last executing test programs: 2.765749913s ago: executing program 4 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @multicast2}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x28, {0x2, 0x0, @empty}, 'bridge_slave_1\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507005c0ef5dcc0d6eb07000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005140)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 2.470348396s ago: executing program 4 (id=1471): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0xffffff00, 0x1000, 0x3a}, 0x1c) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2042a}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x0) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r3 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x6a, 0x1, 0x0, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff041, 0x0) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x12, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000007700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000009000000999b2354f7ea00000055090100000000009500000000000000185500000e0059dcbc9a4858bad9f33e1d0000000000000000000006c8060003000000bf91000000000000b7020000000000008500000084000000b700000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x78, &(0x7f0000000340)=""/120, 0x40f00, 0x18, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc18, 0x10, &(0x7f0000000580)={0x0, 0xb, 0x401, 0x7}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.298092153s ago: executing program 4 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010003938cae204000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028005000600fc0000000800030001000080"], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x6c0000, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES16=r3], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r2, 0x0, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1bb27000000000000000000000008000000000000000000000000000e07cd0bc346ef128dd81eda3dbbb4c2a569cd18302fdced317eb537edb54368395da43556e3a3f0fc655e3a7005ee01974eae5b9e1245b44b0d8f457d89c4f628bedbe3500cbc672e23c1a6c2ab71fedeb9624c531642e8f64273d56654d53111f10bbba4bc102c69ae7d8578fea6dd985e8787435e53419ed88eaf779c73e4e9722e7bd357c6500a490d91ac67b06", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000008500000087000000000000000000a4e108c600000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="000088fbffffffffffffaaaaaaaaaa00080045bd0034006800207d069078ac1e0001ffffffff0000000000000000000300004e2300004e240000000000000001"], 0x46) (rerun: 32) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r13, 0x0, 0x0) setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) 2.226385014s ago: executing program 0 (id=1475): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES16=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2}, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0xc7fc0000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000200000085000000b600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000}, 0x50) syz_emit_ethernet(0x104a, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)={0x58, 0x140a, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000050000000000000001d49c4e006100"], 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) shutdown(r5, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)) 1.973009999s ago: executing program 4 (id=1477): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)={0x28, 0x0, 0x1, 0x10001, 0x25dfdbf9, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008d5}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x81) poll(0x0, 0x0, 0xf45) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket(0x2, 0x801, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffd2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b67e86a15e94fcf88200000000ffffffff05039078ac1414bb4800000000000000000000007f000001ac1414138303290044040000001283dc61b1ce5707432dd0595dac60aef2862f00000000000c82ee46f3c317e9defd56000e5056f7e467350191f050a122000a031702f40f2614a600059b091a000000"], 0x0) sendfile(r1, r5, 0x0, 0x7ffff000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0x9}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x200}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2fda}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x48c4) 1.847205546s ago: executing program 0 (id=1479): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) r1 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x80800) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r6], 0x50}}, 0x2) 1.846349786s ago: executing program 2 (id=1480): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r0, @in6={{0xa, 0x4e24, 0x3ff, @local, 0x2}}, 0x7fff, 0xc}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f00000000c0)='/', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c) (async) setsockopt(r5, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e2c37"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9a}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x8}}}, 0x24}}, 0x0) 1.538813746s ago: executing program 2 (id=1483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000001c0)=0x2, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000007000000000000000000004d81000000860000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x7, 0x0, &(0x7f0000000300)="14fd54ab72df97", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) (async) socket(0x400000000015, 0x3, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x9, @vifc_lcl_addr=@private=0xa010101, @rand_addr=0x64010100}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@random="a579bbcb1e8e", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) (async) unshare(0x26020480) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe6d}]}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000000)={0x1000006, 0x804, 0x4, 0x9, 0x8, 0x11}) (async, rerun: 32) r9 = socket(0x10, 0x3, 0x0) (rerun: 32) r10 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xb92f}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x4c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000090a010400000000000000000014000000100001"], 0x3c}}, 0x20050800) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) 1.537306099s ago: executing program 0 (id=1484): epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c4000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'batadv0\x00', 'lo\x00'}, 0x0, 0xf0, 0x138, 0x0, {0x0, 0x4c00}, [@common=@dst={{0x48}, {0x0, 0x0, 0xbce0257315b3f3d6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x10, 0xd, 0xa, 0xd, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_sec_ctx={0x1, 0x18, 0xa, 0x6}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in6=@local, 0x6, 0x14, 0xe}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@multicast1, 0x2b, 0x0, 0x14}]}, 0x68}}, 0x4000010) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/108, 0x6c}], 0x1, 0x3f, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1, 0x80000000, 0xfffffffc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0xb8}, 0xa}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x8000000000000000}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adffa5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x4, 0x5c8}]}, 0x4c}}, 0x80) r10 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000000)={0xc0000001}) 1.510416623s ago: executing program 1 (id=1485): socket$inet(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r2], 0x58}, 0x1, 0xba01}, 0x0) 1.178753927s ago: executing program 1 (id=1487): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x3, 0x6, {{0x16, 0x4, 0x2, 0x2, 0x58, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@rr={0x7, 0x1b, 0x6c, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @local]}, @timestamp={0x44, 0x18, 0xc0, 0x0, 0x6, [0x6, 0xeb3, 0xffffffff, 0x1, 0x0]}, @rr={0x7, 0xf, 0xf1, [@remote, @empty, @broadcast]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@func={0xd, 0x0, 0x0, 0xc, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x2e, 0x61, 0x0, 0x30, 0x30, 0x61]}}, &(0x7f0000000500), 0x39, 0x0, 0x1, 0x9, 0x10000, @value}, 0x28) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xfffffffc}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x14, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x3, 0x34, &(0x7f00000003c0)=""/52, 0x41000, 0x26, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000580)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x5, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5, 0xffffffffffffffff], 0x0, 0x10, 0x5fac1fbd, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x4, 0xf5b, 0xffffffff, 0x3, 0x1]}, &(0x7f00000007c0)=0x78) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000800)={0x0, 0x10000, 0x20}, 0xc) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000840)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r10 = getuid() sendmsg$nl_xfrm(r9, &(0x7f0000001bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x246cbdc2fd467602}, 0xc, &(0x7f0000001b80)={&(0x7f0000000900)=@expire={0x127c, 0x18, 0x800, 0x70bd26, 0x25dfdbff, {{{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4e24, 0x5, 0x4e22, 0xa, 0xa, 0x20, 0x0, 0x3a, 0x0, r10}, {@in=@private=0xa010100, 0x4d3, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xa, 0x4, 0x3b, 0x1, 0x8, 0x2, 0x1a78, 0x4}, {0x3, 0x1, 0x5, 0x4}, {0x10000, 0x0, 0x40}, 0x70bd26, 0x3503, 0xa, 0x1, 0x89}, 0x7f}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010100, 0x4d6, 0x2b}, 0xa, @in=@local, 0x3504, 0x2, 0x3, 0x9d, 0x7fff, 0x1, 0x800}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0xa, @in=@multicast1, 0x3501, 0x4, 0x1, 0x0, 0x2, 0x9, 0xa83}, {{@in=@private=0xa010102, 0x4d2, 0x32}, 0x2, @in6=@loopback, 0x3505, 0x4, 0x1, 0x3, 0x8, 0xdfea, 0x8}]}, @srcaddr={0x14, 0xd, @in=@broadcast}, @replay_thresh={0x8, 0xb, 0xa427}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd27, 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x39}}, @algo_crypt={0x1048, 0x2, {{'cbc(twofish)\x00'}, 0x8000, "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"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2a, 0x70bd2d, 0x70bd2b, 0x70bd2a, 0xfffffffa, [0xc, 0xb5f, 0x4]}}]}, 0x127c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c810) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001c00)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x4}}, 0x69d, 0x54, 0xffffffff, 0x9, 0xe13}, &(0x7f0000001cc0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001d00)={0x1, 0x1, 0x800d, 0xda, 0x1af, 0x1d, 0xb, 0xfffff5d6, r11}, &(0x7f0000001d40)=0x20) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r12, &(0x7f0000002080)={&(0x7f0000001d80)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000001dc0)="8950d98541171a8550d8e093d69600bc0934ed9379930f8e85eba467e0fcbb0aeafc1ab1fb69399941a380be8f4efedd98b621786b9c2f092da69eb7029937292dded4d32b1a3eb5b2277a5acce6152c9bbebed9a131f356438cfa50a0aabe9dd928ee9a6af51f76ec211cef7d4cb5b385b48bb5a17070d4f2566a60afb3b6e1ad17", 0x82}, {&(0x7f0000001e80)="4b8465caeaff4f1c9e8281e4c5de807edb9d1a31e973e49fe067ccfe117e1a73b08dea929cf6f9e9bed22bed47224aa6c206d859f483300e662e9a", 0x3b}, {&(0x7f0000001ec0)="32c1b672f189448e0c2e71ad1a43cceaca776f45cb483c01f9675f70970612e1836d75b0058316", 0x27}, {&(0x7f0000001f00)="f11b25c45542921f61438bbe87854b8097b97bef0a6ecc89cd3a21139167c481d758c7c3c8c8d28f70ab635560", 0x2d}, {&(0x7f0000001f40)="3b8d642ae6a3a634d8a8dfe97a6d80613ec8a72b81bb82f86c5c21592253537373", 0x21}], 0x5, &(0x7f0000002000)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}, @dstopts={{0x28, 0x29, 0x37, {0x73, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x8}, @pad1]}}}], 0x50}, 0x0) r13 = accept4(r8, &(0x7f00000020c0)=@isdn, &(0x7f0000002140)=0x80, 0x80800) getpeername$l2tp6(r13, &(0x7f0000002180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000021c0)=0x20) sendmsg$OSF_MSG_ADD(r13, &(0x7f0000002500)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002240)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x6}, 0x6, 0x7f, 0x8000, 0x300, 0x21, 'syz0\x00', "26d21b8016da5d2d10ddfe56ec355d0be1e3e49d59e07c636912344dc31b4b2a", "b13b2f4cc0069dad9f5d9824a3cf4a47355cfa4132f2944b042bb15aa4c03b18", [{0x9, 0x0, {0x1, 0x7}}, {0x4, 0x86, {0x0, 0x7}}, {0x4, 0x7f, {0x1, 0x4}}, {0x0, 0xb7, {0x3, 0x1}}, {0x2, 0xf, {0x2, 0x8}}, {0x8, 0x7f, {0x2, 0xe48}}, {0xffff, 0x0, {0x2, 0x3}}, {0x2, 0x6, {0x2, 0xf6a}}, {0x1000, 0x6, {0x2, 0x3}}, {0x1, 0x7, {0x3, 0x7}}, {0x9, 0x7, {0x2, 0x2}}, {0x8001, 0x5, {0x2, 0xfffffff5}}, {0x8, 0xc000, {0x3, 0xb7}}, {0xfd57, 0x0, {0x2, 0x6}}, {0x7, 0x6, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x1ff}}, {0x3, 0x8, {0x2, 0x7}}, {0x7, 0xd, {0x2, 0x8}}, {0x4, 0x7, {0x3}}, {0xfc00, 0x37, {0x3}}, {0x4, 0xfd0d, {0x2, 0xd}}, {0x6, 0x4, {0x2, 0x4}}, {0xf037, 0x80, {0x2, 0x8}}, {0x7, 0x0, {0x3, 0xfffffff9}}, {0x3, 0x2, {0xa10b7b98899b12f9, 0x8}}, {0x8f, 0x2, {0x2}}, {0x6, 0x0, {0x3, 0x8}}, {0x7, 0x8, {0x3, 0xffffff00}}, {0xfff8, 0x7f6e, {0x3, 0x4}}, {0x5, 0x7, {0x2, 0x101}}, {0xec7, 0x101, {0x1, 0x35fc2430}}, {0x9, 0x200, {0x0, 0x5}}, {0x800, 0xc546, {0x1, 0xffffffff}}, {0x81, 0x6, {0x2, 0x4}}, {0x8, 0x9}, {0x4, 0xe5e0, {0x2, 0x4}}, {0xfffe, 0x100, {0x0, 0x4}}, {0x1, 0x1, {0x3, 0x6}}, {0x8, 0x3, {0x1, 0x2}}, {0x6, 0x9, {0x1, 0x4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000002540)) r14 = socket$kcm(0x29, 0x70334183274b8775, 0x0) sendmsg$kcm(r14, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002580)="c500ed060e4c92bd9aef3881339e98509085b0b4da15ece8ee230d483924d41a035f24901513a780d3b3d587fd26587548006dde9ebc67c25b46628a534989a1", 0x40}, {&(0x7f00000025c0)="3cbc1d64bc0ce2524bf922944aed07df004a57c6aca647056870840653d01f33eac51c1e4d13a37b210dff9df1010cac7b07f878ab53f3fe5b5219b1c1fa79d922f7fbf43d75c65151001ca342d773ca8153ac7d1e9f964a12a6e83d646b1a89377447d62939d83c363b72c2d64a704cf09809ef6bd04a4047db5573cad4a25aca0e723402479d849c527de48bb74e3844502941", 0x94}, {&(0x7f0000002680)="311829899801e3a0759bd837461a8857d929a4fdeb259b4dd2d93ce27f822ecf42a8d962ab22b62000a37cd7ff4c386bd75123d366518c648a55a6be32a1d2e6", 