last executing test programs: 56.406863492s ago: executing program 4 (id=2019): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0xb0bfa37c3f60346c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xb}}]}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff08004500001c000000020011907800000000000000004e22ffffffff9078"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = socket(0x11, 0xa, 0xfffffffc) socket$kcm(0x29, 0x2, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0e}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 42.039497368s ago: executing program 4 (id=2019): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0xb0bfa37c3f60346c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xb}}]}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff08004500001c000000020011907800000000000000004e22ffffffff9078"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = socket(0x11, 0xa, 0xfffffffc) socket$kcm(0x29, 0x2, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0e}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 26.755324156s ago: executing program 4 (id=2019): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0xb0bfa37c3f60346c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xb}}]}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff08004500001c000000020011907800000000000000004e22ffffffff9078"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = socket(0x11, 0xa, 0xfffffffc) socket$kcm(0x29, 0x2, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0e}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.373788882s ago: executing program 4 (id=2019): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0xb0bfa37c3f60346c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xb}}]}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff08004500001c000000020011907800000000000000004e22ffffffff9078"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = socket(0x11, 0xa, 0xfffffffc) socket$kcm(0x29, 0x2, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0e}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.563660435s ago: executing program 0 (id=2434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r4, &(0x7f0000000040)="78d6e3", 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) 2.401937987s ago: executing program 2 (id=2436): unshare(0x2c060000) (async) unshare(0x24020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000002000000000000000007000006000000"], 0x13}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008}, 0x18) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) shutdown(r2, 0x1) (async) r3 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r1, 0x100000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x311}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000940)={@empty, 0x1, 0x0, 0xa0, 0x0, [{@local}, {@multicast2}, {@broadcast}, {@multicast2}, {@dev}, {@multicast2}, {@multicast1}, {@dev}, {@multicast2}, {@multicast1}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x6, 0x1, 0x6, 0x7, 0x0, @private1, @mcast1, 0x20, 0x7800, 0x1, 0x6912}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback, 0x4, 0x1}, 0x20) 2.382053199s ago: executing program 0 (id=2438): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c00000000000000000d"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005f00010000000000000000001f00"], 0x1c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x1, {0x0, 0xff, 0x3}, 0xfd}, 0x18) epoll_create1(0x80000) sendmsg$sock(r1, &(0x7f0000000440)={&(0x7f0000000040)=@llc={0x1a, 0x321, 0xa, 0x10, 0x8, 0xf0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x80, 0x0}, 0x200400c4) 2.311701254s ago: executing program 1 (id=2439): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x110e22fff7) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5b7d8d840bb5020004000000094000d03d78ca8dff84baee74000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc, 0x57}}]}]}}}}}}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x304) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r9 = syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a3a71baea18a588b67ce7e99e3fddd92aa06ce7f3a9d5f1b266b884fc1520697ab82932a3c1576b108cd12707a725bc960ef22846e535c2119b9b0c3e7a6cf6a8cb6e961e7e09e9eadbb9830d1041b1a541eebd2daff91518c48ae2abcf11cfe7adc8f53c63a5f19c421d02b2570b7d5aa21114c8ecb990de8e9aa20625da461af2a2e10a7a0e5e67a20aee4559cc4e93a6f31070a91a12998fde9ad4f1ce3f824564e31"], 0x1c}}, 0x4000054) 2.201805084s ago: executing program 2 (id=2440): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001f00)=0x2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000200", @ANYRESOCT=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000010002000"/28], 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f3", 0x2c}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150", 0xbe}, {&(0x7f0000000040)}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab9", 0xb1}], 0x2}}], 0x2, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a431"], 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x0, 0x4}]}, 0x10) sendto$inet6(r6, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000003000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.153911937s ago: executing program 0 (id=2442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14780000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xf3a}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}}, 0x0) 2.023711184s ago: executing program 3 (id=2443): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff00000000000000000200130003"], 0x70}, 0x1, 0x7}, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0xfffa, 0x6}, 0x20) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r3) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0xe, 0x0, 0x1, 0x4, @private1, @private1, 0x7800, 0x37, 0x0, 0xddc07ec}}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'nicvf0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095000000000000001fdfd3a436f3d3c47a45ae9650a183cd260760ded157e15148fd52010900000000000000971b8ed18f1413cb3fde8a558190f44ad881c4cd825d6d5e725c"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r5) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r11) sendmsg$NL802154_CMD_DEL_SEC_DEV(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r13, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x4008040) 1.865858552s ago: executing program 2 (id=2444): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0xa0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRESHEX=r1, @ANYRES64=r6, @ANYBLOB="5ff549db4925b1e9469bb08762eeb3c41527", @ANYRES32=r5, @ANYRESHEX=0x0], 0x28}}, 0x40488c0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet_sctp(r5, &(0x7f0000002400)=[{&(0x7f0000000340)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="93444755435e394e3713d627f279fef17a0a114fb4d8173e1d675fc51314187b6b2f4c6f003fd39a8503929f6282dcffcee542154bc952477fd7e5a99372447e9782489d8a6400030716276da1a3fcab5a501136acd6687eb4481766934c203aa493325a6beb0dff3da2f8a6a860e000d7835b7df91f97f5d4467933ab08e396564bf77fdb812744c64390f0069cf82265608fcd02ba52f0ab9fc648f923acc7d0a42cf2a0a62ed546c3963d422a905318beb06d5ab091f094a15b688c3a333f3436909cbe4b155122da835d51dfe170cf9e7fd95135638fbf8c1f036b1faf25a7cd4b37e0e9bb119b13739a2dc611d54b80", 0xf2}, {&(0x7f0000000600)="2620d746004e00a29588f08e11fa6459ae6851f042331e1aed9974a374248fbeafd9f231219ab0ff754a9d868ef0e56cf87e7e27d0edb45cd21519be25e16614bbea582342224d1ec92f135e0bf073adfc48782e50dee8eed97d616e4732fdddb4b7307c038fbdc2a5ac2f2f644677222e98", 0x72}], 0x2, &(0x7f0000000880)=[@sndrcv={0x30, 0x84, 0x1, {0xc93, 0x3, 0x4, 0x101, 0x6, 0x9, 0x0, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18, 0x84, 0x5, {0x30}}], 0x60, 0x40}, {&(0x7f0000000480)=@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x4}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000900)="b3fa4f396cb61042fee1931aff143a66816f60d529a86a5c66a615c4d97be1b39e63eb7e0ee7470db38dbbd111bb57b571b7e68ad0f933a15779271442e8c49015", 0x41}, {&(0x7f0000000980)="fc3233fe941b2c6e741173d1eea04009dd2db5ff7927a5197b7762dff9532a546dfe2d852066613efc9e2ff7e26b511323724f2bed294580c68afa0f58e3dbe98d18f35084372bf7cea0dbb48721b77add0ca617ae036f8795dcc17c1b9ce9cfbfa773e8609b22af9197ba877a8796e1f1efbe7d4b1036737efa08441a3fe5b348e4d5b1c1b7d2e60b1ddc5f90bf65e9f9d9e1d3b31a6e88a3c4f81d29", 0x9d}, {&(0x7f0000000a40)="d46dc21edd6636855fe50a445457fb50529e66b984396e0c0c7086ca445b2535083410de032af7815e1cb52a261ff2ceb79487fdf65ab4a834be391bcd962a4a2e4deb8ca9856f45d83787d1264c5f34f63d3725f5a16739327f0289b34f6c9dba4dfdc35e1a1ed443724c0a", 0x6c}, {&(0x7f0000000ac0)="f446df6b017d969fd5798e23e1f1f02f6370a6f4f99261025114eb007a01251a92c3950727ceaef9841369725d796b38432f9d5c26b005c1d4f44569b0958d6259d474467b30d37198d76d3410098300a78de5df255be77d0f6618581a86d71413b6cc942e41bb016b9391fa4a58656641ec8cece126d3b55b0dfe86ea65b1dd5207d22113ba0cbda21d94b35e70dcc8", 0x90}, {&(0x7f0000000b80)="4ba219aa5d328b6e713a5667474c3e6166d10659b89a0956c2d48f1ff7c9344c8b260f16479976d1b2757a94144b7f9bf25c913a106e90727694a65407319c17ad73a56e282d2175743f2f1893510cfe2aaf2da6f4c73e2227851f0e4d0d587ca357a6683a334ad8359fff0f666f8cfe9f284495dbb5fa7db400055771fcaa56226ae310b19fe9b3f5a55152c5580cda035aa0a826dbccf69f9fddeda329790aa2bab489800a3f6b1fe4155ff6093d633eb4a0d71904bdb8d67e13f22a5f8c0872db975d42e5a94a3f22b0498dded442e4584c0100f887c9f8516db02c8211e452b594a2fafd09c389dcb5aa788ab33cb8da0b6b537be6080edece409a6b6bfa23a64ae6038c42f8483b802757a6387391faa58831f20e4ceb8cd7403706f3b249c66d29094a31c4de3c5c2500e8b8f2c9d736458ac5947f16ccb55f475d2f544db41363201c8c6dd206540c3e010b7deb608e14f6cbf11a939db7698467bece1c0816642b53ac49667bdd1b5fa0abbf352791147446a4d1a379fa25446ea39ddca3533c163ad2afa8da20f8262890315418c597b9e65e23cfc23b7b9cf3a5f766ace00feefe1354c7c6ec3c219966b130985c1bc3b38a41f4d23481fdb0563b269ccebfab5d770ac3deb6a3e6713ff80aef713732bb73cd2b3112e0adfd85c83c77ba4e5215e48843f9778742f017190b20638d260e677c210348eeeea827106368e0cd4048c14fb8a46c309a6fdfb1765379bb7fdafa760852be80cee48b1898ede12398980b66677164ec53edd288e18a826f949ddb2c0e37a2c367ed75a5d4efaaeca197c41a697b7d92b24f2f506707c0d1063db03fcb42e31c380b7c5720040beb46823a6254ea04feb5c3c824a02361cfff35aa6f1df59bd4e493ec37e5443dd8aeeb1856461d0e0e70c30a96f96ddd64aaa7ad48444e2f2829c2403ea5fa86edc4da5bd262fedacecda8f1d0a69453d4d72c203bd9e7d5394979160909d700964f0d8bbfe1f3e19af18aaef6636b32a974a6da2b0ac83627a091c86162ed0023d71b6f68727d83d838b9d78823dc20e02a1f0b842721e61ab0bcfbbad4bfaae3986679876136633ef72b0c65c4033ff9d2fd0097cecc96978f2777518c0eb0bba128243999b99b4c5ea3276f70e5eee21c206103b8d422916e64d2253d762d7d6d9e606508c4e11a4d1a292d80e05bfe6887a0d2f937bc18fd1d4953f6b2eec45d4836f97b4c693bc2707e0e51c68d3cde54ce25ef2c2a3b05a97612eb0d4c6b1930f989ac7a1a9cbd9d86b60e1c8ac89e426a2e23fb7d566c9f18574a0cd1fe8036147f4f985b6e2a35402c9f340f7db9b6f4ef6f19675f358c770ed8bdf97f27837686b7b60234daf5394b319aec75ddf4df2e39db18260994278b99b6a749e4465682062bc05c5031c31d7a2785b909353e3f2badf81fccdeb03e3503ec0ede3e73d34a135e07b4176e2c5230db6d9622a86e5a95b860ef4e66330293c2eb574907c376856f7c08ce1f8141fe45e37714f5506aac994949e36b63e72b3441f701a8a5fc2f5c6581867ddd45a104538bd51b816851b2cfc3742b8c9560ad9b4629d6597665685787dccec0a6706e6d9f57bf3e4b3acc381f4d8817fc33ea26d4e9bb359754187e29d832579d6e7de108f55d07c04e3d818932425aa6b9082b5f625cd4aaa18e2fa59bf0805f0bded73c3176e0c132b4937aa68c6030aa2055fff41949d974171d23feb017313a8df8b4d1f3947c528be6c8c72c1f906e729a60f64a254c47ea89ea132b21f9761a52f0918e9ad13653ea1f916f681800154a946508a13d057bc6c8beae57d388d7c33bfe7a4dba1f4da881ca20770353c72b7b22e289613c2fa9ea9d44ca9e353d37923175128cadac100ed130826f41211cfee77d67cded84d202216b8e40070b5f610385cfc7e34a0d227c41529df0859cb9055c7cb8cb8faafbcfdaf090d55a7f9847c1a5250dfdf77efe2e5bcf572c0f96c49158f8e7862bdb46bdf9fdeb15064636ec730abae587e3fbfd6fcecaebea7f695a65cca2698a9cb35fc33b01b870b2ff35550c66b98b4cefeee7324dcf3b20722bf12c2b6e7704f9b5de27bee7feaace1a087504b01cc699109c257ea5a629ad5a9f0e97ee48844e7d3b3b1a3611ddcb256e21c99d5628036b762dca759b890410dd322da57e1f60bd0e9d277ecf01895478baa465b15240cc8615cc07ff47b1853103bd54279dbb165111efc8a41f5a511c657a63393e1229dd80467e217de8b47c3d4c0afd41d1eeaaaaf5fb2b523d26a815c60d50b0b25fa1922c15e99ed4d6cfe325eafe2490a89382795d1cbf6273b712712c7ef86202dd8353c0b1c9a00b382a948906c69e806f59143ba3238b14fb049230cf0f46aaa525312c0d08eedce9a36620670d61d94211d21e76bf9bebc2b77f722cfec840f423e89dff9a8958acbb74bd40681baf9558a1bb6f93dfb1762bf8638dc58d11b11211e4bce76503b25d8e82d9f4f8f1ad0aa25fae9b86b51bed4b19787ac7a923f44446967439a0cf0faff943f21983ca810ba2b1cdffe4d210e7c11f25acc1eeb9bd7c7ec31ad22dedd1c288b00358fec0a2c5bbd13a4601848fa41ceec9daa6c0848a299a6a809d6450034d4c693322549b996eb30c8386b29136298eb03906abbf408f905bde63ae908dd60e5e0a332969ef50e8182191ef31cd6cc94508ace749a4d93ea2ebd5f3421a171c3d2ca112c18a53e23eb297e5d7a497d7f620efb17b31398ba1f3e2e9896432f07bd5eaac30918e108ebda4cced7442e34fb37732966ed87c1c17a38e46296dfcd9b8d0c97d6836465b2e7db9b96c3c3f96767eed84b051332438aa5eb2243fd382870e9d27182af2d4d90e6c421565d5f268bf78f58ddf17f6ec81bd57d6b62bd98ae425adb5f996a98fac36c83b4532e101b6185147c224f8f110fd7f5ec519da8be8aca0bb274cdd2248319dee8821c09f7e7d6548ee692cd9559872d7286a6c0515c1f79567f5c0d8a26702a72c50b7df61edca372272c3eab5b3580f55894bbfd62d298e4119e4d398081342df17dbe41fff316937026d49254f43586b27e097199cb0eec33490be504f567b5829451aade890e2073c97baefe3efd4e568c6a1cae5aca68477b14908a9f7da14e5501c6716c11a2f62e75da1c9b7ec98d38ce336f090b22e3aefd32a14bac522d0ffb63c238a2e32d65294591243bf33dabf06cf932828d4dd47203d3c8f8133867e27ac40ca342018cfbd7c758da923c7af347991966c4c7a03b9a3013083d57e6bceadcdc3ac4f82ef564b20f409a360e2775957d3c0dba2d66f1d09610c23532a8c9df9905ca28c50907fd7b476e381136ea921dd14e4741e47c7a1b1ea51ef1490fa5a088e09a1958fe85160459946d481616d8f7c04215796fb9d747734024b397894aaa7525beb12c06aca9cf2e26fdaa5c1c5ec3a71496ecdb4f35f47340287589e26d9892db42d22a153a4c8c25c686f4981fe9513bf1e6d811a196396a2cc4c8a253c37df5615f89937cee973f08445d10612024784784dd29723b6dedb39ca7f946af0d025c4c76c2fd1e25ffda0c8fdaddd117088e97930b7db972afbafb74ac562b375d12a0ac7a0c272ae5b68d4dcd15844aed673896ae9d08d727a266710006ee86992a647ea2a9e80ae373c972b36f9f3abb16d0f048d30483ad76065dd0724f300db80cecf2da0e0a6db3829c412bb4f76665efdc2ed1a4cd5ead2e79faebc2cdb61a0051e7767162b79f9b6a70f0124b33041c6b18da6777b478a99b3b552a0fd1368937afb3a910f8d33e6194fd1f3307e34445e5953beb382ee570a0ab356664b9e07408c1bcab43a17494f348ece4906579524487ff47fa2be553980a37159fe75d1c59070a3af5679fa751967551cb3ef1e0cdb16e5c5580f84773a3d156f90aac7912b024b9675f5d57a6e579e808e76131de888fa287aab8858e0b519a92b78cd69059d445dcbc69464f149da65bfdad401a1b5a7c3cbc37f96f600ba2b0c773d415682a31a56b016f8c22ea8d73cbcbb01af4d6e7f647460215968cf453f0a7f53c4c00b0741a6f48e06dc013b2018bc5d5161265ece8778f3f932d31f34e2d38a6c11e1fb0a64647d0bfb372f9404a135a24ce682f927c679535e84140a7c61baba300759f3a0e26d7390f5766d3071f4861e8dbb9b2a2d7676f15e44c0fe0cf8d53dd5d1222c0f341fef2874ae123fb92bdd0bdf44347151de3e2f63d9eea8f669e2c5c801032be5b585c5c8eff912463dc572eee8cf0da51d6bc2412e745ae9a8cef9559ffdd1496375af5ede5e5fbbf073374d1dcd93fc54f78553aeb11766c2b04b5790e9f4095676c9d9c799f9e8826833e62a1750baa02929307ab8730bcf8b299747119485a9f9483fa45a49d4650c607f532030ab63b3ffce9b0329ebd391ac6c1f2d710eff6ad9582fb93b362e5cea06b6f9f1baf0b952d3662ae05d1fc41081c6a264494b3ee1a993bd4dbd5af9845b21727464ecf364c9d6dceeccd422fb1dbf9052fd72460a35811980efeb026bdeba587eea916790d0f73b009f9467c469f3c4ef3f31c568c4a2bdc0f9122113c0a409cbbdf14bca8914b431b721410884d8fadb815303f160a59f9f359ce15e0d539bb6e1385683d83083730d81ced40022cfe85d76119b407572d2b33d66817c43f708dbfcb9dbfafde59eebd6bb277165661dc78a23418baa44d560e6b62fed16e62375acc8cfc74e995e8a5826178a60248c6a21f545dd1f99c44f22b45081a7cb88cfc3be68d9e96ceb74d6b0a2d674299b9e0301348d45af211173ceb92717a78552c4191304d0fd2240d372b9b5cc4b5de303cb1e11ad3b2b8113c787db4546385b4a066aee21d0fea33ffe14da0c386b369395cba18691de9e1942a15f921fb2ab65428c4940006d45aff60aac85afe684c693a3b1e9b3995101bbc593f06cb8e87205e59ca776482c0af31d1e240887d7b9287a5f8db6ead40407c402ab9f742fe0d717fbdc075a5966a43a51ad35082a712dcdf009a277fa2c0f896f2a4f465e4fd5555c3e826ba7f11237a4a8522c27ca242e8a0d3c9ec9c9e19a6ca5d7b7fb05b9871a79533a3f42ac7f31f142cbd8fa7290bfc161df9b4fcb1400596ec9aad5e437745179826c1d1b09ef7e7814ec44721d46374827dce80dfec0a40725f0968855e33f5d16e3c1be264a100cb1dcc88df2db9dcae5a5a90759e4cc1d05fe0c2dfb99c92046fb0c3c5fcfecdacce15492450e486ba463b0a07d68fa3ce4cee9926367a4b07db12fc6afc18c042eb2163e9bbb037b379ba199fdc1a67769d73e186609dbc911b815113c8c3555b6042653af785af433a3268e4f3f91986d73ca1df2503b7c82bef6ff258392fe9ce775ea0d98155df6455cd282f5aa2c1f9a9101fdc42c09420c61f1787d34198e7824b79af819ff7b7dc804d3dbad73101d7295ad433e3ef4c00bd166736681580afef7192cb91889d620a0b9d3cda823032f7e4ac142356f606a24cb36d041cb40bb7125ace7232dbfd29f984de7865411a6206d1a2cd634fe970f7f6426c1cfaf14d713002715bdfd9af1ac3c3034815ea498554074fc543dcbc191b908598727f3510b1b328e7068b05dbd069b75a98fa0bd6b2f7b33e07b145376f29196dbe7d01e20a916c6c1f07fe9edc6691256f2cb2a436cb825bc0b0d5b4ec90d035a6da25d2a1444074b247f9ded82d36db0000a9041d048599873a13b695b77fdce000895be78e2191a9c01985eb7a345a9", 0x1000}], 0x5, &(0x7f0000001e40)=[@authinfo={0x18, 0x84, 0x6, {0x2}}, @authinfo={0x18, 0x84, 0x6, {0x100}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8, 0x7, 0xbf6, 0x6, 0x0, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x4, 0x4, 0xffff, 0x5, 0x4, 0x2, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x2, 0x8200, 0x7, 0x400, 0x9, 0x10, 0x7}}, @init={0x18, 0x84, 0x0, {0x7, 0x0, 0xffff, 0xb67a}}], 0xf0, 0x4000}, {&(0x7f0000001f40)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002340)=[{&(0x7f0000001f80)="c3ea8431765d85dc2c9e8d033529da7a0b4b28a98396fbadfe0d428687276f9ffbb995fdc908cf15a78e7e1b9cb25e52b1aba6b02048d219e8a256a5f7acbab1ec27583d478bf5cf96364106f42d440d9e9949153861b8e98eb912505ab512150bcd26f2774a9030407a479cca26ff79760ea91f1212cb43537ca358b8bd56cdcbd2bf78fcc018cdb3d092c9f6c618373138696f5a557cad23f65bca9ca8cc0d29cf9c9506ff4ce246d7705da74771f2f7dbbae92ffc1aa980d9532db3189a9dcf363b117a", 