x1, 0x12, 0xc, 0x2, 0xb, 0x48, 0x12, 0x6, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7ff, 0x9, 0x8, 0x20, 0x80, 0x6, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x4, 0x7, 0x1, 0x80, 0x3, 0xd]}}]}]}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f00000001c0)=0xfffffff9, 0x4) 139.553353ms ago: executing program 1 (id=1303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbf}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 75.968476ms ago: executing program 3 (id=1304): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x20}, @private0, @mcast1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x82c80027, r2}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8, @local, 0x297}]}, &(0x7f0000000080)=0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r9 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0xe38e) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0x25, 0x148, 0x108, 0x60, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80, 'syz0\x00', {0xfffffffffffffffd}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x7d2e82d4334cc39d}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x4, 0x4, 0x5, 0x0, 0x4], 0x5, 0x5}}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0xffff, 0xff, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x330) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = socket(0x40000000015, 0x805, 0x0) ioctl$sock_SIOCGIFCONF(r12, 0x8912, &(0x7f00000003c0)=@buf={0xf6, &(0x7f0000019440)="4a6f1cf52be150ff5084729edc90c8c665db5f2f809af2e104865a36d918ceb17118082690912cf5545422206f2b1b7769cebd67b8c8e6f257076105f3d70dc7878dd01cd44392d16986b27c3d509aa75e957d4471f35568901520305b0627185cf9b34e273f9c26dd87f378c3ec5688de5edbdfc4e3eb614c0fb3409a904de711efbe933875619d4ee26db60f5239ad9bf9dd84d22e512bf322800be605b847765dac8f66086c701e27ac993638d0a98c84f24e199117f55e853c8151c5fdf77b5d17394e386eb1188c08656df015fa13068627c0ee893fbe7a16b06666373ea71710e12712d402cf7b3a26ec5d6cc0e528b0616a54"}) 0s ago: executing program 1 (id=1305): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe80000000f5ffffff000000000000aaff020000000000000000000000000001"], 0xffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 51.296347][ T5824] cgroup: Unknown subsys name 'net' [ 51.466637][ T5824] cgroup: Unknown subsys name 'cpuset' [ 51.474897][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.749988][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.796036][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.808788][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.816594][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.824720][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.834624][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.841623][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.846528][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.856728][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.858156][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.865389][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.872114][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.879565][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.892969][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.894189][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.901582][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.914979][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.922868][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.930988][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.941407][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.950848][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.958008][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.965561][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.973595][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.981809][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.988943][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.989600][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.004692][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.012552][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.022069][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.054423][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.335251][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 55.409697][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 55.444342][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 55.566306][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.573865][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.581257][ T5850] bridge_slave_0: entered allmulticast mode [ 55.592333][ T5850] bridge_slave_0: entered promiscuous mode [ 55.601534][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.610431][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.617881][ T5850] bridge_slave_1: entered allmulticast mode [ 55.624832][ T5850] bridge_slave_1: entered promiscuous mode [ 55.679261][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.686924][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.694402][ T5837] bridge_slave_0: entered allmulticast mode [ 55.701316][ T5837] bridge_slave_0: entered promiscuous mode [ 55.711367][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.718576][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.726829][ T5837] bridge_slave_1: entered allmulticast mode [ 55.733478][ T5837] bridge_slave_1: entered promiscuous mode [ 55.759697][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.768971][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 55.778932][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 55.794083][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.801660][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.809061][ T5845] bridge_slave_0: entered allmulticast mode [ 55.816134][ T5845] bridge_slave_0: entered promiscuous mode [ 55.824621][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.848379][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.855731][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.862866][ T5845] bridge_slave_1: entered allmulticast mode [ 55.869915][ T5845] bridge_slave_1: entered promiscuous mode [ 55.902832][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.941458][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.969550][ T5850] team0: Port device team_slave_0 added [ 55.979511][ T5850] team0: Port device team_slave_1 added [ 56.001092][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.035277][ T5837] team0: Port device team_slave_0 added [ 56.042725][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.061021][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.068144][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.094996][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.129621][ T5837] team0: Port device team_slave_1 added [ 56.151896][ T5845] team0: Port device team_slave_0 added [ 56.158841][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.165956][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.192415][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.212979][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.220198][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.227429][ T5839] bridge_slave_0: entered allmulticast mode [ 56.234141][ T5839] bridge_slave_0: entered promiscuous mode [ 56.240884][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.248326][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.256580][ T5851] bridge_slave_0: entered allmulticast mode [ 56.263111][ T5851] bridge_slave_0: entered promiscuous mode [ 56.271044][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.278330][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.285527][ T5851] bridge_slave_1: entered allmulticast mode [ 56.292362][ T5851] bridge_slave_1: entered promiscuous mode [ 56.306419][ T5845] team0: Port device team_slave_1 added [ 56.317848][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.325091][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.332292][ T5839] bridge_slave_1: entered allmulticast mode [ 56.339301][ T5839] bridge_slave_1: entered promiscuous mode [ 56.360504][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.367583][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.393733][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.440574][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.447892][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.474266][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.491268][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.498741][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.525400][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.538599][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.550080][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.560949][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.595371][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.602340][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.631728][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.657503][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.677812][ T5850] hsr_slave_0: entered promiscuous mode [ 56.684453][ T5850] hsr_slave_1: entered promiscuous mode [ 56.700917][ T5837] hsr_slave_0: entered promiscuous mode [ 56.707691][ T5837] hsr_slave_1: entered promiscuous mode [ 56.713757][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.721537][ T5837] Cannot create hsr debugfs directory [ 56.737205][ T5839] team0: Port device team_slave_0 added [ 56.774052][ T5839] team0: Port device team_slave_1 added [ 56.781974][ T5851] team0: Port device team_slave_0 added [ 56.791007][ T5851] team0: Port device team_slave_1 added [ 56.815816][ T5845] hsr_slave_0: entered promiscuous mode [ 56.822432][ T5845] hsr_slave_1: entered promiscuous mode [ 56.828967][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.836740][ T5845] Cannot create hsr debugfs directory [ 56.902272][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.910639][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.937491][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.949029][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.956257][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.983250][ T5153] Bluetooth: hci0: command tx timeout [ 56.989005][ T5153] Bluetooth: hci4: command tx timeout [ 56.989051][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.023345][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.030436][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.056711][ T5852] Bluetooth: hci1: command tx timeout [ 57.057122][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.062426][ T5153] Bluetooth: hci2: command tx timeout [ 57.083102][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.090122][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.116096][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.134438][ T5153] Bluetooth: hci3: command tx timeout [ 57.274603][ T5839] hsr_slave_0: entered promiscuous mode [ 57.280793][ T5839] hsr_slave_1: entered promiscuous mode [ 57.289798][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.297596][ T5839] Cannot create hsr debugfs directory [ 57.306550][ T5851] hsr_slave_0: