last executing test programs: 2.048046342s ago: executing program 4 (id=4280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.028224126s ago: executing program 1 (id=4281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xb2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x2400}, 0x4) 2.025355422s ago: executing program 3 (id=4282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000300)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r7, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x2c}}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000002, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000300)={0x5, 0x8, 0x4, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x118, 0x39, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x9}, @typed={0x8, 0x132, 0x0, 0x0, @pid}, @nested={0xf8, 0x2, 0x0, 0x1, [@typed={0xf4, 0xcb, 0x0, 0x0, @str='\x00\x1e\x95*\xe0&/9AR\xaf8\xd5\xc1Q\xcax\xac\t\xcaA\x12\xb4\xbc\"I\x00\xa4/%\x99\xd0\xc6\x9do5\x85\xae\x12\f\x0e\\\xf9\xbd\xe8zDof\xa6\x83wzj\x10As\xc4\xad\t\a\x92\v\xa4\xc3\xef[\xde\xd2m[\xc1\x88C\xba=9\x11\x98\xee\x8c\x05\xb4\xcd\r\x8d\xfb\x8dxz\xf7\x04\x00\x00\x00\x00\x00\x00\x00T\x1av\xa0&!\x1c\x8aM,\xa4\'\x99t\xb94\x14\xf3}.`R\xeeF49\xe4\x05\xa5\x17\x11\x80@o5\xaa\x82*\n\xcf\x16N\xea\xc8\xbe\xc9\x9e\xe64\x85\f\x19\xa85\xd9\x15x\xbcvnFR;C\xae-\x98\x01\xdf\xba{@\xbf\x04M\xb4\xe2be~\'\'\xba\xd0\xc7!\xff\xaa\xd0\xdf\x1c\xc1ddx\xa7\x9f\\\x11\x95J\'S\x9d\xaa\xf3\x81\xb2\xbf$|\x94miU\xd8\n\xecU\xfa`\xf0\xb6\x85\x8ex$\x1fu\xda\xe3\x91FJ\xdd\x95\xb0-\xcfA\xd2'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x200040c0}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) 1.877253818s ago: executing program 4 (id=4284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}, 0x1, 0x0, 0x4000}, 0x0) 1.784879367s ago: executing program 1 (id=4286): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="8484", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.692581146s ago: executing program 3 (id=4288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000019ac0)=@delchain={0x24, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}}, 0x24}}, 0x6004840) 1.668504876s ago: executing program 0 (id=4289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="d41b00003b0007010000000000000000027c00000400fc801000018054717f8008213700"], 0x1bd4}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0x401, 0x24, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b3f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r8, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c000780"], 0x80}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0xba01}, 0x0) 1.4091729s ago: executing program 4 (id=4290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)={0x11c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7f, 0x7, 0x7, 0x9, 0x6, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x12, 0xfff9, 0x4, 0x101, 0xffff, 0x7f, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf001, 0x5, 0x152f, 0x1, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1c38, 0x200, 0xd, 0x1, 0x443d, 0x38e, 0x3, 0x9]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x1, 0x8000, 0xffff, 0x3, 0x6, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x7}]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x81}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.3167323s ago: executing program 2 (id=4291): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700303a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000000060fd90fb93756500ff010000000000000a00000000000001ff000000000000000000ffffac1414aa"], 0x0) 1.294036974s ago: executing program 1 (id=4292): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd700279dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000000080000000000612e5f302e000000a9745589f14d71033b00000000000000"], 0x0, 0x2b, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r4}, 0x18) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8588d0cb9651d894, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x34, 0x0, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x34}, 0x5}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x4004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5bf5, 0x0, r3, 0xc199, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000800000000000000a100000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000007000000bf32fbad81c677157358c98a01ef6ab591000000000000b7020000020000008500000084000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x79, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd600a96460018060000000000000000000000000000000000fe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="604090eb9078000004020002"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r6}, 0x10) syz_emit_ethernet(0x73, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@x25={0x805, {0x3, 0x2, 0x1f, "7015d2ea3f103a7245dd2c1c6065111caada57c98c372ada82fb5afad49314ca79f6069ddc342294f9545a24a70c49cdb1f438f4849b8c60f59d83239465794fcecc61decca2b6222d24fdcf115bb795dc520f87017da1bc664bbf12b7e69ee8a51c"}}}}, &(0x7f0000000300)={0x0, 0x4, [0xc74, 0xf38, 0xd5d, 0xd43]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r2, 0x16, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup=r3, r1, 0x33, 0x0, r1, @void, @value=r4, @void, @void, r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd60e0ffff04128700631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0x61, 0x60000000}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.240835854s ago: executing program 3 (id=4293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001040000000000000200000085000000cd000000b7080000000000007b8af8ff00000000b70800000a0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b5186500000f000000000000000040010018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018420000fdffffff00000000000000009500000000000000c44afcfff8ffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9da2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x174d0, 0xffffffffffffffff, 0x7, &(0x7f0000000180)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x5, 0x1, 0x442846ae602f3553}, {0x5, 0x3, 0x10, 0x1}, {0x2, 0x2, 0x1, 0xb}, {0x1, 0x5, 0x4, 0xc}, {0x3, 0x5, 0x1, 0x8}, {0x5, 0x3, 0x9, 0x3}, {0x1, 0x4, 0x10, 0xb}], 0x10, 0x80000000, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r0, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000019ac0)=@delchain={0x24, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}}, 0x24}}, 0x6004840) 1.208092699s ago: executing program 4 (id=4294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.200589654s ago: executing program 3 (id=4295): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) r1 = socket(0x2c, 0x800, 0x80000001) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x34}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003d00)={'syztnl1\x00', &(0x7f0000003c80)={'ip6_vti0\x00', r3, 0x29, 0x7, 0x8, 0x2, 0xc, @dev={0xfe, 0x80, '\x00', 0x10}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7, 0x10, 0x0, 0x1}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000018c0)={0x0, 0x2}, &(0x7f0000001900)=0x8) sendmmsg$inet(r1, &(0x7f0000003d80)=[{{&(0x7f0000000100)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="09a34ffa37556a97063e96d91a51634390522ac67c5d0336e7f63e9e1077b39d5c5a18bd2da6caa1270f8fbb4ba882d5e85cff08d4986f528e3849b7c67ff9d937a4e8cca39730", 0x47}, {&(0x7f0000000300)="a0b7894a1d1e405d45c0f1", 0xb}, {&(0x7f0000000340)="4d999121d7ed4f3f1bb59ae582a1fd319f8f3f83fd1226948cec801d351f353921dee06dc28413b12f840399ef4c82be7125e107272008ffb99acd2e0d22097f41e5d21b6266f19acfc1f1d74473895476a28d6b82d8b0bb", 0x58}, {&(0x7f00000003c0)}], 0x4}}, {{&(0x7f0000000540)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000940)="c229fa74915d71ee1860ad0c0c439b105286b0564f42a51429f713508e5bf0377ecbb1f8a4d5af6ae85105ddd7efe3d8fd80e167133078ef57077d8d5a356912d9bd674b6cc3365e655d0e29f70fb38e3dd86183ae1ddf2befbe5e45e2b7e09e85df39d47dddef6686b438c59caaec3c63576516eb938377a57300d1e672c3ce", 0x80}, {&(0x7f00000009c0)="57660190203e5a63716f345424de9653649b13f67d991ecf21dfbf1fd889f211d0e8750ac6d801ee07dc96153db05b740fdaa490e4100f5b45525a9ebfcde1855ab691aef12a31c277cc670c7479252d89bed866a171fafb67a1de9a4640ae0a0a31cfecd37b0c67c82a37587300374ff89342708a9099ef92c9d789ad7f7949d0654020d08b52f607ccbb313b0744c06694b0e32ee39a76154f4624e73db1034393b28723c0ad50742accc336d3b2f7a0c33781de2671ec13d0c77db0e75950f0a3cc2fb21e9f94cfeb6578", 0xcc}, {&(0x7f0000000ac0)="b5daf0046099a301ee378f5214f68906460745357215b504c67bc6518c8a91c4c0f7c3f30b441605eba3313ee0b077d651b08ff36c6ae79414f84923c3f3cbb7bc8b54c34afa7535148ab879d7a41e15ebbdfca2528d56b47032647012499e064f1406d06b4964e878a2a439f12dfbdd023fb002b4209f5bb8de1a3ab79dc8a17af5ad45c9f7a9f0b1bb50040bf4411cbc5d3c1be40758fa441886e13b", 0x9d}, {&(0x7f00000005c0)="f32b627f687df553fab60745edf25982d84c2a33d1af0e8eab152756c309cab4997f0a861e003d4ed70ab8fc3f34d5f690", 0x31}], 0x4, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x68, [@local, @private=0xa010100, @multicast1, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x1f, 0x1f, [@rand_addr=0x64010102, @multicast2, @remote, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0xf5, 0x0, 0x2, [0xffffffff, 0x9]}, @generic={0x83, 0x9, "8a22af57845f0c"}, @generic={0x86, 0xf, "dbdbce414cb5f952e9450e9729"}, @timestamp_prespec={0x44, 0x2c, 0x4f, 0x3, 0x6, [{@loopback, 0x2}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x3}, {@empty, 0xfffffffb}, {@remote, 0x53}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xf0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003040)=[{&(0x7f0000000d00)="407ee35ad74d1d829d4dce91b3f1bb17e1be6ad3fe6fc61591eb500f5010b878493100c5a371c570b95a03804f1c8ca646bf31725c5cb04f20a1205505dcaea81466a5eb3e", 0x45}, {&(0x7f0000000d80)="8eec5c10b8c365c46aa8383b137358ab5284164a2cd640b234b81a61a473404ced807684a6f71b90d7126f655c409f12a018807df048d10e0a495c3d7f219aec5cbd4ee3809d4e5084658230b38910c4fe378149e23110ba016307340dd5a73d593b670df32daf24c5b045bbee", 0x6d}, {&(0x7f0000000e00)="911cc287decf4df083461231bfa376d09f5ceacf9ec0fe3a4df7e941df542d40ed2cd61083e2409e62eea89876c214d2d4d841204da44038dc3d6697199ac64847ff76527dfac3c1f032965a8194eaee59cb232c09ac0bb6a929f786fe103f4a7e7a", 0x62}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="bcf4d42129086504e039847a18a3514a9876095d1c586922734ce3688b487d5067b7c7ba2b7d0c0687867ffaaba1951d815db04a99c0979d1120bcfa0cc392724a1d2a2145552fdd8b492a92a726bde7497608125d4aac7e1dffec0bc9faf8c3c4b4d708815d72d577b9bed6333bb9e7da53010e65980550ea87e534d7cbcbed787e28794bd5c44b2dc6c89d", 0x8c}, {&(0x7f0000001f40)="adf440d063bae8b36e0833a4282097a9bc96d4040fe13b2ec2edccad1a6fdf19f664addf56dfb30d9215268036bf8bd2f8b80e6db5d87c2ddc918333b244d1ada7cd93d13f5027c74d95bcffcaf40e812cdb47af037421eb14df5b4bcb10a228aae318a9262bd667ebbaf53b16f9813ca51900ecf66c29456589139a62daf25fa7af8288e3b20eaa9365667e5fda5118eaaf98a496d7af3243aa45e03e9b25bdfb59e3369403b53f22fe7014ad670d0e6e226d645a5038c4c1bc70d6d34b45d2350e234c0c8603e37ae0bca357681820bfdfa82aedddd91f5691fe59c8150c2a573fed8a2a906f11", 0xe8}, {&(0x7f0000002040)="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", 0x1000}], 0x7, &(0x7f00000030c0)=[@ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xfe, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010101, 0x6}, {@broadcast, 0xe4ed}, {@local, 0x8}, {@private=0xa010100, 0x1}, {@broadcast, 0x3}, {@remote, 0x4}]}, @cipso={0x86, 0x34, 0x2, [{0x2, 0x4, "a48e"}, {0x1, 0xb, "02458c0d9b7cdf9262"}, {0x6, 0xb, "972a3b87900ba4c95a"}, {0x1, 0x12, "aec08acda30ab2f94e421752819c96d3"}, {0x1, 0x2}]}, @ssrr={0x89, 0x7, 0x12, [@loopback]}, @end, @timestamp_addr={0x44, 0x14, 0xc0, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x4}]}, @lsrr={0x83, 0x1b, 0x91, [@remote, @private=0xa010102, @rand_addr=0x64010100, @broadcast, @remote, @remote]}, @ssrr={0x89, 0x1b, 0x4a, [@remote, @remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @remote]}, @generic={0x94, 0xd, "215438909401921c432ff7"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x15, 0xffffffffffffffff, [{0x0, 0xf, "2b5e128bbc37d6f1df652f4854"}]}, @generic={0x44, 0x7, "32164e3f91"}]}}}], 0x158}}, {{&(0x7f0000003240)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000033c0)=[{&(0x7f0000003280)="b9f85faf05f0d847790e998193776afc6df6d8d14b42c1ea164f06c683d26d016447513de0f1c44080da643489172bd8b983a9d0ff9bff7d188eb6ccd9ec286bc40e2e1f7ff64cc6f1173c36f6e213079b4031f25202fc0d79608d924a272952ab108c0187206cce800f1842ed73db7d10a90deecb9029fedfb00ea12a55e79efb12d01cf80af5e8be38f6acfce7037c59bd1da8b58e3b8e0b09b69ec2b824fab9e40bd74f6274804a40947b36be6d90608c", 0xb2}, {&(0x7f0000003340)="574d4f6205d59dadcaaeb46cffbb0548535f9002fba3c35cbffd9f34c4517f88cfdee9e5aa2e45a5057db258c70c82ffebad8eff1d4c9cc63f1f1f542dca3b547552b532c72657c980d013775859be5b55706b8da4db75c3ec57359d46fb0f2a906e9d79c6dccb81549283e2dd4c766060f8b69338b2da42", 0x78}], 0x2, &(0x7f0000003400)=[@ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x7, [{@private=0xa010102, 0x2b84}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @cipso={0x86, 0x33, 0x0, [{0x6, 0x12, "90f99490b437ee27ef1f6347dfe5846b"}, {0x5, 0x4, "1c4e"}, {0x1, 0x6, "b0734feb"}, {0x1, 0x11, "3a21486a5acfc9c6033c29d480983d"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @rand_addr=0x64010100}}}], 0x78}}, {{&(0x7f0000003480)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003540)=[{&(0x7f00000034c0)="7e5451c12b1c1c212f165ceb5344404d1ec6231533ff92c8400b7e101d0b345deb9a440356ac98ea2d4d95e6c70b2c027ba5178477c32795131f075ad687ffb7ebca13ec57a74f115d7aa71a058c560f0f7961bd34d1349eda2b40403c6302c0a139316d6804cf78d572ecb5ed6929923f71c4ba", 0x74}], 0x1, &(0x7f0000003580)=[@ip_retopts={{0x90, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x3, 's'}, @rr={0x7, 0x27, 0x89, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xcd, 0x1, 0x0, [{@multicast2, 0x7fffffff}]}, @rr={0x7, 0x23, 0x8e, [@private=0xa010102, @multicast1, @loopback, @broadcast, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0x0, [{@private=0xa010100, 0x1}]}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0xf, 0x8a, [@broadcast, @loopback, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xa8}}, {{&(0x7f0000003640)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003780)=[{&(0x7f0000003680)="6f6a60ac25ad819a7f80ec12ac9765bc0ba915a84fb3ce0c1895828650bc6eb81526ea6ba9a7c51fec89357587ce648301ecd23a05efd25f9118e7323c464b6e176114ba713013141279c3f54a39c2125500877822e9b5e152a246273ae25431", 0x60}, {&(0x7f0000003700)="ef314a64d414e51dd36d547a4576ee96219127903231ab528acbdc94f6898b78119bac2321987ee8f5c7136607e175a3da41c6dba7ac22ac8243d210dabbcc5add70b8cc7e6929fa3810715b89c9b80b2c0148c26244db08ad", 0x59}], 0x2, &(0x7f00000037c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x2, 0xa, "75f314b740714b18"}, {0x0, 0x4, "14ab"}, {0x6, 0x4, "59f5"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010102, @private=0xa010102}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0x80, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_prespec={0x44, 0x4c, 0x8, 0x3, 0x9, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0xf}, {@loopback, 0x6}, {@loopback, 0x3}, {@private=0xa010101, 0x1}, {@multicast2, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x1ff}, {@private=0xa010100, 0x5}]}]}}}], 0xf8}}, {{&(0x7f00000038c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003900)="340ac66269fcdaeb7e23c9a3cbe3e0a7d84d64450758236cce3123edb149cebeef1fef525d32b7e83870f141cd4b547ac31b6d7df5e9636512a674161bbe29e22a923879cfd11a0510e0cce663a1864cdfa576dc855c515fce1006b8c1914b49b51e7056cf0148b7531c5e33089a7c2d7b90b68a8cf28b9d81f2577c7a6e7f0ff8340a103dcef0570a7f7abd", 0x8c}], 0x1}}, {{&(0x7f0000003a00)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003a40)="5ba60d6277e307db16dea4d7080aa3b9b5ac57ead990247f61fd6acb60f6ac95adb5b0d5bc299b0dc1f3f77aa7ed7dcea96c64bf124103dd91563e7bad", 0x3d}, {&(0x7f0000003a80)="3734ce23bb5ccb9a0375f2701f76f271bab0c6c954cd9e5eaf85312a6ed4cce98cac56562457d8170fb8f3bd9f4f295500247b52da73f645b258ad3683edff884799387cb0c6bd636d52865eb4dcc38d43cda3a8a57e590119d1ff7cffcd4ee64912ec72eedd2441213a3c57a8ca20594bdfd7b290a8eb2292c20a4ea9f861e949ed60181db9ab81be843ffb7444ed2fe2b158ca01c3801ea7f66adf5735287476669246487143c310b6f3b25a5b239193113edf996a6882a3ed92242b71c86d7b6eac6f17", 0xc5}, {&(0x7f0000003b80)="96d29cdcd56b5f2b939d70c47623e56169a62a61a361000a3e07e1e13e53ebd50c13dd857a2aa1d4c576e80dc65ea3bcb1c4c7532644f7b1aa582e0c1e0097f94b0b4860c742365d5600219756ed7c942f457f14b255445226d6a930924cccdadf456e16334ae29539f2ff1f440c6b49740adff527c06230fdb48da7ad68517d7815704cbdf868c69d552eaadca1216d35f1e8c7dc9ec90fd00b349e0bfe3f0dd3b327ec16ac13afce88d52f9094bdc821cc5fc98bb39082c348b9c231b3", 0xbe}], 0x3, &(0x7f0000003d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}}}}], 0x20}}], 0x8, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=@delqdisc={0x258, 0x25, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x1}}}}, @TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x6, 0x6, 0x0, 0xc199, 0x667d2e53, 0x9}}, {0x16, 0x2, [0x80, 0x1, 0x3, 0x6, 0x5, 0xc, 0x8e8, 0x8001, 0x1]}}, {{0x1c, 0x1, {0x6, 0x2, 0xa, 0xffffffff, 0x1, 0xf52, 0x0, 0x9}}, {0x16, 0x2, [0x3, 0xb, 0x5, 0x5c7b, 0x0, 0x6, 0x1, 0x2, 0x7]}}, {{0x1c, 0x1, {0xd2, 0x80, 0x0, 0x1, 0x1, 0x9, 0x1, 0x2}}, {0x8, 0x2, [0x200, 0x921d]}}, {{0x1c, 0x1, {0x7, 0x3, 0x8001, 0x80000000, 0x3, 0x1, 0x7, 0x7}}, {0x12, 0x2, [0x1, 0x9, 0x949, 0x42ba, 0x6, 0x6, 0x7f]}}, {{0x1c, 0x1, {0x8, 0xbd, 0x3ff, 0xffffff01, 0x0, 0x2, 0x5, 0x8}}, {0x14, 0x2, [0x401, 0x7, 0x1, 0x1, 0x3, 0x9, 0x3, 0xfff9]}}, {{0x1c, 0x1, {0x4, 0x8, 0x40, 0x0, 0x0, 0xe1, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x80, 0x1, 0x9, 0x8000, 0x2, 0x7ff, 0x6, 0x6}}, {0x10, 0x2, [0x9, 0x3, 0xe1, 0x397b, 0x3, 0x1]}}, {{0x1c, 0x1, {0x9, 0x6, 0x734, 0x40000, 0x2, 0xe, 0xfffffff7, 0x5}}, {0xe, 0x2, [0x6, 0xff, 0x3, 0x12, 0x96b]}}, {{0x1c, 0x1, {0x10, 0xe, 0x7, 0x6, 0x1, 0x200, 0x7fff, 0x2}}, {0x8, 0x2, [0x7, 0x3]}}]}, @qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x6, 0x3, 0x7, 0x5}}]}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x54, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x2}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xb08}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xc}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfc62}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1e2b}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2f}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x258}, 