0xc5}, {&(0x7f0000002080)="d36098f861603fd149c90feda0cd762de475e98f481a77cb46207e034fde7c32796d025b64b8b0f431acc7a2f8bccce4f1e5b0a50beb81e5b3c3d7131c40d56dfff0674f4added314581f065671427ebef93dda9eb482a4115a9421cdd0e99530edd7a1ce2277774334c581f39b7c61829c631e2b3f87e16e61ea809d980131d7c98fc4161c9a47af2b1e58f0618aa390fd05f66850195330c33d8d8c6c1df283e936ecc0ef9a63b69384fd5291a4fe346009ffc2b1bce1561ae4cd8d78ef9d53b40cf0a", 0xc4}, {&(0x7f0000002180)="7cf1ba81c7cb261ae78fb1212f5c1e367ccd5ff804cc001c0e3b0b6723dab13691dedad884f9b1cee006ebbc6112577892a7daf3a4a27a87c678c77f35d34701566952ffe7b758c23e65354e883e03607bcc64bfaa39b28178f5b98c7bbc3b2d369a77f82b83125249609674361f3879b704a084f81ca55d73bbfa5ceb82d452", 0x80}, {&(0x7f0000002200)="ea0088e06b1ae35ad2cc829e5680e91c806a43f1f0bd1294b4251d5a8320f9bb636c9e82024c082cc3826be855663732cc72dc551f98b5", 0x37}, {&(0x7f0000002240)="dc263b1bed9a34bb34c3d05d51ce10c03f738e686576e35bec8bf5d6d79dd4948f5f7ca17e34dc5b6ec16ede368019f6f47d99a1f4ff3619def930f672c41b3bae8a6e80c0075f6c21a9a8e17891e5c7b723196ca449f7c953c1f6b11ed0b7155ca12cd51617", 0x66}, {&(0x7f00000022c0)="85e9abc84d5cc1d8ecc6425e05cd50ce89e20e5a4e88878711d1eea150f905b66ebeda421c2038f32a15cc2928cbfba7d025760ff7ff444e563a92b335d31a00b65fa56f5083292488485705370dff2ad0f49920d0f31b7e902a7093be8ab4f4374fde4d0e27", 0x66}], 0x6, &(0x7f00000023c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x8003, 0x9}}, @init={0x18, 0x84, 0x0, {0x7, 0x4, 0xdc, 0x7}}], 0x38, 0x850}], 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1.862562719s ago: executing program 0 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300e2"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="620ac4ff00230000711039000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.839972436s ago: executing program 3 (id=2446): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 1.679983138s ago: executing program 0 (id=2447): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000500)=""/4096, 0x1000, 0x0, &(0x7f00000002c0)=""/118, 0x76}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x19, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.679506547s ago: executing program 3 (id=2448): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x3, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.617262243s ago: executing program 1 (id=2449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) 1.61492724s ago: executing program 2 (id=2450): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) (rerun: 64) sendmsg$tipc(r2, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x581, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x422}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x6bc591ae91a2fee1}]}}}]}, 0x44}}, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.554019467s ago: executing program 3 (id=2451): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) epoll_create1(0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000100)=""/55, &(0x7f0000000240)=0x37) close(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) unshare(0x20000400) unshare(0x10000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01e288000000000000000c0000000c00000009000000070000000000000800000000000000e100000061007dd028deeafeee39c86bfcf0656c9131be585c22e52e936c3027d5d32c9006e6229cdd0c69b9de049f4f8c1db8e976f45a49cc5254bb91"], 0x0, 0x2d, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value}, 0x28) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="00010200e8cfe05d26b085751afe554966e6d5f6e308b3dea06383b4df60070d322f441fcd012d3659594d9072f62c55455fa717b8980760bc3872c49ad33ed885a4f334909d0675648325519f71b6b2f0b5bca8d06c931099a841016913a7083a4bd18732fa5de289090e34f7fe21a4607436e2f91d5875417ad92bf06387d219b8ff995b841e1297217567a6946885070d1fb1f199f1dee5c97e20203123e137030381938451d658a0a1b82b4aa4e9e96ea708e6ee458116af87d78372c35ba357668afc3a8b46e427d294d55259e1512f", @ANYRES16=r7, @ANYBLOB="010b00000000000000000800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x1f, 0x0, "5df083f0ba7725453321a30a981f1de0664727b7612b87dc1463689b9d69a0ffbc25ed209496262add145a536b0d07086244bc160f93a8cba2908d15105c596d47e7daed34fc284bee8145fbeeaf81b6"}, 0xd8) 1.553502438s ago: executing program 4 (id=2019): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0xb0bfa37c3f60346c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xb}}]}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff08004500001c000000020011907800000000000000004e22ffffffff9078"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = socket(0x11, 0xa, 0xfffffffc) socket$kcm(0x29, 0x2, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0e}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 764.271457ms ago: executing program 0 (id=2452): unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x15, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xc37, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c"], 0xe8}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000035c0)={{0x2, 0x4e21, @local}, {0x0, @broadcast}, 0x12, {0x2, 0x0, @private=0xa010102}, 'sit0\x00'}) unshare(0x62040200) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x15, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xc37, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c"], 0xe8}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000035c0)={{0x2, 0x4e21, @local}, {0x0, @broadcast}, 0x12, {0x2, 0x0, @private=0xa010102}, 'sit0\x00'}) (async) 762.028538ms ago: executing program 1 (id=2453): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0xa401000000000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x34, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic="a8bb"]}, 0x34}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x3, 0x4, 0xd6ce}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 761.337631ms ago: executing program 2 (id=2454): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) openat$cgroup_int(r1, &(0x7f0000000280)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200006c710816"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0xa24e}], 0x2, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r8}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe0}, {0x10, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84) readv(r7, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="00608500461999fce02a6d7e133395a5f2be649db62c2de7d68c1c9251610c9dc9df07962fe504001a4a94cf6b13b3510b19a63c3595c102c7288cc47b26071bbd4169b6f33ee9a72342e6", @ANYRES32=0x0, @ANYBLOB="5812000000000000140012800c0001006d6163767461700004000280"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4008044) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x9b) 654.483544ms ago: executing program 3 (id=2455): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc", 0xd9}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d2", 0xa0}], 0x2}}], 0x2, 0xc0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 510.113825ms ago: executing program 1 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa00000000000071104e000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) 410.133494ms ago: executing program 1 (id=2457): syz_emit_ethernet(0x72, &(0x7f0000000080)={@remote, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f008400000000110000"}}}}}}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) unshare(0x20000400) r1 = accept4(r0, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80, 0x800) bind$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) 288.990014ms ago: executing program 2 (id=2458): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x53, &(0x7f0000000100)=""/83, 0x40f00, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xa, 0x1000, 0x9}, 0x10, 0x2c320, 0xffffffffffffffff, 0x7, &(0x7f0000000200)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000240)=[{0x4, 0x3, 0x9, 0x6}, {0x5, 0x4, 0x4, 0x8}, {0x0, 0x2, 0x0, 0xa}, {0x4, 0x1, 0x7, 0x8}, {0x4, 0x5, 0x1, 0xb}, {0xd81, 0x3, 0x7, 0x1}, {0x1, 0x5, 0xc, 0x5}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x12, 0x1, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x5, 0x1ff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r0, r0, r0, r0], &(0x7f00000006c0)=[{0x1, 0x1, 0x9, 0xc}, {0x1, 0x2, 0x10}], 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r1, 0xb, 0x4, 0x0, @void, @value=r3, @void, @void, r2}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 170.762774ms ago: executing program 3 (id=2459): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xfffffd15, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x70, 0x32, 0x53b, 0x70bd2b, 0x25dfdbfb, {0x9}}, 0x70}, 0x1, 0x0, 0x0, 0x3000c891}, 0x0) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76872000200fbffeffeffffffffffff0a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) listen(r2, 0xfffffffd) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xfffffd15, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x70, 0x32, 0x53b, 0x70bd2b, 0x25dfdbfb, {0x9}}, 0x70}, 0x1, 0x0, 0x0, 0x3000c891}, 0x0) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76872000200fbffeffeffffffffffff0a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async) listen(r2, 0xfffffffd) (async) 169.624034ms ago: executing program 1 (id=2460): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c2", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="2e0000002000000000000000bfbd7637e6a274447ad5a7b09a0e36108daad8526049e686a10092f1fb28ce5abca5e147d306e200cf4003a86c1a79520fed13376387d9d231960d3ff8c057c7d59859e6420d096e18e9a0967a8f8960e25b830e7c2eceb02a36ec58fdc11e57895d2ad08c785446f748a4f11b359f0978166d14cdd1c0968461bcb72a25868258b115c781e9", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfa, 0x2, 0x7, 0x14a392b1, 0x7fff}, &(0x7f0000000440)=0x98) 0s ago: executing program 4 (id=2019): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0xb0bfa37c3f60346c, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xb}}]}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff08004500001c000000020011907800000000000000004e22ffffffff9078"], 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = socket(0x11, 0xa, 0xfffffffc) socket$kcm(0x29, 0x2, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0e}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 1.333395][T11095] bridge0: port 1(ipvlan2) entered blocking state [ 211.340208][T11095] bridge0: port 1(ipvlan2) entered disabled state [ 211.347261][T11095] ipvlan2: entered allmulticast mode [ 211.352724][T11095] bridge0: entered allmulticast mode [ 211.361317][T11095] ipvlan2: left allmulticast mode [ 211.366833][T11095] bridge0: left allmulticast mode [ 211.609217][T11049] veth0: left promiscuous mode [ 211.688609][T11056] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.731225][T11056] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.761456][T11056] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.808283][T11056] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.990975][T11112] wg1 speed is unknown, defaulting to 1000 [ 212.929121][T11162] netlink: 'syz.3.1510': attribute type 64 has an invalid length. [ 212.947287][T11162] __nla_validate_parse: 7 callbacks suppressed [ 212.947303][T11162] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1510'. [ 213.400801][T11185] netlink: 'syz.1.1515': attribute type 13 has an invalid length. [ 213.427911][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 213.588699][T11189] tipc: Enabled bearer , priority 0 [ 213.621133][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 213.920050][T11208] netlink: 912 bytes leftover after parsing attributes in process `syz.4.1520'. [ 213.996073][T11210] siw: device registration error -23 [ 214.002936][T11207] wg1 speed is unknown, defaulting to 1000 [ 214.228781][T11216] wg1 speed is unknown, defaulting to 1000 [ 214.498465][T11228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1528'. [ 215.141695][T11248] xt_l2tp: invalid flags combination: c [ 215.164475][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 215.264229][T11256] tap0: tun_chr_ioctl cmd 1074025677 [ 215.269646][T11256] tap0: linktype set to 778 [ 215.286577][T11257] tap0: tun_chr_ioctl cmd 1074025677 [ 215.303157][T11257] tap0: linktype set to 778 [ 215.452675][T11262] pim6reg: entered allmulticast mode [ 215.462897][T11261] pim6reg: left allmulticast mode [ 215.591562][T11265] wg2: entered promiscuous mode [ 215.596970][T11265] wg2: entered allmulticast mode [ 215.617786][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 215.696961][T11275] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 215.705142][T11275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1542'. [ 215.959479][T11297] xt_hashlimit: max too large, truncated to 1048576 [ 215.969440][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 215.980712][T11293] wg1 speed is unknown, defaulting to 1000 [ 216.142264][T11295] wg1 speed is unknown, defaulting to 1000 [ 216.160801][T11309] pim6reg: entered allmulticast mode [ 216.179524][T11308] pim6reg: left allmulticast mode [ 216.465040][T11321] bridge0: entered promiscuous mode [ 216.470511][T11321] bridge0: entered allmulticast mode [ 216.516321][T11325] tun0: tun_chr_ioctl cmd 1074025675 [ 216.528623][T11325] tun0: persist disabled [ 216.705418][T11336] bpq0: left promiscuous mode [ 216.792684][T11343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1562'. [ 216.865025][T11350] syzkaller0: left promiscuous mode [ 216.880627][T11350] syzkaller0: left allmulticast mode [ 216.881842][T11349] netlink: 'syz.3.1564': attribute type 39 has an invalid length. [ 216.947530][T11349] veth0_macvtap: left promiscuous mode [ 218.107387][T11385] netlink: 'syz.3.1571': attribute type 2 has an invalid length. [ 218.125734][T11385] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 218.145641][T11385] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 218.461511][T11401] tipc: Started in network mode [ 218.467031][T11401] tipc: Node identity 926e16714fa9, cluster identity 4711 [ 218.478071][T11401] tipc: Enabled bearer , priority 0 [ 218.627478][T11401] syzkaller0: entered promiscuous mode [ 218.639394][T11410] __nla_validate_parse: 5 callbacks suppressed [ 218.639411][T11410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1578'. [ 218.653177][T11401] syzkaller0: entered allmulticast mode [ 218.661282][T11401] tipc: Resetting bearer [ 218.705943][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 218.721106][T11401] tipc: Resetting bearer [ 218.833746][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.250002][T11433] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 219.573988][ T10] tipc: Node number set to 3720812145 [ 220.179018][T11401] tipc: Disabling bearer [ 220.319876][T11442] bridge0: left promiscuous mode [ 220.348596][T11442] bridge0: left allmulticast mode [ 220.647076][T11468] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 220.659774][T11468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.660660][T11459] netlink: 'syz.4.1593': attribute type 12 has an invalid length. [ 220.675949][T11468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.686382][T11459] netlink: 'syz.4.1593': attribute type 12 has an invalid length. [ 220.694392][T11459] netlink: 'syz.4.1593': attribute type 12 has an invalid length. [ 220.702471][T11467] netlink: 'syz.1.1594': attribute type 1 has an invalid length. [ 220.716074][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 220.875288][T11481] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1601'. [ 220.885388][T11483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.895134][T11481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.045613][T11482] macvlan2: entered promiscuous mode [ 221.050965][T11482] macvlan2: entered allmulticast mode [ 221.312656][T11506] wg1 speed is unknown, defaulting to 1000 [ 221.339727][T11517] netlink: get zone limit has 4 unknown bytes [ 221.480889][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 221.506708][T11528] ªªªªªª: entered allmulticast mode [ 221.530110][T11523] ªªªªªª: left allmulticast mode [ 221.638075][T11540] macvlan3: entered promiscuous mode [ 221.669725][T11540] macvlan3: entered allmulticast mode [ 222.324119][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 222.428850][T11574] IPVS: length: 78 != 8 [ 222.548707][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1627'. [ 222.711408][ T10] IPVS: starting estimator thread 0... [ 222.734056][T11578] IPVS: length: 78 != 8 [ 222.823220][T11584] IPVS: using max 38 ests per chain, 91200 per kthread [ 222.888928][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 222.912108][T11590] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 223.004228][T11596] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 223.064524][T11600] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1632'. [ 223.126717][T11596] bond4: entered promiscuous mode [ 223.136247][T11596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.157588][T11606] tipc: Enabled bearer , priority 10 [ 223.165167][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 223.238946][T11600] batadv1: entered promiscuous mode [ 223.260320][T11600] batadv1: entered allmulticast mode [ 223.281988][T11600] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.291912][T11600] bond4: (slave batadv1): making interface the new active one [ 223.310393][T11600] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 223.738162][T11608] wg1 speed is unknown, defaulting to 1000 [ 223.830930][T11645] __nla_validate_parse: 1 callbacks suppressed [ 223.830947][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1639'. [ 224.047881][T11601] wg1 speed is unknown, defaulting to 1000 [ 224.154233][T11658] SET target dimension over the limit! [ 224.292656][T11665] netlink: 'syz.4.1645': attribute type 8 has an invalid length. [ 224.414180][T11671] xt_socket: unknown flags 0xd0 [ 224.510115][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 224.534845][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 224.683614][T11688] xt_TCPMSS: Only works on TCP SYN packets [ 224.800496][T11691] macvlan0: entered promiscuous mode [ 224.809580][T11691] macvlan0: entered allmulticast mode [ 225.062479][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 