0x40}, {&(0x7f00000026c0)="84d82afe694a849c35481aa19e51c34a3273f1214d73b8dc1802886d4df83e4b30e35fc861f9d24bc690608d210b1921d6b59a171251fea5f6c838b5fe03714a4f777fa89cfee9ae9f68d7840363384e931b4f3b0167b5bc39597157304d63d69a41da47369ee013e6479c0782f427958451218b2c9370578b60fca51d65602ddff0fe1c571a6cdbe731c25efb9fa2b85eccbce503356b442265983dc0bbb4d9582fcde9f10f35df1f4d144cb0727aa2c6d1abd02967c6005d375302146bdf6e85caf03f6581db4c1bd254c7bc5da11583e799b79c4b1298e828440df4f77e6f8e", 0xe1}, {&(0x7f00000027c0)="b9fbac95c98d41f2ea07c12731d1ada244967f8298d02d06d9a736514233616305cb31905f339c14572cf35dfb87b2533f4a05d87887bdaa32ae848cfffc1824f746b18f5d749a1bfdb1fa9e5ec74cd7eabbc1f3cf31e145f514640b37177b9a0419604a37b36228ed80360fe3a007045850d8fe9a8756fb924b9c5c22ad1fae5f917cc863ba2d252db74a892f108adbb4153c9c7aa8a3e26a0c47701f25a82b1f68508dbb476ddef8695f83c229dd05fb5864c4a294d80a63641026bfb29ddc19eefb876370783bb9e1c9b4774a31", 0xcf}, {&(0x7f00000028c0)="162d58caa0084a0cc4945388cb24a94b5ec2f49aad1a54656bfb11c8a26409e7d588ca3972ea12cf048952e853b341d3bf5a6e12621c4a2a32f13264f47c1caa93b685355e8c3332e2179afca550fc0ea5f2b79a18ca8a75f9b335ceeab09c491c5bd2f09ddc466f567cf6fd6a", 0x6d}, {&(0x7f0000002940)="223d1e931014835c538177249865f6d083930fdfa2695da68b5d4a807e6cd88e3798f21c694d1d4637377188a4df2559bf1e7dd986496ee162bbe70d9f714fdded0e46b429f54d5595cfcf13ce6c21176e95cbeb277a1e6b037b6c8ed8ebd48660032cda36c5ee832d1e26ba3dba7d1d0e4755f4fc6be169b3affb41d27904e406032c7a19dc6d9bb2a3420eed9e43ceaa35e1d4c7a9891cb863f6519167787680fd74f4d223fc72a248e57413f7b819a2e922f040cb80b4934aec10e4f97e76c3bdb98c986e8ab48863560fcd57e9ac18e2bf075022d8ff048b", 0xda}, {&(0x7f0000002a40)="e68b5189b30499820ffeadd4a9e846cccfb7c30f022a0b9d2d3669e47e7e260d50327896372e27b85a39e784d9648fb4079edb730b6662a1040c02cbe12c84f45261a3664c2151d28c711fcebd", 0x4d}], 0x8, &(0x7f0000002b40)=[{0x108, 0x10c, 0x5, "53987a6ad3eca9ab57ea1f5219eede76613f5d439a60debc55b56595045f5ca4d1e295cce737c6b3d3a7cb096507242b180a6143b966c3a6957930340e202bd9528e6536a15541d3dd6845fbb81ceaeb1879964f03452bcadce3a18b8376ac270af8d55161bd4d30c0970eef0ef9f460d4a5e773802c457cb512fba618d73c2f44e2c26e8ea0336008a75e318fce3834e0385574c916df51e23b65519297fbd29bdb4715f3ebe645e5337b5237420903a1b47bd552dae453a27ee27da4a1cc1cc2412831b46a751b1685039dd726f192a165f647208b173707006071a112ca293e71d7c1b743f6db5e35e11ec87fec2e3ef3fd45"}, {0x18, 0x10d, 0xfffffffc, "bf543768b9"}, {0x100, 0x29, 0x6, "adb9ee06ce48558388f3c7b2bc0feff6344dccde355badee29b8de92d4f9a519e3b8f75359ba644d2e973666b7ababcf65cbb77555e1c1253e51de2e6c4c9e5c3d72108900eedb807b9b93fce51f81028acb4dd361a3ee749508b7eb2a56b578c302bdd9c7e820cedf659f5562fa16891760644f12764b6b01cbddb93fd6dcddc5bf5d63097dab491d506e4ffc522dfbb0a2e78f339647431ac457e667e06b6e0497853e1d5603922eb5f01b154f19e0cc25bc05aacd67ba535ad49ff3d64fc79d3ebf0b279c45ab238fbe00a8f4dea3a6a526ec51072b19098efac4baec090f9c7fb1a1c7e68f0e2da2f3"}, {0x10, 0x1, 0x9}, {0xf0, 0x114, 0x80, "b393fd20ae85a300e3e0ab74d407af21169e6d85f555a5b60189ffe1e4c74a2f1cd2a643c50fb58c042beaf8379ba925e583d97fdeaeb6afd1fd8388087d3840859974a44d0484299662ae988d6ee251900a8af4d4db852bd286b24eff0d5f78ec0bab17fc04cc31eabd1d802eb5111c94e452a5af20e681b20d6a5ec8023bb5306ac593ccdd0e1297450dee4ef607b6174ec399aad2ed1cfab9b44ab46f17e6c81c7ede36dc720df7a7f972ea5617960e8f5a8f7f1351c3ef4cff0b23490d41a0cba4792afaac37086ccf460cae8bf7e2218179b63d780c2c361c31"}, {0x48, 0xe4, 0xd, "5bf9b6bbd1755312d66e922c2b78eefaa0af9f68d8775a2fe168250226d1ac9ef5bb2fd419fbbf1768e4494bfaf842c37c95b4a5806ddc"}, {0xa0, 0x113, 0x4, "a967fa090690ea390d08c1b787d864d9801f9fdebfb3a42be90508e682f894bc022d79962456d2e02b181a781c9c3f97d9d349586478f38543c13ef541ad45cb4106c5ea2d85107d9217264798c914e83e0d0afd4f7db819c4150a9767076ca6c0a755f21c60f1c5b25a8caa3479c7a04fb2752b4d89b0f79ed3ccb6f9e3349c7d22ccab717bc5e2d14f276319"}, {0x78, 0x0, 0x4, "44aef922ac616ea5f0de1bc496fb7815c2aca522e9734b55452aff25ff5ac97a7c336f5f3273b9bf161111a85e37cfc2d2314081bb889c6776794fba4d002b442eecbeac0df79daaff4a7c07222bd12fcfd43f75cac40f6baa1d5874803d8a7d1710"}, {0xf0, 0x10f, 0x5, "be89fbd782bbd67a919212250f558ff70937a9832b2df677ab0f730c2eee7eb2a66b21394c896d0a98c2368c92ddb1b31d9707377e54ff20ca99333aad1cce29ef0e6502f266278988245e7feb0e07167a7631b1fa76c9b2d06d7e4ced671cbbc0ac217b3ba2cd9343d8eca0e04b0dabda1bb2c39f5e3fc96ffbc4845295238dfa56200f62459de12c2fe6efe0b3792799dc5b38e26200053880aefda78e066496cfa5c4cca377fb5e6191d96b83aaf8d3a893be23b0fa9c29a08b9919dfd5d1121c55822fc6e7de77193bd53ef547ee1a6c2e76bb451c969851972cc206f8"}, {0xd0, 0xff, 0x0, "4e98694f797476b35a343efe15e1ed00c2a631ed23d395ec8c69c19949489c3ec6287ce410e9b9eb2876c43798085a7f74ca6d1ec610616d5d497ff2be5922ef9a0a13bbce57562a019a02a1718c94db44612b47c1b2caaedcae701cc7a0f9190d5dafd061c14e96cccc66ec63e91d1cfc93eb295309101d0b616bbe03378039a8d158cd0c07fb7a73504c6441abb3163c6da9a30ec4a4d030ee93eeb878b7e50b3b5c5d25de7bf1724aa55224849222da74b130e77863541eec"}], 0x640}, 0x20000080) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000031c0), 0x80001, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000003200)={'veth0\x00', 0x2000}) 1.153534108s ago: executing program 0 (id=1488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x84}}, 0x0) getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001000010000103000000000000000063747228646573335f656465"], 0x100}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x348, 0x1, 0x8, 0x201, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x8}, [@nested={0x146, 0x1a, 0x0, 0x1, [@generic="9b5785b43e2b65c73e", @generic="5a0c9aad982c53cd952c241999b6afa39162b70a6a609d492a7a1d22a02bcc34a4058868197bd88f94dc264bbef277ea89132e2a663ba97af7682b", @generic="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"]}, @nested={0x14d, 0x114, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @fd=r2}, @generic="dd5df1b34b2d314f1ba02ce8e91d025f8c0f0e75460b2dda2686be6a64c5b0f5e6cba5c14ee586274d476dcd325b235b22f4ecc65be995aaa0de39c68ee7505147161e4f6c97e40508e60edbdd50a22820511d6fc7db936a3cc20c05712bba0f4c5205a5640194ee7d69dd58bac512dd03d65091e9090b19f1889ada688d8b0e71c489340b49a4a3d0f10afa1c2f2199195187048843f551390ebd51966ec63591734d595775f77ca01f5334160a9fd4e60206b331f60f94665a59b9c1b05574cd044d5d1e3c70e8f5875ea5f9689a82f16afc621f9aa5f24be903f4a930", @typed={0x4, 0x141}, @generic="c765488d400fd798f441b3b05037539d2593d500ddeaa4078625a53f972b7b02f6f6a863eebe9306260a8d8632477c7caeb039417bb032628f9f3a43f45a8d1c32899738386e9a5577aea976ad528b", @nested={0x4, 0x77}, @nested={0x4, 0x77}, @nested={0x4, 0x82}, @nested={0x4, 0x38}]}, @typed={0x4, 0xa8}, @typed={0x8, 0x3b, 0x0, 0x0, @u32=0x3000}, @generic="01be0c14ee0d76b42c2f900373279e8073c5ad1bad1e0314a895650d7046f50dce3af9955b4cae83f5ea0cc932cce3d9a78642b9d17583fc44d199e59a34f786401b0da2107542abe9f80abb2f267a81e9c20de53de9445fe426ccc72893b67ce189e536f2a7f6c1e13d9c04bee127dfec4f2d152040bb8c225cc07000d15179659238f101053bd4f1b250bcf1f9e9c2"]}, 0x348}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.142278814s ago: executing program 3 (id=1489): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x6) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000280)="04", 0x1}], 0x1, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2ab}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.023193254s ago: executing program 4 (id=1490): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000080017"], 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.003981409s ago: executing program 3 (id=1491): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x2030, 0x0, @void, @void, @value}, 0x20) r2 = socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r5, 0x101, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x14) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x40, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4086, 0xff6}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f09dd799a82fb2eff324d011386b4", 0xf}], 0x1, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x30}, 0xc0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x3c, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004080) 988.801317ms ago: executing program 1 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0xc800) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@rose, @rose, @bcast, @netrom, @bcast, @null, @default, @bcast]}, &(0x7f0000000000)=0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006400)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x28, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xee01, r7}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r8 = getgid() r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r10 = gettid() sendmsg$netlink(r9, &(0x7f0000007780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)={0x10}, 0x10}], 0x1, &(0x7f0000007680)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x10}}], 0x30}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) (async, rerun: 32) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r14 = gettid() r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1, &(0x7f00000004c0)=@raw=[@generic={0x7f, 0x2, 0xe, 0x0, 0x31}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x5, &(0x7f0000000540)=""/5, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x2, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000800)=[{0x3, 0x3, 0xb, 0x2}, {0x2, 0x4, 0xa}, {0x3, 0x5, 0x8, 0x1}], 0x10, 0x2342, @void, @value}, 0x94) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) sendmsg$netlink(r13, &(0x7f0000007780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a40)={0x1f8, 0x0, 0x2, 0x0, 0x0, "", [@nested={0x4, 0x3e}, @nested={0x104, 0xd6, 0x0, 0x1, [@nested={0xfd, 0x6f, 0x0, 0x1, [@generic="b095c13d5018d1720887ac1f7f5434e2a3d6f06cd9b561ea5ed1ff9498c190e055345a20a3f6c88ed1344b3084eb1eea73fc593fc24b8d7c1b762a07910bb0d13df40992bd9075410553a8acea93d7315c9ef2289f1616e95b5459771c17033deaea5ba0c7bc458a1fe3673ec4603e0914f358cb", @nested={0x4, 0x8}, @generic="b7465aaf13cfc6c2d7b1d652b2c5c9af5889b45fef58f6baa56cd9142c9e5e1cee04cca0db68bff693f6de5fbafd2db4dd685bb1c31d8a7255e1d6c1bd2d5c095d6b8ab0909699ca71c998043baaa26b121eafa06d01136a79eec0b452cdc86d4705adea5a636c18438e56b2a3d1edd4b60f44b1ea149670fa4eebe53c10bef960"]}]}, @nested={0x24, 0x14b, 0x0, 0x1, [@generic, @nested={0x1d, 0xdd, 0x0, 0x1, [@generic="99684720a7d14b4cae7681d607f473e6e9f275f10d07abe287"]}]}, @typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="91202fc4183b41da00a1a5d7f3eb43b2605fa151cec4e43b646464dfa85f5eb3f7e5224a9a4d34e0543b5220313ad5e1e94703ef4dc766eb4dae562732abb1b6f515f8dd639c93605589dddca0b831c1574dd8388fc97c22e590ac272a539439fdfaa7834e88821f7373f5a8736fbe04cf0502c50c9bfc2b6c78e93aaebc2be8a3043340e10d68cb6f0ae255bf92bfbc8a4c2f0421efac1817574b1476e470b10b8e7f235f3a068842a94a2e2522229e31553c"]}, 0x1f8}], 0x1, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r6, r0, r15, r16, r9]}}], 0x48}, 0x0) (async) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r17, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9}]}, 0x20}}, 0x0) (async, rerun: 32) r18 = getuid() (rerun: 32) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000380)={0x98, 0x25, 0x8, 0x70bd29, 0x25dfdbfc, "", [@typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, @nested={0x4, 0xb7}, @typed={0xe, 0xd4, 0x0, 0x0, @str='syzkaller\x00'}, @generic="664c2939efd9b2098ff9832fc0a5b65509d0b88a8f098da5ba5c0379ea51849f4776e189af1c6c3a912db7f06622262f48907c54738ef28e8d0f1ed97c7ebe0ef5562c91aa9ec1cafb36ebc9cfc33988581973fc64ddc6531bb5b9db", @typed={0x4, 0xa0}]}, 0x98}, {&(0x7f0000000440)={0x10, 0x2f, 0x419, 0x70bd28, 0x25dfdbff}, 0x10}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [r3, r4, r5, r3, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r14, r18, 0xee01}}}], 0xc0, 0x8885}, 0x40041) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000100)={0x3, @null, r11}) (async) socket$inet6(0xa, 0x6, 0x0) 904.870335ms ago: executing program 2 (id=1493): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f000000b3c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="35d7bf24b01e7dad8eda553b9811", 0xe}, {&(0x7f0000000140)="16de61008f82e48354f212", 0xb}, {&(0x7f0000000180)="1e606d89f95359c8039a1ad9ba778cf1998594c07fce224a6beaf005a4bdffeac7259f", 0x23}], 0x3}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x1}, 0x8}], 0x33e, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x140c, 0x7d5eb5561f99c73, 0x70bd0d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40c1}, 0x24040880) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xdb1f8f1d28281cb8, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r9 = accept$packet(r8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x20, 0x8, 0xec, 0xfffff82b, {{0x8, 0x4, 0x1, 0x15, 0x20, 0x68, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0xc, [{@rand_addr=0x64010100, 0x8}]}]}}}}}) bind$packet(r9, &(0x7f0000000580)={0x11, 0x1a, r10, 0x1, 0x87, 0x6, @broadcast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000002c0)={0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) 794.667359ms ago: executing program 1 (id=1494): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000080)=""/228, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e2d4e"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x1}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x1}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x6, 0x2, 0x5}, {0x0, 0x5, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0x6}, {0x4, 0x2}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @ptr={0xc}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e, 0x5f, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f00000005c0)=""/228, 0xc4, 0xe4, 0x0, 0x1, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x1, 0x0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r3, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r6, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) socket$netlink(0x10, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23d2, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x8, 0xe4, &(0x7f0000000300)=""/228, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0x2b, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[r7], &(0x7f00000007c0)=[{0x0, 0x1, 0x7, 0x2}, {0x4, 0x1, 0xf, 0x2}, {0x2, 0x2, 0xb, 0x3}, {0x2, 0x2, 0x9, 0xc}], 0x10, 0x400, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="c3180000000000007911d80000000000050000000000000095007400000000007900cc0776e6d36d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ct={0x50, 