0x1, 0x0, 0x0, 0x800}, 0x4010) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000003f80)={'syztnl0\x00', r4, 0x8000, 0x40, 0xffffffff, 0x9fc, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0xb, 0xfc, [@multicast2, @multicast1]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x6, 0x4, "83bf"}]}, @cipso={0x86, 0x20, 0x2, [{0x1, 0x7, "959f5c24de"}, {0x1, 0xc, "8afe18b40990a73e9a94"}, {0x0, 0x7, "279f267ea4"}]}]}}}}}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbff"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.037981091s ago: executing program 3 (id=4296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000240)=0xfe29) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, 0x0, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) 1.037352068s ago: executing program 2 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000030428bd70000000000000000000", @ANYBLOB="1eb82c17571e2baa011cf28d337decfcfe2df17a0b8885a6d1ccd01ff983bea97bbb1f80cf6feef2a824ae145f4e118da364b0e8e2064f7f7bb7929db30d4e1b212a281d4b05967d161829a122a604a260b092d0f56654de37c2504cf7694fc41712061b1c0e7e36c3c4e3a6646f1371bcd01f0eea3399343214dfac6df26b313c505ef3f717eb316d3fa374bd6d6021cccb07be0ccd50e54275eef4bc4436f981456c1835791b1a", @ANYBLOB="b0100400000000002c00128009000100766c616e000000001c000280100003800c0001000000000008004000060001000000000008000500e43122d20d5f81179256dc70e85458e73b2d09ba339b04180c298a6f8b28d502758b87d6a8c9efdae2cb77b972b224aa68786f5972cdb1341d376995891a9150722984304de5f64d72d6948e897e361f4bde936498247c0b784e15d645e051d0bac856e9f42d3daf0325155dabe77234495ce1aca52b65bd6a5fe01031f31ad3612439e81fd58cd5a75398ba276d4e68114751910ea520aa6761b1d95f04964949d8b1572ad08b3b04", @ANYRESOCT=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYRES8=0x0], 0x5c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 908.92278ms ago: executing program 4 (id=4298): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000240)=0xfe29) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x80) pipe(&(0x7f0000000040)) syz_emit_ethernet(0x0, 0x0, 0x0) 872.329265ms ago: executing program 2 (id=4299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000300)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r7, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x2c}}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000002, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000300)={0x5, 0x8, 0x4, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x118, 0x39, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x9}, @typed={0x8, 0x132, 0x0, 0x0, @pid}, @nested={0xf8, 0x2, 0x0, 0x1, [@typed={0xf4, 0xcb, 0x0, 0x0, @str='\x00\x1e\x95*\xe0&/9AR\xaf8\xd5\xc1Q\xcax\xac\t\xcaA\x12\xb4\xbc\"I\x00\xa4/%\x99\xd0\xc6\x9do5\x85\xae\x12\f\x0e\\\xf9\xbd\xe8zDof\xa6\x83wzj\x10As\xc4\xad\t\a\x92\v\xa4\xc3\xef[\xde\xd2m[\xc1\x88C\xba=9\x11\x98\xee\x8c\x05\xb4\xcd\r\x8d\xfb\x8dxz\xf7\x04\x00\x00\x00\x00\x00\x00\x00T\x1av\xa0&!\x1c\x8aM,\xa4\'\x99t\xb94\x14\xf3}.`R\xeeF49\xe4\x05\xa5\x17\x11\x80@o5\xaa\x82*\n\xcf\x16N\xea\xc8\xbe\xc9\x9e\xe64\x85\f\x19\xa85\xd9\x15x\xbcvnFR;C\xae-\x98\x01\xdf\xba{@\xbf\x04M\xb4\xe2be~\'\'\xba\xd0\xc7!\xff\xaa\xd0\xdf\x1c\xc1ddx\xa7\x9f\\\x11\x95J\'S\x9d\xaa\xf3\x81\xb2\xbf$|\x94miU\xd8\n\xecU\xfa`\xf0\xb6\x85\x8ex$\x1fu\xda\xe3\x91FJ\xdd\x95\xb0-\xcfA\xd2'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x200040c0}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) 841.069264ms ago: executing program 0 (id=4300): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 756.684785ms ago: executing program 1 (id=4301): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readv(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b3019c2873", 0x5, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) 709.913633ms ago: executing program 1 (id=4302): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="8484", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 707.982398ms ago: executing program 0 (id=4303): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x104, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x51dc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbc9}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e14a6f0}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x48841}, 0xc801) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0xfffd, 0x8002}, 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 585.881576ms ago: executing program 2 (id=4304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)={0x11c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7f, 0x7, 0x7, 0x9, 0x6, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x12, 0xfff9, 0x4, 0x101, 0xffff, 0x7f, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf001, 0x5, 0x152f, 0x1, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1c38, 0x200, 0xd, 0x1, 0x443d, 0x38e, 0x3, 0x9]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x1, 0x8000, 0xffff, 0x3, 0x6, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x7}]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x81}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 516.619582ms ago: executing program 1 (id=4305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x110, r5, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x2}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6d}, @NL80211_ATTR_IE={0xaf, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x20}}, @peer_mgmt={0x75, 0x8, {0x0, 0x8, @val=0x4, @val=0x3c, @void}}, @random={0xcb, 0x96, "073d51c7978b412665d9d923719f519ee454f9319a5936b5df5b507b14df0f9da3e0df2eb4369256cce5dafcbd4983866156abdcc909743339a78ea371069bf705c7f558172c24c0234352184c9aca2ebbd4cdaab7f204084a98c5fd7a9c5e3c6bde4210cdb7ed4bedeaa88dee6a6f9ddac24508a0fea1eab596196b4be297c9138b9e8cdaf7f3d47e42a82c393d5504bb67ad6baf70"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f8fc27a6dcc6"}]}, 0x110}}, 0x200000c0) 516.104302ms ago: executing program 2 (id=4306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x8901, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYBLOB="010000000000000000001a00000018000d801400008008000300090000000800040008000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000100)=@buf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/27, 0x1b}, 0x8}, {{&(0x7f00000000c0)=@ethernet, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x409, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00'}) 491.286197ms ago: executing program 0 (id=4307): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000060a0b040000000000000000020000001bb704802800018007000100637400001c0002800800014000000001050003000000000008000240000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x1) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x6, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000010000009"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000019ac0)=@delchain={0x24, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}}, 0x24}}, 0x6004840) 404.20252ms ago: executing program 2 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) close(r2) sendto$inet6(r1, &(0x7f0000000140)="c5cbff3b2e626ab0f365245510bf38c7fcf9f78fdad9e04464", 0x19, 0x3b00, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xce, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0xf, 0x75, [@loopback, @loopback, @multicast1]}]}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 116.791987ms ago: executing program 0 (id=4309): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x8, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0x1a}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 27.65955ms ago: executing program 3 (id=4310): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f00000009c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3ca02c18f3d504f3c4", @ANYRES16=r2, @ANYBLOB="010000000000000000000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000000000b0000000000"], 0x3c}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140037800a"], 0x38}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000004a10100050027"], 0x28}}, 0x40000) r7 = socket$kcm(0x2, 0x922000000001, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b040000000000000000020000000900010073797a30003ad1000900020073797a3200000000050007402d000000140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0x54, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x54}}, 0x40054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x0, 0x4, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r7, 0x1, 0x43, &(0x7f0000000000), 0xff7b) sendmsg$inet(r7, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0}, 0x24000098) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000680)) pipe(&(0x7f0000000080)) 24.9565ms ago: executing program 4 (id=4311): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0xffffffff) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x240448c4) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) recvmmsg(r4, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/173, 0xad}], 0x1}, 0x5}], 0x1, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)}, 0x8001) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', 0x0}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffd, @multicast1}, 0xfffffffe, 0xfffffffd, 0x0, 0x4}}, 0x2e) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/19]) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0xf4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xbd, 0x0, 0x2aed, 0x7, 0x0, 0x10, 0xc, 0x6}}, {0x10, 0x2, [0x6ec, 0x3ff, 0xc, 0x9, 0x40, 0x81]}}, {{0x1c, 0x1, {0x6, 0xff, 0xfffc, 0x5, 0x0, 0x0, 0x100, 0x9}}, {0x16, 0x2, [0x40, 0x8, 0x2, 0xfaea, 0x1ff, 0x100, 0xe77, 0x0, 0x3]}}, {{0x1c, 0x1, {0x1, 0x9, 0x1000, 0x6, 0x1, 0x1, 0xc8, 0x7}}, {0x12, 0x2, [0x6, 0x4, 0xc462, 0x8, 0x7, 0x90, 0x7]}}, {{0x1c, 0x1, {0x7, 0x80, 0xffff, 0x8, 0x0, 0x2, 0x1, 0x9}}, {0x16, 0x2, [0x6, 0x100, 0x4, 0x4, 0x83a, 0xffe8, 0xfff6, 0x6, 0x6]}}]}]}, 0xf4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r6, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 0 (id=4312): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readv(r0, &(0x7f0000001240), 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b3019c2873", 0x5, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) kernel console output (not intermixed with test programs): ve_0 removed [ 360.722843][T16667] team0: Port device team_slave_1 removed [ 360.729537][T16667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.737259][T16667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.758392][T16667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.766252][T16667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.793182][T16667] hsr0: left allmulticast mode [ 360.798344][T16667] hsr_slave_0: left allmulticast mode [ 360.803887][T16667] hsr_slave_1: left allmulticast mode [ 360.810232][T16667] hsr0: left promiscuous mode [ 360.816088][T16667] bridge0: port 4(hsr0) entered disabled state [ 360.830916][T16667] batadv1: left allmulticast mode [ 360.836366][T16667] batadv1: left promiscuous mode [ 360.841450][T16667] bridge0: port 3(batadv1) entered disabled state [ 360.850311][T16667] vlan3: left allmulticast mode [ 360.859879][T16667] vlan3: left promiscuous mode [ 360.865080][T16667] bridge0: port 5(vlan3) entered disabled state [ 361.088062][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3169'. [ 361.133938][T16695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3169'. [ 361.359221][T16566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.400302][T16566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.510394][T16566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.679739][T16566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.819986][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 361.979241][ T5849] Bluetooth: hci5: command tx timeout [ 362.289580][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.437793][T16747] FAULT_INJECTION: forcing a failure. [ 362.437793][T16747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.461410][ T9187] hsr_slave_0: left promiscuous mode [ 362.485369][T16747] CPU: 1 UID: 0 PID: 16747 Comm: syz.2.3186 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 362.485395][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.485406][T16747] Call Trace: [ 362.485412][T16747] [ 362.485419][T16747] dump_stack_lvl+0x241/0x360 [ 362.485445][T16747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.485461][T16747] ? __pfx__printk+0x10/0x10 [ 362.485480][T16747] ? __pfx_lock_release+0x10/0x10 [ 362.485510][T16747] should_fail_ex+0x40a/0x550 [ 362.485536][T16747] _copy_from_iter+0x1df/0x1c40 [ 362.485556][T16747] ? __virt_addr_valid+0x183/0x530 [ 362.485572][T16747] ? __pfx_lock_release+0x10/0x10 [ 362.485599][T16747] ? __alloc_skb+0x28f/0x440 [ 362.485615][T16747] ? __pfx__copy_from_iter+0x10/0x10 [ 362.485636][T16747] ? __virt_addr_valid+0x183/0x530 [ 362.485650][T16747] ? __virt_addr_valid+0x183/0x530 [ 362.485664][T16747] ? __virt_addr_valid+0x45f/0x530 [ 362.485680][T16747] ? __phys_addr_symbol+0x2f/0x70 [ 362.485701][T16747] ? __check_object_size+0x47a/0x730 [ 362.485726][T16747] netlink_sendmsg+0x742/0xcb0 [ 362.485759][T16747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.485785][T16747] ? aa_sock_msg_perm+0x91/0x160 [ 362.485811][T16747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.485829][T16747] __sock_sendmsg+0x221/0x270 [ 362.485853][T16747] ____sys_sendmsg+0x53a/0x860 [ 362.485878][T16747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.485894][T16747] ? __fget_files+0x2a/0x410 [ 362.485918][T16747] ? __fget_files+0x2a/0x410 [ 362.485947][T16747] __sys_sendmsg+0x269/0x350 [ 362.485970][T16747] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.486001][T16747] ? do_sys_openat2+0x17a/0x1d0 [ 362.486046][T16747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.486070][T16747] ? do_syscall_64+0x100/0x230 [ 362.486092][T16747] ? do_syscall_64+0xb6/0x230 [ 362.486114][T16747] do_syscall_64+0xf3/0x230 [ 362.486133][T16747] ? clear_bhb_loop+0x35/0x90 [ 362.486156][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.486176][T16747] RIP: 0033:0x7f6f9398d169 [ 362.486190][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.486205][T16747] RSP: 002b:00007f6f9474c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.486222][T16747] RAX: ffffffffffffffda RBX: 00007f6f93ba5fa0 RCX: 00007f6f9398d169 [ 362.486234][T16747] RDX: 0000000000001000 RSI: 0000400000000b00 RDI: 0000000000000004 [ 362.486244][T16747] RBP: 00007f6f9474c090 R08: 0000000000000000 R09: 0000000000000000 [ 362.486254][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.486264][T16747] R13: 0000000000000000 R14: 00007f6f93ba5fa0 R15: 00007fff13693148 [ 362.486290][T16747] [ 362.487579][ T9187] hsr_slave_1: left promiscuous mode [ 363.583151][T16745] syz_tun: entered allmulticast mode [ 363.601417][T16751] syz_tun: left allmulticast mode [ 363.655952][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.679974][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.687151][ T9817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.699794][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.706940][ T9818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.957786][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'. [ 364.052395][T16785] netlink: 'syz.0.3193': attribute type 1 has an invalid length. [ 364.064570][T16785] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3193'. [ 364.074754][ T5849] Bluetooth: hci5: command tx timeout [ 364.119669][T16789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3199'. [ 364.230895][T16795] FAULT_INJECTION: forcing a failure. [ 364.230895][T16795] name failslab, interval 1, probability 0, space 0, times 0 [ 364.243870][T16795] CPU: 1 UID: 0 PID: 16795 Comm: syz.3.3200 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 364.243894][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.243907][T16795] Call Trace: [ 364.243912][T16795] [ 364.243919][T16795] dump_stack_lvl+0x241/0x360 [ 364.243943][T16795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.243960][T16795] ? __pfx__printk+0x10/0x10 [ 364.243987][T16795] should_fail_ex+0x40a/0x550 [ 364.244013][T16795] should_failslab+0xac/0x100 [ 364.244033][T16795] ? skb_clone+0x20c/0x390 [ 364.244050][T16795] kmem_cache_alloc_noprof+0x70/0x380 [ 364.244073][T16795] skb_clone+0x20c/0x390 [ 364.244099][T16795] __netlink_deliver_tap+0x3c4/0x7f0 [ 364.244130][T16795] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.244150][T16795] netlink_deliver_tap+0x19d/0x1b0 [ 364.244173][T16795] netlink_unicast+0x7c4/0x990 [ 364.244200][T16795] ? __pfx_netlink_unicast+0x10/0x10 [ 364.244217][T16795] ? __virt_addr_valid+0x45f/0x530 [ 364.244232][T16795] ? __phys_addr_symbol+0x2f/0x70 [ 364.244245][T16795] ? __check_object_size+0x47a/0x730 [ 364.244269][T16795] netlink_sendmsg+0x8de/0xcb0 [ 364.244301][T16795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.244325][T16795] ? aa_sock_msg_perm+0x91/0x160 [ 364.244346][T16795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.244364][T16795] __sock_sendmsg+0x221/0x270 [ 364.244385][T16795] ____sys_sendmsg+0x53a/0x860 [ 364.244412][T16795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.244426][T16795] ? __fget_files+0x2a/0x410 [ 364.244451][T16795] ? __fget_files+0x2a/0x410 [ 364.244481][T16795] __sys_sendmsg+0x269/0x350 [ 364.244503][T16795] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.244535][T16795] ? do_sys_openat2+0x17a/0x1d0 [ 364.244584][T16795] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.244608][T16795] ? do_syscall_64+0x100/0x230 [ 364.244639][T16795] ? do_syscall_64+0xb6/0x230 [ 364.244661][T16795] do_syscall_64+0xf3/0x230 [ 364.244680][T16795] ? clear_bhb_loop+0x35/0x90 [ 364.244703][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.244732][T16795] RIP: 0033:0x7f2b9738d169 [ 364.244748][T16795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.244762][T16795] RSP: 002b:00007f2b98226038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.244780][T16795] RAX: ffffffffffffffda