225.132349][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 225.175596][T11704] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1657'. [ 225.222677][T11712] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.239439][T11712] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.276234][T11712] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.334212][T11712] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.347577][T11712] geneve2: entered promiscuous mode [ 225.436960][ T7654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.455357][ T7654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.571827][T11731] bond1: (slave ip6gretap1): Releasing active interface [ 225.669600][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1662'. [ 225.733637][T11740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1662'. [ 225.749774][T11735] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 225.783006][T11740] team0: Mode changed to "loadbalance" [ 226.090247][T11753] x_tables: duplicate underflow at hook 3 [ 226.124999][T11754] batadv2: entered promiscuous mode [ 226.394203][T11756] xt_ipcomp: unknown flags F7 [ 226.451153][T11758] wg1 speed is unknown, defaulting to 1000 [ 226.563762][T11764] block nbd3: server does not support multiple connections per device. [ 226.572496][T11764] block nbd3: shutting down sockets [ 226.736232][T11771] netlink: 'syz.0.1676': attribute type 10 has an invalid length. [ 226.764929][T11771] veth0_macvtap: left promiscuous mode [ 226.791200][T11771] batman_adv: batadv0: Adding interface: macvtap0 [ 226.813986][T11771] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.869627][T11771] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 226.928768][T11761] SET target dimension over the limit! [ 227.410392][T11793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1681'. [ 227.708084][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 227.733187][T11813] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 228.001443][T11817] wg1 speed is unknown, defaulting to 1000 [ 228.210514][T11833] ip6tnl3: entered promiscuous mode [ 228.378992][T11833] ip6tnl3: entered allmulticast mode [ 228.977631][T11847] wg1 speed is unknown, defaulting to 1000 [ 228.989202][T11854] __nla_validate_parse: 6 callbacks suppressed [ 228.989219][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 229.755143][T11863] sit0: entered promiscuous mode [ 229.760273][T11863] netlink: 'syz.1.1696': attribute type 3 has an invalid length. [ 229.788678][T11863] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1696'. [ 230.045665][T11871] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 230.068703][T11871] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1699'. [ 230.088238][T11850] veth0_to_bridge: entered promiscuous mode [ 230.290315][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 230.303292][T11879] netlink: 'syz.4.1702': attribute type 10 has an invalid length. [ 230.311395][T11879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1702'. [ 230.338806][T11846] veth0_to_bridge: left promiscuous mode [ 230.377196][T11879] team0: Port device geneve0 added [ 230.506591][T11890] netlink: 'syz.4.1706': attribute type 29 has an invalid length. [ 230.675673][T11890] netlink: 'syz.4.1706': attribute type 29 has an invalid length. [ 230.812167][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.837227][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.874492][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.913478][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.957757][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.988939][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.015347][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.034892][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.053601][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.073591][T11900] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.423664][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 231.500180][T11912] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1711'. [ 232.409048][T11972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1725'. [ 232.433569][T11973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1725'. [ 232.492902][T11978] bridge0: port 3(team0) entered disabled state [ 232.521206][T11981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1728'. [ 232.546562][T11978] bridge_slave_0: left allmulticast mode [ 232.552500][T11978] bridge_slave_0: left promiscuous mode [ 232.570939][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.581419][T11981] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 232.625511][T11978] bridge_slave_1: left allmulticast mode [ 232.631210][T11978] bridge_slave_1: left promiscuous mode [ 232.641075][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.694782][T11978] team_slave_0: left promiscuous mode [ 232.725161][T11978] team_slave_0: left allmulticast mode [ 232.785382][T11978] team0: Port device team_slave_0 removed [ 232.817359][T11978] team_slave_1: left promiscuous mode [ 232.839281][T11978] team_slave_1: left allmulticast mode [ 232.871430][T11978] team0: Port device team_slave_1 removed [ 232.886961][T11978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.897501][T11978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.918643][T11978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.937816][T11978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.977326][T11978] batman_adv: batadv0: Removing interface: macvtap0 [ 233.009259][T11978] bond0: (slave ip6gretap1): Releasing active interface [ 233.050925][ T6558] wg1 speed is unknown, defaulting to 1000 [ 233.316066][T12011] netlink: 'syz.1.1735': attribute type 12 has an invalid length. [ 233.329407][T12011] ip6gretap0: left promiscuous mode [ 234.279336][T12040] veth1: entered promiscuous mode [ 234.990184][T12077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.061988][T12080] siw: device registration error -23 [ 235.391087][T12096] __nla_validate_parse: 3 callbacks suppressed [ 235.391105][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 235.412141][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 235.502020][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1758'. [ 235.693169][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 235.890751][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 235.902925][T12127] macvlan1: entered promiscuous mode [ 235.916228][T12127] macvlan1: entered allmulticast mode [ 235.968714][T12132] 8021q: adding VLAN 0 to HW filter on device team1 [ 235.991836][T12138] siw: device registration error -23 [ 236.148804][T12147] FAULT_INJECTION: forcing a failure. [ 236.148804][T12147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.151809][T12146] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 236.182359][T12147] CPU: 1 UID: 0 PID: 12147 Comm: syz.4.1775 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 236.182386][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.182397][T12147] Call Trace: [ 236.182405][T12147] [ 236.182414][T12147] dump_stack_lvl+0x189/0x250 [ 236.182444][T12147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.182466][T12147] ? __pfx__printk+0x10/0x10 [ 236.182494][T12147] should_fail_ex+0x414/0x560 [ 236.182517][T12147] _copy_to_user+0x31/0xb0 [ 236.182541][T12147] simple_read_from_buffer+0xe1/0x170 [ 236.182566][T12147] proc_fail_nth_read+0x1df/0x250 [ 236.182595][T12147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.182619][T12147] ? rw_verify_area+0x258/0x650 [ 236.182636][T12147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.182659][T12147] vfs_read+0x1fd/0x980 [ 236.182683][T12147] ? __pfx___mutex_lock+0x10/0x10 [ 236.182701][T12147] ? __pfx_vfs_read+0x10/0x10 [ 236.182720][T12147] ? __fget_files+0x2a/0x420 [ 236.182744][T12147] ? __fget_files+0x3a0/0x420 [ 236.182763][T12147] ? __fget_files+0x2a/0x420 [ 236.182791][T12147] ksys_read+0x145/0x250 [ 236.182807][T12147] ? rcu_is_watching+0x15/0xb0 [ 236.182832][T12147] ? __pfx_ksys_read+0x10/0x10 [ 236.182853][T12147] ? do_syscall_64+0xba/0x210 [ 236.182874][T12147] do_syscall_64+0xf6/0x210 [ 236.182892][T12147] ? clear_bhb_loop+0x45/0xa0 [ 236.182912][T12147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.182928][T12147] RIP: 0033:0x7f96fcf8d37c [ 236.182943][T12147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.182958][T12147] RSP: 002b:00007f96fde18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.182978][T12147] RAX: ffffffffffffffda RBX: 00007f96fd1b5fa0 RCX: 00007f96fcf8d37c [ 236.182990][T12147] RDX: 000000000000000f RSI: 00007f96fde180a0 RDI: 0000000000000004 [ 236.183000][T12147] RBP: 00007f96fde18090 R08: 0000000000000000 R09: 0000000000000000 [ 236.183011][T12147] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 236.183021][T12147] R13: 0000000000000000 R14: 00007f96fd1b5fa0 R15: 00007ffc55154e08 [ 236.183048][T12147] [ 236.674863][T12155] netlink: 'syz.4.1778': attribute type 21 has an invalid length. [ 236.699259][T12155] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1778'. [ 236.742173][T12158] net_ratelimit: 59 callbacks suppressed [ 236.742194][T12158] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.785230][T12155] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1778'. [ 236.804633][T12151] wg1 speed is unknown, defaulting to 1000 [ 236.837699][T12155] netlink: 'syz.4.1778': attribute type 27 has an invalid length. [ 236.888277][T12158] netlink: 568 bytes leftover after parsing attributes in process `syz.3.1780'. [ 237.020846][T12168] netlink: 'syz.2.1783': attribute type 2 has an invalid length. [ 237.079759][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1782'. [ 237.363584][T12190] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 237.381789][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1789'. [ 237.392752][T12191] tipc: Enabling of bearer rejected, failed to enable media [ 237.403857][T12191] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 237.761404][T12215] netlink: 'syz.1.1792': attribute type 6 has an invalid length. [ 237.787115][T12215] netlink: 'syz.1.1792': attribute type 7 has an invalid length. [ 237.811151][T12215] netlink: 'syz.1.1792': attribute type 8 has an invalid length. [ 237.835804][T12215] No such timeout policy "syz1" [ 238.308042][T12213] syzkaller0: entered promiscuous mode [ 238.314233][T12213] syzkaller0: entered allmulticast mode [ 240.167348][T12236] wg1 speed is unknown, defaulting to 1000 [ 240.234790][T12280] tun0: tun_chr_ioctl cmd 1074025677 [ 240.241202][T12280] tun0: linktype set to 773 [ 240.608526][T12303] __nla_validate_parse: 6 callbacks suppressed [ 240.608542][T12303] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1816'. [ 240.646033][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1816'. [ 240.717634][T12312] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 240.750297][T12305] wg1 speed is unknown, defaulting to 1000 [ 240.909308][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1820'. [ 240.933286][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1820'. [ 241.211304][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 241.524643][T12309] SET target dimension over the limit! [ 241.799806][T12344] ip6gre1: entered promiscuous mode [ 242.526420][T12382] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 242.674453][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1836'. [ 242.926753][T12395] netlink: 'syz.1.1839': attribute type 4 has an invalid length. [ 242.965260][T12395] netlink: 'syz.1.1839': attribute type 4 has an invalid length. [ 243.024894][T12399] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 243.069622][T12399] bond3: entered promiscuous mode [ 243.075360][T12399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.104983][T12403] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 243.115713][T12404] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1839'. [ 243.130080][T12403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1841'. [ 243.211854][T12399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1840'. [ 243.344640][T12410] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 243.626049][T12421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1846'. [ 243.674526][T12419] dummy0: left allmulticast mode [ 243.679624][T12419] dummy0: left promiscuous mode [ 243.693409][T12419] bridge0: port 3(dummy0) entered disabled state [ 243.760125][T12419] batman_adv: batadv0: Adding interface: dummy0 [ 243.772388][T12419] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.826782][T12419] batman_adv: batadv0: Interface activated: dummy0 [ 243.833982][T12435] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 244.019935][T12425] wg1 speed is unknown, defaulting to 1000 [ 244.485926][T12430] SET target dimension over the limit! [ 244.614628][T12480] nbd: must specify a size in bytes for the device [ 244.938071][T12501] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 244.966354][T12501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.986870][T12499] geneve0: entered allmulticast mode [ 245.050326][T12501] veth5: entered promiscuous mode [ 245.071032][T12501] bond5: (slave veth5): Enslaving as an active interface with a down link [ 245.207786][T12516] nftables ruleset with unbound chain [ 245.445256][T12523] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 245.796707][T12536] netlink: 'syz.4.1876': attribute type 5 has an invalid length. [ 245.857623][T12536] wg1 speed is unknown, defaulting to 1000 [ 246.132590][T12550] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 246.481355][T12568] openvswitch: netlink: Duplicate or invalid key (type 0). [ 246.495473][T12568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.580233][T12573] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 246.620684][T12573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.667541][T12577] __nla_validate_parse: 2 callbacks suppressed [ 246.667561][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 246.690426][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 246.711125][T12573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.723003][T12573] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.745126][T12573] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 246.765094][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 246.782302][T12590] syz.4.1888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.798012][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 246.835474][T12590] CPU: 1 UID: 0 PID: 12590 Comm: syz.4.1888 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 246.835497][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.835518][T12590] Call Trace: [ 246.835524][T12590] [ 246.835531][T12590] dump_stack_lvl+0x189/0x250 [ 246.835559][T12590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.835578][T12590] ? __pfx__printk+0x10/0x10 [ 246.835594][T12590] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.835609][T12590] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.835625][T12590] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 246.835641][T12590] warn_alloc+0x214/0x310 [ 246.835660][T12590] ? __pfx___schedule+0x10/0x10 [ 246.835681][T12590] ? __pfx_warn_alloc+0x10/0x10 [ 246.835696][T12590] ? kasan_save_track+0x4f/0x80 [ 246.835708][T12590] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 246.835724][T12590] ? xskq_create+0x56/0x170 [ 246.835745][T12590] ? __x64_sys_setsockopt+0x18b/0x220 [ 246.835763][T12590] ? do_syscall_64+0xf6/0x210 [ 246.835778][T12590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.835805][T12590] __vmalloc_node_range_noprof+0x125/0x12c0 [ 246.835860][T12590] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.835880][T12590] ? __kasan_kmalloc+0x93/0xb0 [ 246.835903][T12590] vmalloc_user_noprof+0x74/0x80 [ 246.835924][T12590] ? xskq_create+0xbf/0x170 [ 246.835942][T12590] xskq_create+0xbf/0x170 [ 246.835964][T12590] xsk_init_queue+0xb0/0x110 [ 246.835986][T12590] xsk_setsockopt+0x43f/0x710 [ 246.836007][T12590] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.836034][T12590] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 246.836051][T12590] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.836073][T12590] do_sock_setsockopt+0x257/0x3e0 [ 246.836094][T12590] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 246.836110][T12590] ? __fget_files+0x2a/0x420 [ 246.836134][T12590] ? __fget_files+0x3a0/0x420 [ 246.836152][T12590] ? __fget_files+0x2a/0x420 [ 246.836179][T12590] __x64_sys_setsockopt+0x18b/0x220 [ 246.836212][T12590] do_syscall_64+0xf6/0x210 [ 246.836230][T12590] ? clear_bhb_loop+0x45/0xa0 [ 246.836250][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.836266][T12590] RIP: 0033:0x7f96fcf8e969 [ 246.836281][T12590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.836295][T12590] RSP: 002b:00007f96fde18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 246.836314][T12590] RAX: ffffffffffffffda RBX: 00007f96fd1b5fa0 RCX: 00007f96fcf8e969 [ 246.836326][T12590] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 246.836336][T12590] RBP: 00007f96fd010ab1 R08: 0000000000000004 R09: 0000000000000000 [ 246.836346][T12590] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.836356][T12590] R13: 0000000000000000 R14: 00007f96fd1b5fa0 R15: 00007ffc55154e08 [ 246.836383][T12590] [ 246.836413][T12590] Mem-Info: [ 247.130081][T12590] active_anon:3605 inactive_anon:0 isolated_anon:0 [ 247.130081][T12590] active_file:1606 inactive_file:39900 isolated_file:0 [ 247.130081][T12590] unevictable:768 dirty:232 writeback:0 [ 247.130081][T12590] slab_reclaimable:11349 slab_unreclaimable:128774 [ 247.130081][T12590] mapped:30120 shmem:1361 pagetables:674 [ 247.130081][T12590] sec_pagetables:0 bounce:0 [ 247.130081][T12590] kernel_misc_reclaimable:0 [ 247.130081][T12590] free:1313805 free_pcp:534 free_cma:0 [ 247.188170][T12590] Node 0 active_anon:14420kB inactive_anon:0kB active_file:6424kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120480kB dirty:924kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12024kB