entered promiscuous mode [ 57.312620][ T5851] hsr_slave_1: entered promiscuous mode [ 57.319574][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.327376][ T5851] Cannot create hsr debugfs directory [ 57.439050][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.461371][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.480945][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.507281][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.600565][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.609358][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.619245][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.631144][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.702002][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.712291][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.727015][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.746543][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.808998][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.833309][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.842231][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.865660][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.889202][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.916857][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.925515][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.938351][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.962443][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.984384][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.001332][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.011765][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.058948][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.066210][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.078623][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.085728][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.110202][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.117299][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.145670][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.159069][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.166234][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.219341][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.270357][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.290647][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.297794][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.309553][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.316638][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.341355][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.380353][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.433324][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.440521][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.466031][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.473194][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.499849][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.528345][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.542965][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.622126][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.667068][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.674239][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.730760][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.737950][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.750412][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.838019][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.918772][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.931281][ T5850] veth0_vlan: entered promiscuous mode [ 58.966808][ T5850] veth1_vlan: entered promiscuous mode [ 58.987270][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.027751][ T5837] veth0_vlan: entered promiscuous mode [ 59.050612][ T5845] veth0_vlan: entered promiscuous mode [ 59.057626][ T5153] Bluetooth: hci4: command tx timeout [ 59.063062][ T5153] Bluetooth: hci0: command tx timeout [ 59.097864][ T5837] veth1_vlan: entered promiscuous mode [ 59.110237][ T5845] veth1_vlan: entered promiscuous mode [ 59.119364][ T5850] veth0_macvtap: entered promiscuous mode [ 59.133902][ T5153] Bluetooth: hci2: command tx timeout [ 59.134170][ T5852] Bluetooth: hci1: command tx timeout [ 59.143323][ T5850] veth1_macvtap: entered promiscuous mode [ 59.195444][ T5837] veth0_macvtap: entered promiscuous mode [ 59.210627][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.217758][ T5852] Bluetooth: hci3: command tx timeout [ 59.234834][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.243973][ T5845] veth0_macvtap: entered promiscuous mode [ 59.253480][ T5837] veth1_macvtap: entered promiscuous mode [ 59.271007][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.284150][ T5845] veth1_macvtap: entered promiscuous mode [ 59.312229][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.329554][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.338983][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.348647][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.368300][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.380672][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.392550][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.419842][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.431200][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.444645][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.460933][ T5851] veth0_vlan: entered promiscuous mode [ 59.470934][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.486575][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.496702][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.508328][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.519838][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.537882][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.547848][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.556761][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.565490][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.595971][ T5851] veth1_vlan: entered promiscuous mode [ 59.611637][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.625049][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.635896][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.646858][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.657839][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.694498][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.710791][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.720622][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.730195][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.771971][ T5851] veth0_macvtap: entered promiscuous mode [ 59.806953][ T5851] veth1_macvtap: entered promiscuous mode [ 59.826295][ T5839] veth0_vlan: entered promiscuous mode [ 59.840449][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.849660][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.871933][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.890933][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.901707][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.905280][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.919358][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.929857][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.940508][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.951844][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.963449][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.972447][ T5839] veth1_vlan: entered promiscuous mode [ 59.988279][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.999986][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.010510][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.024920][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.034856][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.046110][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.057320][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.090852][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.100333][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.115329][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.126380][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.135152][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.144165][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.213490][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.224048][ T5839] veth0_macvtap: entered promiscuous mode [ 60.237111][ T5839] veth1_macvtap: entered promiscuous mode [ 60.269893][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.282686][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.295600][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.308950][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.319257][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.335512][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.348801][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.360168][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.372721][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.373444][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.389503][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.415598][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.424756][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.426723][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.432574][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.450680][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.450697][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.472900][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.483332][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.494665][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.504648][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.515161][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.526080][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.542327][ T5924] hsr0: entered promiscuous mode [ 60.547665][ T5924] macvlan2: entered allmulticast mode [ 60.553045][ T5924] hsr0: entered allmulticast mode [ 60.558511][ T5924] hsr_slave_0: entered allmulticast mode [ 60.564981][ T5924] hsr_slave_1: entered allmulticast mode [ 60.573210][ T5924] hsr0: left promiscuous mode [ 60.597722][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.606634][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.615850][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.624771][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.665063][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.705955][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.878495][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.886825][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.977102][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.987376][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.013090][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.014622][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.020820][ T5935] netlink: 632 bytes leftover after parsing attributes in process `syz.2.8'. [ 