RBX: 00007f2b975a5fa0 RCX: 00007f2b9738d169 [ 364.244792][T16795] RDX: 0000000000001000 RSI: 0000400000000b00 RDI: 0000000000000004 [ 364.244803][T16795] RBP: 00007f2b98226090 R08: 0000000000000000 R09: 0000000000000000 [ 364.244813][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.244823][T16795] R13: 0000000000000000 R14: 00007f2b975a5fa0 R15: 00007fff12b16268 [ 364.244851][T16795] [ 364.583796][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.630792][T16801] syz_tun: entered allmulticast mode [ 364.639229][T16801] syz_tun: left allmulticast mode [ 364.999061][T16812] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3204'. [ 365.011285][T16812] openvswitch: netlink: Missing key (keys=40, expected=80) [ 365.023606][T16812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3204'. [ 365.034604][T16812] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 365.042364][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 365.158166][T16566] veth0_vlan: entered promiscuous mode [ 365.168061][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 365.220983][T16566] veth1_vlan: entered promiscuous mode [ 365.296748][ T9187] IPVS: stop unused estimator thread 0... [ 365.396372][T16566] veth0_macvtap: entered promiscuous mode [ 365.454829][T16566] veth1_macvtap: entered promiscuous mode [ 365.601249][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.748946][T16841] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 365.788554][T16841] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 365.797050][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.878785][T16566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.905939][T16566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.921653][T16566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.935516][T16566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.981298][T16843] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.091223][T16843] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.177870][T16843] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.241017][T16849] lo: entered promiscuous mode [ 366.261324][T16849] lo: left allmulticast mode [ 366.279094][T16849] tunl0: entered promiscuous mode [ 366.297040][T16849] gre0: entered promiscuous mode [ 366.302559][T16849] gretap0: entered promiscuous mode [ 366.311721][T16849] erspan0: entered promiscuous mode [ 366.317687][T16849] ip_vti0: entered promiscuous mode [ 366.323438][T16849] ip6_vti0: entered promiscuous mode [ 366.330264][T16849] sit0: entered promiscuous mode [ 366.338384][T16849] ip6tnl0: entered promiscuous mode [ 366.347906][T16849] ip6gre0: entered promiscuous mode [ 366.353633][T16849] syz_tun: entered promiscuous mode [ 366.359651][T16849] ip6gretap0: entered promiscuous mode [ 366.365995][T16849] vcan0: entered promiscuous mode [ 366.371356][T16849] bond0: entered promiscuous mode [ 366.378562][T16849] dummy0: entered promiscuous mode [ 366.384782][T16849] nlmon0: entered promiscuous mode [ 366.392183][T16849] caif0: entered promiscuous mode [ 366.398607][T16849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.421422][T16843] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.580835][T10486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.593607][T16843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.617402][T10486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.625243][T16843] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.790223][T16843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.842001][T16843] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.853577][T16860] netlink: 7084 bytes leftover after parsing attributes in process `syz.0.3218'. [ 366.896656][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 366.907629][T10486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.926329][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3216'. [ 366.934547][T10486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.944338][T16854] netlink: 'syz.1.3216': attribute type 6 has an invalid length. [ 367.013457][T16860] netlink: 'syz.0.3218': attribute type 3 has an invalid length. [ 367.033561][T16860] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.3218'. [ 367.059641][T16860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.179628][T16873] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3220'. [ 367.279043][T16872] tipc: Enabling of bearer rejected, failed to enable media [ 367.386751][T16877] lo speed is unknown, defaulting to 1000 [ 367.392585][T16877] lo speed is unknown, defaulting to 1000 [ 367.430948][T16877] lo speed is unknown, defaulting to 1000 [ 367.514562][T16877] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 367.554566][T16883] syz_tun: entered allmulticast mode [ 367.579729][T16877] lo speed is unknown, defaulting to 1000 [ 367.587286][T16877] lo speed is unknown, defaulting to 1000 [ 367.595988][T16877] lo speed is unknown, defaulting to 1000 [ 367.644559][T16877] lo speed is unknown, defaulting to 1000 [ 367.680874][T16877] lo speed is unknown, defaulting to 1000 [ 367.700165][T16885] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3226'. [ 367.725558][T16877] lo speed is unknown, defaulting to 1000 [ 367.751661][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 367.766325][T16876] syz_tun: left allmulticast mode [ 367.929604][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.944513][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.955245][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.975448][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.986114][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.995918][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.041689][T16893] lo speed is unknown, defaulting to 1000 [ 368.152736][T16891] lo speed is unknown, defaulting to 1000 [ 368.156881][T16889] geneve2: entered promiscuous mode [ 368.391988][ T9815] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.560945][T16912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.667384][T16912] bridge0: port 3(vlan2) entered blocking state [ 368.673741][T16912] bridge0: port 3(vlan2) entered disabled state [ 368.715161][T16912] vlan2: entered allmulticast mode [ 368.780298][T16912] vlan2: entered promiscuous mode [ 368.826256][ T9815] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.959107][ T9815] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.254070][ T9815] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.397217][T16945] syz_tun: entered allmulticast mode [ 369.406275][T16945] syz_tun: left allmulticast mode [ 369.586018][T16954] netlink: 'syz.3.3245': attribute type 3 has an invalid length. [ 369.596733][T16954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.596833][T16891] chnl_net:caif_netlink_parms(): no params data found [ 370.054574][ T5849] Bluetooth: hci2: command tx timeout [ 370.208193][T16968] __nla_validate_parse: 7 callbacks suppressed [ 370.208210][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3250'. [ 370.230300][T16968] netlink: 'syz.3.3250': attribute type 7 has an invalid length. [ 370.231926][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'. [ 370.238183][T16968] netlink: 'syz.3.3250': attribute type 8 has an invalid length. [ 370.271878][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3250'. [ 370.756961][ T9815] dvmrp0 (unregistering): left allmulticast mode [ 371.142548][ T9815] bond0 (unregistering): Released all slaves [ 371.267365][ T9815] bond1 (unregistering): Released all slaves [ 371.277873][ T9815] bond2 (unregistering): Released all slaves [ 371.290432][ T9815] bond3 (unregistering): Released all slaves [ 371.494723][ T9815] tipc: Left network mode [ 371.599338][T16985] lo speed is unknown, defaulting to 1000 [ 371.764442][T17001] FAULT_INJECTION: forcing a failure. [ 371.764442][T17001] name failslab, interval 1, probability 0, space 0, times 0 [ 371.768041][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.778153][T17001] CPU: 1 UID: 0 PID: 17001 Comm: syz.3.3260 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 371.778176][T17001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.778186][T17001] Call Trace: [ 371.778192][T17001] [ 371.778199][T17001] dump_stack_lvl+0x241/0x360 [ 371.778225][T17001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.778242][T17001] ? __pfx__printk+0x10/0x10 [ 371.778265][T17001] ? ref_tracker_alloc+0x332/0x490 [ 371.778284][T17001] should_fail_ex+0x40a/0x550 [ 371.778310][T17001] should_failslab+0xac/0x100 [ 371.778331][T17001] ? skb_clone+0x20c/0x390 [ 371.778350][T17001] kmem_cache_alloc_noprof+0x70/0x380 [ 371.778376][T17001] skb_clone+0x20c/0x390 [ 371.778397][T17001] __netlink_deliver_tap+0x3c4/0x7f0 [ 371.778430][T17001] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.778450][T17001] netlink_deliver_tap+0x19d/0x1b0 [ 371.778472][T17001] netlink_sendskb+0x68/0x140 [ 371.778493][T17001] netlink_unicast+0x39d/0x990 [ 371.778510][T17001] ? __asan_memcpy+0x40/0x70 [ 371.778534][T17001] ? __pfx_netlink_unicast+0x10/0x10 [ 371.778562][T17001] netlink_rcv_skb+0x294/0x480 [ 371.778584][T17001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.778603][T17001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.778636][T17001] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 371.778671][T17001] genl_rcv+0x28/0x40 [ 371.778686][T17001] netlink_unicast+0x7f6/0x990 [ 371.778713][T17001] ? __pfx_netlink_unicast+0x10/0x10 [ 371.778730][T17001] ? __virt_addr_valid+0x45f/0x530 [ 371.778747][T17001] ? __phys_addr_symbol+0x2f/0x70 [ 371.778761][T17001] ? __check_object_size+0x47a/0x730 [ 371.778786][T17001] netlink_sendmsg+0x8de/0xcb0 [ 371.778825][T17001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.778850][T17001] ? aa_sock_msg_perm+0x91/0x160 [ 371.778879][T17001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.778898][T17001] __sock_sendmsg+0x221/0x270 [ 371.778923][T17001] ____sys_sendmsg+0x53a/0x860 [ 371.778949][T17001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.778965][T17001] ? __fget_files+0x2a/0x410 [ 371.778990][T17001] ? __fget_files+0x2a/0x410 [ 371.779018][T17001] __sys_sendmsg+0x269/0x350 [ 371.779042][T17001] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.779071][T17001] ? do_sys_openat2+0x17a/0x1d0 [ 371.779118][T17001] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 371.779141][T17001] ? do_syscall_64+0x100/0x230 [ 371.779163][T17001] ? do_syscall_64+0xb6/0x230 [ 371.779189][T17001] do_syscall_64+0xf3/0x230 [ 371.779208][T17001] ? clear_bhb_loop+0x35/0x90 [ 371.779230][T17001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.779250][T17001] RIP: 0033:0x7f2b9738d169 [ 371.779264][T17001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.779277][T17001] RSP: 002b:00007f2b98226038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.779295][T17001] RAX: ffffffffffffffda RBX: 00007f2b975a5fa0 RCX: 00007f2b9738d169 [ 371.779306][T17001] RDX: 0000000000001000 RSI: 0000400000000b00 RDI: 0000000000000004 [ 371.779316][T17001] RBP: 00007f2b98226090 R08: 0000000000000000 R09: 0000000000000000 [ 371.779326][T17001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.779335][T17001] R13: 0000000000000000 R14: 00007f2b975a5fa0 R15: 00007fff12b16268 [ 371.779361][T17001] [ 372.135654][ T5849] Bluetooth: hci2: command tx timeout [ 372.169341][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.178245][T16891] bridge_slave_0: entered allmulticast mode [ 372.185698][T16891] bridge_slave_0: entered promiscuous mode [ 372.206860][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.215088][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.222345][T16891] bridge_slave_1: entered allmulticast mode [ 372.229737][T16891] bridge_slave_1: entered promiscuous mode [ 372.236250][T10486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.244786][T10486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.385737][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.527382][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.755020][T16891] team0: Port device team_slave_0 added [ 372.866265][T16891] team0: Port device team_slave_1 added [ 372.887750][T17037] lo speed is unknown, defaulting to 1000 [ 372.902055][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 373.072243][T17048] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 373.084597][T17048] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 373.192275][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.227270][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.268647][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.335964][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.362396][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.449611][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.628826][T16891] hsr_slave_0: entered promiscuous mode [ 373.658022][T16891] hsr_slave_1: entered promiscuous mode [ 373.713652][T17073] SET target dimension over the limit! [ 373.755019][T16891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.768734][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'. [ 373.787353][T16891] Cannot create hsr debugfs directory [ 373.950740][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3283'. [ 374.214483][ T5849] Bluetooth: hci2: command tx timeout [ 374.241454][T17092] netlink: 7084 bytes leftover after parsing attributes in process `syz.2.3285'. [ 374.366814][T17094] tipc: Started in network mode [ 374.371744][T17094] tipc: Node identity 5f000300000000004000000000003a2d, cluster identity 4711 [ 374.398715][T17092] netlink: 'syz.2.3285': attribute type 3 has an invalid length. [ 374.413575][T17094] tipc: Enabling of bearer rejected, failed to enable media [ 374.414256][T17092] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.3285'. [ 374.443559][T17092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.915024][T17103] tipc: Enabling of bearer rejected, failed to enable media [ 375.146159][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 375.184691][ T9815] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 375.219975][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'. [ 375.297512][T17127] netlink: 7084 bytes leftover after parsing attributes in process `syz.2.3298'. [ 375.413508][T17127] netlink: 'syz.2.3298': attribute type 3 has an invalid length. [ 375.464002][T17127] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.3298'. [ 375.522459][T17127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.547473][ T9815] hsr_slave_0: left promiscuous mode [ 375.584553][ T9815] hsr_slave_1: left promiscuous mode [ 375.628033][ T9815] hsr0: left promiscuous mode [ 375.634654][ T9815] veth1_macvtap: left promiscuous mode [ 375.658601][ T9815] veth0_macvtap: left promiscuous mode [ 375.670986][ T9815] veth1_vlan: left promiscuous mode [ 375.691432][ T9815] veth0_vlan: left promiscuous mode [ 376.301968][ T5849] Bluetooth: hci2: command tx timeout [ 377.080200][T16891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.145579][T16891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.217905][T16891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.258740][T16891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.566786][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.612498][ T9815] IPVS: stop unused estimator thread 0... [ 377.797380][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.824138][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.831321][T10475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.848788][T17183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3313'. [ 378.037202][T17194] veth0_virt_wifi: entered promiscuous mode [ 378.054633][T17188] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.069147][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.099572][T17191] veth0_virt_wifi: left promiscuous mode [ 378.113213][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.120434][ T9187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.160135][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.362035][T17198] can: request_module (can-proto-0) failed. [ 378.400694][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.432035][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.490096][T16891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.549593][T16891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.572945][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.594966][T17206] bridge7: entered allmulticast mode [ 378.631341][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.644632][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.707622][T17190] netlink: 'syz.2.3313': attribute type 29 has an invalid length. [ 378.859159][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.977140][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.163520][T16891] veth0_vlan: entered promiscuous mode [ 379.277394][T16891] veth1_vlan: entered promiscuous mode [ 379.386765][T16891] veth0_macvtap: entered promiscuous mode [ 379.421513][T16891] veth1_macvtap: entered promiscuous mode [ 379.427769][T17250] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 379.581589][T16891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.592240][T16891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.603349][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.612244][T17256] lo speed is unknown, defaulting to 1000 [ 379.638549][T16891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.658613][T16891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.685575][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.738325][T16891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.784511][T16891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.811244][T16891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.837805][T16891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.079955][ T9817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.092588][ T9817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.164016][T10475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.172757][T10475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.255609][T17287] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3344'. [ 380.330282][T17294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3342'. [ 