pagetables:2696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.274674][T12590] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.318730][T12590] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.359076][T12590] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 247.365707][T12590] Node 0 DMA32 free:1353652kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:14012kB inactive_anon:0kB active_file:6424kB inactive_file:159304kB unevictable:1536kB writepending:924kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:2700kB local_pcp:2128kB free_cma:0kB [ 247.403573][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 247.420296][T12590] lowmem_reserve[]: 0 0 0 0 0 [ 247.434528][T12590] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 247.461767][T12590] lowmem_reserve[]: 0 0 0 0 0 [ 247.468644][T12590] Node 1 Normal free:3911456kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.504385][T12590] lowmem_reserve[]: 0 0 0 0 0 [ 247.509338][T12590] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 247.522504][T12603] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 247.522980][T12590] Node 0 DMA32: 723*4kB (UM) 831*8kB (UME) 638*16kB (UME) 155*32kB (UME) 493*64kB (UME) 546*128kB (UME) 395*256kB (UM) 286*512kB (UM) 191*1024kB (UME) 9*2048kB (UME) 187*4096kB (UM) = 1353668kB [ 247.562628][T12590] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 247.579636][T12590] Node 1 Normal: 228*4kB (UME) 56*8kB (UME) 51*16kB (UME) 203*32kB (UME) 83*64kB (UME) 37*128kB (UME) 18*256kB (UME) 14*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 946*4096kB (M) = 3911456kB [ 247.637393][T12590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.661478][T12590] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.683971][T12590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.725970][T12590] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.736591][T12590] 42864 total pagecache pages [ 247.741295][T12590] 0 pages in swap cache [ 247.747668][T12590] Free swap = 124996kB [ 247.758945][T12590] Total swap = 124996kB [ 247.777055][T12590] 2097051 pages RAM [ 247.800291][T12621] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 247.841645][T12590] 0 pages HighMem/MovableOnly [ 247.855655][T12590] 424379 pages reserved [ 247.862223][T12590] 0 pages cma reserved [ 247.910367][T12627] IPv6: addrconf: prefix option has invalid lifetime [ 247.955953][T12616] gretap0: left promiscuous mode [ 248.087358][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1898'. [ 248.104103][T12632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1898'. [ 248.126754][T12638] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 248.319951][T12616] team0: left promiscuous mode [ 248.325148][T12616] team0: left allmulticast mode [ 248.427044][T12616] wg2: left promiscuous mode [ 248.433345][T12616] wg2: left allmulticast mode [ 248.615990][T12616] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 248.678696][T12638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.696931][T12632] vlan3: entered allmulticast mode [ 248.702088][T12632] hsr0: entered allmulticast mode [ 248.740445][T12632] hsr_slave_0: entered allmulticast mode [ 248.750562][T12632] hsr_slave_1: entered allmulticast mode [ 248.788030][T12656] openvswitch: netlink: Actions may not be safe on all matching packets [ 248.823551][ T5917] wg1 speed is unknown, defaulting to 1000 [ 248.826974][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 248.846578][T12649] pimreg: entered allmulticast mode [ 248.847379][ T5917] syz0: Port: 1 Link DOWN [ 248.920295][T12653] wg1 speed is unknown, defaulting to 1000 [ 249.084460][T12664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1905'. [ 249.180926][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 250.157794][T12726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 250.389125][T12739] wg1 speed is unknown, defaulting to 1000 [ 250.924498][T12767] macvlan3: entered promiscuous mode [ 250.930741][T12767] bridge0: entered promiscuous mode [ 250.940629][T12767] bridge0: port 1(macvlan3) entered blocking state [ 250.967259][T12767] bridge0: port 1(macvlan3) entered disabled state [ 250.988464][T12767] macvlan3: entered allmulticast mode [ 251.000407][T12767] bridge0: entered allmulticast mode [ 251.006964][T12775] netlink: 'syz.4.1933': attribute type 10 has an invalid length. [ 251.029739][T12767] macvlan3: left allmulticast mode [ 251.040046][T12767] bridge0: left allmulticast mode [ 251.046987][T12767] bridge0: left promiscuous mode [ 251.362234][T12789] netlink: 'syz.3.1940': attribute type 4 has an invalid length. [ 251.373580][T12789] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 251.696381][T12818] netlink: 'syz.0.1947': attribute type 11 has an invalid length. [ 251.717842][T12817] __nla_validate_parse: 7 callbacks suppressed [ 251.717863][T12817] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1946'. [ 251.737203][T12818] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1947'. [ 251.769166][T12821] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1946'. [ 251.888278][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 252.167752][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 252.189231][T12841] netlink: 'syz.1.1954': attribute type 9 has an invalid length. [ 252.197732][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1953'. [ 252.217095][T12841] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.1954'. [ 252.302867][T12841] ipvlan0: entered promiscuous mode [ 252.325087][T12841] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 252.333638][T12841] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.453614][T12838] wg1 speed is unknown, defaulting to 1000 [ 252.567215][T12851] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 54020 - 0 [ 252.594425][T12851] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 54020 - 0 [ 252.623800][T12851] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 54020 - 0 [ 252.642863][T12851] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 54020 - 0 [ 252.669199][T12851] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 36078 - 0 [ 252.724095][T12851] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 36078 - 0 [ 252.753317][T12851] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 36078 - 0 [ 252.791423][T12851] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 36078 - 0 [ 252.831521][T12851] geneve2: entered promiscuous mode [ 252.849109][T12851] geneve2: entered allmulticast mode [ 253.139423][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1961'. [ 253.255769][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1963'. [ 253.271134][T12881] nbd: couldn't find a device at index 135 [ 253.455277][T12883] wg1 speed is unknown, defaulting to 1000 [ 254.304807][T12900] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1969'. [ 254.469704][T12893] wg1 speed is unknown, defaulting to 1000 [ 254.479289][ T30] audit: type=1800 audit(1746901244.519:9): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1971" name="memory.events" dev="tmpfs" ino=2147 res=0 errno=0 [ 255.012884][T12922] wg1 speed is unknown, defaulting to 1000 [ 255.424399][T12944] tipc: Enabled bearer , priority 0 [ 255.488859][T12947] hsr0: entered allmulticast mode [ 255.500564][T12947] hsr_slave_0: entered allmulticast mode [ 255.510346][T12947] hsr_slave_1: entered allmulticast mode [ 255.519627][ T30] audit: type=1800 audit(1746901245.549:10): pid=12939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1966" name="memory.events" dev="tmpfs" ino=2079 res=0 errno=0 [ 255.650597][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.809634][T12949] syzkaller0: entered promiscuous mode [ 255.819754][T12949] syzkaller0: entered allmulticast mode [ 255.828495][T12951] netlink: 'syz.2.1983': attribute type 6 has an invalid length. [ 258.382078][T12969] @ÿ: renamed from bond_slave_0 [ 258.475200][T12969] __nla_validate_parse: 11 callbacks suppressed [ 258.475223][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1988'. [ 258.818587][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1994'. [ 258.864334][T12982] veth1_vlan: left promiscuous mode [ 259.139417][T12994] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 259.141835][T12997] syzkaller1: entered promiscuous mode [ 259.147233][T12994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1997'. [ 259.164209][T12997] syzkaller1: entered allmulticast mode [ 259.426925][T13003] syzkaller0: entered promiscuous mode [ 259.432466][T13003] syzkaller0: entered allmulticast mode [ 259.468705][T13011] FAULT_INJECTION: forcing a failure. [ 259.468705][T13011] name failslab, interval 1, probability 0, space 0, times 0 [ 259.490563][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.4.2003 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 259.490590][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.490600][T13011] Call Trace: [ 259.490607][T13011] [ 259.490614][T13011] dump_stack_lvl+0x189/0x250 [ 259.490644][T13011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.490671][T13011] ? __pfx__printk+0x10/0x10 [ 259.490692][T13011] ? __pfx___might_resched+0x10/0x10 [ 259.490718][T13011] should_fail_ex+0x414/0x560 [ 259.490740][T13011] should_failslab+0xa8/0x100 [ 259.490762][T13011] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 259.490782][T13011] ? __alloc_skb+0x112/0x2d0 [ 259.490805][T13011] __alloc_skb+0x112/0x2d0 [ 259.490827][T13011] netlink_sendmsg+0x5c6/0xb30 [ 259.490860][T13011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.490881][T13011] ? aa_sock_msg_perm+0x94/0x160 [ 259.490901][T13011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.490918][T13011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.490937][T13011] __sock_sendmsg+0x219/0x270 [ 259.490961][T13011] sock_sendmsg+0x158/0x230 [ 259.490986][T13011] ? __pfx_sock_sendmsg+0x10/0x10 [ 259.491015][T13011] ? __asan_memset+0x22/0x50 [ 259.491038][T13011] ? iov_iter_bvec+0xb8/0x180 [ 259.491063][T13011] splice_to_socket+0x8ff/0xf10 [ 259.491103][T13011] ? __pfx_splice_to_socket+0x10/0x10 [ 259.491168][T13011] ? register_lock_class+0x51/0x320 [ 259.491200][T13011] ? __pfx_splice_to_socket+0x10/0x10 [ 259.491222][T13011] direct_splice_actor+0xfe/0x160 [ 259.491244][T13011] splice_direct_to_actor+0x5a5/0xcc0 [ 259.491282][T13011] ? __pfx_direct_splice_actor+0x10/0x10 [ 259.491300][T13011] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 259.491319][T13011] ? __pfx_aa_file_perm+0x10/0x10 [ 259.491344][T13011] do_splice_direct+0x181/0x270 [ 259.491369][T13011] ? __pfx_do_splice_direct+0x10/0x10 [ 259.491389][T13011] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 259.491409][T13011] ? bpf_lsm_file_permission+0x9/0x20 [ 259.491428][T13011] ? security_file_permission+0x75/0x290 [ 259.491452][T13011] ? rw_verify_area+0x258/0x650 [ 259.491481][T13011] do_sendfile+0x4da/0x7d0 [ 259.491501][T13011] ? __pfx_vfs_write+0x10/0x10 [ 259.491524][T13011] ? __pfx_do_sendfile+0x10/0x10 [ 259.491544][T13011] ? __fget_files+0x3a0/0x420 [ 259.491577][T13011] __se_sys_sendfile64+0x13e/0x190 [ 259.491597][T13011] ? rcu_is_watching+0x15/0xb0 [ 259.491620][T13011] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 259.491643][T13011] ? do_syscall_64+0xba/0x210 [ 259.491667][T13011] do_syscall_64+0xf6/0x210 [ 259.491684][T13011] ? clear_bhb_loop+0x45/0xa0 [ 259.491705][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.491719][T13011] RIP: 0033:0x7f96fcf8e969 [ 259.491735][T13011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.491752][T13011] RSP: 002b:00007f96fde18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 259.491776][T13011] RAX: ffffffffffffffda RBX: 00007f96fd1b5fa0 RCX: 00007f96fcf8e969 [ 259.491787][T13011] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 259.491795][T13011] RBP: 00007f96fde18090 R08: 0000000000000000 R09: 0000000000000000 [ 259.491805][T13011] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 259.491815][T13011] R13: 0000000000000000 R14: 00007f96fd1b5fa0 R15: 00007ffc55154e08 [ 259.491841][T13011] [ 259.894192][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2005'. [ 259.951625][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2005'. [ 260.081486][T13028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2009'. [ 262.017986][T13028] wg1 speed is unknown, defaulting to 1000 [ 262.090661][T13042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2012'. [ 262.128300][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 262.149612][T13042] sit0: left promiscuous mode [ 262.158543][T13044] openvswitch: netlink: nsh attr 12 is out of range max 3 [ 262.159820][T13042] ip6gretap0: left allmulticast mode [ 262.196905][T13044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.198768][T13042] macvtap0: left promiscuous mode [ 262.232912][T13042] geneve0: left allmulticast mode [ 262.254715][T13042] ip6erspan0: left promiscuous mode [ 262.263450][T13042] macvtap1: left promiscuous mode [ 262.276424][T13042] macvtap1: left allmulticast mode [ 262.284130][T13053] FAULT_INJECTION: forcing a failure. [ 262.284130][T13053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.304301][T13042] veth1: left promiscuous mode [ 262.311649][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.2.2016 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 262.311674][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.311684][T13053] Call Trace: [ 262.311691][T13053] [ 262.311699][T13053] dump_stack_lvl+0x189/0x250 [ 262.311723][T13053] ? __lock_acquire+0xaac/0xd20 [ 262.311747][T13053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.311768][T13053] ? __pfx__printk+0x10/0x10 [ 262.311784][T13053] ? __might_fault+0xb0/0x130 [ 262.311815][T13053] should_fail_ex+0x414/0x560 [ 262.311837][T13053] _copy_from_user+0x2d/0xb0 [ 262.311860][T13053] __sys_bpf+0x1ed/0x860 [ 262.311881][T13053] ? __pfx___sys_bpf+0x10/0x10 [ 262.311913][T13053] ? ksys_write+0x1f0/0x250 [ 262.311942][T13053] __x64_sys_bpf+0x7c/0x90 [ 262.311961][T13053] do_syscall_64+0xf6/0x210 [ 262.311979][T13053] ? clear_bhb_loop+0x45/0xa0 [ 262.311999][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.312015][T13053] RIP: 0033:0x7f8e93b8e969 [ 262.312030][T13053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.312043][T13053] RSP: 002b:00007f8e949ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.312061][T13053] RAX: ffffffffffffffda RBX: 00007f8e93db5fa0 RCX: 00007f8e93b8e969 [ 262.312074][T13053] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 262.312085][T13053] RBP: 00007f8e949ba090 R08: 0000000000000000 R09: 0000000000000000 [ 262.312095][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.312105][T13053] R13: 0000000000000001 R14: 00007f8e93db5fa0 R15: 00007ffd9f5fc9e8 [ 262.312133][T13053] [ 262.671886][ T7649] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.802318][ T7649] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.931820][ T7649] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.937286][T13068] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2023'. [ 262.952558][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 263.049520][ T7649] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.332120][T13084] FAULT_INJECTION: forcing a failure. [ 263.332120][T13084] name failslab, interval 1, probability 0, space 0, times 0 [ 263.378465][T13084] CPU: 1 UID: 0 PID: 13084 Comm: syz.1.2027 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 263.378487][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.378495][T13084] Call Trace: [ 263.378500][T13084] [ 263.378506][T13084] dump_stack_lvl+0x189/0x250 [ 263.378531][T13084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.378549][T13084] ? __pfx__printk+0x10/0x10 [ 263.378567][T13084] ? __pfx___might_resched+0x10/0x10 [ 263.378579][T13084] ? fs_reclaim_acquire+0x7d/0x100 [ 263.378599][T13084] should_fail_ex+0x414/0x560 [ 263.378616][T13084] should_failslab+0xa8/0x100 [ 263.378635][T13084] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 263.378652][T13084] ? __get_vm_area_node+0x131/0x2d0 [ 263.378672][T13084] __get_vm_area_node+0x131/0x2d0 [ 263.378700][T13084] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 263.378718][T13084] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 263.378755][T13084] ? aa_get_newest_label+0xf7/0x5d0 [ 263.378771][T13084] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 263.378788][T13084] ? _parse_integer_limit+0x1ae/0x1f0 [ 263.378803][T13084] ? rcu_is_watching+0x15/0xb0 [ 263.378823][T13084] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 263.378837][T13084] __vmalloc_noprof+0x7a/0x90 [ 263.378853][T13084] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 263.378869][T13084] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 263.378888][T13084] bpf_prog_alloc+0x3c/0x1a0 [ 263.378906][T13084] bpf_prog_load+0x735/0x1930 [ 263.378927][T13084] ? __lock_acquire+0xaac/0xd20 [ 263.378945][T13084] ? __pfx_bpf_prog_load+0x10/0x10 [ 263.378979][T13084] ? bpf_lsm_bpf+0x9/0x20 [ 263.378997][T13084] ? security_bpf+0x7e/0x300 [ 263.379012][T13084] __sys_bpf+0x5f1/0x860 [ 263.379029][T13084] ? __pfx___sys_bpf+0x10/0x10 [ 263.379053][T13084] ? ksys_write+0x1f0/0x250 [ 263.379078][T13084] __x64_sys_bpf+0x7c/0x90 [ 263.379092][T13084] do_syscall_64+0xf6/0x210 [ 263.379108][T13084] ? clear_bhb_loop+0x45/0xa0 [ 263.379125][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.379138][T13084] RIP: 0033:0x7fcd0278e969 [ 263.379153][T13084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.379165][T13084] RSP: 002b:00007fcd0353b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.379181][T13084] RAX: ffffffffffffffda RBX: 00007fcd029b5fa0 RCX: 00007fcd0278e969 [ 263.379190][T13084] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 263.379198][T13084] RBP: 00007fcd0353b090 R08: 0000000000000000 R09: 0000000000000000 [ 263.379207][T13084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.379215][T13084] R13: 0000000000000001 R14: 00007fcd029b5fa0 R15: 00007ffdd6d6a968 [ 263.379237][T13084] [ 263.653734][T13084] syz.1.2027: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 