61.103172][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.143763][ T5852] Bluetooth: hci4: command tx timeout [ 61.149215][ T5852] Bluetooth: hci0: command tx timeout [ 61.159546][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.213876][ T5852] Bluetooth: hci1: command tx timeout [ 61.219425][ T5852] Bluetooth: hci2: command tx timeout [ 61.308341][ T5153] Bluetooth: hci3: command tx timeout [ 61.432688][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 61.663935][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 61.714264][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.010688][ T5949] infiniband syz1: set active [ 62.030193][ T5949] infiniband syz1: added team_slave_0 [ 62.073871][ T5974] netem: change failed [ 62.144538][ T5949] RDS/IB: syz1: added [ 62.149541][ T5949] smc: adding ib device syz1 with port count 1 [ 62.157479][ T5949] smc: ib device syz1 port 1 has pnetid [ 62.206877][ T5975] Zero length message leads to an empty skb [ 62.230945][ T5975] netlink: 'syz.0.22': attribute type 4 has an invalid length. [ 62.248247][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.278630][ T5975] netlink: 'syz.0.22': attribute type 4 has an invalid length. [ 62.366008][ T5975] syz.0.22 (5975) used greatest stack depth: 18448 bytes left [ 62.473983][ T5988] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 62.555032][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 62.583573][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 62.781319][ T5995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:bb) already exists on: batadv_slave_1 [ 62.794090][ T5995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.846762][ T6003] netlink: 'syz.0.32': attribute type 4 has an invalid length. [ 62.982316][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 63.006601][ T6009] bridge_slave_0: left allmulticast mode [ 63.014604][ T6009] bridge_slave_0: left promiscuous mode [ 63.069650][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.091086][ T6009] bridge_slave_1: left allmulticast mode [ 63.098215][ T6009] bridge_slave_1: left promiscuous mode [ 63.104456][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.116695][ T6009] bond0: (slave bond_slave_0): Releasing backup interface [ 63.130611][ T6009] bond0: (slave bond_slave_1): Releasing backup interface [ 63.163170][ T6009] team0: Port device team_slave_0 removed [ 63.178828][ T6009] team0: Port device team_slave_1 removed [ 63.185745][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.193320][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.202500][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.210418][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.214194][ T5153] Bluetooth: hci4: command tx timeout [ 63.218430][ T5852] Bluetooth: hci0: command tx timeout [ 63.242100][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.273149][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.294051][ T5852] Bluetooth: hci2: command tx timeout [ 63.294223][ T5153] Bluetooth: hci1: command tx timeout [ 63.318622][ T6012] team0: Port device wg2 added [ 63.375702][ T5153] Bluetooth: hci3: command tx timeout [ 63.456278][ T6020] ip6tnl1: entered promiscuous mode [ 63.648653][ T6029] netlink: 632 bytes leftover after parsing attributes in process `syz.1.41'. [ 63.916830][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 64.142588][ T6047] netlink: 5 bytes leftover after parsing attributes in process `syz.1.49'. [ 64.188807][ T6047] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 64.228501][ T6047] 0ªX¹¦Dö»: entered allmulticast mode [ 64.262988][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 65.075035][ T6095] syzkaller0: entered allmulticast mode [ 65.391440][ T5153] Bluetooth: hci2: command tx timeout [ 65.422939][ T6106] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 65.649486][ T6115] netlink: 'syz.0.72': attribute type 30 has an invalid length. [ 65.659385][ T6116] netlink: 'syz.0.72': attribute type 8 has an invalid length. [ 65.758934][ T6122] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 66.134013][ T6134] __nla_validate_parse: 3 callbacks suppressed [ 66.134030][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 66.698205][ T6153] syz.0.87 uses obsolete (PF_INET,SOCK_PACKET) [ 67.407798][ T6171] warning: `syz.2.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.576498][ T5153] Bluetooth: hci2: command tx timeout [ 67.894831][ T6187] syzkaller0: entered allmulticast mode [ 67.925946][ T6186] syzkaller0: left allmulticast mode [ 68.120279][ T6206] FAULT_INJECTION: forcing a failure. [ 68.120279][ T6206] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.204877][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.0.104 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 68.215522][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 68.225613][ T6206] Call Trace: [ 68.228909][ T6206] [ 68.231860][ T6206] dump_stack_lvl+0x241/0x360 [ 68.236591][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.241810][ T6206] ? __pfx__printk+0x10/0x10 [ 68.246427][ T6206] ? __pfx_lock_release+0x10/0x10 [ 68.251484][ T6206] should_fail_ex+0x3b0/0x4e0 [ 68.256188][ T6206] _copy_from_user+0x2f/0xc0 [ 68.260810][ T6206] get_user_ifreq+0xc3/0x200 [ 68.265424][ T6206] sock_ioctl+0x793/0x8e0 [ 68.269782][ T6206] ? __pfx_sock_ioctl+0x10/0x10 [ 68.273550][ T6212] netlink: 56 bytes leftover after parsing attributes in process `syz.1.108'. [ 68.274635][ T6206] ? __fget_files+0x3f3/0x470 [ 68.274668][ T6206] ? __pfx_sock_ioctl+0x10/0x10 [ 68.274690][ T6206] __se_sys_ioctl+0xf9/0x170 [ 68.283858][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 68.288280][ T6206] do_syscall_64+0xf3/0x230 [ 68.288307][ T6206] ? clear_bhb_loop+0x35/0x90 [ 68.293230][ T6212] netlink: 31 bytes leftover after parsing attributes in process `syz.1.108'. [ 68.297792][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.297817][ T6206] RIP: 0033:0x7f6ffb77e719 [ 68.297843][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.297862][ T6206] RSP: 002b:00007f6ffc51f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.297884][ T6206] RAX: ffffffffffffffda RBX: 00007f6ffb935f80 RCX: 00007f6ffb77e719 [ 68.297898][ T6206] RDX: 00000000200001c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 68.297910][ T6206] RBP: 00007f6ffc51f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.329580][ T6212] netlink: 31 bytes leftover after parsing attributes in process `syz.1.108'. [ 68.330593][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.330611][ T6206] R13: 0000000000000000 R14: 00007f6ffb935f80 R15: 00007ffd11e7a8f8 [ 68.330639][ T6206] [ 68.460260][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 68.531318][ T6221] xt_TCPMSS: Only works on TCP SYN packets [ 68.571186][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 68.700048][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 68.717386][ T6230] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 68.717483][ T6229] netlink: 'syz.0.114': attribute type 4 has an invalid length. [ 68.910127][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 68.984016][ T6238] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 69.058725][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 69.577275][ T6261] xt_bpf: check failed: parse error [ 70.290721][ T6292] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 70.522133][ T6302] vlan2: entered promiscuous mode [ 70.604939][ T6306] FAULT_INJECTION: forcing a failure. [ 70.604939][ T6306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.618964][ T6306] CPU: 1 UID: 0 PID: 6306 Comm: syz.0.138 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 70.629584][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 70.639639][ T6306] Call Trace: [ 70.642913][ T6306] [ 70.645858][ T6306] dump_stack_lvl+0x241/0x360 [ 70.650549][ T6306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.655750][ T6306] ? __pfx__printk+0x10/0x10 [ 70.660344][ T6306] ? snprintf+0xda/0x120 [ 70.664592][ T6306] should_fail_ex+0x3b0/0x4e0 [ 70.669275][ T6306] _copy_to_user+0x31/0xb0 [ 70.673705][ T6306] simple_read_from_buffer+0xca/0x150 [ 70.679088][ T6306] proc_fail_nth_read+0x1e9/0x250 [ 70.684111][ T6306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.689656][ T6306] ? rw_verify_area+0x55e/0x6f0 [ 70.694507][ T6306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.700067][ T6306] vfs_read+0x1fc/0xb70 [ 70.704225][ T6306] ? fdget_pos+0x24e/0x320 [ 70.708646][ T6306] ? __pfx_vfs_read+0x10/0x10 [ 70.713322][ T6306] ? dev_load+0x21/0x1f0 [ 70.717584][ T6306] ? __fget_files+0x3f3/0x470 [ 70.722261][ T6306] ? fdget_pos+0x24e/0x320 [ 70.726677][ T6306] ksys_read+0x183/0x2b0 [ 70.730913][ T6306] ? __pfx_ksys_read+0x10/0x10 [ 70.735671][ T6306] ? do_syscall_64+0x100/0x230 [ 70.740436][ T6306] ? do_syscall_64+0xb6/0x230 [ 70.745113][ T6306] do_syscall_64+0xf3/0x230 [ 70.749631][ T6306] ? clear_bhb_loop+0x35/0x90 [ 70.754305][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.760191][ T6306] RIP: 0033:0x7f6ffb77d15c [ 70.764600][ T6306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 70.784210][ T6306] RSP: 002b:00007f6ffc51f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.792615][ T6306] RAX: ffffffffffffffda RBX: 00007f6ffb935f80 RCX: 00007f6ffb77d15c [ 70.800579][ T6306] RDX: 000000000000000f RSI: 00007f6ffc51f0a0 RDI: 0000000000000005 [ 70.808558][ T6306] RBP: 00007f6ffc51f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.816534][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.824511][ T6306] R13: 0000000000000000 R14: 00007f6ffb935f80 R15: 00007ffd11e7a8f8 [ 70.832496][ T6306] [ 70.939971][ T6310] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 71.184355][ T9] IPVS: starting estimator thread 0... [ 71.212944][ T6310] team0: Port device wlan1 added [ 71.300443][ T6328] IPVS: using max 19 ests per chain, 45600 per kthread [ 71.357496][ T6333] __nla_validate_parse: 2 callbacks suppressed [ 71.357513][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 71.552856][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.563994][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637856][ T6347] netlink: 84 bytes leftover after parsing attributes in process `syz.2.154'. [ 71.664429][ T6346] netlink: 632 bytes leftover after parsing attributes in process `syz.1.153'. [ 71.819431][ T6353] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 71.846823][ T6358] netlink: 'syz.3.159': attribute type 4 has an invalid length. [ 71.900315][ T6365] netlink: 'syz.3.159': attribute type 4 has an invalid length. [ 71.910553][ T6356] bond1 (unregistering): Released all slaves [ 71.912517][ T6366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 71.948086][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 71.957754][ T6362] bond1: (slave batadv1): making interface the new active one [ 71.977121][ T6362] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 72.043397][ T6366] bond1: entered promiscuous mode [ 72.049102][ T6366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.187371][ T6377] netlink: 56 bytes leftover after parsing attributes in process `syz.0.163'. [ 72.196859][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 72.206378][ T6377] netlink: 31 bytes leftover after parsing attributes in process `syz.0.163'. [ 72.229567][ T6377] netlink: 'syz.0.163': attribute type 2 has an invalid length. [ 72.246489][ T6377] netlink: 31 bytes leftover after parsing attributes in process `syz.0.163'. [ 72.313592][ T6366] bond1 (unregistering): Released all slaves [ 72.371439][ T6381] netlink: 'syz.0.165': attribute type 11 has an invalid length. [ 72.373884][ T6379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.384010][ T6381] netlink: 224 bytes leftover after parsing attributes in process `syz.0.165'. [ 72.493201][ T6379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.504053][ T5153] Bluetooth: hci2: command tx timeout [ 72.576972][ T6379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.619442][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.167'. [ 72.751874][ T6379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.871649][ T6407] netlink: 'syz.0.170': attribute type 7 has an invalid length. [ 72.937829][ T6379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.971674][ T6379] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999454][ T6379] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.023427][ T6379] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.559253][ T6438] netlink: 'syz.0.189': attribute type 7 has an invalid length. [ 73.713355][ T6447] raw_sendmsg: syz.3.193 forgot to set AF_INET. Fix it! [ 73.722926][ T6448] vlan2: entered promiscuous mode [ 73.753768][ T6448] syz_tun: entered promiscuous mode [ 73.783992][ T6448] vlan2: entered allmulticast mode [ 73.795226][ T6448] syz_tun: entered allmulticast mode [ 73.821139][ T6457] Cannot find add_set index 0 as target [ 73.827283][ T6448] syz_tun: left allmulticast mode [ 73.843965][ T6448] syz_tun: left promiscuous mode [ 74.079076][ T6469] bridge_slave_0: left allmulticast mode [ 74.116479][ T6469] bridge_slave_0: left promiscuous mode [ 74.122321][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.187380][ T6469] bridge_slave_1: left allmulticast mode [ 74.193096][ T6469] bridge_slave_1: left promiscuous mode [ 74.218650][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.249498][ T6469] bond0: (slave bond_slave_0): Releasing backup interface [ 74.260278][ T6469] bond0: (slave bond_slave_1): Releasing backup interface [ 74.305099][ T6469] team0: Port device team_slave_0 removed [ 74.333825][ T6490] IPVS: set_ctl: invalid protocol: 38754 29.15.86.193:11286 [ 74.344575][ T6469] team0: Port device team_slave_1 removed [ 74.376325][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.411505][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.529612][ T6475] team0: Port device wg2 added [ 74.576352][ T5153] Bluetooth: hci2: command tx timeout [ 74.591992][ T6501] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 74.646247][ T6501] netlink: 'syz.3.212': attribute type 10 has an invalid length. [ 74.715668][ T6501] team0: Device veth1_macvtap failed to register rx_handler [ 75.060845][ T6521] netlink: 'syz.2.217': attribute type 12 has an invalid length. [ 75.221704][ T6541] vlan2: entered promiscuous mode [ 75.314505][ T6545] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 75.536460][ T6549] team0: Port device wg2 removed [ 75.579127][ T6557] team0: Port device wg2 added [ 75.856124][ T6576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.863856][ T6576] IPv6: NLM_F_CREATE should be set when creating new route [ 75.871152][ T6576] IPv6: NLM_F_CREATE should be set when creating new route [ 76.039606][ T6583] ebtables: ebtables: counters copy to user failed while replacing table [ 76.112839][ T6598] tipc: Started in network mode [ 76.118071][ T6598] tipc: Node identity f7, cluster identity 4711 [ 76.124421][ T6598] tipc: Node number set to 247 [ 76.265417][ T6605] ip6tnl1: entered promiscuous mode [ 76.289312][ T6609] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 76.438136][ T6618] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 76.681309][ T8] cfg80211: failed to load regulatory.db [ 76.705096][ T6637] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 76.764844][ T6637] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 76.788184][ T6635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.859195][ T6645] __nla_validate_parse: 11 callbacks suppressed [ 76.859213][ T6645] netlink: 632 bytes leftover after parsing attributes in process `syz.1.268'. [ 76.946613][ T6642] ebtables: ebtables: counters copy to user failed while replacing table [ 77.077988][ T6654] xt_bpf: check failed: parse error [ 77.084534][ T6653] syzkaller1: entered promiscuous mode [ 77.103835][ T6653] syzkaller1: entered allmulticast mode [ 77.179621][ T6656] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 77.334849][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 77.369867][ T6660] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 77.384066][ T5852] Bluetooth: hci2: command tx timeout [ 77.498127][ T6665] team0: Port device wg2 removed [ 77.516525][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 77.619316][ T6671] team0: Port device wg2 added [ 77.639005][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 77.650172][ T6677] vlan2: entered promiscuous mode [ 77.768232][ T6683] netlink: 'syz.1.282': attribute type 10 has an invalid length. [ 77.866595][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 77.890996][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.911523][ T6683] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 77.929462][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 77.941493][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 78.005796][ T6681] bond0: entered promiscuous mode [ 78.007049][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 78.018435][ T6681] bond_slave_0: entered promiscuous mode [ 78.020886][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 78.025850][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 78.065725][ T6681] bond_slave_1: entered promiscuous mode [ 78.067065][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 78.071502][ T6681] batadv0: entered promiscuous mode [ 78.111824][ T6683] syz.1.282 (6683) used greatest stack depth: 18128 bytes left [ 78.145493][ T6699] erspan0: entered promiscuous mode [ 78.160279][ T6699] batadv_slave_1: entered promiscuous mode [ 78.230645][ T6706] xt_TCPMSS: Only works on TCP SYN packets [ 78.316139][ T6710] netlink: 'syz.1.295': attribute type 5 has an invalid length. [ 78.381149][ T6716] netlink: 'syz.3.296': attribute type 2 has an invalid length. [ 78.490459][ T6720] ieee802154 phy0 wpan0: encryption failed: -90 [ 78.516734][ T5889] IPVS: starting estimator thread 0... [ 78.613908][ T6725] IPVS: using max 16 ests per chain, 38400 per kthread [ 78.813284][ T6741] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 79.010469][ T6753] xt_bpf: check failed: parse error [ 79.067058][ T6758] syzkaller0: entered allmulticast mode [ 79.176005][ T6750] syzkaller0: left allmulticast mode [ 79.529673][ T6792] vlan2: entered promiscuous mode [ 79.614522][ T5153] Bluetooth: hci2: command tx timeout [ 79.741702][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.847534][ T6807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.439762][ T6846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 80.492042][ T6852] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 81.026235][ T6870] ebtables: ebtables: counters copy to user failed while replacing table [ 81.040833][ T6878] sctp: [Deprecated]: syz.1.356 (pid 6878) Use of int in maxseg socket option. [ 81.040833][ T6878] Use struct sctp_assoc_value instead [ 81.195440][ T6886] bond1 (unregistering): Released all slaves [ 81.213851][ T6882] ebtables: ebtables: counters copy to user failed while replacing table [ 81.339525][ T6896] bond1: entered promiscuous mode [ 81.372486][ T6896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.533790][ T6896] bond1 (unregistering): Released all slaves [ 81.680891][ T6919] validate_nla: 1 callbacks suppressed [ 81.680910][ T6919] netlink: 'syz.2.369': attribute type 4 has an invalid length. [ 81.682803][ T6921] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 81.700739][ T5153] Bluetooth: hci2: command tx timeout [ 81.708590][ T6922] netlink: 'syz.3.366': attribute type 7 has an invalid length. [ 81.711464][ T6921] Bluetooth: MGMT ver 1.23 [ 81.739373][ T6924] netlink: 'syz.2.369': attribute type 4 has an invalid length. [ 81.803043][ T6927] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 81.852427][ T6921] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 81.962856][ T6933] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 81.996454][ T6933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.047316][ T6940] __nla_validate_parse: 20 callbacks suppressed [ 82.047336][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 82.078619][ T6943] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 82.094201][ T6943] hsr0: entered promiscuous mode [ 82.105565][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 82.128606][ T6944] netlink: 76 bytes leftover after parsing attributes in process `syz.2.373'. [ 82.199141][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 82.208293][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.377'. [ 82.329948][ T6961] Cannot find add_set index 0 as target [ 82.409795][ T6965] bond1 (unregistering): Released all slaves [ 82.448799][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.382'. [ 82.532038][ T6969] bond1: entered promiscuous mode [ 82.537767][ T6969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.632806][ T6969] bond1 (unregistering): Released all slaves [ 83.230924][ T7000] ebtables: ebtables: counters copy to user failed while replacing table [ 83.282393][ T7004] netlink: 56 bytes leftover after parsing attributes in process `syz.4.396'. [ 83.393719][ C1] hrtimer: interrupt took 95189 ns [ 83.408500][ T7006] team0: Port device wg2 removed [ 83.460405][ T7009] team0: Port device wg2 added [ 83.645063][ T7016] syzkaller0: entered allmulticast mode [ 83.704540][ T5153] Bluetooth: hci0: command tx timeout [ 83.824632][ T7012] syzkaller0: left allmulticast mode [ 84.032944][ T7034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.407'. [ 84.100762][ T7039] Cannot find add_set index 0 as target [ 84.134591][ T7034] netlink: 76 bytes leftover after parsing attributes in process `syz.3.407'. [ 84.247511][ T7034] team0: Device wg2 is of different type [ 84.284737][ T7034] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 84.341129][ T7053] netlink: 'syz.1.414': attribute type 10 has an invalid length. [ 84.418032][ T7053] syz_tun: entered promiscuous mode [ 84.462066][ T7053] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 84.681388][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.419'. [ 84.910978][ T7072] sctp: [Deprecated]: syz.3.422 (pid 7072) Use of int in maxseg socket option. [ 84.910978][ T7072] Use struct sctp_assoc_value instead [ 85.002542][ T7047] netlink: 'syz.2.412': attribute type 25 has an invalid length. [ 85.302668][ T7090] team0: Port device wg2 removed [ 85.468467][ T7096] team0: Port device wg2 added [ 85.522024][ T7094] team0: Device gtp0 is of different type [ 85.825604][ T7112] bond1 (unregistering): Released all slaves [ 85.993485][ T7115] bond1: entered promiscuous mode [ 86.001216][ T7115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.151979][ T7138] sctp: [Deprecated]: syz.1.437 (pid 7138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.151979][ T7138] Use struct sctp_sack_info instead [ 86.195742][ T7115] bond1 (unregistering): Released all slaves [ 86.488361][ T7146] bridge_slave_0: left allmulticast mode [ 86.505689][ T7146] bridge_slave_0: left promiscuous mode [ 86.511526][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.539405][ T7146] bridge_slave_1: left allmulticast mode [ 86.555718][ T7146] bridge_slave_1: left promiscuous mode [ 86.562354][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.591041][ T7146] bond0: (slave bond_slave_0): Releasing backup interface [ 86.620333][ T7146] bond0: (slave bond_slave_1): Releasing backup interface [ 86.649921][ T7146] team0: Port device team_slave_0 removed [ 86.669111][ T7146] team0: Port device team_slave_1 removed [ 86.675956][ T7146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.684592][ T7146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.693228][ T7146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.701094][ T7146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.787594][ T7146] bond0: (slave wlan1): Releasing backup interface [ 86.827679][ T7148] team0: Port device wg2 added [ 86.845600][ T7150] bridge_slave_1: left allmulticast mode [ 86.851415][ T7150] bridge_slave_1: left promiscuous mode [ 86.860280][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.880589][ T7150] bridge_slave_0: left allmulticast mode [ 86.887207][ T7150] bridge_slave_0: left promiscuous mode [ 86.893086][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.335973][ T7184] ebt_among: dst integrity fail: 200 [ 87.673327][ T7190] team0: Port device wg2 removed [ 87.769525][ T7197] team0: Port device wg2 added [ 87.780104][ T7199] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 47727 - 0 [ 87.816991][ T7199] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 47727 - 0 [ 87.833896][ T7199] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 47727 - 0 [ 87.864005][ T7199] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 47727 - 0 [ 87.892874][ T7199] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 60820 - 0 [ 87.918872][ T7213] __nla_validate_parse: 7 callbacks suppressed [ 87.918890][ T7213] netlink: 100 bytes leftover after parsing attributes in process `syz.3.465'. [ 87.944118][ T7199] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 60820 - 0 [ 87.961435][ T7213] nbd: must specify at least one socket [ 87.998396][ T7199] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 60820 - 0 [ 88.030861][ T7199] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 60820 - 0 [ 88.042202][ T7199] geneve2: entered promiscuous mode [ 88.050265][ T7199] geneve2: entered allmulticast mode [ 88.220757][ T7223] Cannot find add_set index 0 as target [ 88.341371][ T7232] syzkaller0: entered allmulticast mode [ 88.393855][ T7225] syzkaller0: left allmulticast mode [ 88.806701][ T7260] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.893914][ T5153] Bluetooth: hci2: command tx timeout [ 89.396076][ T7291] team0: Port device wg2 removed [ 89.517960][ T7300] team0: Port device wg2 added [ 89.592356][ T7303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.497'. [ 89.606502][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'. [ 89.621115][ T7303] netlink: 31 bytes leftover after parsing attributes in process `syz.2.497'. [ 89.654529][ T7303] netlink: 'syz.2.497': attribute type 2 has an invalid length. [ 89.673921][ T7303] netlink: 31 bytes leftover after parsing attributes in process `syz.2.497'. [ 89.738150][ T7308] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.747393][ T7308] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.756671][ T7308] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.765729][ T7308] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.784823][ T7308] vxlan0: entered promiscuous mode [ 89.790666][ T7308] vxlan0: entered allmulticast mode [ 89.862472][ T7315] xt_bpf: check failed: parse error [ 89.884107][ T7308] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.893930][ T7308] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.903832][ T7308] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.913582][ T7308] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.066702][ T7322] pimreg: entered allmulticast mode [ 90.080401][ T7324] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 90.093801][ T7324] netlink: 'syz.0.505': attribute type 2 has an invalid length. [ 90.458478][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 90.957649][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 90.970585][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 91.006854][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 91.299859][ T5890] IPVS: starting estimator thread 0... [ 91.361814][ T7383] team0: Port device wg2 removed [ 91.403933][ T7388] IPVS: using max 19 ests per chain, 45600 per kthread [ 91.475961][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 91.498667][ T7389] team0: Port device wg2 added [ 92.292927][ T7432] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 92.319903][ T7432] netlink: 'syz.1.541': attribute type 2 has an invalid length. [ 92.491034][ T7443] bond0: (slave syz_tun): Releasing backup interface [ 92.506712][ T7445] SET target dimension over the limit! [ 92.530315][ T7443] syz_tun: left promiscuous mode [ 92.615075][ T7443] bond0: (slave batadv0): Releasing backup interface [ 92.631236][ T7443] batadv0: left promiscuous mode [ 92.889477][ T7443] bridge_slave_0: left allmulticast mode [ 92.903795][ T5153] Bluetooth: hci2: command tx timeout [ 92.909344][ T7443] bridge_slave_0: left promiscuous mode [ 92.909557][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.968589][ T7443] bridge_slave_1: left allmulticast mode [ 92.992141][ T7443] bridge_slave_1: left promiscuous mode [ 93.010036][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.117197][ T7443] bond0: (slave bond_slave_0): Releasing backup interface [ 93.127611][ T7443] bond_slave_0: left promiscuous mode [ 93.160934][ T7443] bond0: (slave bond_slave_1): Releasing backup interface [ 93.181029][ T7477] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.191111][ T7443] bond_slave_1: left promiscuous mode [ 93.219490][ T7443] team0: Port device team_slave_0 removed [ 93.299450][ T7443] team0: Port device team_slave_1 removed [ 93.322408][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.340464][ T7443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.358780][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.379406][ T7443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.480722][ T7443] team0: Port device wlan1 removed [ 93.495842][ T7443] bond1: (slave batadv1): Releasing active interface [ 93.533386][ T7438] team0: Port device wg2 added [ 93.743401][ T7498] __nla_validate_parse: 7 callbacks suppressed [ 93.743419][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 93.806885][ T7497] bridge2: entered promiscuous mode [ 93.833491][ T7497] bridge2: entered allmulticast mode [ 93.849660][ T7497] team0: Device bridge2 is of different type [ 93.883211][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.562'. [ 93.985990][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 93.998265][ T7502] bond1 (unregistering): Released all slaves [ 94.072111][ T7505] bond1: entered promiscuous mode [ 94.077771][ T7505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.150031][ T7515] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.222861][ T7505] bond1 (unregistering): Released all slaves [ 94.258579][ T7507] bond2 (unregistering): Released all slaves [ 94.382244][ T7509] bond2: entered promiscuous mode [ 94.388576][ T7509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.602852][ T7526] netlink: 632 bytes leftover after parsing attributes in process `syz.2.571'. [ 94.732246][ T7509] bond2 (unregistering): Released all slaves [ 95.073336][ T7546] netlink: 84 bytes leftover after parsing attributes in process `syz.4.577'. [ 95.253208][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 95.986344][ T7596] vlan2: entered promiscuous mode [ 95.992126][ T7596] team0: Device vlan2 is of different type [ 96.058865][ T7599] team0: Port device wg2 removed [ 96.121682][ T7604] team0: Port device wg2 added [ 96.250803][ T7608] Cannot find add_set index 0 as target [ 96.452127][ T7607] ebtables: ebtables: counters copy to user failed while replacing table [ 96.996142][ T7641] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 97.204152][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 97.267709][ T7661] netlink: 'syz.0.620': attribute type 7 has an invalid length. [ 97.463350][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'. [ 97.667751][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 97.763956][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 98.104418][ T7687] team0 (unregistering): Port device wg2 removed [ 98.136297][ T7702] netlink: 'syz.0.635': attribute type 4 has an invalid length. [ 98.222807][ T7707] team0: Port device wg2 removed [ 98.273307][ T7710] macsec0: entered promiscuous mode [ 98.296288][ T7711] team0: Port device wg2 added [ 98.324632][ T7702] veth1_macvtap: left promiscuous mode [ 98.430061][ T7702] macsec0 (unregistering): left promiscuous mode [ 98.632699][ T7735] syzkaller0: entered allmulticast mode [ 98.682038][ T7730] syzkaller0: left allmulticast mode [ 98.818313][ T7745] xt_TCPMSS: Only works on TCP SYN packets [ 98.855641][ T7748] __nla_validate_parse: 4 callbacks suppressed [ 98.855659][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 98.904612][ T7756] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 98.935485][ T7756] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 98.953253][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.653'. [ 99.070217][ T7763] netlink: 632 bytes leftover after parsing attributes in process `syz.2.658'. [ 99.145574][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 99.157795][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 99.185510][ T7759] bond2 (unregistering): Released all slaves [ 99.274468][ T7766] bond2: entered promiscuous mode [ 99.279884][ T7766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.607567][ T7766] bond2 (unregistering): Released all slaves [ 99.658139][ T7795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.665'. [ 99.843112][ T7805] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 99.900947][ T7807] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 100.059591][ T7812] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 100.109741][ T7808] ebtables: ebtables: counters copy to user failed while replacing table [ 100.185108][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 100.277659][ T7822] netlink: 104 bytes leftover after parsing attributes in process `syz.4.675'. [ 100.281143][ T7824] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 100.338299][ T7825] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 100.595592][ T7842] syzkaller0: entered allmulticast mode [ 100.682999][ T7830] syzkaller0: left allmulticast mode [ 100.713405][ T7844] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 100.743788][ T7844] netlink: 