0x1a, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x100}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 794.109577ms ago: executing program 4 (id=1495): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000711280000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x20000}], 0x1, 0x12141, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)="961eaf", 0x3}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1, 0x10122, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000700)="eb", 0x1}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = gettid() setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000080)=0xfff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, r5, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff000003000000000000000000"], 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 476.105734ms ago: executing program 0 (id=1496): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xd}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x38}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x3}, @TCA_CAKE_ATM={0x8}]}}]}, 0x4c}}, 0x200040c1) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000000809030000000000050000000000000c000480040007400000000005000300210000000900010073797a3100000000060002"], 0x3c}}, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, 0x0, 0x0) unshare(0x20400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="f09a804be702d6203a65586672157e639b7e9081d40f2ac5687e2b8b1b080b84a2894fa91b2a837f62357a3859a5cef8fbcda0e00786a4ac3979b765c710e6ed63fb926cb5302aaac3def1794c63a566572606d967865aabffcebcef68d39613cd829c0d5de07addbb2de42dbb118ab00b1dfb599163008d90ca10d8d4a2d501caaaba0f908fcf560618ae31f409341e8d066996bd53631445574ae9ab3db2a27adb3e8f352cbbde374e624fe0609823635a50d79f30685f1df5a1db3d70", @ANYRES32, @ANYBLOB="00000000000000000000f37d3976699bbd000092221d77736f53057bbe7f2ac6c8cd060000000000000000000000000000a7"], 0x48) socket$kcm(0x10, 0x2, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000240)='syzkaller\x00', 0xe034, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="09092cbd7000fcdbdf251300000006001201040000000600ed005506000006001000d9050000060012017ff600000500c2000e0000009b00be000090d1547363769d7720984a3350e1d08c41aa097f8c4884d78cb7b9baf8a68ed332e0270d9ae8b8017932bc7bb97213ebc10b4bcfbe4a4f1b50645907f0ea7c92f839de4919049bf8c0f26573cdc8c23d10697615e64f7d9bb45346c2a53a8dd0321414d7872cc77baebde1e21dcbca185f4fff756f8957984848f94bbd6a2b4f5c5ecde51b686a7e79042b19a6e7a7a7883888af8573000600120002000000"], 0xe0}}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="2b667265657a98722017637075736574202d667265657a6572202b696f202d6e6574202d6e65745f63b5f77ab7eb69e612f0eb68756765746c62202b64090000000000000023997d"], 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='pids.current\x00', 0x275a, 0x0) unshare(0x24020400) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'caif0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 475.437148ms ago: executing program 1 (id=1497): socket$inet(0x2, 0x4000000805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000020000000400000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet6_buf(r7, 0x6, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x4}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x2000c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r13}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 475.068576ms ago: executing program 2 (id=1498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x40000004, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newneigh={0x38, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000040)=""/214}, 0x20) 474.117069ms ago: executing program 3 (id=1499): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) (async) 315.152631ms ago: executing program 3 (id=1500): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='reno\x00', 0x5) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000200)=0x1c, 0xffbf) r2 = accept4(r1, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f0000000040)=0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="c0fa0000bee5ad316a5dc8f1842fed5594df0b05a7a1cd09274eeaf5e359d95f732c31400d48d513db359192e5933ebeac2a34300afcaad58c21b1f8cff775f88c454a7921ea4e48bf096aeca9317fa47b0f41b4eaf45ba427e4ebe2468e3ee1a49d03a0ce73d1114297346ff49328834a7feff293bfb2e357733ae15de36f8f37db975f", @ANYRES16=r3, @ANYBLOB="000829bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff000008009e00010400000600f7000202000008007700050000000a00060008021100000100007400848008000200000000002c000680080005000104000008000500040000000800030001800000080000000500000008000300050000000a00050008021100000100000a00050050505050505000000a00010002020202020200000a00010001010101010100000a0005005050505050500000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_generic(r2, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xf0, 0x15, 0x400, 0x70bd28, 0x25dfdbfd, {0x1b}, [@typed={0xb3, 0xe2, 0x0, 0x0, @binary="cdc284550fa1cd487d3d2a0f29bb571c9134f0f3dd215c06b77ed23be448dc2221f892a0d0d1508e8aca35cf7c9f563ae257a9089c8b6d900416f5c8cc379fa47d5b4c0d0d27c7b7111847c67d91a99b1d0ecc6037456dfedda08de158a58684294f4d3d28a32e1213770e17377c75878ae88016a0b63e7fe85f9ab2ad9ed2d98be5b3d42dccf6d2e87b544609c01794cdec1cc2a8a82c2240a79f1010cb74cc97aa9a80c6121ae12126c4a6a0ed1f"}, @typed={0x14, 0xed, 0x0, 0x0, @ipv6=@loopback}, @nested={0x14, 0x4f, 0x0, 0x1, [@nested={0x4, 0x81}, @nested={0x4, 0x8b}, @nested={0x4, 0x148}, @nested={0x4, 0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000080}, 0x81) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, 0x0, 0x0, 0x800) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 265.626436ms ago: executing program 2 (id=1501): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) unshare(0x40600) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) unshare(0x2c060000) (async) unshare(0x24020400) r3 = socket$unix(0x1, 0x1, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x200}, 0x6e) (async) unshare(0xe050000) (async) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000002, 0x4000013, 0xffffffffffffffff, 0xb2293000) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x1) (async) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x70, @mcast2, 0x3}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) bind$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608709000000000000000000020000000000000000000000000045b6e9f10000000000c204"], 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 239.243887ms ago: executing program 1 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x9, 0x14, 0x0, 0x70bd2a, 0x0, [@sadb_key={0xb, 0x8, 0x268, 0x0, "9df479fcf5c7369f2b1cf27771f49aceaff51e7fd378f807c0c444b2bff8b8801c0a598193434cdcc4cde90661559276c6cda138f0558fe18775f7352d4280e12538a17cc43cd0762f74410a02"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5cb4}}]}, 0xa0}}, 0x0) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x9, 0x14, 0x0, 0x70bd2a, 0x0, [@sadb_key={0xb, 0x8, 0x268, 0x0, "9df479fcf5c7369f2b1cf27771f49aceaff51e7fd378f807c0c444b2bff8b8801c0a598193434cdcc4cde90661559276c6cda138f0558fe18775f7352d4280e12538a17cc43cd0762f74410a02"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5cb4}}]}, 0xa0}}, 0x0) socketpair(0x27, 0x3, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000780)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0x60, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xd1e2}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}]}}}}}}, 0x96) 135.181564ms ago: executing program 3 (id=1503): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6(0xa, 0x200000000003, 0x87) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x24, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030bb0000bc2b0000000000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 134.95936ms ago: executing program 0 (id=1504): syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60000000004d8800fe880000000000000000000000000001fe8000000000030000000000000000aa00000000004d90"], 0x0) 86.939249ms ago: executing program 2 (id=1505): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18005ed0c43346210b2e844600bc5a5757cb0000000000000028820000aec0d103110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r2}, &(0x7f0000001080), &(0x7f00000001c0)=r3}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x66) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0xa, 0x3, 0x0, 0x5, 0x8000, 0x0, 0x6, 0x7, r8}, &(0x7f0000000100)=0x20) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x18}) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x80) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008380)=ANY=[@ANYBLOB="24000000120001000000000000800000100000000c0000000000000000000000040006"], 0x24}], 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007"], 0x24}}, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) 0s ago: executing program 3 (id=1506): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): ][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 111.161308][ T7064] netlink: 536 bytes leftover after parsing attributes in process `syz.0.306'. [ 111.167515][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 111.192219][ T7064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.306'. [ 111.432770][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.308'. [ 111.812437][ T7092] netlink: 'syz.2.314': attribute type 12 has an invalid length. [ 111.833628][ T7099] FAULT_INJECTION: forcing a failure. [ 111.833628][ T7099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.854690][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.1.316 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 111.854717][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.854727][ T7099] Call Trace: [ 111.854734][ T7099] [ 111.854741][ T7099] dump_stack_lvl+0x241/0x360 [ 111.854769][ T7099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.854787][ T7099] ? __pfx__printk+0x10/0x10 [ 111.854817][ T7099] ? __pfx_lock_release+0x10/0x10 [ 111.854866][ T7099] should_fail_ex+0x40a/0x550 [ 111.854891][ T7099] _copy_from_iter+0x1e9/0x1c20 [ 111.854919][ T7099] ? __virt_addr_valid+0x183/0x530 [ 111.854962][ T7099] ? __alloc_skb+0x28f/0x440 [ 111.854988][ T7099] ? __pfx__copy_from_iter+0x10/0x10 [ 111.855015][ T7099] ? __virt_addr_valid+0x183/0x530 [ 111.855041][ T7099] ? __virt_addr_valid+0x183/0x530 [ 111.855066][ T7099] ? __virt_addr_valid+0x45f/0x530 [ 111.855093][ T7099] ? __phys_addr_symbol+0x2f/0x70 [ 111.855118][ T7099] ? __check_object_size+0x47a/0x730 [ 111.855153][ T7099] netlink_sendmsg+0x73d/0xcb0 [ 111.855204][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.855236][ T7099] ? aa_sock_msg_perm+0x91/0x160 [ 111.855265][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.855291][ T7099] __sock_sendmsg+0x221/0x270 [ 111.855316][ T7099] ____sys_sendmsg+0x52a/0x7e0 [ 111.855351][ T7099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.855377][ T7099] ? __fget_files+0x2a/0x410 [ 111.855399][ T7099] ? __fget_files+0x2a/0x410 [ 111.855426][ T7099] __sys_sendmsg+0x269/0x350 [ 111.855459][ T7099] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.855499][ T7099] ? do_sys_openat2+0x17a/0x1d0 [ 111.855543][ T7099] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.855570][ T7099] ? do_syscall_64+0x100/0x230 [ 111.855597][ T7099] ? do_syscall_64+0xb6/0x230 [ 111.855623][ T7099] do_syscall_64+0xf3/0x230 [ 111.855646][ T7099] ? clear_bhb_loop+0x35/0x90 [ 111.855675][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.855698][ T7099] RIP: 0033:0x7f137a98cde9 [ 111.855715][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.855730][ T7099] RSP: 002b:00007f137b84b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.855750][ T7099] RAX: ffffffffffffffda RBX: 00007f137aba5fa0 RCX: 00007f137a98cde9 [ 111.855763][ T7099] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 111.855774][ T7099] RBP: 00007f137b84b090 R08: 0000000000000000 R09: 0000000000000000 [ 111.855785][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.855795][ T7099] R13: 0000000000000000 R14: 00007f137aba5fa0 R15: 00007fff5f73e568 [ 111.855822][ T7099] [ 122.416233][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.323'. [ 122.928259][ T7165] delete_channel: no stack [ 122.962707][ T7192] FAULT_INJECTION: forcing a failure. [ 122.962707][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 122.987922][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.4.328 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 122.987950][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.987966][ T7192] Call Trace: [ 122.987973][ T7192] [ 122.987981][ T7192] dump_stack_lvl+0x241/0x360 [ 122.988022][ T7192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.988043][ T7192] ? __pfx__printk+0x10/0x10 [ 122.988088][ T7192] should_fail_ex+0x40a/0x550 [ 122.988115][ T7192] should_failslab+0xac/0x100 [ 122.988150][ T7192] __kmalloc_noprof+0xdd/0x4c0 [ 122.988171][ T7192] ? ___neigh_create+0x72b/0x2320 [ 122.988196][ T7192] ___neigh_create+0x72b/0x2320 [ 122.988221][ T7192] ? neigh_lookup+0xb9/0x700 [ 122.988241][ T7192] ? __pfx_neigh_lookup+0x10/0x10 [ 122.988271][ T7192] neigh_add+0xb19/0xdc0 [ 122.988305][ T7192] ? __pfx_neigh_add+0x10/0x10 [ 122.988352][ T7192] ? __pfx_neigh_add+0x10/0x10 [ 122.988378][ T7192] rtnetlink_rcv_msg+0x73f/0xcf0 [ 122.988399][ T7192] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 122.988422][ T7192] ? __lock_acquire+0x1397/0x2100 [ 122.988451][ T7192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.988489][ T7192] netlink_rcv_skb+0x1e3/0x430 [ 122.988518][ T7192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.988541][ T7192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.988591][ T7192] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.988633][ T7192] netlink_unicast+0x7f6/0x990 [ 122.988669][ T7192] ? __pfx_netlink_unicast+0x10/0x10 [ 122.988693][ T7192] ? __virt_addr_valid+0x45f/0x530 [ 122.988723][ T7192] ? __phys_addr_symbol+0x2f/0x70 [ 122.988751][ T7192] ? __check_object_size+0x47a/0x730 [ 122.988788][ T7192] netlink_sendmsg+0x8e4/0xcb0 [ 122.988831][ T7192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.988866][ T7192] ? aa_sock_msg_perm+0x91/0x160 [ 122.988898][ T7192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.988927][ T7192] __sock_sendmsg+0x221/0x270 [ 122.988953][ T7192] ____sys_sendmsg+0x52a/0x7e0 [ 122.988992][ T7192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.989021][ T7192] ? __fget_files+0x2a/0x410 [ 122.989045][ T7192] ? __fget_files+0x2a/0x410 [ 122.989074][ T7192] __sys_sendmsg+0x269/0x350 [ 122.989110][ T7192] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.989154][ T7192] ? do_sys_openat2+0x17a/0x1d0 [ 122.989203][ T7192] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.989231][ T7192] ? do_syscall_64+0x100/0x230 [ 122.989260][ T7192] ? do_syscall_64+0xb6/0x230 [ 122.989288][ T7192] do_syscall_64+0xf3/0x230 [ 122.989313][ T7192] ? clear_bhb_loop+0x35/0x90 [ 122.989344][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.989370][ T7192] RIP: 0033:0x7f172a78cde9 [ 122.989394][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.989410][ T7192] RSP: 002b:00007f172b5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.989439][ T7192] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78cde9 [ 122.989453][ T7192] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 122.989464][ T7192] RBP: 00007f172b5df090 R08: 0000000000000000 R09: 0000000000000000 [ 122.989476][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.989486][ T7192] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 122.989534][ T7192] [ 123.325009][ T7196] netlink: zone id is out of range [ 123.372951][ T7196] netlink: set zone limit has 4 unknown bytes [ 123.641964][ T7204] lo speed is unknown, defaulting to 1000 [ 123.662043][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 123.783423][ T7225] netlink: 72 bytes leftover after parsing attributes in process `syz.3.337'. [ 123.797701][ T7226] netlink: 72 bytes leftover after parsing attributes in process `syz.3.337'. [ 124.010017][ T7233] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 124.021230][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 124.202155][ T7243] FAULT_INJECTION: forcing a failure. [ 124.202155][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.219827][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 124.240682][ T7247] FAULT_INJECTION: forcing a failure. [ 124.240682][ T7247] name failslab, interval 1, probability 0, space 0, times 0 [ 124.268628][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.2.345 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 124.268653][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.268664][ T7243] Call Trace: [ 124.268670][ T7243] [ 124.268678][ T7243] dump_stack_lvl+0x241/0x360 [ 124.268706][ T7243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.268725][ T7243] ? __pfx__printk+0x10/0x10 [ 124.268759][ T7243] ? snprintf+0xda/0x120 [ 124.268780][ T7243] should_fail_ex+0x40a/0x550 [ 124.268805][ T7243] _copy_to_user+0x31/0xb0 [ 124.268826][ T7243] simple_read_from_buffer+0xca/0x150 [ 124.268859][ T7243] proc_fail_nth_read+0x1e9/0x250 [ 124.268890][ T7243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.268922][ T7243] ? rw_verify_area+0x243/0x630 [ 124.268946][ T7243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.268976][ T7243] vfs_read+0x1f8/0xb40 [ 124.269001][ T7243] ? fdget_pos+0x254/0x320 [ 124.269021][ T7243] ? __pfx___mutex_lock+0x10/0x10 [ 124.269044][ T7243] ? __pfx_vfs_read+0x10/0x10 [ 124.269065][ T7243] ? do_sys_openat2+0x17a/0x1d0 [ 124.269088][ T7243] ? __fget_files+0x2a/0x410 [ 124.269109][ T7243] ? __fget_files+0x395/0x410 [ 124.269127][ T7243] ? __fget_files+0x2a/0x410 [ 124.269154][ T7243] ksys_read+0x18f/0x2b0 [ 124.269180][ T7243] ? __pfx_ksys_read+0x10/0x10 [ 124.269203][ T7243] ? do_syscall_64+0x100/0x230 [ 124.269228][ T7243] ? do_syscall_64+0xb6/0x230 [ 124.269254][ T7243] do_syscall_64+0xf3/0x230 [ 124.269277][ T7243] ? clear_bhb_loop+0x35/0x90 [ 124.269305][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.269330][ T7243] RIP: 0033:0x7fd12958b7fc [ 124.269346][ T7243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.269360][ T7243] RSP: 002b:00007fd12a452030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.269380][ T7243] RAX: ffffffffffffffda RBX: 00007fd1297a5fa0 RCX: 00007fd12958b7fc [ 124.269393][ T7243] RDX: 000000000000000f RSI: 00007fd12a4520a0 RDI: 0000000000000006 [ 124.269404][ T7243] RBP: 00007fd12a452090 R08: 0000000000000000 R09: 0000000000000000 [ 124.269414][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.269424][ T7243] R13: 0000000000000000 R14: 00007fd1297a5fa0 R15: 00007ffe4777fad8 [ 124.269451][ T7243] [ 124.272769][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 124.295363][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.1.343 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 124.295392][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.295405][ T7247] Call Trace: [ 124.295413][ T7247] [ 124.295422][ T7247] dump_stack_lvl+0x241/0x360 [ 124.295453][ T7247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.295476][ T7247] ? __pfx__printk+0x10/0x10 [ 124.295531][ T7247] should_fail_ex+0x40a/0x550 [ 124.295562][ T7247] should_failslab+0xac/0x100 [ 124.295598][ T7247] __kmalloc_noprof+0xdd/0x4c0 [ 124.295621][ T7247] ? ___neigh_create+0x72b/0x2320 [ 124.295647][ T7247] ___neigh_create+0x72b/0x2320 [ 124.295675][ T7247] ? neigh_lookup+0xb9/0x700 [ 124.295696][ T7247] ? __pfx_neigh_lookup+0x10/0x10 [ 124.295728][ T7247] neigh_add+0xb19/0xdc0 [ 124.295765][ T7247] ? __pfx_neigh_add+0x10/0x10 [ 124.295818][ T7247] ? __pfx_neigh_add+0x10/0x10 [ 124.295846][ T7247] rtnetlink_rcv_msg+0x73f/0xcf0 [ 124.295868][ T7247] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 124.295897][ T7247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.295932][ T7247] ? ref_tracker_free+0x643/0x7e0 [ 124.295964][ T7247] netlink_rcv_skb+0x1e3/0x430 [ 124.295998][ T7247] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.296023][ T7247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.296080][ T7247] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.296126][ T7247] netlink_unicast+0x7f6/0x990 [ 124.296162][ T7247] ? __pfx_netlink_unicast+0x10/0x10 [ 124.296187][ T7247] ? __virt_addr_valid+0x45f/0x530 [ 124.296218][ T7247] ? __phys_addr_symbol+0x2f/0x70 [ 124.296248][ T7247] ? __check_object_size+0x47a/0x730 [ 124.296285][ T7247] netlink_sendmsg+0x8e4/0xcb0 [ 124.296329][ T7247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.296365][ T7247] ? aa_sock_msg_perm+0x91/0x160 [ 124.296399][ T7247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.296428][ T7247] __sock_sendmsg+0x221/0x270 [ 124.296456][ T7247] ____sys_sendmsg+0x52a/0x7e0 [ 124.296497][ T7247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.296533][ T7247] ? __fget_files+0x2a/0x410 [ 124.296558][ T7247] ? __fget_files+0x2a/0x410 [ 124.296589][ T7247] __sys_sendmsg+0x269/0x350 [ 124.296626][ T7247] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.296670][ T7247] ? do_sys_openat2+0x17a/0x1d0 [ 124.296720][ T7247] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.296751][ T7247] ? do_syscall_64+0x100/0x230 [ 124.296781][ T7247] ? do_syscall_64+0xb6/0x230 [ 124.296810][ T7247] do_syscall_64+0xf3/0x230 [ 124.296836][ T7247] ? clear_bhb_loop+0x35/0x90 [ 124.296868][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.296894][ T7247] RIP: 0033:0x7f137a98cde9 [ 124.296911][ T7247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.296926][ T7247] RSP: 002b:00007f137b84b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.296947][ T7247] RAX: ffffffffffffffda RBX: 00007f137aba5fa0 RCX: 00007f137a98cde9 [ 124.296961][ T7247] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 124.296973][ T7247] RBP: 00007f137b84b090 R08: 0000000000000000 R09: 0000000000000000 [ 124.296984][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.296995][ T7247] R13: 0000000000000000 R14: 00007f137aba5fa0 R15: 00007fff5f73e568 [ 124.297025][ T7247] [ 125.551508][ T7324] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 125.670438][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 125.763702][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.822811][ T7324] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.879991][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.354'. [ 125.925358][ T7325] lo speed is unknown, defaulting to 1000 [ 126.158294][ T7346] veth1_to_team: entered promiscuous mode [ 126.278938][ T7346] veth1_to_team: left promiscuous mode [ 126.321772][ T7365] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 126.384548][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 126.564205][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 126.856142][ T7386] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 126.903886][ T7382] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 127.331985][ T7406] FAULT_INJECTION: forcing a failure. [ 127.331985][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.425267][ T7406] CPU: 0 UID: 0 PID: 7406 Comm: syz.1.369 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 127.425297][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 127.425309][ T7406] Call Trace: [ 127.425317][ T7406] [ 127.425325][ T7406] dump_stack_lvl+0x241/0x360 [ 127.425356][ T7406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.425379][ T7406] ? __pfx__printk+0x10/0x10 [ 127.425419][ T7406] ? snprintf+0xda/0x120 [ 127.425442][ T7406] should_fail_ex+0x40a/0x550 [ 127.425470][ T7406] _copy_to_user+0x31/0xb0 [ 127.425494][ T7406] simple_read_from_buffer+0xca/0x150 [ 127.425530][ T7406] proc_fail_nth_read+0x1e9/0x250 [ 127.425566][ T7406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.425602][ T7406] ? rw_verify_area+0x243/0x630 [ 127.425628][ T7406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.425662][ T7406] vfs_read+0x1f8/0xb40 [ 127.425690][ T7406] ? fdget_pos+0x254/0x320 [ 127.425713][ T7406] ? __pfx___mutex_lock+0x10/0x10 [ 127.425740][ T7406] ? __pfx_vfs_read+0x10/0x10 [ 127.425764][ T7406] ? do_sys_openat2+0x17a/0x1d0 [ 127.425790][ T7406] ? __fget_files+0x2a/0x410 [ 127.425813][ T7406] ? __fget_files+0x395/0x410 [ 127.425833][ T7406] ? __fget_files+0x2a/0x410 [ 127.425865][ T7406] ksys_read+0x18f/0x2b0 [ 127.425894][ T7406] ? __pfx_ksys_read+0x10/0x10 [ 127.425922][ T7406] ? do_syscall_64+0x100/0x230 [ 127.425952][ T7406] ? do_syscall_64+0xb6/0x230 [ 127.425982][ T7406] do_syscall_64+0xf3/0x230 [ 127.426009][ T7406] ? clear_bhb_loop+0x35/0x90 [ 127.426041][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.426069][ T7406] RIP: 0033:0x7f137a98b7fc [ 127.426113][ T7406] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.426129][ T7406] RSP: 002b:00007f137b84b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.426150][ T7406] RAX: ffffffffffffffda RBX: 00007f137aba5fa0 RCX: 00007f137a98b7fc [ 127.426165][ T7406] RDX: 000000000000000f RSI: 00007f137b84b0a0 RDI: 0000000000000006 [ 127.426176][ T7406] RBP: 00007f137b84b090 R08: 0000000000000000 R09: 0000000000000000 [ 127.426188][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.426199][ T7406] R13: 0000000000000000 R14: 00007f137aba5fa0 R15: 00007fff5f73e568 [ 127.426230][ T7406] [ 127.757124][ T7430] __nla_validate_parse: 1 callbacks suppressed [ 127.757142][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 127.879930][ T7433] x_tables: duplicate underflow at hook 2 [ 128.279215][ T7443] vlan3: entered promiscuous mode [ 128.302192][ T7443] vlan3: entered allmulticast mode [ 128.629603][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 128.784792][ T7477] netlink: 'syz.3.386': attribute type 12 has an invalid length. [ 128.797287][ T7480] netlink: 332 bytes leftover after parsing attributes in process `syz.0.387'. [ 128.828069][ T7480] netlink: 104 bytes leftover after parsing attributes in process `syz.0.387'. [ 128.858682][ T7480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.387'. [ 128.882771][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'. [ 129.357065][ T7505] lo speed is unknown, defaulting to 1000 [ 129.499136][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.396'. [ 129.515162][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 129.805009][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 130.707554][ T7539] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 130.829090][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 130.964660][ T7600] af_packet: tpacket_rcv: packet too big, clamped from 4160 to 3952. macoff=96 [ 131.092231][ T7610] IPv6: Can't replace route, no match found [ 131.436327][ T7624] lo speed is unknown, defaulting to 1000 [ 131.589807][ T7632] netlink: 'syz.0.423': attribute type 3 has an invalid length. [ 131.607832][ T7632] netlink: 'syz.0.423': attribute type 3 has an invalid length. [ 131.658574][ T7642] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 132.960188][ T7726] xt_NFQUEUE: number of total queues is 0 [ 132.972775][ T7727] __nla_validate_parse: 7 callbacks suppressed [ 132.972793][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 132.982578][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 133.016843][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.035686][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 133.106732][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 133.604658][ T7755] x_tables: duplicate underflow at hook 1 [ 133.610643][ T7751] tipc: Started in network mode [ 133.633269][ T7751] tipc: Node identity 7, cluster identity 4711 [ 133.644887][ T7751] tipc: Node number set to 7 [ 133.797400][ T7758] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 133.865376][ T7769] lo: left allmulticast mode [ 133.880805][ T7769] tunl0: left allmulticast mode [ 133.898674][ T7769] gre0: left allmulticast mode [ 133.962801][ T7769] gretap0: left allmulticast mode [ 134.006237][ T7769] erspan0: left allmulticast mode [ 134.055862][ T7780] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 134.060687][ T7769] ip_vti0: left allmulticast mode [ 134.080796][ T7769] ip6_vti0: left allmulticast mode [ 134.091390][ T7769] sit0: left allmulticast mode [ 134.109212][ T7769] ip6tnl0: left allmulticast mode [ 134.130456][ T7769] ip6gre0: left allmulticast mode [ 134.168085][ T7769] syz_tun: left allmulticast mode [ 134.187274][ T7769] ip6gretap0: left