380.485043][T17306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3348'. [ 380.509712][T17308] validate_nla: 27 callbacks suppressed [ 380.509729][T17308] netlink: 'syz.2.3345': attribute type 4 has an invalid length. [ 380.553146][T17299] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.560736][T17299] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.708501][T17314] netlink: 'syz.2.3345': attribute type 4 has an invalid length. [ 380.745937][T17299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.759947][T17299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.835520][T17299] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.846681][T17299] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.861039][T17299] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.870979][T17299] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.921629][ T1225] lo speed is unknown, defaulting to 1000 [ 380.941869][T17313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3223'. [ 380.981421][T17294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.988838][T17294] bond0: entered allmulticast mode [ 380.993991][T17294] bond_slave_0: entered allmulticast mode [ 381.026097][T17308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3345'. [ 381.041682][T17325] netlink: 308 bytes leftover after parsing attributes in process `syz.3.3349'. [ 381.043618][T17294] bond_slave_1: entered allmulticast mode [ 381.051050][T17325] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 381.073260][T17294] bond0: entered promiscuous mode [ 381.078529][T17294] bond_slave_0: entered promiscuous mode [ 381.084931][T17294] bond_slave_1: entered promiscuous mode [ 381.092711][T17294] bridge0: port 3(vlan2) entered blocking state [ 381.099205][T17294] bridge0: port 3(vlan2) entered forwarding state [ 381.108885][T17294] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.120148][T17294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.163161][ T5888] lo speed is unknown, defaulting to 1000 [ 381.169888][T17308] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 381.258191][T17294] syz.4.3342 (17294) used greatest stack depth: 18288 bytes left [ 381.758614][T17341] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 381.846452][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.856733][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.867485][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.876144][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.885680][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.895658][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.928592][T17343] lo speed is unknown, defaulting to 1000 [ 382.187965][T17343] chnl_net:caif_netlink_parms(): no params data found [ 382.198658][T17350] lo speed is unknown, defaulting to 1000 [ 382.639565][T17343] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.654687][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 382.675176][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.699215][T17343] bridge_slave_0: entered allmulticast mode [ 382.724783][T17343] bridge_slave_0: entered promiscuous mode [ 382.732817][T17343] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.742013][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.749740][T17343] bridge_slave_1: entered allmulticast mode [ 382.765554][T17343] bridge_slave_1: entered promiscuous mode [ 382.839165][T17343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.858231][T17343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.953773][T17343] team0: Port device team_slave_0 added [ 382.962415][T17343] team0: Port device team_slave_1 added [ 383.036847][T17343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.045427][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.073154][T17343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.086308][T17343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.093447][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.121725][T17343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.257393][T17378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3362'. [ 383.300815][T17343] hsr_slave_0: entered promiscuous mode [ 383.317430][T17343] hsr_slave_1: entered promiscuous mode [ 383.329430][T17343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.344715][T17343] Cannot create hsr debugfs directory [ 383.608905][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'. [ 383.655146][T17400] netlink: 'syz.0.3372': attribute type 2 has an invalid length. [ 383.730904][T17400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3372'. [ 383.798279][T17407] Bluetooth: MGMT ver 1.23 [ 383.818505][T17343] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 383.975229][ T5849] Bluetooth: hci0: command tx timeout [ 384.016847][T17343] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 384.134441][T17343] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 384.271513][T17343] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 384.323288][ T9816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.353752][ T9816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.553317][T17432] netlink: 'syz.0.3381': attribute type 2 has an invalid length. [ 384.578661][T17426] x_tables: duplicate underflow at hook 4 [ 384.640276][T17432] netlink: 'syz.0.3381': attribute type 9 has an invalid length. [ 384.642541][T17436] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 384.777989][T17441] netlink: 'syz.3.3384': attribute type 11 has an invalid length. [ 384.906474][T17343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.956403][T17446] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 384.962486][T17343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.003016][T17343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.004359][ T5888] IPVS: starting estimator thread 0... [ 385.047269][T17343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.154392][T17453] IPVS: using max 21 ests per chain, 50400 per kthread [ 385.393669][T17343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.416857][T17468] __nla_validate_parse: 5 callbacks suppressed [ 385.416875][T17468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3394'. [ 385.468209][T17343] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.490354][T14898] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.497570][T14898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.539788][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.546957][ T9816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.669872][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'. [ 385.715111][T17478] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3398'. [ 385.813931][T17483] bridge2: entered allmulticast mode [ 386.084946][ T5849] Bluetooth: hci0: command tx timeout [ 386.387199][T17343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.423075][T17509] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3407'. [ 386.491865][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3410'. [ 386.511577][T17509] bridge0: port 4(gretap0) entered blocking state [ 386.520634][T17514] xt_TCPMSS: Only works on TCP SYN packets [ 386.537967][T17509] bridge0: port 4(gretap0) entered disabled state [ 386.545980][T17509] gretap0: entered allmulticast mode [ 386.553172][T17509] gretap0: entered promiscuous mode [ 386.559101][T17509] bridge0: port 4(gretap0) entered blocking state [ 386.566753][T17509] bridge0: port 4(gretap0) entered forwarding state [ 386.592597][T17515] netlink: 'syz.1.3410': attribute type 1 has an invalid length. [ 386.600647][T17515] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3410'. [ 386.622041][T17514] lo speed is unknown, defaulting to 1000 [ 386.709750][T17523] bridge3: entered allmulticast mode [ 386.760353][T17343] veth0_vlan: entered promiscuous mode [ 386.937815][T17343] veth1_vlan: entered promiscuous mode [ 387.056345][T17343] veth0_macvtap: entered promiscuous mode [ 387.091318][T17540] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 387.098303][T17343] veth1_macvtap: entered promiscuous mode [ 387.132859][T17540] team0: Port device gtp0 added [ 387.179939][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.204065][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.230522][T17343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.348143][T17538] lo speed is unknown, defaulting to 1000 [ 387.367176][T17343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.404267][T17343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.446064][T17343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.463052][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 387.475727][T17555] dummy0: entered promiscuous mode [ 387.486425][T17343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.509075][T17343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.535839][T17556] xt_socket: unknown flags 0x8 [ 387.546102][T17556] netlink: 'syz.3.3423': attribute type 126 has an invalid length. [ 387.563023][T17343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.583505][T17343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.684045][T17564] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3424'. [ 388.134857][ T5849] Bluetooth: hci0: command tx timeout [ 388.172037][ T9187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.233659][ T9187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.270322][ T9818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.363685][ T9818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.449634][T17595] xt_limit: Overflow, try lower: 0/0 [ 388.881085][T17617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3444'. [ 388.899388][T17614] syz_tun: entered allmulticast mode [ 388.934688][T17614] syz_tun: left allmulticast mode [ 389.246122][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 389.430196][T17633] lo speed is unknown, defaulting to 1000 [ 389.710659][T17633] lo speed is unknown, defaulting to 1000 [ 389.856967][T17648] sctp: [Deprecated]: syz.2.3453 (pid 17648) Use of int in max_burst socket option. [ 389.856967][T17648] Use struct sctp_assoc_value instead [ 389.952528][ T5833] syz_tun (unregistering): left allmulticast mode [ 389.998285][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.007831][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.016631][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.039593][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.047624][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 390.065679][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.224575][ T54] Bluetooth: hci0: command tx timeout [ 390.441503][T17658] __nla_validate_parse: 2 callbacks suppressed [ 390.441962][T17658] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3454'. [ 390.442831][T17649] lo speed is unknown, defaulting to 1000 [ 390.448445][T17656] tipc: Failed to remove unknown binding: 66,1,1/7:2052665154/2052665156 [ 390.462030][T17658] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3454'. [ 390.535112][T17660] syz_tun: entered allmulticast mode [ 390.545978][T17660] syz_tun: left allmulticast mode [ 390.688495][T17666] tipc: Enabling of bearer rejected, already enabled [ 390.702954][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'. [ 390.779452][T17668] bridge4: entered allmulticast mode [ 390.916429][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3461'. [ 390.985416][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 390.994035][T17678] netlink: 1275 bytes leftover after parsing attributes in process `syz.4.3462'. [ 391.003992][T17678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.021715][T17678] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 391.045592][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3463'. [ 391.068077][T17675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3463'. [ 391.122140][T17649] chnl_net:caif_netlink_parms(): no params data found [ 391.251371][T17687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3466'. [ 391.286605][T17691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3469'. [ 391.311971][T17691] netlink: 'syz.3.3469': attribute type 1 has an invalid length. [ 391.396602][T17649] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.403775][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.444528][T17649] bridge_slave_0: entered allmulticast mode [ 391.451234][T17649] bridge_slave_0: entered promiscuous mode [ 391.471021][T17649] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.486224][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.494416][T17649] bridge_slave_1: entered allmulticast mode [ 391.501611][T17649] bridge_slave_1: entered promiscuous mode [ 391.621508][T17649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.652592][T17649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.724010][T17649] team0: Port device team_slave_0 added [ 391.748512][T17649] team0: Port device team_slave_1 added [ 391.862984][T17715] ªªªªªª: renamed from lo (while UP) [ 391.870896][T17649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.890039][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.930540][T17649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.947552][T17649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.954921][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.982244][T17649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.071184][T17649] hsr_slave_0: entered promiscuous mode [ 392.078109][T17649] hsr_slave_1: entered promiscuous mode [ 392.084997][T17649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.093139][T17649] Cannot create hsr debugfs directory [ 392.101497][T17723] syz_tun: entered allmulticast mode [ 392.134487][ T54] Bluetooth: hci1: command tx timeout [ 392.155157][T17725] tipc: Started in network mode [ 392.160060][T17725] tipc: Node identity 5f000000000003004000000000003a2d, cluster identity 4711 [ 392.172183][T17725] tipc: Enabling of bearer rejected, failed to enable media [ 392.181056][T17723] syz_tun: left allmulticast mode [ 392.279731][T17729] bridge5: entered allmulticast mode [ 392.530968][T17649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 392.547321][T17649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 392.569873][T17649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.595338][T17649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.635470][T17744] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 392.663592][T17744] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 392.793973][T17649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.846323][T17649] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.892747][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.899924][ T9187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.929787][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.936975][ T9187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.051191][T17764] bridge1: entered allmulticast mode [ 393.170494][T17768] rdma_rxe: rxe_newlink: failed to add bond0 [ 393.296359][T17649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.370984][T17776] lo speed is unknown, defaulting to 1000 [ 393.379746][T17649] veth0_vlan: entered promiscuous mode [ 393.421946][T17649] veth1_vlan: entered promiscuous mode [ 393.525200][T17649] veth0_macvtap: entered promiscuous mode [ 393.542709][T17649] veth1_macvtap: entered promiscuous mode [ 393.570407][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.582886][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.593852][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.613362][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.626664][T17649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.636867][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.647679][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.658131][T17649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.668827][T17649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.680308][T17649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.726231][T17649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.740704][T17649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.749831][T17649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.760623][T17649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.853274][T10486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.885199][T10486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.922795][ T9187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.931492][ T9187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.970356][T17789] netlink: 'syz.2.3501': attribute type 1 has an invalid length. [ 394.215594][ T54] Bluetooth: hci1: command tx timeout [ 395.590341][T17839] tipc: Started in network mode [ 395.614589][T17839] tipc: Node identity 5f000000000300004000000000003a2d, cluster identity 4711 [ 395.644261][T17839] tipc: Enabling of bearer rejected, failed to enable media [ 395.730617][T17847] tipc: Enabled bearer , priority 0 [ 395.916570][T17857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.930064][T17854] syzkaller0: entered promiscuous mode [ 395.949984][T17854] syzkaller0: entered allmulticast mode [ 395.956326][T17854] tipc: Resetting bearer [ 396.062831][T17861] netlink: 'syz.2.3523': attribute type 4 has an invalid length. [ 396.289439][T17876] __nla_validate_parse: 4 callbacks suppressed [ 396.289457][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 396.295867][ T54] Bluetooth: hci1: command tx timeout [ 396.765893][T17901] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3529'. [ 396.797344][ T5884] tipc: Node number set to 520108333 [ 396.814547][T17901] openvswitch: netlink: Missing key (keys=40, expected=80) [ 396.823147][T17840] tipc: Resetting bearer [ 398.388906][ T54] Bluetooth: hci1: command tx timeout [ 399.172814][T17840] tipc: Disabling bearer [ 399.405935][T17920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.681985][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3536'. [ 399.919632][T17936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.096691][T17946] Bluetooth: MGMT ver 1.23 [ 400.217725][T17936] netlink: 'syz.2.3536': attribute type 2 has an invalid