'syz.4.681': attribute type 2 has an invalid length. [ 100.818590][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'. [ 100.848514][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'. [ 100.885098][ T7849] trusted_key: syz.1.683 sent an empty control message without MSG_MORE. [ 100.977889][ T7853] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 101.012734][ T7853] macvlan3: entered allmulticast mode [ 101.052898][ T7853] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 101.419050][ T7872] bridge_slave_0: entered allmulticast mode [ 102.094513][ T5153] Bluetooth: hci0: command tx timeout [ 102.137636][ T7910] erspan1: entered promiscuous mode [ 102.381170][ T7929] syzkaller0: entered allmulticast mode [ 102.433599][ T7919] syzkaller0: left allmulticast mode [ 102.700349][ T7954] xt_bpf: check failed: parse error [ 103.007227][ T7962] team0: Port device wg2 removed [ 103.106494][ T7971] team0: Port device wg2 added [ 103.761237][ T8004] ebtables: ebtables: counters copy to user failed while replacing table [ 104.461878][ T8045] __nla_validate_parse: 10 callbacks suppressed [ 104.461897][ T8045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.757'. [ 104.586341][ T8046] bond0: (slave bond_slave_0): Releasing backup interface [ 104.627588][ T8046] bond0: (slave bond_slave_1): Releasing backup interface [ 104.653887][ T5153] Bluetooth: hci2: command tx timeout [ 104.693543][ T8046] infiniband syz1: set down [ 104.714181][ T8046] team0: Port device team_slave_0 removed [ 104.749801][ T8046] team0: Port device team_slave_1 removed [ 104.762212][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.781072][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.872591][ T8050] team0: Port device wg2 added [ 104.917011][ T8060] unknown channel width for channel at 909000KHz? [ 105.040212][ T8064] netlink: 165 bytes leftover after parsing attributes in process `syz.0.762'. [ 105.073597][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 105.104387][ T8063] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 105.326938][ T8077] xt_bpf: check failed: parse error [ 105.367126][ T8076] geneve2: entered promiscuous mode [ 105.601135][ T8088] xt_l2tp: v2 doesn't support IP mode [ 106.013153][ T8109] netlink: 84 bytes leftover after parsing attributes in process `syz.0.780'. [ 106.327162][ T8122] ebtables: ebtables: counters copy to user failed while replacing table [ 106.395562][ T8105] bond0 (unregistering): Released all slaves [ 106.738086][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 106.814356][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 106.825168][ T5153] Bluetooth: hci2: command tx timeout [ 106.863896][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 106.901452][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.791'. [ 107.000936][ T8148] syzkaller0: entered allmulticast mode [ 107.043781][ T8147] syzkaller0: left allmulticast mode [ 107.186180][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.801'. [ 107.229522][ T8161] vlan2: entered promiscuous mode [ 107.248920][ T8161] team0: Device vlan2 is of different type [ 107.288109][ T8163] netlink: 56 bytes leftover after parsing attributes in process `syz.4.803'. [ 107.312692][ T8163] netlink: 'syz.4.803': attribute type 2 has an invalid length. [ 107.374105][ T8166] netlink: 'syz.2.805': attribute type 4 has an invalid length. [ 107.414602][ T8166] netlink: 'syz.2.805': attribute type 4 has an invalid length. [ 107.765683][ T8187] geneve3: entered promiscuous mode [ 107.839574][ T8192] netlink: 'syz.4.817': attribute type 7 has an invalid length. [ 108.266504][ T8211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.283582][ T8211] bond2: (slave bond3): Enslaving as an active interface with an up link [ 108.363159][ T8219] bond4: entered promiscuous mode [ 108.369645][ T8219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.495164][ T8228] ebtables: ebtables: counters copy to user failed while replacing table [ 108.533421][ T8219] bond4 (unregistering): Released all slaves [ 108.609901][ T8221] bond2 (unregistering): Released all slaves [ 108.695815][ T8224] bond2: entered promiscuous mode [ 108.702629][ T8224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.837531][ T8224] bond2 (unregistering): Released all slaves [ 109.288499][ T8259] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (65537) [ 109.312015][ T8259] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 109.611959][ T8270] netlink: 'syz.3.845': attribute type 4 has an invalid length. [ 109.654245][ T8270] netlink: 'syz.3.845': attribute type 4 has an invalid length. [ 109.894157][ T8287] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 110.018432][ T8293] geneve3: entered promiscuous mode [ 110.177538][ T8301] __nla_validate_parse: 12 callbacks suppressed [ 110.177558][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 110.217786][ T8302] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.169200][ T8347] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.209616][ T8350] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.539899][ T8368] netlink: 165 bytes leftover after parsing attributes in process `syz.0.883'. [ 111.763782][ T8379] vlan2: entered promiscuous mode [ 111.784259][ T8379] team0: Device vlan2 is of different type [ 112.290936][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 112.310599][ T8401] geneve2: entered promiscuous mode [ 112.430284][ T8405] netlink: 'syz.2.898': attribute type 4 has an invalid length. [ 112.732755][ T8426] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 112.775251][ T8427] netlink: 'syz.1.905': attribute type 10 has an invalid length. [ 112.799023][ T8427] netlink: 55 bytes leftover after parsing attributes in process `syz.1.905'. [ 112.869667][ T8417] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.180783][ T8435] xt_bpf: check failed: parse error [ 113.424374][ T8444] netlink: 84 bytes leftover after parsing attributes in process `syz.2.912'. [ 113.478262][ T8449] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 113.627587][ T8454] netlink: 165 bytes leftover after parsing attributes in process `syz.2.917'. [ 113.857746][ T8467] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 114.413191][ T8496] vlan2: entered promiscuous mode [ 114.437374][ T8496] team0: Device vlan2 is of different type [ 114.623481][ T8482] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 114.948720][ T8512] SET target dimension over the limit! [ 115.001676][ T8514] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 115.010432][ T8514] netlink: 'syz.1.940': attribute type 2 has an invalid length. [ 115.134748][ T5153] Bluetooth: hci2: command tx timeout [ 115.234037][ T8524] netlink: 'syz.1.943': attribute type 7 has an invalid length. [ 115.363120][ T8531] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 115.560723][ T8539] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 115.938092][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.956'. [ 116.052227][ T8551] wg2: entered promiscuous mode [ 116.083835][ T8551] vlan2: entered promiscuous mode [ 116.099129][ T8551] team0: entered promiscuous mode [ 116.111794][ T8551] team0: Device vlan2 is already an upper device of the team interface [ 116.129044][ T8562] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 116.207384][ T8551] team0: left promiscuous mode [ 116.212827][ T8551] wg2: left promiscuous mode [ 116.512217][ T8574] netlink: 'syz.1.963': attribute type 7 has an invalid length. [ 116.647995][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 116.887512][ T8576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.949502][ T8576] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.160831][ T8596] nftables ruleset with unbound chain [ 117.622511][ T8616] netlink: 'syz.3.980': attribute type 7 has an invalid length. [ 117.677219][ T8618] SET target dimension over the limit! [ 118.050044][ T8632] netlink: 104 bytes leftover after parsing attributes in process `syz.3.987'. [ 118.102145][ T8635] netlink: 'syz.0.989': attribute type 4 has an invalid length. [ 118.133616][ T8635] netlink: 'syz.0.989': attribute type 4 has an invalid length. [ 118.184670][ T8635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.989'. [ 118.280770][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 118.280846][ T8649] netlink: 'syz.3.992': attribute type 4 has an invalid length. [ 118.310448][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 118.358945][ T8655] netlink: 'syz.3.992': attribute type 4 has an invalid length. [ 118.374548][ T8657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.996'. [ 118.405585][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 118.420090][ T8657] netlink: 31 bytes leftover after parsing attributes in process `syz.0.996'. [ 118.430034][ T8657] netlink: 'syz.0.996': attribute type 2 has an invalid length. [ 118.465390][ T8657] netlink: 31 bytes leftover after parsing attributes in process `syz.0.996'. [ 118.517443][ T8664] netlink: 'syz.4.997': attribute type 7 has an invalid length. [ 118.832052][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.848010][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.048408][ T8690] xt_TCPMSS: Only works on TCP SYN packets [ 119.293968][ T8705] netlink: 'syz.3.1013': attribute type 7 has an invalid length. [ 120.356446][ T8755] netlink: 'syz.4.1031': attribute type 7 has an invalid length. [ 120.541382][ T8765] pim6reg1: entered promiscuous mode [ 120.551719][ T8765] pim6reg1: entered allmulticast mode [ 120.689099][ T8773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.050129][ T8794] __nla_validate_parse: 5 callbacks suppressed [ 121.050149][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 121.108133][ T8800] netlink: 'syz.1.1051': attribute type 4 has an invalid length. [ 121.370902][ T8818] FAULT_INJECTION: forcing a failure. [ 121.370902][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 121.413802][ T8818] CPU: 0 UID: 0 PID: 8818 Comm: syz.4.1054 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 121.420704][ T8821] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1055'. [ 121.424503][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.424521][ T8818] Call Trace: [ 121.424529][ T8818] [ 121.424538][ T8818] dump_stack_lvl+0x241/0x360 [ 121.424571][ T8818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.424594][ T8818] ? __pfx__printk+0x10/0x10 [ 121.424622][ T8818] ? ref_tracker_alloc+0x332/0x490 [ 121.424648][ T8818] should_fail_ex+0x3b0/0x4e0 [ 121.424673][ T8818] ? skb_clone+0x20c/0x390 [ 121.424691][ T8818] should_failslab+0xac/0x100 [ 121.424716][ T8818] ? skb_clone+0x20c/0x390 [ 121.424734][ T8818] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 121.424760][ T8818] skb_clone+0x20c/0x390 [ 121.424784][ T8818] __netlink_deliver_tap+0x3cc/0x7f0 [ 121.424820][ T8818] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.424843][ T8818] netlink_deliver_tap+0x19d/0x1b0 [ 121.424870][ T8818] netlink_unicast+0x7c4/0x990 [ 121.424899][ T8818] ? __pfx_netlink_unicast+0x10/0x10 [ 121.424917][ T8818] ? __virt_addr_valid+0x183/0x530 [ 121.424940][ T8818] ? __check_object_size+0x48e/0x900 [ 121.424967][ T8818] netlink_sendmsg+0x8e4/0xcb0 [ 121.425003][ T8818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.543693][ T8818] ? aa_sock_msg_perm+0x91/0x160 [ 121.548684][ T8818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.554000][ T8818] __sock_sendmsg+0x221/0x270 [ 121.558712][ T8818] ____sys_sendmsg+0x52a/0x7e0 [ 121.563513][ T8818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.568841][ T8818] __sys_sendmsg+0x292/0x380 [ 121.573461][ T8818] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.578611][ T8818] ? __pfx_vfs_write+0x10/0x10 [ 121.583418][ T8818] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.589770][ T8818] ? do_syscall_64+0x100/0x230 [ 121.594559][ T8818] ? do_syscall_64+0xb6/0x230 [ 121.599264][ T8818] do_syscall_64+0xf3/0x230 [ 121.603788][ T8818] ? clear_bhb_loop+0x35/0x90 [ 121.608490][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.614408][ T8818] RIP: 0033:0x7fc22c37e719 [ 121.618858][ T8818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.638487][ T8818] RSP: 002b:00007fc22d0f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.646951][ T8818] RAX: ffffffffffffffda RBX: 00007fc22c535f80 RCX: 00007fc22c37e719 [ 121.654935][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 121.654942][ T8818] RDX: 0000000000000010 RSI: 0000000020000240 RDI: 0000000000000003 [ 121.663780][ T8818] RBP: 00007fc22d0f5090 R08: 0000000000000000 R09: 0000000000000000 [ 121.663796][ T8818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.663808][ T8818] R13: 0000000000000000 R14: 00007fc22c535f80 R15: 00007ffd324894e8 [ 121.663836][ T8818] [ 122.192144][ T8844] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (65537) [ 122.223597][ T8844] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 122.288340][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 122.357056][ T8858] xt_TCPMSS: Only works on TCP SYN packets [ 122.457917][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 122.482843][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 122.551315][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 122.974604][ T8889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1079'. [ 123.004360][ T8890] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1081'. [ 123.208034][ T8888] syzkaller0: entered allmulticast mode [ 123.291795][ T8887] syzkaller0: left allmulticast mode [ 123.306489][ T8907] vlan2: entered promiscuous mode [ 123.312712][ T8907] team0: Device vlan2 is of different type [ 123.364164][ T8905] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (65537) [ 123.407037][ T8905] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 123.432291][ T8913] SET target dimension over the limit! [ 123.600886][ T8923] vlan2: entered promiscuous mode [ 123.606761][ T8923] team0: Device vlan2 is of different type [ 123.828591][ T8922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.937543][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 124.012941][ T8940] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 124.376086][ T8954] 8021q: adding VLAN 0 to HW filter on device bond5 [ 124.386082][ T8954] bond4: (slave bond5): Enslaving as an active interface with an up link [ 124.445108][ T8958] bond6: entered promiscuous mode [ 124.451354][ T8958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 124.701966][ T8958] bond6 (unregistering): Released all slaves [ 125.294241][ T8995] netlink: 'syz.2.1110': attribute type 7 has an invalid length. [ 125.907484][ T9026] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 126.395910][ T9040] tipc: Can't bind to reserved service type 0 [ 126.413085][ T9042] netlink: 'syz.0.1129': attribute type 7 has an invalid length. [ 126.456484][ T7936] tipc: Subscription rejected, illegal request [ 126.595151][ T9047] __nla_validate_parse: 5 callbacks suppressed [ 126.595199][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1131'. [ 126.774270][ T9049] xt_TCPMSS: Only works on TCP SYN packets [ 126.970467][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 127.102550][ T9059] netlink: 734 bytes leftover after parsing attributes in process `syz.1.1135'. [ 127.563896][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 127.728251][ T9089] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 127.878994][ T9086] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.888879][ T9086] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.898453][ T9086] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.908092][ T9086] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.049706][ T9091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.062553][ T9091] bond0: (slave bond1): making interface the new active one [ 128.084541][ T9091] bond0: (slave bond1): Enslaving as an active interface with an up link [ 128.136275][ T9100] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.185100][ T9099] netlink: 'syz.3.1143': attribute type 7 has an invalid length. [ 128.407798][ T9120] batadv0: entered promiscuous mode [ 128.537364][ T9120] batadv0: left promiscuous mode [ 128.827614][ T9137] vlan2: entered promiscuous mode [ 128.833527][ T9137] team0: Device vlan2 is of different type [ 128.972070][ T9142] dvmrp0: entered allmulticast mode [ 129.101489][ T9144] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1156'. [ 129.369823][ T9158] vlan2: entered promiscuous mode [ 129.385680][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 129.492164][ T9167] netlink: 632 bytes leftover after parsing attributes in process `syz.0.1165'. [ 129.800396][ T9173] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 129.814879][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 129.896616][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1169'. [ 130.041169][ T9184] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (65537) [ 130.077026][ T9184] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 130.749597][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 131.117060][ T9225] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 131.185603][ T9227] netlink: 'syz.3.1187': attribute type 7 has an invalid length. [ 131.239731][ T9225] netlink: 'syz.0.1186': attribute type 2 has an invalid length. [ 131.395342][ T9240] netlink: 'syz.1.1188': attribute type 2 has an invalid length. [ 131.808946][ T9251] netlink: 'syz.2.1194': attribute type 1 has an invalid length. [ 131.819344][ T9252] xt_TCPMSS: Only works on TCP SYN packets [ 131.947270][ T9255] __nla_validate_parse: 1 callbacks suppressed [ 131.947289][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1194'. [ 132.054742][ T9254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.117484][ T9254] bond2: (slave bond3): Enslaving as an active interface with an up link [ 132.385639][ T9255] bond4: entered promiscuous mode [ 132.391596][ T9255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.417043][ T9241] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 132.545348][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1197'. [ 132.833198][ T9255] bond4 (unregistering): Released all slaves [ 132.977360][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.004602][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 133.129160][ T9265] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 133.193041][ T9278] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.221681][ T9275] netlink: 'syz.3.1201': attribute type 7 has an invalid length. [ 133.427754][ T9288] netlink: 'syz.0.1204': attribute type 4 has an invalid length. [ 133.494010][ T9289] netlink: 'syz.0.1204': attribute type 4 has an invalid length. [ 133.896296][ T9297] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 134.079825][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 134.536684][ T9321] @ÿ: renamed from veth0_vlan (while UP) [ 134.567236][ T9321] netlink: 'syz.4.1217': attribute type 13 has an invalid length. [ 134.576399][ T9323] netlink: 'syz.2.1216': attribute type 7 has an invalid length. [ 134.585412][ T9321] macvtap0: entered promiscuous mode [ 134.620301][ T9321] macvtap0: refused to change device tx_queue_len [ 134.658834][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 134.964961][ T9337] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1222'. [ 135.275530][ T9349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1226'. [ 135.608204][ T9357] xt_bpf: check failed: parse error [ 135.802383][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 135.812404][ T9359] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 136.243047][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 136.258358][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 136.279541][ T9377] vlan2: entered promiscuous mode [ 136.290166][ T9377] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 136.351352][ T9377] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 137.099798][ T9396] validate_nla: 1 callbacks suppressed [ 137.099839][ T9396] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 137.139437][ T9399] IPv6: sit1: Disabled Multicast RS [ 137.174420][ T9396] netlink: 'syz.1.1244': attribute type 2 has an invalid length. [ 137.229761][ T9402] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1248'. [ 137.285852][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 137.331537][ T9402] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1248'. [ 137.384262][ T9402] netlink: 'syz.4.1248': attribute type 2 has an invalid length. [ 137.399598][ T9404] xt_TCPMSS: Only works on TCP SYN packets [ 137.423738][ T9402] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1248'. [ 137.573559][ T9411] netlink: 'syz.2.1250': attribute type 7 has an invalid length. [ 137.627949][ T9419] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 137.715308][ T9416] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1254'. [ 138.015447][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 138.417977][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 138.443618][ T9449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1266'. [ 138.457626][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 138.701135][ T9451] ebtables: ebtables: counters copy to user failed while replacing table [ 138.919792][ T9468] netlink: 'syz.3.1271': attribute type 7 has an invalid length. [ 138.961921][ T9467] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 139.010557][ T9467] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 139.053860][ T5153] Bluetooth: hci2: command tx timeout [ 139.625659][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 139.857721][ T9498] netlink: 'syz.3.1284': attribute type 4 has an invalid length. [ 139.968043][ T9501] netlink: 'syz.2.1285': attribute type 7 has an invalid length. [ 140.367233][ T9515] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 140.435352][ T9515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 140.475533][ T9515] bond4: (slave bond5): Enslaving as an active interface with an up link [ 140.622611][ T9519] bond6: entered promiscuous mode [ 140.651246][ T9519] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.142713][ T9519] bond6 (unregistering): Released all slaves [ 141.212541][ T9538] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 141.608803][ T9545] ------------[ cut here ]------------ [ 141.615167][ T9545] WARNING: CPU: 0 PID: 9545 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 141.625454][ T9545] Modules linked in: [ 