allmulticast mode [ 134.196272][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.204006][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.220564][ T7769] bridge0: left allmulticast mode [ 134.230695][ T7769] vcan0: left allmulticast mode [ 134.240319][ T7769] bond0: left allmulticast mode [ 134.245744][ T7769] bond_slave_0: left allmulticast mode [ 134.251441][ T7769] bond_slave_1: left allmulticast mode [ 134.264237][ T7769] team0: left allmulticast mode [ 134.269782][ T7769] team_slave_0: left allmulticast mode [ 134.275549][ T7769] team_slave_1: left allmulticast mode [ 134.287802][ T7769] dummy0: left allmulticast mode [ 134.295994][ T7769] nlmon0: left allmulticast mode [ 134.302808][ T7769] caif0: left allmulticast mode [ 134.414265][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.457126][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.590484][ T7769] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.608448][ T7769] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.627409][ T7769] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.648077][ T7769] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.747422][ T7780] team0: Device ipvlan1 failed to register rx_handler [ 135.132869][ T7817] netlink: 13 bytes leftover after parsing attributes in process `syz.3.455'. [ 135.193239][ T7818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.455'. [ 135.286303][ T7820] FAULT_INJECTION: forcing a failure. [ 135.286303][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 135.311953][ T7820] CPU: 0 UID: 0 PID: 7820 Comm: syz.4.458 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 135.311980][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 135.311992][ T7820] Call Trace: [ 135.311999][ T7820] [ 135.312007][ T7820] dump_stack_lvl+0x241/0x360 [ 135.312035][ T7820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.312055][ T7820] ? __pfx__printk+0x10/0x10 [ 135.312089][ T7820] ? __kmalloc_cache_noprof+0x48/0x390 [ 135.312112][ T7820] ? __pfx___might_resched+0x10/0x10 [ 135.312142][ T7820] should_fail_ex+0x40a/0x550 [ 135.312168][ T7820] should_failslab+0xac/0x100 [ 135.312201][ T7820] __kmalloc_cache_noprof+0x70/0x390 [ 135.312221][ T7820] ? rtnl_newlink+0x12e/0x2210 [ 135.312247][ T7820] rtnl_newlink+0x12e/0x2210 [ 135.312277][ T7820] ? __lock_acquire+0x1397/0x2100 [ 135.312305][ T7820] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.312345][ T7820] ? __pfx_validate_chain+0x10/0x10 [ 135.312385][ T7820] ? validate_chain+0x11e/0x5920 [ 135.312403][ T7820] ? __pfx_lock_acquire+0x10/0x10 [ 135.312434][ T7820] ? __pfx_lock_release+0x10/0x10 [ 135.312466][ T7820] ? __pfx_validate_chain+0x10/0x10 [ 135.312487][ T7820] ? mark_lock+0x9a/0x360 [ 135.312518][ T7820] ? __lock_acquire+0x1397/0x2100 [ 135.312575][ T7820] ? rcu_read_unlock+0x87/0xa0 [ 135.312595][ T7820] ? __pfx_lock_release+0x10/0x10 [ 135.312638][ T7820] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.312662][ T7820] rtnetlink_rcv_msg+0x791/0xcf0 [ 135.312683][ T7820] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 135.312706][ T7820] ? __lock_acquire+0x1397/0x2100 [ 135.312736][ T7820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.312782][ T7820] netlink_rcv_skb+0x1e3/0x430 [ 135.312829][ T7820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.312852][ T7820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.312903][ T7820] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.312936][ T7820] netlink_unicast+0x7f6/0x990 [ 135.312971][ T7820] ? __pfx_netlink_unicast+0x10/0x10 [ 135.312996][ T7820] ? __virt_addr_valid+0x45f/0x530 [ 135.313026][ T7820] ? __phys_addr_symbol+0x2f/0x70 [ 135.313053][ T7820] ? __check_object_size+0x47a/0x730 [ 135.313087][ T7820] netlink_sendmsg+0x8e4/0xcb0 [ 135.313128][ T7820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.313161][ T7820] ? aa_sock_msg_perm+0x91/0x160 [ 135.313192][ T7820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.313220][ T7820] __sock_sendmsg+0x221/0x270 [ 135.313247][ T7820] ____sys_sendmsg+0x52a/0x7e0 [ 135.313284][ T7820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.313312][ T7820] ? __fget_files+0x2a/0x410 [ 135.313337][ T7820] ? __fget_files+0x2a/0x410 [ 135.313366][ T7820] __sys_sendmsg+0x269/0x350 [ 135.313402][ T7820] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.313445][ T7820] ? do_sys_openat2+0x17a/0x1d0 [ 135.313492][ T7820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.313520][ T7820] ? do_syscall_64+0x100/0x230 [ 135.313547][ T7820] ? do_syscall_64+0xb6/0x230 [ 135.313575][ T7820] do_syscall_64+0xf3/0x230 [ 135.313610][ T7820] ? clear_bhb_loop+0x35/0x90 [ 135.313658][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.313684][ T7820] RIP: 0033:0x7f172a78cde9 [ 135.313702][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.313718][ T7820] RSP: 002b:00007f172b5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.313739][ T7820] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78cde9 [ 135.313754][ T7820] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 135.313772][ T7820] RBP: 00007f172b5df090 R08: 0000000000000000 R09: 0000000000000000 [ 135.313795][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.313806][ T7820] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 135.313832][ T7820] [ 135.737356][ T7822] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.459'. [ 135.866969][ T7824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.460'. [ 135.876755][ T7824] netlink: 'syz.0.460': attribute type 3 has an invalid length. [ 135.884448][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 136.090221][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 136.223390][ T7822] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 136.264457][ T7837] vlan2: entered allmulticast mode [ 136.270949][ T7837] batadv0: entered allmulticast mode [ 136.278665][ T7837] batadv0: left allmulticast mode [ 136.339296][ T7833] lo speed is unknown, defaulting to 1000 [ 136.647213][ T7858] netlink: 'syz.2.471': attribute type 58 has an invalid length. [ 136.759401][ T7864] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 136.812235][ T7864] FAULT_INJECTION: forcing a failure. [ 136.812235][ T7864] name failslab, interval 1, probability 0, space 0, times 0 [ 136.846245][ T7864] CPU: 0 UID: 0 PID: 7864 Comm: syz.3.472 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 136.846273][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.846285][ T7864] Call Trace: [ 136.846292][ T7864] [ 136.846300][ T7864] dump_stack_lvl+0x241/0x360 [ 136.846329][ T7864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.846350][ T7864] ? __pfx__printk+0x10/0x10 [ 136.846394][ T7864] should_fail_ex+0x40a/0x550 [ 136.846432][ T7864] should_failslab+0xac/0x100 [ 136.846466][ T7864] kmem_cache_alloc_node_noprof+0x77/0x380 [ 136.846488][ T7864] ? __alloc_skb+0x1c3/0x440 [ 136.846513][ T7864] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 136.846542][ T7864] __alloc_skb+0x1c3/0x440 [ 136.846575][ T7864] ? __pfx___alloc_skb+0x10/0x10 [ 136.846603][ T7864] ? if_nlmsg_size+0x755/0x7a0 [ 136.846631][ T7864] ? if_nlmsg_size+0x540/0x7a0 [ 136.846663][ T7864] rtmsg_ifinfo_build_skb+0x84/0x260 [ 136.846697][ T7864] ? __local_bh_enable_ip+0x168/0x200 [ 136.846722][ T7864] rtmsg_ifinfo+0x91/0x1b0 [ 136.846759][ T7864] __dev_notify_flags+0xf7/0x400 [ 136.846785][ T7864] ? dev_set_rx_mode+0xb8/0x2e0 [ 136.846815][ T7864] ? __pfx___dev_notify_flags+0x10/0x10 [ 136.846840][ T7864] ? __dev_change_flags+0x515/0x6f0 [ 136.846871][ T7864] ? __pfx___dev_change_flags+0x10/0x10 [ 136.846896][ T7864] ? validate_linkmsg+0x828/0xa40 [ 136.846929][ T7864] ? mark_lock+0x9a/0x360 [ 136.846957][ T7864] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.846989][ T7864] ? __pfx_validate_linkmsg+0x10/0x10 [ 136.847021][ T7864] dev_change_flags+0xf0/0x1a0 [ 136.847053][ T7864] do_setlink+0xc90/0x4210 [ 136.847093][ T7864] ? mark_lock+0x9a/0x360 [ 136.847125][ T7864] ? __pfx_do_setlink+0x10/0x10 [ 136.847147][ T7864] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.847177][ T7864] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.847210][ T7864] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 136.847232][ T7864] ? lockdep_hardirqs_on+0x99/0x150 [ 136.847258][ T7864] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 136.847284][ T7864] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 136.847311][ T7864] ? rcu_is_watching+0x15/0xb0 [ 136.847334][ T7864] ? __mutex_lock+0xba3/0x1010 [ 136.847361][ T7864] ? __mutex_lock+0x602/0x1010 [ 136.847393][ T7864] ? rtnl_newlink+0xce2/0x2210 [ 136.847425][ T7864] ? __pfx___mutex_lock+0x10/0x10 [ 136.847460][ T7864] ? ns_capable+0x8a/0xf0 [ 136.847483][ T7864] ? rtnl_link_get_net_capable+0x168/0x340 [ 136.847512][ T7864] rtnl_newlink+0x1bb6/0x2210 [ 136.847545][ T7864] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.847567][ T7864] ? __pfx_validate_chain+0x10/0x10 [ 136.847606][ T7864] ? validate_chain+0x11e/0x5920 [ 136.847624][ T7864] ? __pfx_lock_acquire+0x10/0x10 [ 136.847654][ T7864] ? __pfx_lock_release+0x10/0x10 [ 136.847684][ T7864] ? __pfx_validate_chain+0x10/0x10 [ 136.847705][ T7864] ? mark_lock+0x9a/0x360 [ 136.847738][ T7864] ? __lock_acquire+0x1397/0x2100 [ 136.847797][ T7864] ? __pfx_lock_release+0x10/0x10 [ 136.847840][ T7864] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.847864][ T7864] rtnetlink_rcv_msg+0x791/0xcf0 [ 136.847884][ T7864] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 136.847908][ T7864] ? __lock_acquire+0x1397/0x2100 [ 136.847934][ T7864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.847973][ T7864] netlink_rcv_skb+0x1e3/0x430 [ 136.848005][ T7864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.848029][ T7864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.848082][ T7864] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.848115][ T7864] netlink_unicast+0x7f6/0x990 [ 136.848152][ T7864] ? __pfx_netlink_unicast+0x10/0x10 [ 136.848176][ T7864] ? __virt_addr_valid+0x45f/0x530 [ 136.848205][ T7864] ? __phys_addr_symbol+0x2f/0x70 [ 136.848233][ T7864] ? __check_object_size+0x47a/0x730 [ 136.848270][ T7864] netlink_sendmsg+0x8e4/0xcb0 [ 136.848314][ T7864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.848349][ T7864] ? aa_sock_msg_perm+0x91/0x160 [ 136.848380][ T7864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.848420][ T7864] __sock_sendmsg+0x221/0x270 [ 136.848448][ T7864] ____sys_sendmsg+0x52a/0x7e0 [ 136.848508][ T7864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.848538][ T7864] ? __fget_files+0x2a/0x410 [ 136.848563][ T7864] ? __fget_files+0x2a/0x410 [ 136.848594][ T7864] __sys_sendmsg+0x269/0x350 [ 136.848630][ T7864] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.848687][ T7864] ? do_sys_openat2+0x17a/0x1d0 [ 136.848736][ T7864] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.848766][ T7864] ? do_syscall_64+0x100/0x230 [ 136.848793][ T7864] ? do_syscall_64+0xb6/0x230 [ 136.848840][ T7864] do_syscall_64+0xf3/0x230 [ 136.848866][ T7864] ? clear_bhb_loop+0x35/0x90 [ 136.848900][ T7864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.848939][ T7864] RIP: 0033:0x7fb3a778cde9 [ 136.848957][ T7864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.848973][ T7864] RSP: 002b:00007fb3a8545038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.848995][ T7864] RAX: ffffffffffffffda RBX: 00007fb3a79a5fa0 RCX: 00007fb3a778cde9 [ 136.849010][ T7864] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 136.849021][ T7864] RBP: 00007fb3a8545090 R08: 0000000000000000 R09: 0000000000000000 [ 136.849033][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.849044][ T7864] R13: 0000000000000000 R14: 00007fb3a79a5fa0 R15: 00007ffc83c779a8 [ 136.849073][ T7864] [ 136.850856][ T7864] team0: Device ipvlan1 failed to register rx_handler [ 137.409914][ T7866] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 137.492968][ T7871] lo speed is unknown, defaulting to 1000 [ 137.968713][ T7895] netlink: 'syz.1.482': attribute type 10 has an invalid length. [ 138.004692][ T7895] team0: Device ipvlan1 failed to register rx_handler [ 138.093432][ T7899] bridge2: entered promiscuous mode [ 138.127465][ T7899] bridge2: entered allmulticast mode [ 138.181052][ T7899] team0: Port device bridge2 added [ 138.256766][ T7909] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 138.294838][ T7909] FAULT_INJECTION: forcing a failure. [ 138.294838][ T7909] name failslab, interval 1, probability 0, space 0, times 0 [ 138.308366][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.0.486 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 138.308392][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.308404][ T7909] Call Trace: [ 138.308411][ T7909] [ 138.308419][ T7909] dump_stack_lvl+0x241/0x360 [ 138.308449][ T7909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.308470][ T7909] ? __pfx__printk+0x10/0x10 [ 138.308504][ T7909] ? __kmalloc_noprof+0xb5/0x4c0 [ 138.308526][ T7909] ? __pfx___might_resched+0x10/0x10 [ 138.308556][ T7909] should_fail_ex+0x40a/0x550 [ 138.308583][ T7909] should_failslab+0xac/0x100 [ 138.308617][ T7909] __kmalloc_noprof+0xdd/0x4c0 [ 138.308637][ T7909] ? team_add_slave+0x6ad/0x2730 [ 138.308672][ T7909] team_add_slave+0x6ad/0x2730 [ 138.308719][ T7909] ? __pfx___dev_notify_flags+0x10/0x10 [ 138.308744][ T7909] ? __dev_change_flags+0x515/0x6f0 [ 138.308769][ T7909] ? __pfx_team_add_slave+0x10/0x10 [ 138.308802][ T7909] ? __pfx___dev_change_flags+0x10/0x10 [ 138.308828][ T7909] ? validate_linkmsg+0x828/0xa40 [ 138.308855][ T7909] ? mark_lock+0x9a/0x360 [ 138.308880][ T7909] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.308913][ T7909] ? __pfx_validate_linkmsg+0x10/0x10 [ 138.308946][ T7909] ? mutex_is_locked+0x17/0x50 [ 138.308979][ T7909] do_setlink+0xe40/0x4210 [ 138.309021][ T7909] ? mark_lock+0x9a/0x360 [ 138.309052][ T7909] ? __pfx_do_setlink+0x10/0x10 [ 138.309074][ T7909] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.309104][ T7909] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.309137][ T7909] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 138.309158][ T7909] ? lockdep_hardirqs_on+0x99/0x150 [ 138.309183][ T7909] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 138.309205][ T7909] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 138.309232][ T7909] ? rcu_is_watching+0x15/0xb0 [ 138.309255][ T7909] ? __mutex_lock+0xba3/0x1010 [ 138.309283][ T7909] ? __mutex_lock+0x602/0x1010 [ 138.309327][ T7909] ? rtnl_newlink+0xce2/0x2210 [ 138.309369][ T7909] ? __pfx___mutex_lock+0x10/0x10 [ 138.309404][ T7909] ? ns_capable+0x8a/0xf0 [ 138.309432][ T7909] ? rtnl_link_get_net_capable+0x168/0x340 [ 138.309461][ T7909] rtnl_newlink+0x1bb6/0x2210 [ 138.309498][ T7909] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.309518][ T7909] ? __netlink_deliver_tap+0x56b/0x7f0 [ 138.309549][ T7909] ? __pfx_validate_chain+0x10/0x10 [ 138.309566][ T7909] ? __sock_sendmsg+0x221/0x270 [ 138.309588][ T7909] ? ____sys_sendmsg+0x52a/0x7e0 [ 138.309617][ T7909] ? __sys_sendmsg+0x269/0x350 [ 138.309645][ T7909] ? do_syscall_64+0xf3/0x230 [ 138.309670][ T7909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.309721][ T7909] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.309751][ T7909] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.309787][ T7909] ? mark_lock+0x9a/0x360 [ 138.309821][ T7909] ? __lock_acquire+0x1397/0x2100 [ 138.309884][ T7909] ? __pfx_lock_release+0x10/0x10 [ 138.309929][ T7909] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.309967][ T7909] rtnetlink_rcv_msg+0x791/0xcf0 [ 138.309987][ T7909] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 138.310014][ T7909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.310045][ T7909] ? ref_tracker_free+0x643/0x7e0 [ 138.310075][ T7909] netlink_rcv_skb+0x1e3/0x430 [ 138.310107][ T7909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.310132][ T7909] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.310187][ T7909] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.310220][ T7909] netlink_unicast+0x7f6/0x990 [ 138.310257][ T7909] ? __pfx_netlink_unicast+0x10/0x10 [ 138.310282][ T7909] ? __virt_addr_valid+0x45f/0x530 [ 138.310323][ T7909] ? __phys_addr_symbol+0x2f/0x70 [ 138.310351][ T7909] ? __check_object_size+0x47a/0x730 [ 138.310387][ T7909] netlink_sendmsg+0x8e4/0xcb0 [ 138.310430][ T7909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.310465][ T7909] ? aa_sock_msg_perm+0x91/0x160 [ 138.310497][ T7909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.310525][ T7909] __sock_sendmsg+0x221/0x270 [ 138.310552][ T7909] ____sys_sendmsg+0x52a/0x7e0 [ 138.310592][ T7909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.310621][ T7909] ? __fget_files+0x2a/0x410 [ 138.310645][ T7909] ? __fget_files+0x2a/0x410 [ 138.310676][ T7909] __sys_sendmsg+0x269/0x350 [ 138.310713][ T7909] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.310759][ T7909] ? do_sys_openat2+0x17a/0x1d0 [ 138.310810][ T7909] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.310839][ T7909] ? do_syscall_64+0x100/0x230 [ 138.310868][ T7909] ? do_syscall_64+0xb6/0x230 [ 138.310897][ T7909] do_syscall_64+0xf3/0x230 [ 138.310923][ T7909] ? clear_bhb_loop+0x35/0x90 [ 138.310954][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.310980][ T7909] RIP: 0033:0x7fda1178cde9 [ 138.310997][ T7909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.311012][ T7909] RSP: 002b:00007fda125e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.311051][ T7909] RAX: ffffffffffffffda RBX: 00007fda119a5fa0 RCX: 00007fda1178cde9 [ 138.311066][ T7909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.311078][ T7909] RBP: 00007fda125e7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.311090][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.311102][ T7909] R13: 0000000000000000 R14: 00007fda119a5fa0 R15: 00007fff7da08cd8 [ 138.311134][ T7909] [ 138.929192][ T7912] bridge_slave_0: left allmulticast mode [ 138.936651][ T7912] bridge_slave_0: left promiscuous mode [ 138.942388][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.972478][ T7912] bridge_slave_1: left allmulticast mode [ 138.980361][ T7912] bridge_slave_1: left promiscuous mode [ 138.987303][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.011958][ T7912] bond0: (slave bond_slave_0): Releasing backup interface [ 139.036599][ T7912] bond0: (slave bond_slave_1): Releasing backup interface [ 139.051861][ T7912] team0: Port device team_slave_0 removed [ 139.062907][ T7912] team0: Port device team_slave_1 removed [ 139.074589][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.084093][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.105661][ T11] syzkaller0: tun_net_xmit 76 [ 139.110969][ T11] syzkaller0: tun_net_xmit 48 [ 139.125618][ T9] syzkaller0: tun_net_xmit 76 [ 139.137355][ T7918] team0: Mode changed to "loadbalance" [ 139.239009][ T7929] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 139.489226][ T7933] netlink: 'syz.3.492': attribute type 2 has an invalid length. [ 139.504315][ T7933] __nla_validate_parse: 7 callbacks suppressed [ 139.504335][ T7933] netlink: 92 bytes leftover after parsing attributes in process `syz.3.492'. [ 140.914612][ T7939] sctp: [Deprecated]: syz.0.493 (pid 7939) Use of int in maxseg socket option. [ 140.914612][ T7939] Use struct sctp_assoc_value instead [ 141.126220][ T7943] netlink: 56 bytes leftover after parsing attributes in process `syz.1.495'. [ 141.142969][ T7943] netlink: 576 bytes leftover after parsing attributes in process `syz.1.495'. [ 141.222321][ T7947] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 141.316567][ T7947] netlink: 96 bytes leftover after parsing attributes in process `syz.1.495'. [ 141.406908][ T7964] netlink: 236 bytes leftover after parsing attributes in process `syz.2.498'. [ 141.603293][ T7973] netlink: 'syz.0.502': attribute type 12 has an invalid length. [ 141.654883][ T7971] lo speed is unknown, defaulting to 1000 [ 141.860408][ T7983] x_tables: duplicate entry at hook 2 [ 142.065762][ T7984] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 142.086850][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'. [ 142.684285][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 142.824437][ T8019] tipc: Started in network mode [ 142.852107][ T8019] tipc: Node identity 6, cluster identity 4711 [ 142.902894][ T8019] tipc: Node number set to 6 [ 143.375992][ T8060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 143.440754][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 143.494665][ T8069] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 144.281659][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 145.622406][ T8069] team0: Device ipvlan1 failed to register rx_handler [ 145.632714][ T8076] bridge0: port 1(gretap0) entered blocking state [ 145.643597][ T8076] bridge0: port 1(gretap0) entered disabled state [ 145.655948][ T8076] gretap0: entered allmulticast mode [ 145.662614][ T8076] gretap0: entered promiscuous mode [ 145.699501][ T8096] hsr0: entered promiscuous mode [ 145.741975][ T8101] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 145.764995][ T8078] lo speed is unknown, defaulting to 1000 [ 145.809042][ T8095] hsr0: left promiscuous mode [ 145.886757][ T8106] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 145.911176][ T8107] netlink: 64 bytes leftover after parsing attributes in process `syz.3.530'. [ 146.148986][ T8122] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 146.164396][ T8122] FAULT_INJECTION: forcing a failure. [ 146.164396][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 146.202432][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.4.534 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 146.202460][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.202483][ T8122] Call Trace: [ 146.202490][ T8122] [ 146.202499][ T8122] dump_stack_lvl+0x241/0x360 [ 146.202529][ T8122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.202551][ T8122] ? __pfx__printk+0x10/0x10 [ 146.202585][ T8122] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 146.202610][ T8122] ? __pfx___might_resched+0x10/0x10 [ 146.202639][ T8122] should_fail_ex+0x40a/0x550 [ 146.202666][ T8122] should_failslab+0xac/0x100 [ 146.202699][ T8122] kmem_cache_alloc_node_noprof+0x77/0x380 [ 146.202721][ T8122] ? __alloc_skb+0x1c3/0x440 [ 146.202754][ T8122] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 146.202785][ T8122] __alloc_skb+0x1c3/0x440 [ 146.202817][ T8122] ? __pfx___alloc_skb+0x10/0x10 [ 146.202847][ T8122] ? if_nlmsg_size+0x755/0x7a0 [ 146.202877][ T8122] ? if_nlmsg_size+0x540/0x7a0 [ 146.202911][ T8122] rtmsg_ifinfo_build_skb+0x84/0x260 [ 146.202951][ T8122] rtmsg_ifinfo+0x91/0x1b0 [ 146.202988][ T8122] dev_open+0xf2/0x1b0 [ 146.203011][ T8122] ? __pfx_dev_open+0x10/0x10 [ 146.203034][ T8122] ? trace_kmalloc+0x1f/0xd0 [ 146.203053][ T8122] ? team_add_slave+0x879/0x2730 [ 146.203089][ T8122] team_add_slave+0x9af/0x2730 [ 146.203137][ T8122] ? __pfx___dev_notify_flags+0x10/0x10 [ 146.203163][ T8122] ? __dev_change_flags+0x515/0x6f0 [ 146.203189][ T8122] ? __pfx_team_add_slave+0x10/0x10 [ 146.203223][ T8122] ? __pfx___dev_change_flags+0x10/0x10 [ 146.203248][ T8122] ? validate_linkmsg+0x828/0xa40 [ 146.203274][ T8122] ? mark_lock+0x9a/0x360 [ 146.203301][ T8122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.203333][ T8122] ? __pfx_validate_linkmsg+0x10/0x10 [ 146.203368][ T8122] ? mutex_is_locked+0x17/0x50 [ 146.203401][ T8122] do_setlink+0xe40/0x4210 [ 146.203442][ T8122] ? mark_lock+0x9a/0x360 [ 146.203474][ T8122] ? __pfx_do_setlink+0x10/0x10 [ 146.203497][ T8122] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.203526][ T8122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.203560][ T8122] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 146.203582][ T8122] ? lockdep_hardirqs_on+0x99/0x150 [ 146.203607][ T8122] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 146.203629][ T8122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 146.203656][ T8122] ? rcu_is_watching+0x15/0xb0 [ 146.203680][ T8122] ? __mutex_lock+0xba3/0x1010 [ 146.203708][ T8122] ? __mutex_lock+0x602/0x1010 [ 146.203748][ T8122] ? rtnl_newlink+0xce2/0x2210 [ 146.203772][ T8122] ? __pfx___mutex_lock+0x10/0x10 [ 146.203807][ T8122] ? ns_capable+0x8a/0xf0 [ 146.203829][ T8122] ? rtnl_link_get_net_capable+0x168/0x340 [ 146.203857][ T8122] rtnl_newlink+0x1bb6/0x2210 [ 146.203892][ T8122] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.203914][ T8122] ? __pfx_validate_chain+0x10/0x10 [ 146.203953][ T8122] ? validate_chain+0x11e/0x5920 [ 146.203972][ T8122] ? __pfx_lock_acquire+0x10/0x10 [ 146.204002][ T8122] ? __pfx_lock_release+0x10/0x10 [ 146.204033][ T8122] ? __pfx_validate_chain+0x10/0x10 [ 146.204054][ T8122] ? mark_lock+0x9a/0x360 [ 146.204105][ T8122] ? __lock_acquire+0x1397/0x2100 [ 146.204168][ T8122] ? __pfx_lock_release+0x10/0x10 [ 146.204213][ T8122] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.204237][ T8122] rtnetlink_rcv_msg+0x791/0xcf0 [ 146.204258][ T8122] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 146.204282][ T8122] ? __lock_acquire+0x1397/0x2100 [ 146.204310][ T8122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.204362][ T8122] netlink_rcv_skb+0x1e3/0x430 [ 146.204393][ T8122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.204417][ T8122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.204471][ T8122] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.204504][ T8122] netlink_unicast+0x7f6/0x990 [ 146.204540][ T8122] ? __pfx_netlink_unicast+0x10/0x10 [ 146.204565][ T8122] ? __virt_addr_valid+0x45f/0x530 [ 146.204594][ T8122] ? __phys_addr_symbol+0x2f/0x70 [ 146.204622][ T8122] ? __check_object_size+0x47a/0x730 [ 146.204659][ T8122] netlink_sendmsg+0x8e4/0xcb0 [ 146.204727][ T8122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.204819][ T8122] ? aa_sock_msg_perm+0x91/0x160 [ 146.204851][ T8122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.204881][ T8122] __sock_sendmsg+0x221/0x270 [ 146.204909][ T8122] ____sys_sendmsg+0x52a/0x7e0 [ 146.204952][ T8122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.204980][ T8122] ? __fget_files+0x2a/0x410 [ 146.205004][ T8122] ? __fget_files+0x2a/0x410 [ 146.205034][ T8122] __sys_sendmsg+0x269/0x350 [ 146.205071][ T8122] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.205118][ T8122] ? do_sys_openat2+0x17a/0x1d0 [ 146.205169][ T8122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.205200][ T8122] ? do_syscall_64+0x100/0x230 [ 146.205230][ T8122] ? do_syscall_64+0xb6/0x230 [ 146.205259][ T8122] do_syscall_64+0xf3/0x230 [ 146.205285][ T8122] ? clear_bhb_loop+0x35/0x90 [ 146.205318][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.205343][ T8122] RIP: 0033:0x7f172a78cde9 [ 146.205361][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.205377][ T8122] RSP: 002b:00007f172b5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.205399][ T8122] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78cde9 [ 146.205414][ T8122] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 146.205426][ T8122] RBP: 00007f172b5df090 R08: 0000000000000000 R09: 0000000000000000 [ 146.205438][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.205449][ T8122] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 146.205480][ T8122] [ 146.766865][ T8122] team0: Device ipvlan1 failed to register rx_handler [ 146.776707][ T8128] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551607) [ 146.825903][ T8128] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 146.891911][ T8132] lo speed is unknown, defaulting to 1000 [ 147.017470][ T8140] netlink: 'syz.4.539': attribute type 4 has an invalid length. [ 147.100451][ T8144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 147.144189][ T8144] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.160801][ T8144] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.172615][ T8144] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.183666][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 147.202624][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 147.213688][ T8144] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.986334][ T8187] batadv1: entered promiscuous mode [ 148.000794][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.054222][ T8191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.553'. [ 148.162039][ T8196] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 