263.670043][T13084] CPU: 1 UID: 0 PID: 13084 Comm: syz.1.2027 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 263.670065][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.670074][T13084] Call Trace: [ 263.670081][T13084] [ 263.670088][T13084] dump_stack_lvl+0x189/0x250 [ 263.670116][T13084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.670136][T13084] ? __pfx__printk+0x10/0x10 [ 263.670149][T13084] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 263.670163][T13084] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 263.670177][T13084] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 263.670192][T13084] warn_alloc+0x214/0x310 [ 263.670214][T13084] ? __pfx_warn_alloc+0x10/0x10 [ 263.670238][T13084] ? __get_vm_area_node+0x27f/0x2d0 [ 263.670259][T13084] __vmalloc_node_range_noprof+0x316/0x12c0 [ 263.670293][T13084] ? aa_get_newest_label+0xf7/0x5d0 [ 263.670309][T13084] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 263.670326][T13084] ? _parse_integer_limit+0x1ae/0x1f0 [ 263.670341][T13084] ? rcu_is_watching+0x15/0xb0 [ 263.670361][T13084] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 263.670377][T13084] __vmalloc_noprof+0x7a/0x90 [ 263.670393][T13084] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 263.670409][T13084] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 263.670428][T13084] bpf_prog_alloc+0x3c/0x1a0 [ 263.670446][T13084] bpf_prog_load+0x735/0x1930 [ 263.670467][T13084] ? __lock_acquire+0xaac/0xd20 [ 263.670486][T13084] ? __pfx_bpf_prog_load+0x10/0x10 [ 263.670518][T13084] ? bpf_lsm_bpf+0x9/0x20 [ 263.670532][T13084] ? security_bpf+0x7e/0x300 [ 263.670547][T13084] __sys_bpf+0x5f1/0x860 [ 263.670563][T13084] ? __pfx___sys_bpf+0x10/0x10 [ 263.670587][T13084] ? ksys_write+0x1f0/0x250 [ 263.670616][T13084] __x64_sys_bpf+0x7c/0x90 [ 263.670630][T13084] do_syscall_64+0xf6/0x210 [ 263.670644][T13084] ? clear_bhb_loop+0x45/0xa0 [ 263.670660][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.670672][T13084] RIP: 0033:0x7fcd0278e969 [ 263.670685][T13084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.670696][T13084] RSP: 002b:00007fcd0353b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.670711][T13084] RAX: ffffffffffffffda RBX: 00007fcd029b5fa0 RCX: 00007fcd0278e969 [ 263.670720][T13084] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 263.670728][T13084] RBP: 00007fcd0353b090 R08: 0000000000000000 R09: 0000000000000000 [ 263.670736][T13084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.670744][T13084] R13: 0000000000000001 R14: 00007fcd029b5fa0 R15: 00007ffdd6d6a968 [ 263.670765][T13084] [ 263.670773][T13084] Mem-Info: [ 263.941996][T13084] active_anon:7588 inactive_anon:0 isolated_anon:0 [ 263.941996][T13084] active_file:1623 inactive_file:39907 isolated_file:0 [ 263.941996][T13084] unevictable:768 dirty:138 writeback:0 [ 263.941996][T13084] slab_reclaimable:11279 slab_unreclaimable:126274 [ 263.941996][T13084] mapped:34026 shmem:4231 pagetables:613 [ 263.941996][T13084] sec_pagetables:0 bounce:0 [ 263.941996][T13084] kernel_misc_reclaimable:0 [ 263.941996][T13084] free:1311058 free_pcp:808 free_cma:0 [ 263.997751][T13084] Node 0 active_anon:30352kB inactive_anon:0kB active_file:6492kB inactive_file:159424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136104kB dirty:552kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.042644][T13084] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.074730][T13084] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.109648][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.118662][T13084] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 264.119482][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.128519][T13084] Node 0 [ 264.134127][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.135222][T13084] DMA32 free:1316128kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:30444kB inactive_anon:0kB active_file:6492kB inactive_file:159332kB unevictable:1536kB writepending:552kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:3872kB local_pcp:1636kB free_cma:0kB [ 264.181914][T13084] lowmem_reserve[]: 0 0 0 0 0 [ 264.197230][T13084] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 264.233737][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.240969][T13084] lowmem_reserve[]: 0 0 0 0 0 [ 264.246161][T13084] Node 1 Normal free:3911492kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.246454][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.297040][T13084] lowmem_reserve[]: 0 0 0 0 0 [ 264.302151][T13084] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.322223][T13084] Node 0 DMA32: 1*4kB (M) 12*8kB (UME) 56*16kB (UME) 31*32kB (UME) 153*64kB (UME) 533*128kB (UME) 410*256kB (UM) 301*512kB (UM) 205*1024kB (UME) 10*2048kB (UME) 182*4096kB (UM) = 1314948kB [ 264.341505][T13084] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 264.353254][T13084] Node 1 Normal: 229*4kB (UME) 56*8kB (UME) 51*16kB (UME) 202*32kB (UME) 84*64kB (UME) 37*128kB (UME) 18*256kB (UME) 14*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 946*4096kB (M) = 3911492kB [ 264.372491][T13084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.393858][T13084] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.432471][T13084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.442171][T13084] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.452260][T13084] 45758 total pagecache pages [ 264.457128][T13084] 0 pages in swap cache [ 264.461386][T13084] Free swap = 124996kB [ 264.465680][T13084] Total swap = 124996kB [ 264.469934][T13084] 2097051 pages RAM [ 264.476297][T13084] 0 pages HighMem/MovableOnly [ 264.481092][T13084] 424379 pages reserved [ 264.485406][T13084] 0 pages cma reserved [ 265.040046][ T7649] team0: Port device geneve0 removed [ 265.071653][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 265.558487][ T7649] bond0 (unregistering): Released all slaves [ 265.668623][ T7649] bond1 (unregistering): Released all slaves [ 265.681336][ T7649] bond2 (unregistering): Released all slaves [ 265.789960][ T7649] bond3 (unregistering): Released all slaves [ 265.897162][T13101] wg1 speed is unknown, defaulting to 1000 [ 265.922094][T13085] wg1 speed is unknown, defaulting to 1000 [ 266.056985][T13115] FAULT_INJECTION: forcing a failure. [ 266.056985][T13115] name failslab, interval 1, probability 0, space 0, times 0 [ 266.070130][T13115] CPU: 0 UID: 0 PID: 13115 Comm: syz.2.2033 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 266.070153][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.070164][T13115] Call Trace: [ 266.070172][T13115] [ 266.070187][T13115] dump_stack_lvl+0x189/0x250 [ 266.070218][T13115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.070240][T13115] ? __pfx__printk+0x10/0x10 [ 266.070254][T13115] ? netlink_sendmsg+0x5c6/0xb30 [ 266.070281][T13115] ? ref_tracker_alloc+0x318/0x460 [ 266.070302][T13115] should_fail_ex+0x414/0x560 [ 266.070323][T13115] should_failslab+0xa8/0x100 [ 266.070346][T13115] kmem_cache_alloc_noprof+0x73/0x3c0 [ 266.070365][T13115] ? skb_clone+0x212/0x3a0 [ 266.070391][T13115] skb_clone+0x212/0x3a0 [ 266.070419][T13115] __netlink_deliver_tap+0x404/0x850 [ 266.070451][T13115] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.070471][T13115] netlink_deliver_tap+0x19c/0x1b0 [ 266.070491][T13115] netlink_unicast+0x72f/0x8d0 [ 266.070520][T13115] netlink_sendmsg+0x805/0xb30 [ 266.070549][T13115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.070570][T13115] ? aa_sock_msg_perm+0x94/0x160 [ 266.070591][T13115] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.070608][T13115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.070628][T13115] __sock_sendmsg+0x219/0x270 [ 266.070649][T13115] sock_sendmsg+0x158/0x230 [ 266.070667][T13115] ? __pfx_sock_sendmsg+0x10/0x10 [ 266.070696][T13115] ? __asan_memset+0x22/0x50 [ 266.070712][T13115] ? iov_iter_bvec+0xb8/0x180 [ 266.070735][T13115] splice_to_socket+0x8ff/0xf10 [ 266.070778][T13115] ? __pfx_splice_to_socket+0x10/0x10 [ 266.070839][T13115] ? register_lock_class+0x51/0x320 [ 266.070868][T13115] ? __pfx_splice_to_socket+0x10/0x10 [ 266.070887][T13115] direct_splice_actor+0xfe/0x160 [ 266.070910][T13115] splice_direct_to_actor+0x5a5/0xcc0 [ 266.070950][T13115] ? __pfx_direct_splice_actor+0x10/0x10 [ 266.070968][T13115] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 266.070987][T13115] ? __pfx_aa_file_perm+0x10/0x10 [ 266.071013][T13115] do_splice_direct+0x181/0x270 [ 266.071035][T13115] ? __pfx_do_splice_direct+0x10/0x10 [ 266.071055][T13115] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 266.071076][T13115] ? bpf_lsm_file_permission+0x9/0x20 [ 266.071094][T13115] ? security_file_permission+0x75/0x290 [ 266.071118][T13115] ? rw_verify_area+0x258/0x650 [ 266.071140][T13115] do_sendfile+0x4da/0x7d0 [ 266.071160][T13115] ? __pfx_vfs_write+0x10/0x10 [ 266.071190][T13115] ? __pfx_do_sendfile+0x10/0x10 [ 266.071210][T13115] ? __fget_files+0x3a0/0x420 [ 266.071241][T13115] __se_sys_sendfile64+0x13e/0x190 [ 266.071261][T13115] ? rcu_is_watching+0x15/0xb0 [ 266.071284][T13115] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 266.071309][T13115] ? do_syscall_64+0xba/0x210 [ 266.071330][T13115] do_syscall_64+0xf6/0x210 [ 266.071347][T13115] ? clear_bhb_loop+0x45/0xa0 [ 266.071368][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.071383][T13115] RIP: 0033:0x7f8e93b8e969 [ 266.071398][T13115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.071412][T13115] RSP: 002b:00007f8e949ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 266.071430][T13115] RAX: ffffffffffffffda RBX: 00007f8e93db5fa0 RCX: 00007f8e93b8e969 [ 266.071442][T13115] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 266.071451][T13115] RBP: 00007f8e949ba090 R08: 0000000000000000 R09: 0000000000000000 [ 266.071462][T13115] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 266.071472][T13115] R13: 0000000000000000 R14: 00007f8e93db5fa0 R15: 00007ffd9f5fc9e8 [ 266.071500][T13115] [ 266.447888][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 266.481956][ T55] Bluetooth: hci1: command tx timeout [ 266.537146][T13119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2036'. [ 266.920944][T13137] bond0 (unregistering): Released all slaves [ 267.127942][ T7649] tipc: Left network mode [ 267.469290][T13154] tipc: Enabled bearer , priority 0 [ 267.551840][T13158] tipc: Enabled bearer , priority 10 [ 267.677314][T13160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2048'. [ 267.965141][T13085] chnl_net:caif_netlink_parms(): no params data found [ 268.110712][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 268.179514][ T7649] hsr_slave_0: left promiscuous mode [ 268.193121][ T7649] hsr_slave_1: left promiscuous mode [ 268.396483][T13193] netlink: 'syz.0.2052': attribute type 10 has an invalid length. [ 268.516030][ T55] Bluetooth: hci1: command tx timeout [ 269.292211][T13182] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2055'. [ 269.490454][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.498009][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.505489][T13085] bridge_slave_0: entered allmulticast mode [ 269.515862][T13085] bridge_slave_0: entered promiscuous mode [ 269.523111][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 269.524835][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.539690][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.547299][T13085] bridge_slave_1: entered allmulticast mode [ 269.575534][T13085] bridge_slave_1: entered promiscuous mode [ 269.699760][T13085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.737093][T13207] wg1 speed is unknown, defaulting to 1000 [ 269.752110][T13085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.896975][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 269.987570][T13085] team0: Port device team_slave_0 added [ 270.015382][T13222] vlan2: entered allmulticast mode [ 270.020625][T13222] batadv0: entered allmulticast mode [ 270.055437][T13223] vlan0: entered promiscuous mode [ 270.081752][T13223] batadv0: entered promiscuous mode [ 270.188545][T13085] team0: Port device team_slave_1 added [ 270.223990][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 270.358234][T13085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.373323][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.425911][T13085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.477017][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 270.486866][T13085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.517246][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.578938][T13085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.594649][ T55] Bluetooth: hci1: command tx timeout [ 270.761738][T13085] hsr_slave_0: entered promiscuous mode [ 270.768826][T13085] hsr_slave_1: entered promiscuous mode [ 270.776346][T13085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.784421][ T30] audit: type=1800 audit(1746901260.819:11): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2073" name="memory.events" dev="tmpfs" ino=2266 res=0 errno=0 [ 270.784548][T13085] Cannot create hsr debugfs directory [ 270.817826][ T30] audit: type=1804 audit(1746901260.849:12): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2073" name="memory.events" dev="tmpfs" ino=2266 res=1 errno=0 [ 270.842125][T13255] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 271.008811][T13262] openvswitch: netlink: Message has 8 unknown bytes. [ 271.154006][T13257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.187296][T13257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54020 - 0 [ 271.233289][T13257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 36078 - 0 [ 271.413312][T13257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.424061][T13257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54020 - 0 [ 271.434889][T13257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 36078 - 0 [ 271.454365][T13267] tipc: Bearer : already 2 bearers with priority 10 [ 271.462076][T13267] tipc: Bearer : trying with adjusted priority [ 271.472196][T13267] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 271.648748][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 271.660524][T13257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.670975][T13257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54020 - 0 [ 271.681408][T13257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 36078 - 0 [ 271.728373][T13270] smc: removing ib device syz1 [ 271.843938][T13257] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 271.973869][T13257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.997099][T13257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54020 - 0 [ 272.023102][T13257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 36078 - 0 [ 272.250131][T13257] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 36078 - 0 [ 272.273301][T13257] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 54020 - 0 [ 272.281632][T13257] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 272.369392][T13257] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 36078 - 0 [ 272.393123][T13257] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 54020 - 0 [ 272.401444][T13257] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 272.429519][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 272.432751][T13257] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 36078 - 0 [ 272.469692][T13257] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 54020 - 0 [ 272.469720][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 272.483342][T13257] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 272.571513][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2080'. [ 272.656105][T13257] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 36078 - 0 [ 272.670087][T13257] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 54020 - 0 [ 272.681453][T13257] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 272.683532][ T55] Bluetooth: hci1: command tx timeout [ 273.182575][T13085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.255396][T13085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.340531][T13085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.364127][T13300] tipc: Enabling of bearer rejected, already enabled [ 273.374341][T13085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.399483][T13300] syzkaller0: entered promiscuous mode [ 273.408290][T13300] syzkaller0: entered allmulticast mode [ 273.439376][T13300] tipc: Resetting bearer [ 273.778675][T13085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.820231][T13085] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.899906][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.907139][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.942697][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.949984][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.129933][T13325] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 274.230816][T13325] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.256537][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2097'. [ 274.269824][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 274.289583][T13332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.297333][T13332] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 274.310251][T13332] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 274.407605][T13325] ip6erspan1: entered promiscuous mode [ 274.458324][T13325] bond6: (slave ip6erspan1): making interface the new active one [ 274.471390][T13325] bond6: (slave ip6erspan1): Enslaving as an active interface with an up link [ 274.519780][T13332] vlan3: entered allmulticast mode [ 274.530069][T13332] bond6: entered allmulticast mode [ 274.539125][T13332] ip6erspan1: entered allmulticast mode [ 274.559563][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 274.576284][T13332] bond6: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of ip6erspan1 [ 274.592278][T13325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2094'. [ 