141.629767][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.4.1301 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 141.641692][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 141.652763][ T9545] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 141.659193][ T9545] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 6a 20 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 1a 1c 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 48 20 08 f8 85 ed 0f 8e 49 [ 141.680600][ T9545] RSP: 0018:ffffc9000b11f078 EFLAGS: 00010287 [ 141.687367][ T9545] RAX: ffffffff898ccdf6 RBX: 00000000fffbffea RCX: 0000000000040000 [ 141.696157][ T9545] RDX: ffffc9000b352000 RSI: 0000000000003bb0 RDI: 0000000000003bb1 [ 141.704948][ T9545] RBP: dffffc0000000000 R08: ffffffff898ccde6 R09: 1ffff1100b584494 [ 141.713594][ T9545] R10: dffffc0000000000 R11: ffffed100b584495 R12: dffffc0000000000 [ 141.722409][ T9545] R13: ffff88805ac223c0 R14: 00000000ffffffea R15: 0000000000000000 [ 141.731017][ T9545] FS: 00007fc22d0f56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 141.740844][ T9545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.748123][ T9545] CR2: 0000001b30b1fffc CR3: 00000000666a6000 CR4: 00000000003526f0 [ 141.756840][ T9545] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.765551][ T9545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.774331][ T9545] Call Trace: [ 141.777935][ T9545] [ 141.781166][ T9545] ? __warn+0x168/0x4e0 [ 141.785800][ T9545] ? sk_skb_reason_drop+0x87/0x380 [ 141.791455][ T9545] ? report_bug+0x2b3/0x500 [ 141.796571][ T9545] ? sk_skb_reason_drop+0x87/0x380 [ 141.802246][ T9545] ? handle_bug+0x60/0x90 [ 141.807054][ T9545] ? exc_invalid_op+0x1a/0x50 [ 141.812217][ T9545] ? asm_exc_invalid_op+0x1a/0x20 [ 141.817770][ T9545] ? sk_skb_reason_drop+0x76/0x380 [ 141.823357][ T9545] ? sk_skb_reason_drop+0x86/0x380 [ 141.829013][ T9545] ? sk_skb_reason_drop+0x87/0x380 [ 141.834695][ T9545] ? sk_skb_reason_drop+0x86/0x380 [ 141.840323][ T9545] ? ip_rcv_finish_core+0x129f/0x1b50 [ 141.846296][ T9545] ip_rcv_finish_core+0xfde/0x1b50 [ 141.851938][ T9545] ip_sublist_rcv+0x3b1/0xab0 [ 141.857247][ T9545] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 141.862982][ T9545] ? skb_orphan+0xae/0xd0 [ 141.867776][ T9545] ? __pfx_ip_rcv_finish+0x10/0x10 [ 141.873404][ T9545] ip_list_rcv+0x42b/0x480 [ 141.878283][ T9545] ? __pfx_ip_list_rcv+0x10/0x10 [ 141.883837][ T9545] ? __pfx_ip_list_rcv+0x10/0x10 [ 141.889203][ T9545] __netif_receive_skb_list_core+0x94e/0x980 [ 141.895778][ T9545] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 141.903027][ T9545] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 141.910235][ T9545] ? read_tsc+0x9/0x20 [ 141.914763][ T9545] ? timekeeping_get_ns+0x2c0/0x420 [ 141.920395][ T9545] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 141.927345][ T9545] netif_receive_skb_list_internal+0xa51/0xe30 [ 141.934112][ T9545] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 141.941060][ T9545] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 141.948386][ T9545] ? __pfx_eth_type_trans+0x10/0x10 [ 141.954093][ T9545] ? __phys_addr+0xba/0x170 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 141.959037][ T9545] ? build_skb_around+0x111/0x260 [ 141.964641][ T9545] ? __xdp_build_skb_from_frame+0x313/0x650 [ 141.971131][ T9545] netif_receive_skb_list+0x55/0x4b0 [ 141.976973][ T9545] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 141.983001][ T9545] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 141.989497][ T9545] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 141.995596][ T9545] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 142.002004][ T9545] ? synchronize_rcu+0x11b/0x360 [ 142.007456][ T9545] ? __pfx_synchronize_rcu+0x10/0x10 [ 142.013301][ T9545] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 142.020241][ T9545] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 142.026797][ T9545] ? _copy_from_user+0x99/0xc0 [ 142.032067][ T9545] ? bpf_test_init+0x15a/0x180 [ 142.037336][ T9545] ? xdp_convert_md_to_buff+0x5b/0x330 [ 142.043296][ T9545] bpf_prog_test_run_xdp+0x805/0x11e0 [ 142.049138][ T9545] ? __pfx_lock_release+0x10/0x10 [ 142.054704][ T9545] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.061104][ T9545] ? __fget_files+0x29/0x470 [ 142.066215][ T9545] ? fput+0x1a8/0x230 [ 142.070611][ T9545] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.077042][ T9545] bpf_prog_test_run+0x2e4/0x360 [ 142.082485][ T9545] __sys_bpf+0x48d/0x810 [ 142.087219][ T9545] ? __pfx___sys_bpf+0x10/0x10 [ 142.092497][ T9545] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.099601][ T9545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.106611][ T9545] ? do_syscall_64+0x100/0x230 [ 142.111859][ T9545] __x64_sys_bpf+0x7c/0x90 [ 142.116809][ T9545] do_syscall_64+0xf3/0x230 [ 142.121738][ T9545] ? clear_bhb_loop+0x35/0x90 [ 142.126917][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.133401][ T9545] RIP: 0033:0x7fc22c37e719 [ 142.138278][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.159691][ T9545] RSP: 002b:00007fc22d0f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.168977][ T9545] RAX: ffffffffffffffda RBX: 00007fc22c535f80 RCX: 00007fc22c37e719 [ 142.177698][ T9545] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 142.186470][ T9545] RBP: 00007fc22c3f175e R08: 0000000000000000 R09: 0000000000000000 [ 142.195250][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.203985][ T9545] R13: 0000000000000000 R14: 00007fc22c535f80 R15: 00007ffd324894e8 [ 142.212727][ T9545] [ 142.216106][ T9545] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.223404][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.4.1301 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 142.234086][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 142.244142][ T9545] Call Trace: [ 142.247423][ T9545] [ 142.250350][ T9545] dump_stack_lvl+0x241/0x360 [ 142.255038][ T9545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.260239][ T9545] ? __pfx__printk+0x10/0x10 [ 142.264834][ T9545] ? _printk+0xd5/0x120 [ 142.268997][ T9545] ? __init_begin+0x41000/0x41000 [ 142.274034][ T9545] ? vscnprintf+0x5d/0x90 [ 142.278372][ T9545] panic+0x349/0x880 [ 142.282282][ T9545] ? __warn+0x177/0x4e0 [ 142.286444][ T9545] ? __pfx_panic+0x10/0x10 [ 142.290861][ T9545] ? show_trace_log_lvl+0x3b2/0x410 [ 142.296069][ T9545] __warn+0x34b/0x4e0 [ 142.300055][ T9545] ? sk_skb_reason_drop+0x87/0x380 [ 142.305174][ T9545] report_bug+0x2b3/0x500 [ 142.309500][ T9545] ? sk_skb_reason_drop+0x87/0x380 [ 142.314625][ T9545] handle_bug+0x60/0x90 [ 142.318786][ T9545] exc_invalid_op+0x1a/0x50 [ 142.323284][ T9545] asm_exc_invalid_op+0x1a/0x20 [ 142.328136][ T9545] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 142.333865][ T9545] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 6a 20 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 1a 1c 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 48 20 08 f8 85 ed 0f 8e 49 [ 142.353467][ T9545] RSP: 0018:ffffc9000b11f078 EFLAGS: 00010287 [ 142.359544][ T9545] RAX: ffffffff898ccdf6 RBX: 00000000fffbffea RCX: 0000000000040000 [ 142.367521][ T9545] RDX: ffffc9000b352000 RSI: 0000000000003bb0 RDI: 0000000000003bb1 [ 142.375504][ T9545] RBP: dffffc0000000000 R08: ffffffff898ccde6 R09: 1ffff1100b584494 [ 142.383482][ T9545] R10: dffffc0000000000 R11: ffffed100b584495 R12: dffffc0000000000 [ 142.391460][ T9545] R13: ffff88805ac223c0 R14: 00000000ffffffea R15: 0000000000000000 [ 142.399438][ T9545] ? sk_skb_reason_drop+0x76/0x380 [ 142.404564][ T9545] ? sk_skb_reason_drop+0x86/0x380 [ 142.409686][ T9545] ? sk_skb_reason_drop+0x86/0x380 [ 142.414804][ T9545] ? ip_rcv_finish_core+0x129f/0x1b50 [ 142.420176][ T9545] ip_rcv_finish_core+0xfde/0x1b50 [ 142.425297][ T9545] ip_sublist_rcv+0x3b1/0xab0 [ 142.429984][ T9545] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 142.435187][ T9545] ? skb_orphan+0xae/0xd0 [ 142.439522][ T9545] ? __pfx_ip_rcv_finish+0x10/0x10 [ 142.444643][ T9545] ip_list_rcv+0x42b/0x480 [ 142.449068][ T9545] ? __pfx_ip_list_rcv+0x10/0x10 [ 142.454010][ T9545] ? __pfx_ip_list_rcv+0x10/0x10 [ 142.458946][ T9545] __netif_receive_skb_list_core+0x94e/0x980 [ 142.464941][ T9545] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 142.471530][ T9545] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 142.478038][ T9545] ? read_tsc+0x9/0x20 [ 142.482109][ T9545] ? timekeeping_get_ns+0x2c0/0x420 [ 142.487320][ T9545] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 142.493653][ T9545] netif_receive_skb_list_internal+0xa51/0xe30 [ 142.499816][ T9545] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 142.506151][ T9545] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 142.512825][ T9545] ? __pfx_eth_type_trans+0x10/0x10 [ 142.518023][ T9545] ? __phys_addr+0xba/0x170 [ 142.522533][ T9545] ? build_skb_around+0x111/0x260 [ 142.527565][ T9545] ? __xdp_build_skb_from_frame+0x313/0x650 [ 142.533483][ T9545] netif_receive_skb_list+0x55/0x4b0 [ 142.538770][ T9545] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 142.544240][ T9545] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 142.550147][ T9545] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 142.555717][ T9545] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 142.561526][ T9545] ? synchronize_rcu+0x11b/0x360 [ 142.566463][ T9545] ? __pfx_synchronize_rcu+0x10/0x10 [ 142.571769][ T9545] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 142.578027][ T9545] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 142.583943][ T9545] ? _copy_from_user+0x99/0xc0 [ 142.588714][ T9545] ? bpf_test_init+0x15a/0x180 [ 142.593484][ T9545] ? xdp_convert_md_to_buff+0x5b/0x330 [ 142.599034][ T9545] bpf_prog_test_run_xdp+0x805/0x11e0 [ 142.604414][ T9545] ? __pfx_lock_release+0x10/0x10 [ 142.609454][ T9545] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.615291][ T9545] ? __fget_files+0x29/0x470 [ 142.619890][ T9545] ? fput+0x1a8/0x230 [ 142.623876][ T9545] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.629688][ T9545] bpf_prog_test_run+0x2e4/0x360 [ 142.634632][ T9545] __sys_bpf+0x48d/0x810 [ 142.638885][ T9545] ? __pfx___sys_bpf+0x10/0x10 [ 142.643662][ T9545] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.649656][ T9545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.655991][ T9545] ? do_syscall_64+0x100/0x230 [ 142.660759][ T9545] __x64_sys_bpf+0x7c/0x90 [ 142.665174][ T9545] do_syscall_64+0xf3/0x230 [ 142.669680][ T9545] ? clear_bhb_loop+0x35/0x90 [ 142.674361][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.680256][ T9545] RIP: 0033:0x7fc22c37e719 [ 142.684672][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.704285][ T9545] RSP: 002b:00007fc22d0f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.712703][ T9545] RAX: ffffffffffffffda RBX: 00007fc22c535f80 RCX: 00007fc22c37e719 [ 142.720760][ T9545] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 142.728732][ T9545] RBP: 00007fc22c3f175e R08: 0000000000000000 R09: 0000000000000000 [ 142.736703][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.744669][ T9545] R13: 0000000000000000 R14: 00007fc22c535f80 R15: 00007ffd324894e8 [ 142.752667][ T9545] [ 142.756034][ T9545] Kernel Offset: disabled [ 142.760353][ T9545] Rebooting in 86400 seconds..