length. [ 400.595197][T17936] Tq€!7: entered promiscuous mode [ 400.861455][T17969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3542'. [ 401.012902][T17976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3544'. [ 401.126070][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 401.516916][T18002] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3549'. [ 402.236868][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 402.302090][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 402.449867][T18024] lo speed is unknown, defaulting to 1000 [ 402.832209][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 402.942151][T18039] netlink: 'syz.3.3561': attribute type 1 has an invalid length. [ 402.993178][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3558'. [ 403.093195][T18042] tc_dump_action: action bad kind [ 403.107787][T18047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.209891][T18039] bridge6: entered promiscuous mode [ 403.219927][T18039] bond2: (slave bridge6): Enslaving as a backup interface with an up link [ 403.260321][T14898] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 403.406757][T10475] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 403.420079][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3565'. [ 403.430056][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3565'. [ 403.561442][T18062] veth1_macvtap: left promiscuous mode [ 403.568774][T18062] macsec0: entered allmulticast mode [ 403.596484][T18062] veth1_macvtap: entered promiscuous mode [ 403.602326][T18062] veth1_macvtap: entered allmulticast mode [ 403.609697][T18062] macsec0: left allmulticast mode [ 403.615260][T18062] veth1_macvtap: left allmulticast mode [ 404.026576][T18075] lo speed is unknown, defaulting to 1000 [ 404.112933][T18083] veth3: entered promiscuous mode [ 404.136827][T18083] veth5: entered promiscuous mode [ 405.056195][T18108] netlink: 'syz.0.3581': attribute type 4 has an invalid length. [ 405.115347][T18113] netlink: 7084 bytes leftover after parsing attributes in process `syz.4.3582'. [ 405.134914][T18108] netlink: 'syz.0.3581': attribute type 4 has an invalid length. [ 405.137342][T18115] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3584'. [ 405.205722][T18115] netlink: 137456 bytes leftover after parsing attributes in process `syz.1.3584'. [ 405.215371][T18115] netlink: zone id is out of range [ 405.225498][T18115] netlink: zone id is out of range [ 405.232439][T18118] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.276761][T18115] netlink: zone id is out of range [ 405.281928][T18115] netlink: zone id is out of range [ 405.291096][T18115] netlink: zone id is out of range [ 405.296867][T18115] netlink: zone id is out of range [ 405.302498][T18115] netlink: zone id is out of range [ 405.398190][T18121] IPVS: set_ctl: invalid protocol: 108 172.30.0.4:20004 [ 405.578125][T18129] veth0_to_bond: entered promiscuous mode [ 405.699414][T18129] veth0_to_bond (unregistering): left promiscuous mode [ 405.899360][T18129] bond0: (slave bond_slave_0): Releasing backup interface [ 405.968338][T18143] syz_tun: entered allmulticast mode [ 405.979554][T18137] lo speed is unknown, defaulting to 1000 [ 405.989364][T18130] syz_tun: left allmulticast mode [ 406.620308][T18172] __nla_validate_parse: 41 callbacks suppressed [ 406.620326][T18172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3599'. [ 406.806561][T18180] netlink: 'syz.3.3602': attribute type 1 has an invalid length. [ 406.815055][T18180] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3602'. [ 407.001843][T18189] syz_tun: entered allmulticast mode [ 407.009021][T18189] syz_tun: left allmulticast mode [ 407.120172][T18198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3609'. [ 407.137630][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3608'. [ 407.357180][T18210] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3612'. [ 407.472435][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3615'. [ 407.600634][T18223] lo speed is unknown, defaulting to 1000 [ 407.660458][T18226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3617'. [ 407.848549][T18226] netlink: 'syz.3.3617': attribute type 2 has an invalid length. [ 407.862469][T18226] Tq€!7: entered promiscuous mode [ 408.506271][T18233] syz_tun: entered allmulticast mode [ 408.539261][T18233] syz_tun: left allmulticast mode [ 409.414449][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 409.490741][T18246] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 409.741936][T18252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3626'. [ 409.792689][T18257] bridge1: entered allmulticast mode [ 409.804434][T18251] FAULT_INJECTION: forcing a failure. [ 409.804434][T18251] name failslab, interval 1, probability 0, space 0, times 0 [ 409.870117][T18251] CPU: 1 UID: 0 PID: 18251 Comm: syz.4.3625 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 409.870142][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 409.870153][T18251] Call Trace: [ 409.870159][T18251] [ 409.870166][T18251] dump_stack_lvl+0x241/0x360 [ 409.870194][T18251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.870211][T18251] ? __pfx__printk+0x10/0x10 [ 409.870229][T18251] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 409.870251][T18251] ? __pfx___might_resched+0x10/0x10 [ 409.870275][T18251] should_fail_ex+0x40a/0x550 [ 409.870302][T18251] should_failslab+0xac/0x100 [ 409.870323][T18251] kmem_cache_alloc_node_noprof+0x77/0x380 [ 409.870343][T18251] ? __alloc_skb+0x1c3/0x440 [ 409.870364][T18251] __alloc_skb+0x1c3/0x440 [ 409.870384][T18251] ? __pfx___alloc_skb+0x10/0x10 [ 409.870406][T18251] ? netlink_ack_tlv_len+0x6e/0x200 [ 409.870430][T18251] netlink_ack+0x145/0xa60 [ 409.870454][T18251] ? __kasan_kmalloc+0x98/0xb0 [ 409.870467][T18251] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 409.870481][T18251] nfnetlink_rcv+0x26bd/0x2ab0 [ 409.870508][T18251] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 409.870541][T18251] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.870553][T18251] ? skb_clone+0x240/0x390 [ 409.870564][T18251] ? __pfx_lock_release+0x10/0x10 [ 409.870586][T18251] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.870600][T18251] netlink_unicast+0x7f6/0x990 [ 409.870616][T18251] ? __pfx_netlink_unicast+0x10/0x10 [ 409.870627][T18251] ? __virt_addr_valid+0x45f/0x530 [ 409.870637][T18251] ? __phys_addr_symbol+0x2f/0x70 [ 409.870645][T18251] ? __check_object_size+0x47a/0x730 [ 409.870660][T18251] netlink_sendmsg+0x8de/0xcb0 [ 409.870680][T18251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.870695][T18251] ? aa_sock_msg_perm+0x91/0x160 [ 409.870711][T18251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.870724][T18251] __sock_sendmsg+0x221/0x270 [ 409.870739][T18251] ____sys_sendmsg+0x53a/0x860 [ 409.870754][T18251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.870764][T18251] ? __fget_files+0x2a/0x410 [ 409.870779][T18251] ? __fget_files+0x2a/0x410 [ 409.870796][T18251] __sys_sendmsg+0x269/0x350 [ 409.870809][T18251] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.870826][T18251] ? do_sys_openat2+0x17a/0x1d0 [ 409.870857][T18251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.870880][T18251] ? do_syscall_64+0x100/0x230 [ 409.870901][T18251] ? do_syscall_64+0xb6/0x230 [ 409.870922][T18251] do_syscall_64+0xf3/0x230 [ 409.870941][T18251] ? clear_bhb_loop+0x35/0x90 [ 409.870963][T18251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.870976][T18251] RIP: 0033:0x7fa4c798d169 [ 409.870985][T18251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.870993][T18251] RSP: 002b:00007fa4c879c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.871004][T18251] RAX: ffffffffffffffda RBX: 00007fa4c7ba5fa0 RCX: 00007fa4c798d169 [ 409.871011][T18251] RDX: 0000000000000004 RSI: 0000400000000080 RDI: 0000000000000003 [ 409.871018][T18251] RBP: 00007fa4c879c090 R08: 0000000000000000 R09: 0000000000000000 [ 409.871023][T18251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.871028][T18251] R13: 0000000000000000 R14: 00007fa4c7ba5fa0 R15: 00007ffe49b06308 [ 409.871049][T18251] [ 410.396507][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3630'. [ 410.416496][T18271] FAULT_INJECTION: forcing a failure. [ 410.416496][T18271] name failslab, interval 1, probability 0, space 0, times 0 [ 410.429637][T18271] CPU: 1 UID: 0 PID: 18271 Comm: syz.4.3633 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 410.429661][T18271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.429671][T18271] Call Trace: [ 410.429677][T18271] [ 410.429683][T18271] dump_stack_lvl+0x241/0x360 [ 410.429708][T18271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.429726][T18271] ? __pfx__printk+0x10/0x10 [ 410.429745][T18271] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 410.429768][T18271] ? __pfx___might_resched+0x10/0x10 [ 410.429793][T18271] should_fail_ex+0x40a/0x550 [ 410.429820][T18271] should_failslab+0xac/0x100 [ 410.429842][T18271] kmem_cache_alloc_node_noprof+0x77/0x380 [ 410.429863][T18271] ? __alloc_skb+0x1c3/0x440 [ 410.429883][T18271] __alloc_skb+0x1c3/0x440 [ 410.429905][T18271] ? __pfx___alloc_skb+0x10/0x10 [ 410.429924][T18271] ? netlink_autobind+0xd6/0x2f0 [ 410.429939][T18271] ? netlink_autobind+0x2b0/0x2f0 [ 410.429956][T18271] netlink_sendmsg+0x634/0xcb0 [ 410.429987][T18271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.430010][T18271] ? aa_sock_msg_perm+0x91/0x160 [ 410.430038][T18271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.430057][T18271] __sock_sendmsg+0x221/0x270 [ 410.430082][T18271] ____sys_sendmsg+0x53a/0x860 [ 410.430109][T18271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.430126][T18271] ? __fget_files+0x2a/0x410 [ 410.430150][T18271] ? __fget_files+0x2a/0x410 [ 410.430181][T18271] __sys_sendmsg+0x269/0x350 [ 410.430211][T18271] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.430242][T18271] ? do_sys_openat2+0x17a/0x1d0 [ 410.430289][T18271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.430313][T18271] ? do_syscall_64+0x100/0x230 [ 410.430336][T18271] ? do_syscall_64+0xb6/0x230 [ 410.430358][T18271] do_syscall_64+0xf3/0x230 [ 410.430377][T18271] ? clear_bhb_loop+0x35/0x90 [ 410.430401][T18271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.430420][T18271] RIP: 0033:0x7fa4c798d169 [ 410.430434][T18271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.430448][T18271] RSP: 002b:00007fa4c879c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.430466][T18271] RAX: ffffffffffffffda RBX: 00007fa4c7ba5fa0 RCX: 00007fa4c798d169 [ 410.430477][T18271] RDX: 0000000000000080 RSI: 0000400000000500 RDI: 0000000000000003 [ 410.430487][T18271] RBP: 00007fa4c879c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.430497][T18271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.430506][T18271] R13: 0000000000000000 R14: 00007fa4c7ba5fa0 R15: 00007ffe49b06308 [ 410.430530][T18271] [ 410.706402][T18262] syzkaller1: entered promiscuous mode [ 410.711975][T18262] syzkaller1: entered allmulticast mode [ 410.835506][T18279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3636'. [ 410.968420][T18286] net_ratelimit: 2100 callbacks suppressed [ 410.968439][T18286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.004234][T18286] netlink: zone id is out of range [ 411.065467][T18287] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 411.090971][T18279] netlink: 'syz.3.3636': attribute type 2 has an invalid length. [ 411.110522][T18286] netlink: set zone limit has 4 unknown bytes [ 411.280212][T18292] bridge5: entered allmulticast mode [ 411.583163][T18301] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 411.881687][T18299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.403184][T18299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.738486][T18299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.071661][T18299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.103983][T18330] __nla_validate_parse: 1 callbacks suppressed [ 413.104001][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3652'. [ 413.225547][T18299] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.299410][T18299] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.312257][T18340] FAULT_INJECTION: forcing a failure. [ 413.312257][T18340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.326741][T18340] CPU: 0 UID: 0 PID: 18340 Comm: syz.3.3655 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 413.326763][T18340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.326772][T18340] Call Trace: [ 413.326777][T18340] [ 413.326783][T18340] dump_stack_lvl+0x241/0x360 [ 413.326805][T18340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.326819][T18340] ? __pfx__printk+0x10/0x10 [ 413.326836][T18340] ? __pfx_lock_release+0x10/0x10 [ 413.326867][T18340] should_fail_ex+0x40a/0x550 [ 413.326893][T18340] _copy_from_iter+0x1df/0x1c40 [ 413.326912][T18340] ? __virt_addr_valid+0x183/0x530 [ 413.326928][T18340] ? __pfx_lock_release+0x10/0x10 [ 413.326954][T18340] ? __alloc_skb+0x28f/0x440 [ 413.326970][T18340] ? __pfx__copy_from_iter+0x10/0x10 [ 413.326988][T18340] ? __virt_addr_valid+0x183/0x530 [ 413.327002][T18340] ? __virt_addr_valid+0x183/0x530 [ 413.327015][T18340] ? __virt_addr_valid+0x45f/0x530 [ 413.327039][T18340] ? __phys_addr_symbol+0x2f/0x70 [ 413.327054][T18340] ? __check_object_size+0x47a/0x730 [ 413.327079][T18340] netlink_sendmsg+0x742/0xcb0 [ 413.327112][T18340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.327137][T18340] ? aa_sock_msg_perm+0x91/0x160 [ 413.327163][T18340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.327181][T18340] __sock_sendmsg+0x221/0x270 [ 413.327204][T18340] ____sys_sendmsg+0x53a/0x860 [ 413.327230][T18340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.327247][T18340] ? __fget_files+0x2a/0x410 [ 413.327272][T18340] ? __fget_files+0x2a/0x410 [ 413.327300][T18340] __sys_sendmsg+0x269/0x350 [ 413.327324][T18340] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.327350][T18340] ? do_sys_openat2+0x17a/0x1d0 [ 413.327389][T18340] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.327412][T18340] ? do_syscall_64+0x100/0x230 [ 413.327433][T18340] ? do_syscall_64+0xb6/0x230 [ 413.327453][T18340] do_syscall_64+0xf3/0x230 [ 413.327470][T18340] ? clear_bhb_loop+0x35/0x90 [ 413.327491][T18340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.327514][T18340] RIP: 0033:0x7f2b9738d169 [ 413.327529][T18340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.327543][T18340] RSP: 002b:00007f2b98226038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.327560][T18340] RAX: ffffffffffffffda RBX: 00007f2b975a5fa0 RCX: 00007f2b9738d169 [ 413.327571][T18340] RDX: 0000000000000080 RSI: 0000400000000500 RDI: 0000000000000003 [ 413.327581][T18340] RBP: 00007f2b98226090 R08: 0000000000000000 R09: 0000000000000000 [ 413.327591][T18340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.327601][T18340] R13: 0000000000000000 R14: 00007f2b975a5fa0 R15: 00007fff12b16268 [ 413.327625][T18340] [ 413.635481][T18299] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.649215][T18299] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.906178][T18350] bridge6: entered allmulticast mode [ 414.784432][T18376] netlink: 'syz.2.3667': attribute type 39 has an invalid length. [ 414.854914][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3675'. [ 414.997611][T18399] siw: device registration error -23 [ 415.006039][T18399] netlink: 4920 bytes leftover after parsing attributes in process `syz.3.3678'. [ 415.186435][T18406] syz_tun: entered allmulticast mode [ 415.215671][T18408] pim6reg: entered allmulticast mode [ 415.225154][T18408] pim6reg: left allmulticast mode [ 415.290417][T18406] syz_tun: left allmulticast mode [ 415.336215][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 415.343144][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 415.501174][T18422] lo speed is unknown, defaulting to 1000 [ 415.513302][T18424] netlink: 'syz.0.3684': attribute type 16 has an invalid length. [ 415.555800][T18424] netlink: 'syz.0.3684': attribute type 17 has an invalid length. [ 415.649241][T18424] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 415.875631][T18431] netlink: 'syz.4.3688': attribute type 1 has an invalid length. [ 415.894617][T18431] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3688'. [ 415.983603][T18434] bridge7: entered allmulticast mode [ 416.269904][T18446] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3692'. [ 416.483277][T18453] tipc: Enabling of bearer rejected, failed to enable media [ 416.619133][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3700'. [ 417.002502][T18482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3707'. [ 417.006547][T18483] netlink: zone id is out of range [ 417.013630][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 417.029623][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 417.033634][T18483] netlink: zone id is out of range [ 417.081194][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 417.131214][T18483] netlink: zone id is out of range [ 417.186213][T18483] netlink: zone id is out of range [ 417.212455][T18483] netlink: zone id is out of range [ 417.218351][T18483] netlink: zone id is out of range [ 417.223623][T18483] netlink: zone id is out of range [ 417.234000][T18483] netlink: zone id is out of range [ 417.248951][T18483] netlink: zone id is out of range [ 417.274701][T18483] netlink: zone id is out of range [ 417.888609][T18476] syz.4.3706: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 417.911365][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.4.3706 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 417.911389][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.911399][T18476] Call Trace: [ 417.911405][T18476] [ 417.911412][T18476] dump_stack_lvl+0x241/0x360 [ 417.911438][T18476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.911455][T18476] ? __pfx__printk+0x10/0x10 [ 417.911484][T18476] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 417.911506][T18476] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 417.911521][T18476] warn_alloc+0x278/0x410 [ 417.911535][T18476] ? __pfx_warn_alloc+0x10/0x10 [ 417.911549][T18476] ? veth_dev_init+0x35f/0x550 [ 