274.639181][T13325] hsr0: left promiscuous mode [ 274.652747][T13325] vlan3: entered allmulticast mode [ 274.658880][T13325] hsr0: entered allmulticast mode [ 274.679109][T13325] hsr_slave_0: entered allmulticast mode [ 274.691581][T13325] hsr_slave_1: entered allmulticast mode [ 274.768480][T13085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.930179][T13363] netlink: 'syz.0.2105': attribute type 2 has an invalid length. [ 274.977496][T13363] : entered promiscuous mode [ 275.207958][T13386] netlink: 'syz.3.2111': attribute type 58 has an invalid length. [ 275.326537][T13389] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 275.374092][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2113'. [ 275.478655][T13085] veth0_vlan: entered promiscuous mode [ 275.519954][T13085] veth1_vlan: entered promiscuous mode [ 275.528259][T13398] netlink: 'syz.0.2116': attribute type 12 has an invalid length. [ 275.561194][T13398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2116'. [ 275.688824][T13085] veth0_macvtap: entered promiscuous mode [ 275.716360][T13085] veth1_macvtap: entered promiscuous mode [ 275.797599][T13085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.852738][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.866762][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.905046][T13085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.936493][T13085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.946293][T13085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.959788][T13085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.022573][T13085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.405538][ T2199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.437911][T13443] IPVS: length: 78 != 8 [ 276.442197][T13444] IPVS: length: 78 != 8 [ 276.448905][ T2199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.540577][ T2199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.575571][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2129'. [ 276.576663][ T2199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.593845][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2129'. [ 276.648174][T13451] wg1 speed is unknown, defaulting to 1000 [ 276.797298][T13457] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 276.952800][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 277.078340][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 277.567491][ T2199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.735686][ T2199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.756888][T13483] netlink: 'syz.1.2141': attribute type 11 has an invalid length. [ 277.794452][T13483] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2141'. [ 277.866039][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 277.975521][ T2199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.146704][ T2199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.172175][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.185473][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.201509][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.216084][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.235357][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.283453][T13496] wg1 speed is unknown, defaulting to 1000 [ 278.557575][ T2199] bridge_slave_1: left allmulticast mode [ 278.566515][ T2199] bridge_slave_1: left promiscuous mode [ 278.574589][ T2199] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.588225][T13508] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 278.597916][ T2199] bridge_slave_0: left allmulticast mode [ 278.603800][ T2199] bridge_slave_0: left promiscuous mode [ 278.610694][ T2199] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.014673][ T2199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.029040][ T2199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.040290][ T2199] bond0 (unregistering): Released all slaves [ 279.068100][T13503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2146'. [ 279.080794][T13503] netem: unknown loss type 13 [ 279.086945][T13503] netem: change failed [ 279.132213][T13508] bond3: entered promiscuous mode [ 279.143654][T13508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.199375][T13510] bond3: (slave bridge5): making interface the new active one [ 279.211888][T13510] bridge5: entered promiscuous mode [ 279.221062][T13510] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 279.239686][T13511] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.367705][T13530] netlink: 'syz.3.2150': attribute type 21 has an invalid length. [ 279.377730][T13530] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2150'. [ 279.417515][T13524] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 279.444577][T13511] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.462539][T13530] netlink: 'syz.3.2150': attribute type 4 has an invalid length. [ 279.473294][T13530] netlink: 'syz.3.2150': attribute type 3 has an invalid length. [ 279.508809][T13496] chnl_net:caif_netlink_parms(): no params data found [ 279.614210][T13511] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.631087][T13538] SET target dimension over the limit! [ 279.755415][T13511] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.832979][ T2199] hsr_slave_0: left promiscuous mode [ 279.859118][ T2199] hsr_slave_1: left promiscuous mode [ 279.867750][ T2199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.877944][ T2199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.892889][ T2199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.908300][ T2199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.938209][ T2199] veth1_macvtap: left promiscuous mode [ 279.944957][ T2199] veth0_macvtap: left promiscuous mode [ 279.950738][ T2199] veth1_vlan: left promiscuous mode [ 279.960755][ T2199] veth0_vlan: left promiscuous mode [ 280.281568][ T55] Bluetooth: hci1: command tx timeout [ 280.504655][ T2199] team0 (unregistering): Port device team_slave_1 removed [ 280.550369][ T2199] team0 (unregistering): Port device team_slave_0 removed [ 281.020058][T13555] __nla_validate_parse: 3 callbacks suppressed [ 281.020080][T13555] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2159'. [ 281.060814][T13555] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.085685][T13556] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 281.296145][T13511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.306142][T13496] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.313983][T13496] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.332548][T13496] bridge_slave_0: entered allmulticast mode [ 281.360601][T13496] bridge_slave_0: entered promiscuous mode [ 281.401472][T13511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.417314][T13496] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.434476][T13496] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.454431][T13496] bridge_slave_1: entered allmulticast mode [ 281.462141][T13496] bridge_slave_1: entered promiscuous mode [ 281.506392][T13511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.608953][T13511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.639110][T13496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.681621][T13496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.838760][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 281.851239][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'. [ 281.896109][T13496] team0: Port device team_slave_0 added [ 281.917479][T13496] team0: Port device team_slave_1 added [ 282.018407][T13496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.028062][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.057204][T13496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.059650][T13594] sctp: [Deprecated]: syz.2.2167 (pid 13594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.059650][T13594] Use struct sctp_sack_info instead [ 282.117351][T13592] netlink: 'syz.2.2167': attribute type 1 has an invalid length. [ 282.131985][T13496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.139892][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.178309][T13496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.198030][T13600] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 282.284186][T13592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.292658][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2169'. [ 282.320532][T13599] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 282.354511][ T55] Bluetooth: hci1: command tx timeout [ 282.372650][T13594] bond1: (slave gretap1): making interface the new active one [ 282.384968][T13594] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 282.467024][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 282.501454][T13612] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 282.618374][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 282.661387][T13496] hsr_slave_0: entered promiscuous mode [ 282.700222][T13496] hsr_slave_1: entered promiscuous mode [ 282.712827][T13496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.724044][T13496] Cannot create hsr debugfs directory [ 282.836503][T13625] gtp0: entered promiscuous mode [ 282.848598][T13625] gtp0: entered allmulticast mode [ 282.869101][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2173'. [ 282.968443][T13633] xt_TCPMSS: Only works on TCP SYN packets [ 283.219889][T13641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'. [ 283.984347][T13658] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 283.992401][T13658] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2183'. [ 284.006258][T13658] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2183'. [ 284.433360][ T55] Bluetooth: hci1: command tx timeout [ 285.539808][T13673] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 286.201876][T13658] __nla_validate_parse: 1 callbacks suppressed [ 286.201893][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 286.322662][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 286.334969][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.346101][T13675] dummy0: entered promiscuous mode [ 286.352694][T13675] macsec1: entered promiscuous mode [ 286.370034][T13675] macsec1: entered allmulticast mode [ 286.378634][T13675] dummy0: entered allmulticast mode [ 286.391988][T13675] dummy0: left allmulticast mode [ 286.401201][T13675] dummy0: left promiscuous mode [ 286.514761][ T55] Bluetooth: hci1: command tx timeout [ 286.554126][T13688] wg1 speed is unknown, defaulting to 1000 [ 286.563971][T13685] wg1 speed is unknown, defaulting to 1000 [ 286.771183][T13697] wg1 speed is unknown, defaulting to 1000 [ 287.009246][T13496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.086555][T13685] SET target dimension over the limit! [ 287.144722][T13496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.171480][T13706] tipc: Enabling of bearer rejected, already enabled [ 287.211747][T13496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.261818][T13496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.462018][T13715] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2196'. [ 287.839224][T13727] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2201'. [ 287.965722][T13727] wg1 speed is unknown, defaulting to 1000 [ 288.368193][T13720] wg1 speed is unknown, defaulting to 1000 [ 288.428254][T13496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.457619][T13724] wg1 speed is unknown, defaulting to 1000 [ 288.461931][T13496] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.547572][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.554819][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.642146][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.649393][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.662569][T13748] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.699112][T13755] tipc: Started in network mode [ 288.705056][T13755] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 288.712636][T13755] tipc: Enabled bearer , priority 10 [ 288.720975][T13756] tipc: Enabled bearer , priority 14 [ 288.804882][T13748] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.829362][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 288.838973][T13759] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2207'. [ 288.848364][T13759] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2207'. [ 289.003619][T13748] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.082743][T13771] vlan0: entered promiscuous mode [ 289.092240][T13771] bond0: entered promiscuous mode [ 289.100415][T13771] vlan0: entered allmulticast mode [ 289.106127][T13771] bond0: entered allmulticast mode [ 289.127694][T13748] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.152301][T13764] xt_ipcomp: unknown flags F7 [ 289.348675][T13748] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.376859][T13748] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.419727][T13748] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.450652][T13748] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.668233][T13783] wg1 speed is unknown, defaulting to 1000 [ 289.682858][T13496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.834507][ T5884] tipc: Node number set to 8432298 [ 289.837992][T13794] tipc: Enabling of bearer rejected, already enabled [ 289.921524][T13798] netlink: 'syz.2.2218': attribute type 10 has an invalid length. [ 289.950202][T13798] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.958441][T13798] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.014908][T13798] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.022127][T13798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.029950][T13798] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.037220][T13798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.119010][T13798] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 290.194820][T13807] batadv0: mtu less than device minimum [ 290.220890][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.232878][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.244508][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.256188][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.267670][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.279229][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.290787][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.302340][T13807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 290.334858][T13783] SET target dimension over the limit! [ 290.669525][T13496] veth0_vlan: entered promiscuous mode [ 290.707018][T13828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2225'. [ 290.712255][T13496] veth1_vlan: entered promiscuous mode [ 290.755601][T13830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.797128][T13496] veth0_macvtap: entered promiscuous mode [ 290.822748][T13496] veth1_macvtap: entered promiscuous mode [ 290.850967][T13836] netlink: 'syz.1.2227': attribute type 2 has an invalid length. [ 290.880195][T13496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.917831][T13840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2227'. [ 290.918640][T13496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.945724][T13496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.957717][T13496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.022317][T13496] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.032142][T13496] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.041188][T13496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.050051][T13496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.061547][T13839] wg1 speed is unknown, defaulting to 1000 [ 291.321977][T13853] veth0: entered promiscuous mode [ 291.332480][ T7649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.355422][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 291.367197][ T7649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.386606][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'. [ 291.443556][T13853] veth0 (unregistering): left promiscuous mode [ 291.644679][ T7663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.677852][ T7663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.727435][T13871] wg1 speed is unknown, defaulting to 1000 [ 292.179662][T13889] tipc: Enabling of bearer rejected, already enabled [ 292.329736][T13896] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 292.352750][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 292.387546][T13902] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 292.391307][ T3464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.424084][T13896] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 292.659803][ T3464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.810434][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 292.842635][ T3464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.921961][T13921] netlink: 'syz.2.2248': attribute type 2 has an invalid length. [ 292.960357][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 292.969348][T13914] bond4: entered allmulticast mode [ 292.969760][T13914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.989313][T13922] batadv_slave_0: entered promiscuous mode [ 293.001943][T13922] batadv_slave_0: entered allmulticast mode [ 293.015954][T13922] bond4: (slave batadv_slave_0): Enslaving as an active interface with a down link [ 293.045902][T13923] team0: Port device syz_tun removed [ 293.059642][T13923] bond0: (slave bridge0): Releasing backup interface [ 293.081701][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.089090][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.133610][T13923] batman_adv: batadv0: Interface deactivated: dummy0 [ 293.140581][T13923] batman_adv: batadv0: Removing interface: dummy0 [ 293.150967][T13923] bridge_slave_0: left allmulticast mode [ 293.157266][T13923] bridge_slave_0: left promiscuous mode [ 293.169586][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.169618][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.190831][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.193957][T13923] bridge_slave_1: left allmulticast mode [ 293.204625][T13923] bridge_slave_1: left promiscuous mode [ 293.204639][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.210389][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.228594][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.237494][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.242520][T13923] bond0: (slave bond_slave_0): Releasing backup interface [ 293.268870][T13923] bond0: (slave bond_slave_1): Releasing backup interface [ 293.285284][T13923] team0: Port device team_slave_0 removed [ 293.291738][T13923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.301866][T13923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.309866][T13923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.331296][T13923] team0: Port device geneve0 removed [ 293.340405][T13923] bond4: (slave batadv1): Releasing active interface [ 293.356882][T13923] bond5: (slave veth5): Releasing active interface [ 293.370911][T13923] bond6: (slave ip6erspan1): Releasing active interface [ 293.378994][T13923] ip6erspan1: left allmulticast mode [ 293.391013][T13927] FAULT_INJECTION: forcing a failure. [ 293.391013][T13927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.413559][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.3.2249 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 293.413585][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.413595][T13927] Call Trace: [ 293.413601][T13927] [ 293.413609][T13927] dump_stack_lvl+0x189/0x250 [ 293.413638][T13927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.413656][T13927] ? __pfx__printk+0x10/0x10 [ 293.413682][T13927] should_fail_ex+0x414/0x560 [ 293.413702][T13927] _copy_to_user+0x31/0xb0 [ 293.413723][T13927] simple_read_from_buffer+0xe1/0x170 [ 293.413746][T13927] proc_fail_nth_read+0x1df/0x250 [ 293.413769][T13927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.413790][T13927] ? rw_verify_area+0x258/0x650 [ 293.413804][T13927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.413824][T13927] vfs_read+0x1fd/0x980 [ 293.413846][T13927] ? __pfx___mutex_lock+0x10/0x10 [ 293.413861][T13927] ? __pfx_vfs_read+0x10/0x10 [ 293.413879][T13927] ? __fget_files+0x2a/0x420 [ 293.413913][T13927] ? __fget_files+0x3a0/0x420 [ 293.413929][T13927] ? __fget_files+0x2a/0x420 [ 293.413954][T13927] ksys_read+0x145/0x250 [ 293.413968][T13927] ? rcu_is_watching+0x15/0xb0 [ 293.413995][T13927] ? __pfx_ksys_read+0x10/0x10 [ 293.414013][T13927] ? do_syscall_64+0xba/0x210 [ 293.414032][T13927] do_syscall_64+0xf6/0x210 [ 293.414047][T13927] ? clear_bhb_loop+0x45/0xa0 [ 293.414064][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.414078][T13927] RIP: 0033:0x7fe392f8d37c [ 293.414093][T13927] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 293.414109][T13927] RSP: 002b:00007fe393dc0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.414126][T13927] RAX: ffffffffffffffda RBX: 00007fe3931b5fa0 RCX: 00007fe392f8d37c [ 293.414136][T13927] RDX: 000000000000000f RSI: 00007fe393dc00a0 RDI: 0000000000000004 [ 293.414145][T13927] RBP: 00007fe393dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 293.414153][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.414162][T13927] R13: 0000000000000000 R14: 00007fe3931b5fa0 R15: 00007ffc370f0008 [ 293.414188][T13927] [ 293.701834][ T3464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.820588][T13939] tipc: Enabling of bearer rejected, already enabled [ 293.895988][T13929] wg1 speed is unknown, defaulting to 1000 [ 293.931748][T13945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2254'. [ 294.023804][T13945] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 294.285678][T13956] wg1 speed is unknown, defaulting to 1000 [ 294.451879][ T3464] bridge_slave_1: left allmulticast mode [ 294.471857][ T3464] bridge_slave_1: left promiscuous mode [ 294.488323][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.520855][ T3464] bridge_slave_0: left allmulticast mode [ 294.537342][ T3464] bridge_slave_0: left promiscuous mode [ 294.559360][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.743401][T13978] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 294.813766][T13960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2257'. [ 295.069840][T13989] xt_CT: No such helper "pptp" [ 295.250481][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.261921][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.272244][ T3464] bond0 (unregistering): Released all slaves [ 295.310890][T13978] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 295.324593][ T55] Bluetooth: hci1: command tx timeout [ 295.652444][T13997] tipc: Enabling of bearer rejected, already enabled [ 295.684722][T14006] IPVS: length: 192 != 24 [ 295.691640][T14006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2266'. [ 295.762499][T13929] chnl_net:caif_netlink_parms(): no params data found [ 295.899910][T14012] netlink: 'syz.1.2268': attribute type 9 has an invalid length. [ 295.908059][T14012] netlink: 'syz.1.2268': attribute type 6 has an invalid length. [ 295.950816][T14016] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2269'. [ 295.990202][T14018] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2269'. [ 296.016492][ T3464] hsr_slave_0: left promiscuous mode [ 296.049157][ T3464] hsr_slave_1: left promiscuous mode [ 296.063882][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.071706][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.117220][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.133146][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.196912][ T3464] veth1_macvtap: left promiscuous mode [ 296.202510][ T3464] veth0_macvtap: left promiscuous mode [ 296.223478][ T3464] veth1_vlan: left promiscuous mode [ 296.228880][ T3464] veth0_vlan: left promiscuous mode [ 296.373536][T14035] netlink: 'syz.0.2273': attribute type 11 has an invalid length. [ 296.407924][T14037] sctp: [Deprecated]: syz.3.2271 (pid 14037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.407924][T14037] Use struct sctp_sack_info instead [ 296.751171][T14044] netlink: 'syz.0.2275': attribute type 5 has an invalid length. [ 296.971306][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 297.017655][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 297.393667][ T55] Bluetooth: hci1: command tx timeout [ 297.500926][T14034] IPv6: sit1: Disabled Multicast RS [ 297.590758][T14030] gretap0: left promiscuous mode [ 297.647761][T14030] tipc: Resetting bearer [ 297.662162][T14030] tipc: Resetting bearer [ 297.913698][T14030] vti0: left promiscuous mode [ 297.920597][T14030] batadv1: left promiscuous mode [ 297.932114][T14030] vlan2: left promiscuous mode [ 297.942918][T14030] bond0: left promiscuous mode [ 297.955258][T14030] vlan2: left allmulticast mode [ 297.963142][T14030] bond0: left allmulticast mode [ 297.973822][T14030] bridge2: left allmulticast mode [ 297.986264][T14030] bridge3: left promiscuous mode [ 297.995772][T14030] bridge3: left allmulticast mode [ 298.011883][T14030] macvlan2: left promiscuous mode [ 298.028467][T14030] macvlan2: left allmulticast mode [ 298.041114][T14030] macvlan3: left promiscuous mode [ 298.048086][T14030] macvlan3: left allmulticast mode [ 298.058910][T14030] ip6tnl3: left promiscuous mode [ 298.064287][T14030] ip6tnl3: left allmulticast mode [ 298.078194][T14030] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 36078 - 0 [ 298.089505][T14030] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 36078 - 0 [ 298.098422][T14030] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 36078 - 0 [ 298.106922][T14030] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 36078 - 0 [ 298.115982][T14030] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 54020 - 0 [ 298.124621][T14030] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 54020 - 0 [ 298.133242][T14030] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 54020 - 0 [ 298.141779][T14030] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 54020 - 0 [ 298.150549][T14030] geneve2: left promiscuous mode [ 298.156084][T14030] geneve2: left allmulticast mode [ 298.169852][T14030] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 298.179580][T14030] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 298.187997][T14030] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 298.196657][T14030] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 298.229182][T14044] macsec1: entered promiscuous mode [ 298.241175][T14044] veth0_to_bridge: entered promiscuous mode [ 298.250273][T14044] veth0_to_bridge: left promiscuous mode [ 298.333985][T13929] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.349573][T13929] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.357532][T13929] bridge_slave_0: entered allmulticast mode [ 298.367164][T13929] bridge_slave_0: entered promiscuous mode [ 298.375754][T14058] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 298.385355][T13929] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.394275][T13929] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.413229][T13929] bridge_slave_1: entered allmulticast mode [ 298.421121][T13929] bridge_slave_1: entered promiscuous mode [ 298.534446][T14065] ipt_ECN: cannot use operation on non-tcp rule [ 298.542005][T13929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.575503][T13929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.654759][T14072] netlink: 'syz.3.2282': attribute type 11 has an invalid length. [ 298.790921][T13929] team0: Port device team_slave_0 added [ 298.824507][T13929] team0: Port device team_slave_1 added [ 298.851166][T14083] sctp: [Deprecated]: syz.0.2284 (pid 14083) Use of int in maxseg socket option. [ 298.851166][T14083] Use struct sctp_assoc_value instead [ 298.882989][T14080] syzkaller0: entered allmulticast mode [ 299.007071][T13929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.014479][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.076781][T13929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.129551][T13929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.174003][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.245174][T13929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.271094][T14062] syzkaller0: left allmulticast mode [ 299.438414][T14082] wg1 speed is unknown, defaulting to 1000 [ 299.462503][T13929] hsr_slave_0: entered promiscuous mode [ 299.474641][ T55] Bluetooth: hci1: command tx timeout [ 299.490051][T13929] hsr_slave_1: entered promiscuous mode [ 299.503925][T13929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.523142][T13929] Cannot create hsr debugfs directory [ 299.593777][T14104] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 299.658747][T14110] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2285'. [ 299.855819][T14112] dummy0 speed is unknown, defaulting to 1000 [ 299.860679][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2285'. [ 299.862048][T14112] dummy0 speed is unknown, defaulting to 1000 [ 299.896309][T14122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2294'. [ 299.956502][T14112] dummy0 speed is unknown, defaulting to 1000 [ 300.002968][T14112] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 300.046580][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'. [ 300.130628][T14112] dummy0 speed is unknown, defaulting to 1000 [ 300.134702][T14129] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2299'. [ 300.191012][T14112] dummy0 speed is unknown, defaulting to 1000 [ 300.230814][T14131] netlink: 'syz.0.2298': attribute type 39 has an invalid length. [ 300.321987][T14112] dummy0 speed is unknown, defaulting to 1000 [ 300.378448][T14112] dummy0 speed is unknown, defaulting to 1000 [ 300.390981][T14112] dummy0 speed is unknown, defaulting to 1000 [ 300.406615][T14112] dummy0 speed is unknown, defaulting to 1000 [ 300.520209][T14137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 300.543870][T14139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2300'. [ 300.563704][T14137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 300.565119][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 300.583621][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 300.600159][T14140] SET target dimension over the limit! [ 300.606318][T14137] gretap0: entered promiscuous mode [ 300.612431][T14137] gretap0: left promiscuous mode [ 300.643623][T14141] gretap0: entered promiscuous mode [ 300.649729][T14141] gretap0: left promiscuous mode [ 300.882734][T13929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.921679][T13929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.948124][T13929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.966019][T13929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.189375][T13929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.227493][T13929] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.270166][ T2199] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.277448][ T2199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.346542][ T2199] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.353528][T14167] netlink: 'syz.3.2311': attribute type 2 has an invalid length. [ 301.353707][ T2199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.545538][T14176] netlink: 'syz.3.2314': attribute type 3 has an invalid length. [ 301.559599][ T55] Bluetooth: hci1: command tx timeout [ 301.729116][T14178] IPVS: Scheduler module ip_vs_sip not found [ 301.765249][T14182] IPVS: length: 24 != 6840 [ 301.845823][T14200] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 301.918374][T14205] netlink: 'syz.2.2320': attribute type 1 has an invalid length. [ 302.024129][T13929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.172834][T14224] netlink: 'syz.3.2325': attribute type 4 has an invalid length. [ 302.386571][T14228] wg1 speed is unknown, defaulting to 1000 [ 302.396964][T14228] dummy0 speed is unknown, defaulting to 1000 [ 302.408036][T14230] netlink: 'syz.3.2325': attribute type 4 has an invalid length. [ 302.512542][T13929] veth0_vlan: entered promiscuous mode [ 302.608525][T13929] veth1_vlan: entered promiscuous mode [ 302.729924][T13929] veth0_macvtap: entered promiscuous mode [ 302.750877][T13929] veth1_macvtap: entered promiscuous mode [ 302.795506][T13929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.841092][T14238] wg1 speed is unknown, defaulting to 1000 [ 302.859409][T13929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.879101][T14238] dummy0 speed is unknown, defaulting to 1000 [ 302.884944][T13929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.919359][T13929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.955070][T13929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.997474][T13929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.406817][T14261] netlink: 'syz.1.2332': attribute type 2 has an invalid length. [ 303.584112][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.611201][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.743636][T14276] net_ratelimit: 11 callbacks suppressed [ 303.743654][T14276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.807307][ T7651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.843359][ T7651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.864940][T14279] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 305.025547][ T7665] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.201009][ T7665] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.340891][ T7665] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.436905][ T7665] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.524936][ T7665] bridge_slave_1: left allmulticast mode [ 305.530616][ T7665] bridge_slave_1: left promiscuous mode [ 305.536604][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.546067][ T7665] bridge_slave_0: left allmulticast mode [ 305.551722][ T7665] bridge_slave_0: left promiscuous mode [ 305.558108][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.830426][T14321] xt_hashlimit: max too large, truncated to 1048576 [ 306.003504][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.017167][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.027211][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.047665][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.062690][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.178255][ T7665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.190515][ T7665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.200548][ T7665] bond0 (unregistering): Released all slaves [ 306.216773][T14311] tipc: Enabling of bearer rejected, failed to enable media [ 306.329217][T14326] __nla_validate_parse: 9 callbacks suppressed [ 306.329236][T14326] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2348'. [ 306.357599][T14326] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 306.438101][T14323] wg1 speed is unknown, defaulting to 1000 [ 306.484760][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2350'. [ 306.490315][T14323] dummy0 speed is unknown, defaulting to 1000 [ 306.691914][T14344] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2354'. [ 307.070926][ T7665] hsr_slave_0: left promiscuous mode [ 307.090962][ T7665] hsr_slave_1: left promiscuous mode [ 307.107116][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.117984][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.136490][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.164020][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.219932][T14374] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 307.226701][ T7665] veth1_macvtap: left promiscuous mode [ 307.247217][T14374] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2363'. [ 307.254029][ T7665] veth0_macvtap: left promiscuous mode [ 307.262154][ T7665] veth1_vlan: left promiscuous mode [ 307.268427][ T7665] veth0_vlan: left promiscuous mode [ 307.287473][T14374] NCSI netlink: No device for ifindex 813332851 [ 307.789659][ T7665] team0 (unregistering): Port