148.190203][ T8196] netlink: 56 bytes leftover after parsing attributes in process `syz.1.553'. [ 148.584065][ T8205] lo speed is unknown, defaulting to 1000 [ 148.722266][ T8213] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 149.332489][ T8237] xt_hashlimit: max too large, truncated to 1048576 [ 149.376426][ T8237] No such timeout policy "syz1" [ 149.941068][ T8260] pim6reg: left allmulticast mode [ 150.141558][ T8265] IPv6: sit1: Disabled Multicast RS [ 150.171304][ T8265] sit1: entered allmulticast mode [ 150.427855][ T8284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.577'. [ 150.539472][ T7299] tipc: Subscription rejected, illegal request [ 150.691685][ T8276] lo speed is unknown, defaulting to 1000 [ 150.758269][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 151.217705][ T8314] lo speed is unknown, defaulting to 1000 [ 152.161440][ T8351] delete_channel: no stack [ 152.714855][ T8376] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 152.938483][ T8391] netlink: 248 bytes leftover after parsing attributes in process `syz.0.599'. [ 152.940065][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 153.114150][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 153.151200][ T8401] netlink: 6 bytes leftover after parsing attributes in process `syz.2.602'. [ 153.206998][ T8399] netlink: 'syz.1.603': attribute type 15 has an invalid length. [ 153.359542][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.604'. [ 153.368928][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.604'. [ 153.454900][ T8415] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.606'. [ 153.465244][ T8415] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.532056][ T8412] sctp: [Deprecated]: syz.4.604 (pid 8412) Use of int in maxseg socket option. [ 153.532056][ T8412] Use struct sctp_assoc_value instead [ 153.585163][ T8419] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 153.628605][ T8419] NCSI netlink: No device for ifindex 0 [ 153.876496][ T8430] netlink: 'syz.3.611': attribute type 21 has an invalid length. [ 153.894608][ T8430] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.218568][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.616'. [ 154.351832][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 154.469126][ T8466] netlink: 108 bytes leftover after parsing attributes in process `syz.3.619'. [ 154.810158][ T8486] delete_channel: no stack [ 154.864869][ T8486] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 155.256727][ T8502] lo speed is unknown, defaulting to 1000 [ 155.634645][ T8518] tipc: Enabled bearer , priority 0 [ 155.949829][ T8518] syzkaller0: entered promiscuous mode [ 156.000457][ T8518] syzkaller0: entered allmulticast mode [ 156.029526][ T8518] tipc: Resetting bearer [ 156.051257][ T8529] sch_fq: defrate 511 ignored. [ 156.132037][ T8510] netlink: 'syz.4.630': attribute type 11 has an invalid length. [ 156.149637][ T8510] x_tables: duplicate underflow at hook 3 [ 156.594333][ T8559] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 156.723445][ T8511] tipc: Resetting bearer [ 156.784973][ T5842] Bluetooth: hci3: link tx timeout [ 156.790382][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.802428][ T5842] Bluetooth: hci3: link tx timeout [ 156.808198][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.817419][ T5842] Bluetooth: hci3: link tx timeout [ 156.822692][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.831243][ T5842] Bluetooth: hci3: link tx timeout [ 156.837166][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.851651][ T5842] Bluetooth: hci3: link tx timeout [ 156.857340][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.865321][ T5842] Bluetooth: hci3: link tx timeout [ 156.870574][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.878701][ T5842] Bluetooth: hci3: link tx timeout [ 156.883930][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.892105][ T5842] Bluetooth: hci3: link tx timeout [ 156.897706][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.905518][ T5842] Bluetooth: hci3: link tx timeout [ 156.910748][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.918922][ T5842] Bluetooth: hci3: link tx timeout [ 156.924170][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.950085][ T8567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.017602][ T8587] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 158.211879][ T8589] __nla_validate_parse: 4 callbacks suppressed [ 158.211897][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.228417][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.238269][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.248502][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.857347][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 159.456689][ T8511] tipc: Disabling bearer [ 159.471770][ T8559] team0: Port device syz_tun added [ 159.501191][ T8586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.976365][ T8612] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 160.025148][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 160.200309][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 160.248862][ T8629] vlan2: entered allmulticast mode [ 160.297374][ T8632] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 160.323198][ T8632] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 160.568817][ T5924] IPVS: starting estimator thread 0... [ 160.580430][ T8645] netlink: 'syz.2.656': attribute type 39 has an invalid length. [ 160.601268][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 160.614612][ T8647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.658'. [ 160.658273][ T8652] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 160.690139][ T8654] IPVS: using max 20 ests per chain, 48000 per kthread [ 160.734910][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 161.123288][ T8680] netlink: 'syz.1.665': attribute type 7 has an invalid length. [ 161.133624][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 161.581210][ T8707] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 161.649102][ T8707] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 161.760734][ T8718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.785035][ T8718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.793300][ T8718] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.847650][ T8718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.981099][ T8718] netlink: 'syz.4.673': attribute type 4 has an invalid length. [ 162.097706][ T8738] FAULT_INJECTION: forcing a failure. [ 162.097706][ T8738] name failslab, interval 1, probability 0, space 0, times 0 [ 162.114154][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.3.676 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 162.114184][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 162.114196][ T8738] Call Trace: [ 162.114204][ T8738] [ 162.114212][ T8738] dump_stack_lvl+0x241/0x360 [ 162.114242][ T8738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.114264][ T8738] ? __pfx__printk+0x10/0x10 [ 162.114298][ T8738] ? __kmalloc_noprof+0xb5/0x4c0 [ 162.114321][ T8738] ? __pfx___might_resched+0x10/0x10 [ 162.114349][ T8738] should_fail_ex+0x40a/0x550 [ 162.114376][ T8738] should_failslab+0xac/0x100 [ 162.114411][ T8738] __kmalloc_noprof+0xdd/0x4c0 [ 162.114432][ T8738] ? security_sk_alloc+0x53/0x360 [ 162.114458][ T8738] security_sk_alloc+0x53/0x360 [ 162.114482][ T8738] sk_prot_alloc+0xfa/0x210 [ 162.114511][ T8738] ? sk_alloc+0x26/0x370 [ 162.114541][ T8738] sk_alloc+0x38/0x370 [ 162.114567][ T8738] ? bpf_test_init+0x15a/0x180 [ 162.114594][ T8738] ? bpf_ctx_init+0x162/0x1b0 [ 162.114624][ T8738] bpf_prog_test_run_skb+0x3b3/0x1830 [ 162.114653][ T8738] ? __pfx_lock_release+0x10/0x10 [ 162.114691][ T8738] ? __pfx___might_resched+0x10/0x10 [ 162.114721][ T8738] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 162.114749][ T8738] ? __fget_files+0x2a/0x410 [ 162.114775][ T8738] ? fput+0x21b/0x290 [ 162.114795][ T8738] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 162.114826][ T8738] bpf_prog_test_run+0x2e4/0x360 [ 162.114857][ T8738] __sys_bpf+0x48d/0x810 [ 162.114908][ T8738] ? __pfx___sys_bpf+0x10/0x10 [ 162.114950][ T8738] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.114981][ T8738] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.115011][ T8738] ? do_syscall_64+0x100/0x230 [ 162.115042][ T8738] __x64_sys_bpf+0x7c/0x90 [ 162.115065][ T8738] do_syscall_64+0xf3/0x230 [ 162.115091][ T8738] ? clear_bhb_loop+0x35/0x90 [ 162.115124][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.115151][ T8738] RIP: 0033:0x7fb3a778cde9 [ 162.115169][ T8738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.115187][ T8738] RSP: 002b:00007fb3a8545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.115208][ T8738] RAX: ffffffffffffffda RBX: 00007fb3a79a5fa0 RCX: 00007fb3a778cde9 [ 162.115223][ T8738] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 162.115236][ T8738] RBP: 00007fb3a8545090 R08: 0000000000000000 R09: 0000000000000000 [ 162.115248][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.115261][ T8738] R13: 0000000000000000 R14: 00007fb3a79a5fa0 R15: 00007ffc83c779a8 [ 162.115290][ T8738] [ 162.377076][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 162.687508][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 162.762638][ T8756] lo speed is unknown, defaulting to 1000 [ 163.843296][ T8818] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 163.869602][ T8818] __nla_validate_parse: 4 callbacks suppressed [ 163.869621][ T8818] netlink: 244 bytes leftover after parsing attributes in process `syz.1.689'. [ 164.153370][ T8840] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 164.331321][ T8854] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 164.355611][ T8854] team0: Device ipvlan1 failed to register rx_handler [ 164.393000][ T8854] geneve0: mtu less than device minimum [ 164.768136][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 164.783599][ T8881] Illegal XDP return value 4294967294 on prog (id 284) dev N/A, expect packet loss! [ 164.949631][ T8889] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.054005][ T8886] netlink: 'syz.4.706': attribute type 10 has an invalid length. [ 165.776300][ T8918] smc: net device bond0 applied user defined pnetid SYZ0 [ 165.787331][ T8922] FAULT_INJECTION: forcing a failure. [ 165.787331][ T8922] name failslab, interval 1, probability 0, space 0, times 0 [ 165.825901][ T8922] CPU: 1 UID: 0 PID: 8922 Comm: syz.4.717 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 165.825930][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.825944][ T8922] Call Trace: [ 165.825951][ T8922] [ 165.825960][ T8922] dump_stack_lvl+0x241/0x360 [ 165.825991][ T8922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.826013][ T8922] ? __pfx__printk+0x10/0x10 [ 165.826048][ T8922] ? __kmalloc_noprof+0xb5/0x4c0 [ 165.826084][ T8922] ? __pfx___might_resched+0x10/0x10 [ 165.826125][ T8922] ? aa_get_newest_label+0xff/0x6f0 [ 165.826159][ T8922] should_fail_ex+0x40a/0x550 [ 165.826186][ T8922] should_failslab+0xac/0x100 [ 165.826222][ T8922] __kmalloc_noprof+0xdd/0x4c0 [ 165.826243][ T8922] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 165.826268][ T8922] ? apparmor_capable+0x13b/0x1b0 [ 165.826292][ T8922] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 165.826326][ T8922] genl_rcv_msg+0x802/0xec0 [ 165.826359][ T8922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.826439][ T8922] ? __pfx_lock_acquire+0x10/0x10 [ 165.826465][ T8922] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 165.826488][ T8922] ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10 [ 165.826514][ T8922] ? __pfx_nl80211_post_doit+0x10/0x10 [ 165.826539][ T8922] ? __pfx___might_resched+0x10/0x10 [ 165.826574][ T8922] netlink_rcv_skb+0x1e3/0x430 [ 165.826605][ T8922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.826629][ T8922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.826691][ T8922] genl_rcv+0x28/0x40 [ 165.826729][ T8922] netlink_unicast+0x7f6/0x990 [ 165.826767][ T8922] ? __pfx_netlink_unicast+0x10/0x10 [ 165.826792][ T8922] ? __virt_addr_valid+0x45f/0x530 [ 165.826824][ T8922] ? __phys_addr_symbol+0x2f/0x70 [ 165.826853][ T8922] ? __check_object_size+0x47a/0x730 [ 165.826891][ T8922] netlink_sendmsg+0x8e4/0xcb0 [ 165.826941][ T8922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.826977][ T8922] ? aa_sock_msg_perm+0x91/0x160 [ 165.827011][ T8922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.827040][ T8922] __sock_sendmsg+0x221/0x270 [ 165.827068][ T8922] ____sys_sendmsg+0x52a/0x7e0 [ 165.827110][ T8922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.827140][ T8922] ? __fget_files+0x2a/0x410 [ 165.827165][ T8922] ? __fget_files+0x2a/0x410 [ 165.827197][ T8922] __sys_sendmsg+0x269/0x350 [ 165.827235][ T8922] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.827292][ T8922] ? do_sys_openat2+0x17a/0x1d0 [ 165.827342][ T8922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.827371][ T8922] ? do_syscall_64+0x100/0x230 [ 165.827408][ T8922] ? do_syscall_64+0xb6/0x230 [ 165.827437][ T8922] do_syscall_64+0xf3/0x230 [ 165.827463][ T8922] ? clear_bhb_loop+0x35/0x90 [ 165.827494][ T8922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.827520][ T8922] RIP: 0033:0x7f172a78cde9 [ 165.827538][ T8922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.827555][ T8922] RSP: 002b:00007f172b5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.827576][ T8922] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78cde9 [ 165.827591][ T8922] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 165.827603][ T8922] RBP: 00007f172b5df090 R08: 0000000000000000 R09: 0000000000000000 [ 165.827615][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.827627][ T8922] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 165.827658][ T8922] [ 166.524685][ T8936] IPv6: sit1: Disabled Multicast RS [ 166.573612][ T8934] lo speed is unknown, defaulting to 1000 [ 166.985968][ T8969] FAULT_INJECTION: forcing a failure. [ 166.985968][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 167.024580][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.0.731 