417.911559][T18476] ? __get_vm_area_node+0x1c8/0x2d0 [ 417.911574][T18476] ? __get_vm_area_node+0x25c/0x2d0 [ 417.911591][T18476] __vmalloc_node_range_noprof+0x62f/0x1380 [ 417.911602][T18476] ? look_up_lock_class+0x77/0x170 [ 417.911627][T18476] ? rcu_is_watching+0x15/0xb0 [ 417.911638][T18476] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.911649][T18476] ? rcu_is_watching+0x15/0xb0 [ 417.911659][T18476] ? trace_kmalloc+0x1f/0xd0 [ 417.911671][T18476] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 417.911684][T18476] ? __kvmalloc_node_noprof+0x72/0x190 [ 417.911701][T18476] __kvmalloc_node_noprof+0x142/0x190 [ 417.911716][T18476] ? veth_dev_init+0x35f/0x550 [ 417.911728][T18476] veth_dev_init+0x35f/0x550 [ 417.911742][T18476] register_netdevice+0x6d7/0x1b70 [ 417.911755][T18476] ? _get_random_bytes+0x25d/0x2c0 [ 417.911771][T18476] ? snprintf+0xda/0x120 [ 417.911782][T18476] ? __pfx_register_netdevice+0x10/0x10 [ 417.911795][T18476] ? __pfx_snprintf+0x10/0x10 [ 417.911805][T18476] ? __asan_memset+0x23/0x50 [ 417.911820][T18476] veth_newlink+0x66a/0xb70 [ 417.911833][T18476] ? __pfx_veth_newlink+0x10/0x10 [ 417.911876][T18476] ? alloc_netdev_mqs+0xe01/0x1210 [ 417.911892][T18476] ? rtnl_create_link+0x95b/0xc90 [ 417.911906][T18476] ? __pfx_veth_newlink+0x10/0x10 [ 417.911917][T18476] rtnl_newlink_create+0x37b/0xbd0 [ 417.911930][T18476] ? __mutex_lock+0x602/0x1010 [ 417.911945][T18476] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 417.911957][T18476] ? __pfx___mutex_lock+0x10/0x10 [ 417.911974][T18476] ? ns_capable+0x8a/0xf0 [ 417.911988][T18476] rtnl_newlink+0x167a/0x1d90 [ 417.912003][T18476] ? stack_depot_save_flags+0x37/0x940 [ 417.912026][T18476] ? __pfx_rtnl_newlink+0x10/0x10 [ 417.912039][T18476] ? __netlink_deliver_tap+0x561/0x7f0 [ 417.912054][T18476] ? __pfx_validate_chain+0x10/0x10 [ 417.912064][T18476] ? __sock_sendmsg+0x221/0x270 [ 417.912077][T18476] ? ____sys_sendmsg+0x53a/0x860 [ 417.912087][T18476] ? __sys_sendmsg+0x269/0x350 [ 417.912097][T18476] ? do_syscall_64+0xf3/0x230 [ 417.912109][T18476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.912165][T18476] ? __pfx_lock_release+0x10/0x10 [ 417.912188][T18476] ? __pfx_rtnl_newlink+0x10/0x10 [ 417.912202][T18476] rtnetlink_rcv_msg+0x791/0xcf0 [ 417.912216][T18476] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 417.912233][T18476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 417.912252][T18476] ? ref_tracker_free+0x643/0x7e0 [ 417.912267][T18476] netlink_rcv_skb+0x206/0x480 [ 417.912282][T18476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 417.912299][T18476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.912325][T18476] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.912340][T18476] netlink_unicast+0x7f6/0x990 [ 417.912358][T18476] ? __pfx_netlink_unicast+0x10/0x10 [ 417.912369][T18476] ? __virt_addr_valid+0x45f/0x530 [ 417.912379][T18476] ? __phys_addr_symbol+0x2f/0x70 [ 417.912388][T18476] ? __check_object_size+0x47a/0x730 [ 417.912405][T18476] netlink_sendmsg+0x8de/0xcb0 [ 417.912426][T18476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.912443][T18476] ? aa_sock_msg_perm+0x91/0x160 [ 417.912461][T18476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.912479][T18476] __sock_sendmsg+0x221/0x270 [ 417.912495][T18476] ____sys_sendmsg+0x53a/0x860 [ 417.912510][T18476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.912521][T18476] ? __fget_files+0x2a/0x410 [ 417.912537][T18476] ? __fget_files+0x2a/0x410 [ 417.912556][T18476] __sys_sendmsg+0x269/0x350 [ 417.912570][T18476] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.912605][T18476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.912620][T18476] ? do_syscall_64+0x100/0x230 [ 417.912634][T18476] ? do_syscall_64+0xb6/0x230 [ 417.912647][T18476] do_syscall_64+0xf3/0x230 [ 417.912660][T18476] ? clear_bhb_loop+0x35/0x90 [ 417.912674][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.912687][T18476] RIP: 0033:0x7fa4c798d169 [ 417.912698][T18476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.912706][T18476] RSP: 002b:00007fa4c879c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.912718][T18476] RAX: ffffffffffffffda RBX: 00007fa4c7ba5fa0 RCX: 00007fa4c798d169 [ 417.912727][T18476] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000003 [ 417.912733][T18476] RBP: 00007fa4c7a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 417.912740][T18476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.912745][T18476] R13: 0000000000000000 R14: 00007fa4c7ba5fa0 R15: 00007ffe49b06308 [ 417.912760][T18476] [ 417.912765][T18476] Mem-Info: [ 418.374416][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 418.383279][T18476] active_anon:4571 inactive_anon:0 isolated_anon:0 [ 418.383279][T18476] active_file:1946 inactive_file:38450 isolated_file:0 [ 418.383279][T18476] unevictable:768 dirty:318 writeback:0 [ 418.383279][T18476] slab_reclaimable:13743 slab_unreclaimable:134794 [ 418.383279][T18476] mapped:32069 shmem:1456 pagetables:806 [ 418.383279][T18476] sec_pagetables:0 bounce:0 [ 418.383279][T18476] kernel_misc_reclaimable:0 [ 418.383279][T18476] free:1297115 free_pcp:469 free_cma:0 [ 418.390161][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 418.398170][T18476] Node 0 active_anon:18284kB inactive_anon:0kB active_file:7784kB inactive_file:153728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128276kB dirty:1272kB writeback:0kB shmem:4288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12140kB pagetables:3224kB sec_pagetables:0kB all_unreclaimable? no [ 418.522947][T18476] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 418.561385][T18476] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.588904][T18476] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 418.594992][T18476] Node 0 DMA32 free:1262972kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:18248kB inactive_anon:0kB active_file:7784kB inactive_file:153400kB unevictable:1536kB writepending:1272kB present:3129332kB managed:2549716kB mlocked:0kB bounce:0kB free_pcp:1936kB local_pcp:1056kB free_cma:0kB [ 418.625707][T18476] lowmem_reserve[]: 0 0 0 0 0 [ 418.630577][T18476] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.657561][T18476] lowmem_reserve[]: 0 0 0 0 0 [ 418.663035][T18476] Node 1 Normal free:3909872kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.691969][T18476] lowmem_reserve[]: 0 0 0 0 0 [ 418.696809][T18476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.709693][T18476] Node 0 DMA32: 197*4kB (UME) 607*8kB (ME) 463*16kB (ME) 482*32kB (UME) 237*64kB (UME) 124*128kB (UME) 34*256kB (UME) 39*512kB (UM) 107*1024kB (UME) 16*2048kB (UM) 252*4096kB (UM) = 1262716kB [ 418.728957][T18476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.740597][T18476] Node 1 Normal: 198*4kB (UE) 59*8kB (UME) 40*16kB (UME) 198*32kB (UME) 89*64kB (UME) 27*128kB (UME) 17*256kB (UM) 4*512kB (UM) 5*1024kB (UM) 3*2048kB (U) 946*4096kB (ME) = 3909872kB [ 418.759054][T18476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.770261][T18476] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.780743][T18476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.790454][T18476] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.799999][T18476] 41852 total pagecache pages [ 418.804736][T18476] 0 pages in swap cache [ 418.808891][T18476] Free swap = 124996kB [ 418.813040][T18476] Total swap = 124996kB [ 418.817535][T18476] 2097051 pages RAM [ 418.821342][T18476] 0 pages HighMem/MovableOnly [ 418.826044][T18476] 427900 pages reserved [ 418.830204][T18476] 0 pages cma reserved [ 419.598023][T18492] tipc: Enabling of bearer rejected, failed to enable media [ 419.837167][T18499] __nla_validate_parse: 3 callbacks suppressed [ 419.837187][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 419.852320][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 420.039619][T18517] tipc: Enabling of bearer rejected, failed to enable media [ 420.252637][T18532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3719'. [ 420.532978][T18544] bridge2: entered allmulticast mode [ 420.631737][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 420.783947][T18552] tipc: Enabling of bearer rejected, failed to enable media [ 420.820765][T18556] netlink: 7084 bytes leftover after parsing attributes in process `syz.2.3734'. [ 420.842931][T18556] Tq€!7: left promiscuous mode [ 420.936737][T18556] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.3734'. [ 420.994797][T18556] bridge0: port 3(vlan2) entered blocking state [ 421.020209][T18556] bridge0: port 3(vlan2) entered disabled state [ 421.034576][T18556] vlan2: entered allmulticast mode [ 421.041513][T18556] vlan2: entered promiscuous mode [ 421.188814][T18568] bridge8: entered allmulticast mode [ 421.260852][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 421.296632][T18566] lo speed is unknown, defaulting to 1000 [ 421.468082][T18573] lo speed is unknown, defaulting to 1000 [ 421.468619][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3741'. [ 421.484850][T18578] netlink: 'syz.2.3743': attribute type 3 has an invalid length. [ 421.518803][T18578] netlink: 'syz.2.3743': attribute type 3 has an invalid length. [ 421.612232][T18578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3743'. [ 421.867055][T18591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3748'. [ 421.968066][ T30] audit: type=1800 audit(1742198142.986:5): pid=18593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3744" name="memory.events" dev="tmpfs" ino=552 res=0 errno=0 [ 422.058215][T18598] bridge1: entered allmulticast mode [ 422.137085][T18598] FAULT_INJECTION: forcing a failure. [ 422.137085][T18598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.197531][T18598] CPU: 0 UID: 0 PID: 18598 Comm: syz.2.3749 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 422.197558][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.197568][T18598] Call Trace: [ 422.197574][T18598] [ 422.197581][T18598] dump_stack_lvl+0x241/0x360 [ 422.197607][T18598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.197624][T18598] ? __pfx__printk+0x10/0x10 [ 422.197643][T18598] ? __pfx_lock_release+0x10/0x10 [ 422.197673][T18598] should_fail_ex+0x40a/0x550 [ 422.197700][T18598] _copy_from_user+0x2d/0xb0 [ 422.197721][T18598] copy_msghdr_from_user+0xae/0x680 [ 422.197749][T18598] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 422.197769][T18598] ? __fget_files+0x2a/0x410 [ 422.197793][T18598] ? __fget_files+0x2a/0x410 [ 422.197822][T18598] __sys_sendmsg+0x209/0x350 [ 422.197845][T18598] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.197876][T18598] ? do_sys_openat2+0x17a/0x1d0 [ 422.197923][T18598] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.197946][T18598] ? do_syscall_64+0x100/0x230 [ 422.197968][T18598] ? do_syscall_64+0xb6/0x230 [ 422.197990][T18598] do_syscall_64+0xf3/0x230 [ 422.198009][T18598] ? clear_bhb_loop+0x35/0x90 [ 422.198038][T18598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.198058][T18598] RIP: 0033:0x7f26fe58d169 [ 422.198072][T18598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.198086][T18598] RSP: 002b:00007f26fc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.198104][T18598] RAX: ffffffffffffffda RBX: 00007f26fe7a5fa0 RCX: 00007f26fe58d169 [ 422.198116][T18598] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000007 [ 422.198126][T18598] RBP: 00007f26fc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.198136][T18598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.198145][T18598] R13: 0000000000000000 R14: 00007f26fe7a5fa0 R15: 00007ffe42bfac28 [ 422.198171][T18598] [ 422.796183][T18631] net_ratelimit: 75 callbacks suppressed [ 422.796202][T18631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.902566][ T975] IPVS: starting estimator thread 0... [ 423.015052][T18637] IPVS: using max 27 ests per chain, 64800 per kthread [ 423.087006][T18647] bridge9: entered allmulticast mode [ 423.197689][T18650] wireguard0: entered promiscuous mode [ 423.264595][T18650] wireguard0: entered allmulticast mode [ 423.391376][T18664] syzkaller0: entered promiscuous mode [ 423.397458][T18664] syzkaller0: entered allmulticast mode [ 423.818359][T18673] ªªªªªª: renamed from vlan0 (while UP) [ 423.826274][T18678] netlink: 'syz.2.3776': attribute type 1 has an invalid length. [ 424.011193][T18683] netlink: 'syz.4.3778': attribute type 13 has an invalid length. [ 426.058634][T18680] netlink: 'syz.3.3777': attribute type 5 has an invalid length. [ 426.096348][T18692] bridge2: entered allmulticast mode [ 426.195259][T18698] __nla_validate_parse: 8 callbacks suppressed [ 426.195277][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3782'. [ 426.434839][T18707] 8021q: VLANs not supported on caif0 [ 426.568881][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 426.583641][T18718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3791'. [ 426.658781][T18721] sctp: [Deprecated]: syz.0.3792 (pid 18721) Use of int in max_burst socket option deprecated. [ 426.658781][T18721] Use struct sctp_assoc_value instead [ 426.724870][T18723] bridge3: entered allmulticast mode [ 426.840862][T18730] lo speed is unknown, defaulting to 1000 [ 427.139740][T18746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3799'. [ 427.186156][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 427.245184][T18752] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3803'. [ 427.254620][T18752] openvswitch: netlink: Actions may not be safe on all matching packets [ 427.264558][T18750] nbd: couldn't find device at index 1255035857 [ 427.273406][T18750] netlink: 'syz.3.3803': attribute type 2 has an invalid length. [ 427.288376][T18750] fþ: entered promiscuous mode [ 427.484353][T18761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3807'. [ 427.651821][T18771] lo speed is unknown, defaulting to 1000 [ 427.857453][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3811'. [ 427.880225][T18776] openvswitch: netlink: IP tunnel dst address not specified [ 428.018622][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3814'. [ 428.098021][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3815'. [ 428.200551][T18792] bridge4: entered allmulticast mode [ 429.431420][T18818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.467146][T18818] netlink: zone id is out of range [ 429.484530][T18815] sctp: [Deprecated]: syz.0.3824 (pid 18815) Use of int in maxseg socket option. [ 429.484530][T18815] Use struct sctp_assoc_value instead [ 429.518865][T18820] netlink: 'syz.2.3823': attribute type 2 has an invalid length. [ 429.540109][T18820] Tq€!7: entered promiscuous mode [ 429.561227][T18818] netlink: set zone limit has 4 unknown bytes [ 430.497418][T18839] netlink: 'syz.3.3834': attribute type 4 has an invalid length. [ 430.611338][T18846] netlink: 'syz.3.3835': attribute type 1 has an invalid length. [ 432.115222][T18889] __nla_validate_parse: 8 callbacks suppressed [ 432.115239][T18889] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3849'. [ 432.348289][T18889] tipc: Enabled bearer , priority 10 [ 432.491167][T18895] syzkaller1: entered promiscuous mode [ 432.496943][T18895] syzkaller1: entered allmulticast mode [ 432.715635][T18901] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 432.738945][T18901] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 433.288261][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3862'. [ 433.339677][T18922] Cannot find add_set index 0 as target [ 434.097438][T18945] bridge2: entered allmulticast mode [ 434.510618][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3877'. [ 434.525064][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3877'. [ 434.543252][T18966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3877'. [ 434.566786][T18967] lo speed is unknown, defaulting to 1000 [ 434.872204][T18986] netlink: 'syz.4.3884': attribute type 1 has an invalid length. [ 434.882066][T18986] netlink: 'syz.4.3884': attribute type 2 has an invalid length. [ 434.987458][T18993] lo speed is unknown, defaulting to 1000 [ 435.294469][T19001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3886'. [ 435.494718][T19013] lo speed is unknown, defaulting to 1000 [ 435.539274][T19010] lo speed is unknown, defaulting to 1000 [ 435.678657][T19017] ip6tnl1: entered promiscuous mode [ 436.286023][T19025] lo speed is unknown, defaulting to 1000 [ 436.584509][T19052] netlink: 'syz.3.3898': attribute type 1 has an invalid length. [ 436.617534][T19054] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.736691][T19055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3899'. [ 436.780671][T19054] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.845210][T19062] netlink: 'syz.3.3901': attribute type 1 has an invalid length. [ 436.977327][T19054] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.016650][T19062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.061900][T19066] bond3: (slave ip6gretap1): making interface the new active one [ 437.071930][T19066] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 437.123456][T19054] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.273461][T19075] netlink: 'syz.3.3903': attribute type 1 has an invalid length. [ 437.283011][T19075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.419093][T19054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.435941][T19054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.455565][T19054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.503673][T19054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.544742][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.568750][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.612563][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.646873][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.684316][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.742599][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.767343][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.797009][T19096] lo speed is unknown, defaulting to 1000 [ 