device team_slave_1 removed [ 307.843404][ T7665] team0 (unregistering): Port device team_slave_0 removed [ 308.127355][ T5139] Bluetooth: hci1: command tx timeout [ 308.418993][T14363] dummy0: entered allmulticast mode [ 308.473633][T14382] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 308.555039][T14388] delete_channel: no stack [ 308.763747][T14396] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2368'. [ 308.827134][T14385] wg1 speed is unknown, defaulting to 1000 [ 308.827154][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2370'. [ 308.850794][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2370'. [ 308.860987][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2370'. [ 308.879781][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2370'. [ 308.889013][T14409] netlink: 'syz.3.2370': attribute type 6 has an invalid length. [ 308.917761][T14385] dummy0 speed is unknown, defaulting to 1000 [ 309.002855][T14412] openvswitch: netlink: Duplicate or invalid key (type 0). [ 309.023859][T14412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.068973][T14323] chnl_net:caif_netlink_parms(): no params data found [ 309.445086][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.452405][T14323] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.460348][T14323] bridge_slave_0: entered allmulticast mode [ 309.468229][T14323] bridge_slave_0: entered promiscuous mode [ 309.479504][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.486893][T14323] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.494468][T14323] bridge_slave_1: entered allmulticast mode [ 309.502360][T14323] bridge_slave_1: entered promiscuous mode [ 309.559335][T14442] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2380'. [ 309.611357][T14323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.641724][T14323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.698401][T14439] wg1 speed is unknown, defaulting to 1000 [ 309.737001][T14439] dummy0 speed is unknown, defaulting to 1000 [ 309.759584][T14323] team0: Port device team_slave_0 added [ 309.771821][T14323] team0: Port device team_slave_1 added [ 309.821679][T14446] wg1 speed is unknown, defaulting to 1000 [ 309.880100][T14446] dummy0 speed is unknown, defaulting to 1000 [ 309.888601][T14323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.912813][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.945200][T14323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.035794][T14323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.053192][T14323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.181338][T14323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.193182][ T5139] Bluetooth: hci1: command tx timeout [ 310.327630][T14455] wg1 speed is unknown, defaulting to 1000 [ 310.390120][T14455] dummy0 speed is unknown, defaulting to 1000 [ 310.451189][T14323] hsr_slave_0: entered promiscuous mode [ 310.460194][T14323] hsr_slave_1: entered promiscuous mode [ 310.466326][T14323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.474117][T14323] Cannot create hsr debugfs directory [ 311.065350][T14476] SET target dimension over the limit! [ 311.248908][T14480] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 311.338680][T14480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 311.453357][T14485] __nla_validate_parse: 5 callbacks suppressed [ 311.453375][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2394'. [ 312.276314][ T5139] Bluetooth: hci1: command tx timeout [ 313.313947][ T5139] Bluetooth: hci0: command tx timeout [ 313.984395][T14323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.023479][T14323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.059152][T14514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 314.080500][T14514] batman_adv: batadv0: Adding interface: ip6gretap1 [ 314.098975][T14514] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.132155][T14514] batman_adv: batadv0: Interface activated: ip6gretap1 [ 314.145188][T14323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.188712][T14323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.279901][T14524] netlink: 'syz.2.2406': attribute type 10 has an invalid length. [ 314.353271][ T5139] Bluetooth: hci1: command tx timeout [ 314.390450][T14524] bond0 (unregistering): Released all slaves [ 314.545306][T14323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.602821][T14323] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.634863][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.641982][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.688678][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.695935][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.935195][T14545] wg1 speed is unknown, defaulting to 1000 [ 314.942235][T14556] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.942592][T14545] dummy0 speed is unknown, defaulting to 1000 [ 315.248546][T14323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.333544][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 315.446512][T14573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.920414][T14323] veth0_vlan: entered promiscuous mode [ 315.980967][T14323] veth1_vlan: entered promiscuous mode [ 316.091780][T14323] veth0_macvtap: entered promiscuous mode [ 316.127927][T14323] veth1_macvtap: entered promiscuous mode [ 316.209498][T14323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.210131][T14614] netlink: 'syz.3.2429': attribute type 10 has an invalid length. [ 316.241460][T14323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.261263][T14323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.285916][T14323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.307644][T14323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.319678][T14323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.329652][T14614] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2429'. [ 316.369885][T14617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2429'. [ 316.428633][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 316.649885][T12308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.683817][T12308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.738924][ T7663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.747812][ T7663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.926086][T14656] netlink: 'syz.0.2442': attribute type 1 has an invalid length. [ 317.051869][T14650] pim6reg1: entered promiscuous mode [ 317.067727][T14650] pim6reg1: entered allmulticast mode [ 317.087252][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.262508][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 317.599802][ T7654] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.678997][ T7654] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.022286][ T7654] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.228985][ T7654] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.335351][T14691] wg1 speed is unknown, defaulting to 1000 [ 318.343547][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 318.355742][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 318.379523][T14691] dummy0 speed is unknown, defaulting to 1000 [ 318.395140][T14697] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 318.755434][ T7654] bridge_slave_1: left allmulticast mode [ 318.775485][ T7654] bridge_slave_1: left promiscuous mode [ 318.781836][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.836914][ T7654] bridge_slave_0: left allmulticast mode [ 318.871371][ T7654] bridge_slave_0: left promiscuous mode [ 318.877677][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.930164][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.939331][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.948042][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.963607][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.974564][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.984254][T14717] Bluetooth: hci1: Opcode 0x0c1a failed: -4 Connection to 10.128.0.85 closed by remote host. [ 319.566723][ T7654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.577555][ T7654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.588701][ T7654] bond0 (unregistering): Released all slaves [ 319.603182][T14715] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2459'. [ 319.612252][T14715] tc_dump_action: action bad kind [ 319.669826][T14710] wg1 speed is unknown, defaulting to 1000 [ 319.792146][T14710] dummy0 speed is unknown, defaulting to 1000 [ 320.113688][ T7654] hsr_slave_0: left promiscuous mode [ 320.127270][ T7654] hsr_slave_1: left promiscuous mode [ 320.143438][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.150882][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.159324][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.167126][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.192938][ T7654] veth1_macvtap: left promiscuous mode [ 320.199781][ T7654] veth0_macvtap: left promiscuous mode [ 320.205749][ T7654] veth1_vlan: left promiscuous mode [ 320.211098][ T7654] veth0_vlan: left promiscuous mode [ 320.731015][ T7654] team0 (unregistering): Port device team_slave_1 removed [ 320.786511][ T7654] team0 (unregistering): Port device team_slave_0 removed [ 321.654012][T14710] ------------[ cut here ]------------ [ 321.659820][T14710] refcount_t: underflow; use-after-free. [ 321.665891][T14710] WARNING: CPU: 1 PID: 14710 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 321.675576][T14710] Modules linked in: [ 321.679706][T14710] CPU: 1 UID: 0 PID: 14710 Comm: syz.2.2458 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 321.691863][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.701978][T14710] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 321.708182][T14710] Code: 20 89 c1 8b e8 57 a4 cb fc 90 0f 0b 90 90 eb d7 e8 fb 47 07 fd c6 05 58 a6 b0 0a 01 90 48 c7 c7 80 89 c1 8b e8 37 a4 cb fc 90 <0f> 0b 90 90 eb b7 e8 db 47 07 fd c6 05 35 a6 b0 0a 01 90 48 c7 c7 [ 321.728054][T14710] RSP: 0018:ffffc900015775b8 EFLAGS: 00010246 [ 321.734186][T14710] RAX: 250720f27b051c00 RBX: 0000000000000003 RCX: ffff88807b4f5a00 [ 321.742173][T14710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 321.750240][T14710] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 321.758255][T14710] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff888029536c00 [ 321.766312][T14710] R13: ffff8880116d1460 R14: ffff8880116d1478 R15: dffffc0000000000 [ 321.774518][T14710] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 321.783526][T14710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.790120][T14710] CR2: 00007fd9febf84c0 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 321.798231][T14710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.806242][T14710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.814272][T14710] Call Trace: [ 321.817565][T14710] [ 321.820488][T14710] klist_dec_and_del+0x3c7/0x3d0 [ 321.825455][T14710] klist_remove+0x1bd/0x340 [ 321.829944][T14710] ? __pfx_klist_children_put+0x10/0x10 [ 321.835542][T14710] ? __pfx_klist_remove+0x10/0x10 [ 321.840664][T14710] ? __pfx_kobject_move+0x10/0x10 [ 321.845759][T14710] ? get_device_parent+0x366/0x3a0 [ 321.850879][T14710] device_move+0x193/0x700 [ 321.855342][T14710] hci_conn_del_sysfs+0xb8/0x170 [ 321.860296][T14710] hci_conn_del+0x8f5/0xca0 [ 321.864843][T14710] hci_conn_hash_flush+0x191/0x230 [ 321.869950][T14710] hci_dev_close_sync+0xaef/0x1330 [ 321.875160][T14710] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 321.880713][T14710] ? up_write+0x1c4/0x420 [ 321.885064][T14710] hci_unregister_dev+0x206/0x500 [ 321.890081][T14710] vhci_release+0x80/0xd0 [ 321.894454][T14710] ? __pfx_vhci_release+0x10/0x10 [ 321.899493][T14710] __fput+0x449/0xa70 [ 321.903531][T14710] task_work_run+0x1d1/0x260 [ 321.908135][T14710] ? __pfx_task_work_run+0x10/0x10 [ 321.913273][T14710] ? kmem_cache_free+0x192/0x3f0 [ 321.918255][T14710] do_exit+0x8d6/0x2550 [ 321.922406][T14710] ? do_raw_spin_lock+0x121/0x290 [ 321.927472][T14710] ? __pfx_do_exit+0x10/0x10 [ 321.932049][T14710] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 321.937445][T14710] do_group_exit+0x21c/0x2d0 [ 321.942026][T14710] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.947257][T14710] get_signal+0x125e/0x1310 [ 321.951761][T14710] arch_do_signal_or_restart+0x95/0x780 [ 321.957350][T14710] ? ksys_unshare+0x7b0/0x8c0 [ 321.962042][T14710] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 321.968304][T14710] ? local_irq_enable_exit_to_user+0x5/0x10 [ 321.974268][T14710] syscall_exit_to_user_mode+0x8b/0x120 [ 321.979820][T14710] do_syscall_64+0x103/0x210 [ 321.984434][T14710] ? ret_from_fork_asm+0x1a/0x30 [ 321.989355][T14710] ? clear_bhb_loop+0x45/0xa0 [ 321.994062][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.999965][T14710] RIP: 0033:0x7f8e93b8e969 [ 322.004395][T14710] Code: Unable to access opcode bytes at 0x7f8e93b8e93f. [ 322.011396][T14710] RSP: 002b:00007f8e949ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 322.019841][T14710] RAX: fffffffffffffffc RBX: 00007f8e93db5fa0 RCX: 00007f8e93b8e969 [ 322.027899][T14710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 322.036162][T14710] RBP: 00007f8e93c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 322.044182][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.052146][T14710] R13: 0000000000000001 R14: 00007f8e93db5fa0 R15: 00007ffd9f5fc9e8 [ 322.060185][T14710] [ 322.063275][T14710] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.070554][T14710] CPU: 1 UID: 0 PID: 14710 Comm: syz.2.2458 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 322.082605][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.092665][T14710] Call Trace: [ 322.095952][T14710] [ 322.098885][T14710] dump_stack_lvl+0x99/0x250 [ 322.103481][T14710] ? __asan_memcpy+0x40/0x70 [ 322.108123][T14710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.113325][T14710] ? __pfx__printk+0x10/0x10 [ 322.117928][T14710] panic+0x2db/0x790 [ 322.121914][T14710] ? __pfx_panic+0x10/0x10 [ 322.126335][T14710] __warn+0x31b/0x4b0 [ 322.130304][T14710] ? refcount_warn_saturate+0x11a/0x1d0 [ 322.135865][T14710] ? refcount_warn_saturate+0x11a/0x1d0 [ 322.141437][T14710] report_bug+0x2be/0x4f0 [ 322.145773][T14710] ? refcount_warn_saturate+0x11a/0x1d0 [ 322.151326][T14710] ? refcount_warn_saturate+0x11a/0x1d0 [ 322.156878][T14710] ? refcount_warn_saturate+0x11c/0x1d0 [ 322.162444][T14710] handle_bug+0x84/0x160 [ 322.166697][T14710] exc_invalid_op+0x1a/0x50 [ 322.171205][T14710] asm_exc_invalid_op+0x1a/0x20 [ 322.176057][T14710] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 322.182217][T14710] Code: 20 89 c1 8b e8 57 a4 cb fc 90 0f 0b 90 90 eb d7 e8 fb 47 07 fd c6 05 58 a6 b0 0a 01 90 48 c7 c7 80 89 c1 8b e8 37 a4 cb fc 90 <0f> 0b 90 90 eb b7 e8 db 47 07 fd c6 05 35 a6 b0 0a 01 90 48 c7 c7 [ 322.201919][T14710] RSP: 0018:ffffc900015775b8 EFLAGS: 00010246 [ 322.207993][T14710] RAX: 250720f27b051c00 RBX: 0000000000000003 RCX: ffff88807b4f5a00 [ 322.215965][T14710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 322.223933][T14710] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 322.231904][T14710] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff888029536c00 [ 322.239879][T14710] R13: ffff8880116d1460 R14: ffff8880116d1478 R15: dffffc0000000000 [ 322.247872][T14710] ? refcount_warn_saturate+0x119/0x1d0 [ 322.253439][T14710] klist_dec_and_del+0x3c7/0x3d0 [ 322.258389][T14710] klist_remove+0x1bd/0x340 [ 322.262896][T14710] ? __pfx_klist_children_put+0x10/0x10 [ 322.268452][T14710] ? __pfx_klist_remove+0x10/0x10 [ 322.273494][T14710] ? __pfx_kobject_move+0x10/0x10 [ 322.278543][T14710] ? get_device_parent+0x366/0x3a0 [ 322.283659][T14710] device_move+0x193/0x700 [ 322.288080][T14710] hci_conn_del_sysfs+0xb8/0x170 [ 322.293021][T14710] hci_conn_del+0x8f5/0xca0 [ 322.297536][T14710] hci_conn_hash_flush+0x191/0x230 [ 322.302659][T14710] hci_dev_close_sync+0xaef/0x1330 [ 322.307782][T14710] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 322.313328][T14710] ? up_write+0x1c4/0x420 [ 322.317712][T14710] hci_unregister_dev+0x206/0x500 [ 322.322901][T14710] vhci_release+0x80/0xd0 [ 322.327247][T14710] ? __pfx_vhci_release+0x10/0x10 [ 322.332271][T14710] __fput+0x449/0xa70 [ 322.336267][T14710] task_work_run+0x1d1/0x260 [ 322.340859][T14710] ? __pfx_task_work_run+0x10/0x10 [ 322.345973][T14710] ? kmem_cache_free+0x192/0x3f0 [ 322.350929][T14710] do_exit+0x8d6/0x2550 [ 322.355097][T14710] ? do_raw_spin_lock+0x121/0x290 [ 322.360145][T14710] ? __pfx_do_exit+0x10/0x10 [ 322.364911][T14710] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 322.370296][T14710] do_group_exit+0x21c/0x2d0 [ 322.374887][T14710] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.380089][T14710] get_signal+0x125e/0x1310 [ 322.384611][T14710] arch_do_signal_or_restart+0x95/0x780 [ 322.390160][T14710] ? ksys_unshare+0x7b0/0x8c0 [ 322.394856][T14710] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 322.401033][T14710] ? local_irq_enable_exit_to_user+0x5/0x10 [ 322.406940][T14710] syscall_exit_to_user_mode+0x8b/0x120 [ 322.412484][T14710] do_syscall_64+0x103/0x210 [ 322.417077][T14710] ? ret_from_fork_asm+0x1a/0x30 [ 322.422009][T14710] ? clear_bhb_loop+0x45/0xa0 [ 322.426682][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.432575][T14710] RIP: 0033:0x7f8e93b8e969 [ 322.436987][T14710] Code: Unable to access opcode bytes at 0x7f8e93b8e93f. [ 322.443995][T14710] RSP: 002b:00007f8e949ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 322.452405][T14710] RAX: fffffffffffffffc RBX: 00007f8e93db5fa0 RCX: 00007f8e93b8e969 [ 322.460375][T14710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 322.468343][T14710] RBP: 00007f8e93c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 322.476308][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.484271][T14710] R13: 0000000000000001 R14: 00007f8e93db5fa0 R15: 00007ffd9f5fc9e8 [ 322.492255][T14710] [ 322.495535][T14710] Kernel Offset: disabled [ 322.499857][T14710] Rebooting in 86400 seconds..