437.800836][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.842969][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.861806][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.908091][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.932056][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.991459][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.012793][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.046146][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.119758][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.148896][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.159093][T19115] netlink: 'syz.0.3910': attribute type 1 has an invalid length. [ 438.174949][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.192664][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.209712][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.286931][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.319214][T19085] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 438.360209][T19123] netlink: 'syz.2.3911': attribute type 12 has an invalid length. [ 438.429276][T19131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3912'. [ 438.570624][T19139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3915'. [ 438.581386][T19139] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 438.705144][T19144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3916'. [ 438.715125][T19144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3916'. [ 438.790483][T19146] vlan0: entered promiscuous mode [ 438.798871][T19146] bond0: entered promiscuous mode [ 438.817166][T19146] bond0: left promiscuous mode [ 438.979726][T19154] netlink: 'syz.4.3918': attribute type 1 has an invalid length. [ 438.994431][T19154] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3918'. [ 439.048460][T19152] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3919'. [ 439.058484][T19152] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3919'. [ 439.067827][T19152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3919'. [ 439.204919][T19157] netlink: 'syz.0.3920': attribute type 13 has an invalid length. [ 439.237720][T19157] gretap0: refused to change device tx_queue_len [ 439.252375][T19157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 439.533566][T19167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3924'. [ 439.617319][ T5889] IPVS: starting estimator thread 0... [ 439.647487][T19170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.665202][T19170] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3925'. [ 439.714288][T19171] IPVS: using max 24 ests per chain, 57600 per kthread [ 439.850327][T19173] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 439.875598][T19173] team0: Port device batadv1 added [ 440.300069][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.778830][T19193] netlink: 'syz.1.3934': attribute type 2 has an invalid length. [ 442.039262][T19238] pimreg: entered allmulticast mode [ 442.735580][T19233] pimreg: left allmulticast mode [ 442.783381][T19259] netlink: 'syz.0.3959': attribute type 3 has an invalid length. [ 442.803311][T19259] macvlan2: entered promiscuous mode [ 442.808905][T19259] macvlan2: entered allmulticast mode [ 442.829038][T19259] bond_slave_0: entered promiscuous mode [ 442.835145][T19259] bond_slave_1: entered promiscuous mode [ 442.866498][T19259] bond0: entered allmulticast mode [ 442.892382][T19259] bond_slave_0: entered allmulticast mode [ 442.899005][T19259] bond_slave_1: entered allmulticast mode [ 442.905028][T19259] bond0: entered promiscuous mode [ 442.917730][T19259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.928974][T19259] team0: Port device macvlan2 added [ 443.411928][T19292] lo speed is unknown, defaulting to 1000 [ 443.759842][T19310] __nla_validate_parse: 9 callbacks suppressed [ 443.759862][T19310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3972'. [ 443.812406][T19312] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3973'. [ 444.088412][T19314] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.097972][T19314] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.106625][T19314] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.115215][T19314] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.241173][T19316] bridge7: entered allmulticast mode [ 444.489038][T19339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3983'. [ 444.499389][T19341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3983'. [ 444.564669][T19340] netlink: 'syz.4.3981': attribute type 1 has an invalid length. [ 444.573152][T19340] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3981'. [ 444.669106][T19349] syz_tun: entered allmulticast mode [ 444.688590][T19349] syz_tun: left allmulticast mode [ 444.759117][T19359] xt_HMARK: spi-set and port-set can't be combined [ 444.829812][T19361] lo speed is unknown, defaulting to 1000 [ 444.833418][T19364] sock: sock_set_timeout: `syz.0.3988' (pid 19364) tries to set negative timeout [ 444.873300][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3988'. [ 444.916323][T19367] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 444.961908][T19367] lo speed is unknown, defaulting to 1000 [ 445.151102][T19377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3991'. [ 445.290178][T19378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.316312][T19378] netlink: zone id is out of range [ 445.425274][T19382] netlink: 'syz.0.3991': attribute type 2 has an invalid length. [ 445.439042][T19382] Tq€!7: entered promiscuous mode [ 445.585973][T19378] netlink: set zone limit has 4 unknown bytes [ 445.673556][T19390] netlink: 7084 bytes leftover after parsing attributes in process `syz.3.3996'. [ 445.683703][T19390] Tq€!7: left promiscuous mode [ 445.848771][T19390] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.3996'. [ 445.857991][T19390] openvswitch: netlink: Flow actions attr not present in new flow. [ 446.126965][T19400] syz_tun: entered allmulticast mode [ 446.135594][T19400] syz_tun: left allmulticast mode [ 446.291147][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 446.379845][T19406] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 446.685820][T19413] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 446.934415][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 447.122710][T19422] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.853741][T19460] netlink: 'syz.3.4021': attribute type 33 has an invalid length. [ 447.862802][T19460] gre0: entered promiscuous mode [ 447.869753][T19460] gre0: entered allmulticast mode [ 447.966774][T19462] netlink: 'syz.3.4023': attribute type 4 has an invalid length. [ 447.978585][T19462] netlink: 'syz.3.4023': attribute type 4 has an invalid length. [ 448.517772][T19491] vxcan0: Master is either lo or non-ether device [ 449.047338][T19509] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 449.453542][T19523] lo speed is unknown, defaulting to 1000 [ 449.909386][T19537] __nla_validate_parse: 14 callbacks suppressed [ 449.909406][T19537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4045'. [ 451.020949][T19581] lo speed is unknown, defaulting to 1000 [ 451.152362][T19589] lo speed is unknown, defaulting to 1000 [ 451.186754][T19590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.628938][T19594] netlink: 7084 bytes leftover after parsing attributes in process `syz.2.4060'. [ 451.639150][T19594] Tq€!7: left promiscuous mode [ 451.684994][T19596] bridge11: entered allmulticast mode [ 451.782229][T19594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4060'. [ 451.822217][T19594] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.4060'. [ 451.847291][T19594] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.109896][T19609] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.210855][T19621] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 452.247012][T19609] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.278238][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4069'. [ 452.287595][T19623] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 452.362928][T19609] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.493593][T19609] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.731419][T19609] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.873093][T19609] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.947551][T19609] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.036232][T19609] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.105298][T19647] 8021q: adding VLAN 0 to HW filter on device bond27 [ 453.114039][T19647] bond0: (slave bond27): Enslaving as an active interface with an up link [ 453.147684][T19647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4076'. [ 453.256121][T19660] syz_tun: entered allmulticast mode [ 453.282307][T19660] syz_tun: left allmulticast mode [ 453.408057][T19670] netlink: 'syz.1.4083': attribute type 1 has an invalid length. [ 453.416275][T19670] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4083'. [ 453.581784][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4085'. [ 453.723458][T19689] lo speed is unknown, defaulting to 1000 [ 453.905731][T19699] netlink: 'syz.2.4092': attribute type 5 has an invalid length. [ 454.387042][T19696] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.394465][T19696] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.795776][T19696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.834258][T19696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.157002][T19696] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.172920][T19696] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.181440][T19696] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.190017][T19696] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.241513][T19696] bridge1: left allmulticast mode [ 455.258481][T19696] bridge2: left allmulticast mode [ 455.293552][T19706] tipc: Enabling of bearer rejected, failed to enable media [ 455.312970][T19709] @ÿ: renamed from veth0_vlan (while UP) [ 455.324460][T19723] netlink: 'syz.3.4099': attribute type 1 has an invalid length. [ 455.332236][T19723] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4099'. [ 455.559506][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4105'. [ 455.568739][T19739] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 455.575454][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'. [ 455.578075][T19739] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 455.928533][T19755] netlink: 'syz.3.4113': attribute type 1 has an invalid length. [ 455.937165][T19755] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4113'. [ 456.135157][T19768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4115'. [ 456.166683][T19768] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 456.441889][T19779] pimreg: entered allmulticast mode [ 456.505730][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 456.519498][T19781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4122'. [ 456.809078][T19792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4128'. [ 456.897700][T19795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4126'. [ 456.970865][T19798] lo speed is unknown, defaulting to 1000 [ 456.979528][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4130'. [ 457.009087][T19802] ip6gre1: entered allmulticast mode [ 457.174601][T19812] netlink: 'syz.0.4132': attribute type 8 has an invalid length. [ 457.779558][T19819] IPVS: Scheduler module ip_vs_sip not found [ 458.181576][T19836] netlink: 'syz.4.4139': attribute type 1 has an invalid length. [ 458.480199][T19847] sctp: [Deprecated]: syz.1.4141 (pid 19847) Use of int in maxseg socket option. [ 458.480199][T19847] Use struct sctp_assoc_value instead [ 458.759448][T19861] pimreg: left allmulticast mode [ 458.812313][ T30] audit: type=1107 audit(1742198179.836:6): pid=19860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 459.207160][T19873] netlink: 'syz.4.4151': attribute type 7 has an invalid length. [ 459.332537][T19880] netlink: 'syz.2.4150': attribute type 2 has an invalid length. [ 459.405114][T19883] bridge0: port 3(syz_tun) entered blocking state [ 459.411643][T19883] bridge0: port 3(syz_tun) entered disabled state [ 459.450582][T19883] syz_tun: entered allmulticast mode [ 459.473875][T19883] syz_tun: entered promiscuous mode [ 459.492847][T19883] bridge0: port 3(syz_tun) entered blocking state [ 459.499971][T19883] bridge0: port 3(syz_tun) entered forwarding state [ 459.565197][T19888] wireguard0: entered promiscuous mode [ 459.570723][T19888] wireguard0: entered allmulticast mode [ 459.765669][T19900] lo speed is unknown, defaulting to 1000 [ 459.806583][T19903] Tq€!7: left promiscuous mode [ 459.882993][T19908] netlink: 'syz.4.4159': attribute type 1 has an invalid length. [ 459.983319][T19907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.072702][T19916] bridge0: port 4(vlan2) entered blocking state [ 460.089822][T19916] bridge0: port 4(vlan2) entered disabled state [ 460.126218][T19916] vlan2: entered allmulticast mode [ 460.151233][T19916] vlan2: entered promiscuous mode [ 460.474991][T19924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.572508][T19924] netlink: zone id is out of range [ 460.675896][T19930] netlink: 'syz.2.4165': attribute type 2 has an invalid length. [ 460.808656][T19930] Tq€!7: entered promiscuous mode [ 460.841522][T19940] __nla_validate_parse: 14 callbacks suppressed [ 460.841548][T19940] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4171'. [ 460.880437][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 460.885682][T19924] netlink: set zone limit has 4 unknown bytes [ 460.890048][T19940] netlink: 'syz.3.4171': attribute type 2 has an invalid length. [ 460.903381][T19940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4171'. [ 460.926981][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4173'. [ 460.981931][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4174'. [ 460.992265][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4174'. [ 461.143863][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4176'. [ 461.155413][T19962] netlink: 'syz.3.4176': attribute type 30 has an invalid length. [ 461.158666][T19950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4168'. [ 461.168380][T19962] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.180766][T19962] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.189026][T19962] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.197387][T19962] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.216128][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4176'. [ 461.226648][T19965] netlink: 'syz.3.4176': attribute type 30 has an invalid length. [ 461.412590][T19968] netlink: 'syz.3.4177': attribute type 1 has an invalid length. [ 461.586628][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4178'. [ 462.240037][T19995] netlink: 'syz.3.4185': attribute type 8 has an invalid length. [ 462.877460][T20023] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 462.932764][T20024] tipc: Enabling of bearer rejected, failed to enable media [ 463.165921][T20037] FAULT_INJECTION: forcing a failure. [ 463.165921][T20037] name failslab, interval 1, probability 0, space 0, times 0 [ 463.201941][T20037] CPU: 0 UID: 0 PID: 20037 Comm: syz.1.4199 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 463.201966][T20037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.201976][T20037] Call Trace: [ 463.201982][T20037] [ 463.201989][T20037] dump_stack_lvl+0x241/0x360 [ 463.202015][T20037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.202032][T20037] ? __pfx__printk+0x10/0x10 [ 463.202050][T20037] ? __kmalloc_noprof+0xb5/0x4c0 [ 463.202071][T20037] ? __pfx___might_resched+0x10/0x10 [ 463.202096][T20037] should_fail_ex+0x40a/0x550 [ 463.202123][T20037] should_failslab+0xac/0x100 [ 463.202146][T20037] __kmalloc_noprof+0xdd/0x4c0 [ 463.202165][T20037] ? sock_kmalloc+0xd7/0x160 [ 463.202192][T20037] ? do_raw_spin_unlock+0x13c/0x8b0 [ 463.202216][T20037] sock_kmalloc+0xd7/0x160 [ 463.202239][T20037] hash_recvmsg+0x287/0x7e0 [ 463.202264][T20037] ? __pfx_hash_recvmsg+0x10/0x10 [ 463.202286][T20037] sock_recvmsg+0x22f/0x280 [ 463.202312][T20037] ____sys_recvmsg+0x1c6/0x480 [ 463.202340][T20037] ? __pfx_____sys_recvmsg+0x10/0x10 [ 463.202382][T20037] do_recvmmsg+0x426/0xab0 [ 463.202414][T20037] ? __pfx_do_recvmmsg+0x10/0x10 [ 463.202454][T20037] ? ksys_write+0x22a/0x2b0 [ 463.202472][T20037] ? __pfx_lock_release+0x10/0x10 [ 463.202501][T20037] ? sb_end_write+0xe9/0x1c0 [ 463.202523][T20037] ? vfs_write+0x7fa/0xd10 [ 463.202543][T20037] ? __mutex_unlock_slowpath+0x227/0x800 [ 463.202574][T20037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 463.202592][T20037] ? __fget_files+0x2a/0x410 [ 463.202629][T20037] __x64_sys_recvmmsg+0x199/0x250 [ 463.202652][T20037] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 463.202672][T20037] ? do_syscall_64+0x100/0x230 [ 463.202695][T20037] ? do_syscall_64+0xb6/0x230 [ 463.202717][T20037] do_syscall_64+0xf3/0x230 [ 463.202736][T20037] ? clear_bhb_loop+0x35/0x90 [ 463.202759][T20037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.202779][T20037] RIP: 0033:0x7f163198d169 [ 463.202794][T20037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.202808][T20037] RSP: 002b:00007f16317f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 463.202826][T20037] RAX: ffffffffffffffda RBX: 00007f1631ba5fa0 RCX: 00007f163198d169 [ 463.202838][T20037] RDX: 0000000000000600 RSI: 0000400000003700 RDI: 0000000000000004 [ 463.202848][T20037] RBP: 00007f16317f9090 R08: 0000000000000000 R09: 0000000000000000 [ 463.202858][T20037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.202868][T20037] R13: 0000000000000000 R14: 00007f1631ba5fa0 R15: 00007ffcb27e62b8 [ 463.202895][T20037] [ 463.740158][T20057] bond0: option mode: unable to set because the bond device has slaves [ 464.458484][T20085] tipc: Enabling of bearer rejected, failed to enable media [ 465.406517][T20128] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.545142][T20131] netlink: 'syz.4.4229': attribute type 1 has an invalid length. [ 465.561913][T20131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.600976][T20138] netlink: 'syz.3.4232': attribute type 1 has an invalid length. [ 465.640872][T20131] gretap1: entered promiscuous mode [ 465.649788][T20131] bond1: (slave gretap1): making interface the new active one [ 465.664303][T20131] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 465.733037][T20131] bond1: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 465.817449][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 466.217154][T20157] netlink: 'syz.1.4239': attribute type 4 has an invalid length. [ 466.234723][T20157] netlink: 'syz.1.4239': attribute type 4 has an invalid length. [ 466.334530][T20163] vlan2: entered promiscuous mode [ 466.344032][T20163] vlan2: entered allmulticast mode [ 466.381189][T20165] __nla_validate_parse: 8 callbacks suppressed [ 466.381208][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 466.414606][T20165] bridge_slave_1: left allmulticast mode [ 466.421371][T20165] bridge_slave_1: left promiscuous mode [ 466.451449][T20165] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.477912][T20165] bridge_slave_0: left allmulticast mode [ 466.489268][T20165] bridge_slave_0: left promiscuous mode [ 466.503583][T20165] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.533953][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4244'. [ 467.163025][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4253'. [ 467.173549][T20203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4253'. [ 467.502500][T20203] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.510079][T20203] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.534415][T20219] xt_hashlimit: max too large, truncated to 1048576 [ 467.557611][T20219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4257'. [ 467.803593][T20203] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 468.054409][T20233] FAULT_INJECTION: forcing a failure. [ 468.054409][T20233] name failslab, interval 1, probability 0, space 0, times 0 [ 468.067493][T20233] CPU: 0 UID: 0 PID: 20233 Comm: syz.3.4265 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 468.067513][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.067522][T20233] Call Trace: [ 468.067526][T20233] [ 468.067532][T20233] dump_stack_lvl+0x241/0x360 [ 468.067554][T20233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.067568][T20233] ? __pfx__printk+0x10/0x10 [ 468.067583][T20233] ? __kmalloc_noprof+0xb5/0x4c0 [ 468.067600][T20233] ? __pfx___might_resched+0x10/0x10 [ 468.067621][T20233] should_fail_ex+0x40a/0x550 [ 468.067642][T20233] should_failslab+0xac/0x100 [ 468.067660][T20233] __kmalloc_noprof+0xdd/0x4c0 [ 468.067676][T20233] ? sock_kmalloc+0xd7/0x160 [ 468.067690][T20233] ? do_raw_spin_unlock+0x13c/0x8b0 [ 468.067709][T20233] sock_kmalloc+0xd7/0x160 [ 468.067726][T20233] hash_recvmsg+0x287/0x7e0 [ 468.067745][T20233] ? __pfx_hash_recvmsg+0x10/0x10 [ 468.067772][T20233] sock_recvmsg_nosec+0x18e/0x1d0 [ 468.067792][T20233] ____sys_recvmsg+0x3cd/0x480 [ 468.067814][T20233] ? __pfx_____sys_recvmsg+0x10/0x10 [ 468.067837][T20233] ? do_recvmmsg+0x44e/0xab0 [ 468.067852][T20233] ? __might_fault+0xaa/0x120 [ 468.067868][T20233] do_recvmmsg+0x426/0xab0 [ 468.067891][T20233] ? __pfx_do_recvmmsg+0x10/0x10 [ 468.067921][T20233] ? ksys_write+0x22a/0x2b0 [ 468.067936][T20233] ? __pfx_lock_release+0x10/0x10 [ 468.067958][T20233] ? sb_end_write+0xe9/0x1c0 [ 468.067976][T20233] ? vfs_write+0x7fa/0xd10 [ 468.067991][T20233] ? __mutex_unlock_slowpath+0x227/0x800 [ 468.068014][T20233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 468.068029][T20233] ? __fget_files+0x2a/0x410 [ 468.068059][T20233] __x64_sys_recvmmsg+0x199/0x250 [ 468.068075][T20233] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 468.068091][T20233] ? do_syscall_64+0x100/0x230 [ 468.068109][T20233] ? do_syscall_64+0xb6/0x230 [ 468.068127][T20233] do_syscall_64+0xf3/0x230 [ 468.068141][T20233] ? clear_bhb_loop+0x35/0x90 [ 468.068161][T20233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.068177][T20233] RIP: 0033:0x7f2b9738d169 [ 468.068189][T20233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.068200][T20233] RSP: 002b:00007f2b98226038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 468.068214][T20233] RAX: ffffffffffffffda RBX: 00007f2b975a5fa0 RCX: 00007f2b9738d169 [ 468.068224][T20233] RDX: 0000000000000600 RSI: 0000400000003700 RDI: 0000000000000004 [ 468.068232][T20233] RBP: 00007f2b98226090 R08: 0000000000000000 R09: 0000000000000000 [ 468.068239][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.068247][T20233] R13: 0000000000000000 R14: 00007f2b975a5fa0 R15: 00007fff12b16268 [ 468.068267][T20233] [ 468.360499][T20231] netlink: 'syz.4.4261': attribute type 1 has an invalid length. [ 468.384573][T20231] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4261'. [ 468.597795][T20250] netlink: 'syz.3.4270': attribute type 10 has an invalid length. [ 468.611769][T20250] unknown channel width for channel at 909000KHz? [ 468.620629][T20250] unknown channel width for channel at 909000KHz? [ 468.637159][T20250] unknown channel width for channel at 909000KHz? [ 468.737210][T20256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4272'. [ 468.838315][T20265] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4271'. [ 468.859432][T20264] vlan0: entered allmulticast mode [ 468.877426][T20264] SET target dimension over the limit! [ 468.952781][T20269] lo speed is unknown, defaulting to 1000 [ 468.954851][T20267] IPVS: set_ctl: invalid protocol: 57022 255.255.255.255:20001 [ 469.003452][T20273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4275'. [ 469.012803][T20273] netlink: 'syz.1.4275': attribute type 3 has an invalid length. [ 469.041595][T20267] geneve1: entered promiscuous mode [ 469.096601][T20276] FAULT_INJECTION: forcing a failure. [ 469.096601][T20276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.097178][T20277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4274'. [ 469.120574][T20276] CPU: 0 UID: 0 PID: 20276 Comm: syz.4.4277 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 469.120597][T20276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.120608][T20276] Call Trace: [ 469.120614][T20276] [ 469.120621][T20276] dump_stack_lvl+0x241/0x360 [ 469.120647][T20276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.120665][T20276] ? __pfx__printk+0x10/0x10 [ 469.120684][T20276] ? __pfx_lock_release+0x10/0x10 [ 469.120714][T20276] should_fail_ex+0x40a/0x550 [ 469.120742][T20276] _copy_from_user+0x2d/0xb0 [ 469.120764][T20276] copy_msghdr_from_user+0xae/0x680 [ 469.120787][T20276] ? __pfx___might_resched+0x10/0x10 [ 469.120811][T20276] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 469.120840][T20276] ? do_recvmmsg+0x44e/0xab0 [ 469.120860][T20276] ? __might_fault+0xaa/0x120 [ 469.120881][T20276] do_recvmmsg+0x3bd/0xab0 [ 469.120918][T20276] ? __pfx_do_recvmmsg+0x10/0x10 [ 469.120956][T20276] ? ksys_write+0x22a/0x2b0 [ 469.120975][T20276] ? __pfx_lock_release+0x10/0x10 [ 469.121003][T20276] ? sb_end_write+0xe9/0x1c0 [ 469.121026][T20276] ? vfs_write+0x7fa/0xd10 [ 469.121046][T20276] ? __mutex_unlock_slowpath+0x227/0x800 [ 469.121075][T20276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.121094][T20276] ? __fget_files+0x2a/0x410 [ 469.121130][T20276] __x64_sys_recvmmsg+0x199/0x250 [ 469.121152][T20276] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 469.121173][T20276] ? do_syscall_64+0x100/0x230 [ 469.121195][T20276] ? do_syscall_64+0xb6/0x230 [ 469.121218][T20276] do_syscall_64+0xf3/0x230 [ 469.121237][T20276] ? clear_bhb_loop+0x35/0x90 [ 469.121261][T20276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.121281][T20276] RIP: 0033:0x7fa4c798d169 [ 469.121296][T20276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.121309][T20276] RSP: 002b:00007fa4c879c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 469.121328][T20276] RAX: ffffffffffffffda RBX: 00007fa4c7ba5fa0 RCX: 00007fa4c798d169 [ 469.121340][T20276] RDX: 0000000000000600 RSI: 0000400000003700 RDI: 0000000000000004 [ 469.121350][T20276] RBP: 00007fa4c879c090 R08: 0000000000000000 R09: 0000000000000000 [ 469.121360][T20276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.121369][T20276] R13: 0000000000000000 R14: 00007fa4c7ba5fa0 R15: 00007ffe49b06308 [ 469.121396][T20276] [ 469.126654][T20267] ipvlan0: entered promiscuous mode [ 469.395197][T20267] ipvlan0: left promiscuous mode [ 469.515453][T20267] geneve1: left promiscuous mode [ 469.893808][T20302] FAULT_INJECTION: forcing a failure. [ 469.893808][T20302] name failslab, interval 1, probability 0, space 0, times 0 [ 469.911299][T20302] CPU: 0 UID: 0 PID: 20302 Comm: syz.3.4288 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 469.911325][T20302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.911335][T20302] Call Trace: [ 469.911341][T20302] [ 469.911348][T20302] dump_stack_lvl+0x241/0x360 [ 469.911375][T20302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.911394][T20302] ? __pfx__printk+0x10/0x10 [ 469.911413][T20302] ? __kmalloc_noprof+0xb5/0x4c0 [ 469.911435][T20302] ? __pfx___might_resched+0x10/0x10 [ 469.911462][T20302] should_fail_ex+0x40a/0x550 [ 469.911490][T20302] should_failslab+0xac/0x100 [ 469.911513][T20302] __kmalloc_noprof+0xdd/0x4c0 [ 469.911533][T20302] ? sock_kmalloc+0xd7/0x160 [ 469.911552][T20302] ? do_raw_spin_unlock+0x13c/0x8b0 [ 469.911576][T20302] sock_kmalloc+0xd7/0x160 [ 469.911598][T20302] hash_recvmsg+0x287/0x7e0 [ 469.911623][T20302] ? __pfx_hash_recvmsg+0x10/0x10 [ 469.911654][T20302] sock_recvmsg_nosec+0x18e/0x1d0 [ 469.911679][T20302] ____sys_recvmsg+0x3cd/0x480 [ 469.911707][T20302] ? __pfx_____sys_recvmsg+0x10/0x10 [ 469.911739][T20302] ? do_recvmmsg+0x44e/0xab0 [ 469.911759][T20302] ? __might_fault+0xaa/0x120 [ 469.911781][T20302] do_recvmmsg+0x426/0xab0 [ 469.911812][T20302] ? __pfx_do_recvmmsg+0x10/0x10 [ 469.911849][T20302] ? ksys_write+0x22a/0x2b0 [ 469.911868][T20302] ? __pfx_lock_release+0x10/0x10 [ 469.911898][T20302] ? sb_end_write+0xe9/0x1c0 [ 469.911921][T20302] ? vfs_write+0x7fa/0xd10 [ 469.911942][T20302] ? __mutex_unlock_slowpath+0x227/0x800 [ 469.911973][T20302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.911992][T20302] ? __fget_files+0x2a/0x410 [ 469.912030][T20302] __x64_sys_recvmmsg+0x199/0x250 [ 469.912053][T20302] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 469.912074][T20302] ? do_syscall_64+0x100/0x230 [ 469.912097][T20302] ? do_syscall_64+0xb6/0x230 [ 469.912120][T20302] do_syscall_64+0xf3/0x230 [ 469.912140][T20302] ? clear_bhb_loop+0x35/0x90 [ 469.912164][T20302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.912185][T20302] RIP: 0033:0x7f2b9738d169 [ 469.912199][T20302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.912214][T20302] RSP: 002b:00007f2b98226038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 469.912232][T20302] RAX: ffffffffffffffda RBX: 00007f2b975a5fa0 RCX: 00007f2b9738d169 [ 469.912245][T20302] RDX: 0000000000000600 RSI: 0000400000003700 RDI: 0000000000000004 [ 469.912256][T20302] RBP: 00007f2b98226090 R08: 0000000000000000 R09: 0000000000000000 [ 469.912267][T20302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.912277][T20302] R13: 0000000000000000 R14: 00007f2b975a5fa0 R15: 00007fff12b16268 [ 469.912306][T20302] [ 470.525481][T20307] openvswitch: netlink: Message has 8 unknown bytes. [ 470.554659][T20322] tap0: tun_chr_ioctl cmd 1074025677 [ 470.560209][T20322] tap0: linktype set to 804 [ 471.092875][T20351] syz_tun: entered allmulticast mode [ 471.107254][T20351] syz_tun: left allmulticast mode [ 471.618018][T20368] sock: sock_set_timeout: `syz.3.4310' (pid 20368) tries to set negative timeout [ 471.628917][T20368] __nla_validate_parse: 7 callbacks suppressed [ 471.628933][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4310'. [ 471.712402][T20368] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] PREEMPT SMP KASAN PTI [ 471.725032][T20368] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 471.734601][T20368] CPU: 0 UID: 0 PID: 20368 Comm: syz.3.4310 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 471.745377][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.755449][T20368] RIP: 0010:ip6_mc_clear_src+0x11b/0x4e0 [ 471.761103][T20368] Code: ff ff ff e8 a7 b9 5b 01 89 c5 31 ff 89 c6 e8 4c 0c 13 f7 85 ed 74 43 e8 03 08 13 f7 eb 05 e8 fc 07 13 f7 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 d6 56 7a f7 48 8b 2b 48 8d 7b 30 [ 471.780721][T20368] RSP: 0018:ffffc900051e6c60 EFLAGS: 00010206 [ 471.786802][T20368] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: 0000000000080000 [ 471.794769][T20368] RDX: ffffc9001c0d9000 RSI: 0000000000013e4e RDI: 0000000000013e4f [ 471.802729][T20368] RBP: 0000000000000001 R08: ffffffff8aaee774 R09: 1ffffffff207a24e [ 471.810689][T20368] R10: dffffc0000000000 R11: fffffbfff207a24f R12: ffff88803404d810 [ 471.818652][T20368] R13: dffffc0000000000 R14: 1ffff11006809b02 R15: 0000000000000538 [ 471.826615][T20368] FS: 00007f2b982056c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 471.835545][T20368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.842111][T20368] CR2: 0000400000699030 CR3: 000000006bc6c000 CR4: 00000000003526f0 [ 471.850071][T20368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.858028][T20368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.865985][T20368] Call Trace: [ 471.869253][T20368] [ 471.872169][T20368] ? __die_body+0x5f/0xb0 [ 471.876493][T20368] ? die_addr+0xb0/0xe0 [ 471.880643][T20368] ? exc_general_protection+0x3dd/0x5d0 [ 471.886188][T20368] ? asm_exc_general_protection+0x26/0x30 [ 471.891901][T20368] ? ip6_mc_clear_src+0x104/0x4e0 [ 471.896915][T20368] ? ip6_mc_clear_src+0x11b/0x4e0 [ 471.901932][T20368] mld_clear_delrec+0x11c/0x600 [ 471.906772][T20368] ipv6_mc_destroy_dev+0x46/0x580 [ 471.911786][T20368] ? ipv6_ac_destroy_dev+0x327/0x340 [ 471.917067][T20368] addrconf_ifdown+0x1619/0x1b00 [ 471.921997][T20368] ? __pfx_addrconf_ifdown+0x10/0x10 [ 471.927267][T20368] ? tls_dev_event+0x8f6/0x10c0 [ 471.932109][T20368] addrconf_notify+0x3cb/0x1020 [ 471.936948][T20368] notifier_call_chain+0x1a5/0x3f0 [ 471.942056][T20368] unregister_netdevice_many_notify+0x156b/0x24f0 [ 471.948475][T20368] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 471.955233][T20368] ? unregister_netdevice_queue+0x26b/0x370 [ 471.961116][T20368] ? veth_dellink+0xef/0x140 [ 471.965728][T20368] ? __pfx_veth_dellink+0x10/0x10 [ 471.970739][T20368] rtnl_dellink+0x526/0x8c0 [ 471.975241][T20368] ? __pfx_rtnl_dellink+0x10/0x10 [ 471.980262][T20368] ? validate_chain+0x11e/0x5920 [ 471.985190][T20368] ? __pfx_lock_acquire+0x10/0x10 [ 471.990295][T20368] ? __pfx_lock_release+0x10/0x10 [ 471.995332][T20368] ? __pfx_rtnl_dellink+0x10/0x10 [ 472.000350][T20368] rtnetlink_rcv_msg+0x791/0xcf0 [ 472.005279][T20368] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 472.010381][T20368] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.015839][T20368] netlink_rcv_skb+0x206/0x480 [ 472.020595][T20368] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.026045][T20368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.031327][T20368] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.036520][T20368] netlink_unicast+0x7f6/0x990 [ 472.041275][T20368] ? __pfx_netlink_unicast+0x10/0x10 [ 472.046547][T20368] ? __virt_addr_valid+0x45f/0x530 [ 472.051644][T20368] ? __phys_addr_symbol+0x2f/0x70 [ 472.056653][T20368] ? __check_object_size+0x47a/0x730 [ 472.061927][T20368] netlink_sendmsg+0x8de/0xcb0 [ 472.066688][T20368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.071966][T20368] ? aa_sock_msg_perm+0x91/0x160 [ 472.076896][T20368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.082171][T20368] __sock_sendmsg+0x221/0x270 [ 472.086842][T20368] ____sys_sendmsg+0x53a/0x860 [ 472.091596][T20368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.096867][T20368] ? __fget_files+0x2a/0x410 [ 472.101449][T20368] ? __fget_files+0x2a/0x410 [ 472.106035][T20368] __sys_sendmsg+0x269/0x350 [ 472.110612][T20368] ? __pfx_futex_wake+0x10/0x10 [ 472.115459][T20368] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.120574][T20368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.126893][T20368] ? do_syscall_64+0x100/0x230 [ 472.131645][T20368] ? do_syscall_64+0xb6/0x230 [ 472.136312][T20368] do_syscall_64+0xf3/0x230 [ 472.140803][T20368] ? clear_bhb_loop+0x35/0x90 [ 472.145472][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.151359][T20368] RIP: 0033:0x7f2b9738d169 [ 472.155762][T20368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.175363][T20368] RSP: 002b:00007f2b98205038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.183765][T20368] RAX: ffffffffffffffda RBX: 00007f2b975a6080 RCX: 00007f2b9738d169 [ 472.191725][T20368] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 000000000000000d [ 472.199684][T20368] RBP: 00007f2b9740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 472.207666][T20368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.215625][T20368] R13: 0000000000000000 R14: 00007f2b975a6080 R15: 00007fff12b16268 [ 472.223597][T20368] [ 472.226624][T20368] Modules linked in: [ 472.231785][T20368] ---[ end trace 0000000000000000 ]--- [ 472.257781][T20368] RIP: 0010:ip6_mc_clear_src+0x11b/0x4e0 [ 472.263547][T20368] Code: ff ff ff e8 a7 b9 5b 01 89 c5 31 ff 89 c6 e8 4c 0c 13 f7 85 ed 74 43 e8 03 08 13 f7 eb 05 e8 fc 07 13 f7 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 d6 56 7a f7 48 8b 2b 48 8d 7b 30 [ 472.285864][T20368] RSP: 0018:ffffc900051e6c60 EFLAGS: 00010206 [ 472.292030][T20368] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: 0000000000080000 [ 472.300241][T20368] RDX: ffffc9001c0d9000 RSI: 0000000000013e4e RDI: 0000000000013e4f [ 472.308360][T20368] RBP: 0000000000000001 R08: ffffffff8aaee774 R09: 1ffffffff207a24e [ 472.316612][T20368] R10: dffffc0000000000 R11: fffffbfff207a24f R12: ffff88803404d810 [ 472.325198][T20368] R13: dffffc0000000000 R14: 1ffff11006809b02 R15: 0000000000000538 [ 472.333263][T20368] FS: 00007f2b982056c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 472.342361][T20368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.349228][T20368] CR2: 00007ffe161fec48 CR3: 000000006bc6c000 CR4: 00000000003526f0 [ 472.357350][T20368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.365542][T20368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.373551][T20368] Kernel panic - not syncing: Fatal exception [ 472.379887][T20368] Kernel Offset: disabled [ 472.384200][T20368] Rebooting in 86400 seconds..