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 167.024610][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 167.024623][ T8969] Call Trace: [ 167.024630][ T8969] [ 167.024638][ T8969] dump_stack_lvl+0x241/0x360 [ 167.024668][ T8969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.024690][ T8969] ? __pfx__printk+0x10/0x10 [ 167.024724][ T8969] ? __kmalloc_noprof+0xb5/0x4c0 [ 167.024748][ T8969] ? __pfx___might_resched+0x10/0x10 [ 167.024770][ T8969] ? aa_get_newest_label+0xff/0x6f0 [ 167.024802][ T8969] should_fail_ex+0x40a/0x550 [ 167.024828][ T8969] should_failslab+0xac/0x100 [ 167.024863][ T8969] __kmalloc_noprof+0xdd/0x4c0 [ 167.024884][ T8969] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 167.024909][ T8969] ? apparmor_capable+0x13b/0x1b0 [ 167.024935][ T8969] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 167.024968][ T8969] genl_rcv_msg+0x802/0xec0 [ 167.024999][ T8969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.025048][ T8969] ? __pfx_lock_acquire+0x10/0x10 [ 167.025074][ T8969] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 167.025098][ T8969] ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10 [ 167.025123][ T8969] ? __pfx_nl80211_post_doit+0x10/0x10 [ 167.025149][ T8969] ? __pfx___might_resched+0x10/0x10 [ 167.025183][ T8969] netlink_rcv_skb+0x1e3/0x430 [ 167.025216][ T8969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.025242][ T8969] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.025284][ T8969] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 167.025339][ T8969] genl_rcv+0x28/0x40 [ 167.025360][ T8969] netlink_unicast+0x7f6/0x990 [ 167.025398][ T8969] ? __pfx_netlink_unicast+0x10/0x10 [ 167.025424][ T8969] ? __virt_addr_valid+0x45f/0x530 [ 167.025455][ T8969] ? __phys_addr_symbol+0x2f/0x70 [ 167.025483][ T8969] ? __check_object_size+0x47a/0x730 [ 167.025522][ T8969] netlink_sendmsg+0x8e4/0xcb0 [ 167.025567][ T8969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.025604][ T8969] ? aa_sock_msg_perm+0x91/0x160 [ 167.025637][ T8969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.025666][ T8969] __sock_sendmsg+0x221/0x270 [ 167.025694][ T8969] ____sys_sendmsg+0x52a/0x7e0 [ 167.025735][ T8969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.025762][ T8969] ? __fget_files+0x2a/0x410 [ 167.025784][ T8969] ? __fget_files+0x2a/0x410 [ 167.025814][ T8969] __sys_sendmsg+0x269/0x350 [ 167.025851][ T8969] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.025896][ T8969] ? do_sys_openat2+0x17a/0x1d0 [ 167.025946][ T8969] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.025976][ T8969] ? do_syscall_64+0x100/0x230 [ 167.026004][ T8969] ? do_syscall_64+0xb6/0x230 [ 167.026044][ T8969] do_syscall_64+0xf3/0x230 [ 167.026068][ T8969] ? clear_bhb_loop+0x35/0x90 [ 167.026097][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.026122][ T8969] RIP: 0033:0x7fda1178cde9 [ 167.026140][ T8969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.026156][ T8969] RSP: 002b:00007fda125c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.026178][ T8969] RAX: ffffffffffffffda RBX: 00007fda119a6080 RCX: 00007fda1178cde9 [ 167.026192][ T8969] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 167.026203][ T8969] RBP: 00007fda125c6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.026214][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.026224][ T8969] R13: 0000000000000000 R14: 00007fda119a6080 R15: 00007fff7da08cd8 [ 167.026252][ T8969] [ 167.565344][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.720'. [ 167.629739][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.733'. [ 167.844584][ T8987] Cannot find del_set index 0 as target [ 167.868093][ T8987] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 167.875997][ T8987] netlink: 'syz.2.734': attribute type 8 has an invalid length. [ 167.888812][ T8987] netlink: 176 bytes leftover after parsing attributes in process `syz.2.734'. [ 168.014343][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.737'. [ 168.130503][ T8998] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 168.161635][ T8999] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 168.624089][ T9016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.741'. [ 168.823161][ T9022] lo speed is unknown, defaulting to 1000 [ 171.005304][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 183.348990][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.747'. [ 183.358098][ T7782] IPVS: starting estimator thread 0... [ 183.382254][ T9058] ip6gretap0: entered promiscuous mode [ 183.407974][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.412891][ T9058] ip6gretap0: left promiscuous mode [ 183.475738][ T9061] IPVS: using max 19 ests per chain, 45600 per kthread [ 183.519632][ T9060] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.774824][ T9078] netlink: 30 bytes leftover after parsing attributes in process `syz.0.754'. [ 183.790682][ T9082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.753'. [ 184.087452][ T9091] lo speed is unknown, defaulting to 1000 [ 184.244042][ T9100] IPVS: length: 4096 != 8 [ 184.337363][ T9103] FAULT_INJECTION: forcing a failure. [ 184.337363][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.372418][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.2.760 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 184.372450][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 184.372462][ T9103] Call Trace: [ 184.372469][ T9103] [ 184.372476][ T9103] dump_stack_lvl+0x241/0x360 [ 184.372506][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.372527][ T9103] ? __pfx__printk+0x10/0x10 [ 184.372565][ T9103] ? snprintf+0xda/0x120 [ 184.372588][ T9103] should_fail_ex+0x40a/0x550 [ 184.372615][ T9103] _copy_to_user+0x31/0xb0 [ 184.372654][ T9103] simple_read_from_buffer+0xca/0x150 [ 184.372688][ T9103] proc_fail_nth_read+0x1e9/0x250 [ 184.372736][ T9103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.372783][ T9103] ? rw_verify_area+0x243/0x630 [ 184.372809][ T9103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.372843][ T9103] vfs_read+0x1f8/0xb40 [ 184.372870][ T9103] ? fdget_pos+0x254/0x320 [ 184.372893][ T9103] ? __pfx___mutex_lock+0x10/0x10 [ 184.372920][ T9103] ? __pfx_vfs_read+0x10/0x10 [ 184.372942][ T9103] ? do_sys_openat2+0x17a/0x1d0 [ 184.372965][ T9103] ? __fget_files+0x2a/0x410 [ 184.372987][ T9103] ? __fget_files+0x395/0x410 [ 184.373007][ T9103] ? __fget_files+0x2a/0x410 [ 184.373037][ T9103] ksys_read+0x18f/0x2b0 [ 184.373067][ T9103] ? __pfx_ksys_read+0x10/0x10 [ 184.373094][ T9103] ? do_syscall_64+0x100/0x230 [ 184.373123][ T9103] ? do_syscall_64+0xb6/0x230 [ 184.373152][ T9103] do_syscall_64+0xf3/0x230 [ 184.373178][ T9103] ? clear_bhb_loop+0x35/0x90 [ 184.373209][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.373236][ T9103] RIP: 0033:0x7fd12958b7fc [ 184.373254][ T9103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.373272][ T9103] RSP: 002b:00007fd12a452030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.373294][ T9103] RAX: ffffffffffffffda RBX: 00007fd1297a5fa0 RCX: 00007fd12958b7fc [ 184.373309][ T9103] RDX: 000000000000000f RSI: 00007fd12a4520a0 RDI: 0000000000000005 [ 184.373321][ T9103] RBP: 00007fd12a452090 R08: 0000000000000000 R09: 0000000000000000 [ 184.373333][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.373345][ T9103] R13: 0000000000000000 R14: 00007fd1297a5fa0 R15: 00007ffe4777fad8 [ 184.373401][ T9103] [ 184.519947][ T9072] dccp_close: ABORT with 124 bytes unread [ 184.786339][ T9118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.764'. [ 184.829178][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 184.938402][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'. [ 184.986003][ T9124] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.767'. [ 185.119810][ T9131] netlink: 48 bytes leftover after parsing attributes in process `syz.2.768'. [ 185.288985][ T9138] netlink: 'syz.2.772': attribute type 29 has an invalid length. [ 185.307947][ T9138] netlink: 'syz.2.772': attribute type 29 has an invalid length. [ 185.323650][ T9138] netlink: 596 bytes leftover after parsing attributes in process `syz.2.772'. [ 185.345705][ T9140] syzkaller1: entered promiscuous mode [ 185.351533][ T9140] syzkaller1: entered allmulticast mode [ 185.392247][ T9144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.772'. [ 185.787076][ T9161] netlink: 'syz.3.779': attribute type 4 has an invalid length. [ 186.047774][ T9174] FAULT_INJECTION: forcing a failure. [ 186.047774][ T9174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.085351][ T9174] CPU: 0 UID: 0 PID: 9174 Comm: syz.3.782 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 186.085382][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.085394][ T9174] Call Trace: [ 186.085402][ T9174] [ 186.085411][ T9174] dump_stack_lvl+0x241/0x360 [ 186.085441][ T9174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.085463][ T9174] ? __pfx__printk+0x10/0x10 [ 186.085508][ T9174] ? __pfx_lock_release+0x10/0x10 [ 186.085545][ T9174] should_fail_ex+0x40a/0x550 [ 186.085573][ T9174] _copy_from_user+0x2d/0xb0 [ 186.085594][ T9174] copy_msghdr_from_user+0xae/0x680 [ 186.085626][ T9174] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 186.085649][ T9174] ? __fget_files+0x2a/0x410 [ 186.085681][ T9174] ? __fget_files+0x2a/0x410 [ 186.085712][ T9174] __sys_sendmsg+0x209/0x350 [ 186.085750][ T9174] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.085793][ T9174] ? do_sys_openat2+0x17a/0x1d0 [ 186.085843][ T9174] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.085873][ T9174] ? do_syscall_64+0x100/0x230 [ 186.085904][ T9174] ? do_syscall_64+0xb6/0x230 [ 186.085934][ T9174] do_syscall_64+0xf3/0x230 [ 186.085960][ T9174] ? clear_bhb_loop+0x35/0x90 [ 186.085993][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.086021][ T9174] RIP: 0033:0x7fb3a778cde9 [ 186.086039][ T9174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.086056][ T9174] RSP: 002b:00007fb3a8524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.086079][ T9174] RAX: ffffffffffffffda RBX: 00007fb3a79a6080 RCX: 00007fb3a778cde9 [ 186.086093][ T9174] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 186.086106][ T9174] RBP: 00007fb3a8524090 R08: 0000000000000000 R09: 0000000000000000 [ 186.086118][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.086130][ T9174] R13: 0000000000000000 R14: 00007fb3a79a6080 R15: 00007ffc83c779a8 [ 186.086159][ T9174] [ 186.450327][ T9188] netlink: 'syz.4.786': attribute type 21 has an invalid length. [ 186.476122][ T9185] veth0_to_team: entered promiscuous mode [ 186.482197][ T9185] veth0_to_team: entered allmulticast mode [ 186.494714][ T9191] netlink: 'syz.0.790': attribute type 10 has an invalid length. [ 186.528019][ T9191] team0: Device ipvlan1 failed to register rx_handler [ 186.561174][ T9193] lo speed is unknown, defaulting to 1000 [ 186.760176][ T9205] lo speed is unknown, defaulting to 1000 [ 187.561137][ T9220] Cannot find set identified by id 0 to match [ 188.012324][ T9251] lo speed is unknown, defaulting to 1000 [ 190.366766][ T9274] lo: entered promiscuous mode [ 190.371813][ T9274] lo: entered allmulticast mode [ 190.396754][ T9274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.516302][ T9278] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 190.873631][ T9304] __nla_validate_parse: 7 callbacks suppressed [ 190.873653][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'. [ 190.910359][ T9306] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 191.289251][ T9321] lo speed is unknown, defaulting to 1000 [ 191.563317][ T9332] dccp_v6_rcv: dropped packet with invalid checksum [ 191.834463][ T9336] xt_TCPMSS: Only works on TCP SYN packets [ 191.874887][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 191.883951][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 191.919665][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 192.407197][ T9365] netlink: 68 bytes leftover after parsing attributes in process `syz.4.830'. [ 192.592781][ T9368] netlink: 56 bytes leftover after parsing attributes in process `syz.0.834'. [ 192.833922][ T9382] x_tables: duplicate underflow at hook 1 [ 192.880954][ T9377] lo speed is unknown, defaulting to 1000 [ 193.119786][ T9387] xt_CT: No such helper "netbios-ns" [ 193.285995][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 193.317947][ T9392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.841'. [ 193.412767][ T9392] gretap0: entered promiscuous mode [ 193.584832][ T9392] macvlan3: entered promiscuous mode [ 193.709597][ T9392] macvlan3: entered allmulticast mode [ 193.771060][ T9392] gretap0: entered allmulticast mode [ 194.032918][ T9403] netlink: 'syz.3.844': attribute type 12 has an invalid length. [ 194.061423][ T9404] lo speed is unknown, defaulting to 1000 [ 194.169900][ T9394] netlink: 88 bytes leftover after parsing attributes in process `syz.1.842'. [ 194.197248][ T81] batman_adv: batadv1: IGMP Querier appeared [ 194.203338][ T81] batman_adv: batadv1: MLD Querier appeared [ 194.225396][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 194.247040][ T9414] x_tables: duplicate entry at hook 2 [ 194.336886][ T9407] lo speed is unknown, defaulting to 1000 [ 194.982989][ T9438] lo speed is unknown, defaulting to 1000 [ 196.264406][ T9500] __nla_validate_parse: 2 callbacks suppressed [ 196.264429][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 196.422616][ T9506] netlink: 'syz.3.863': attribute type 9 has an invalid length. [ 196.528899][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 196.535182][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 196.535199][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 196.680651][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 196.740928][ T9512] lo speed is unknown, defaulting to 1000 [ 196.904896][ T9520] lo speed is unknown, defaulting to 1000 [ 196.924421][ T9517] siw: device registration error -23 [ 197.089989][ T9530] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 197.141888][ T9530] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 197.152193][ T9530] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 197.165794][ T9530] bond0: (slave vti0): making interface the new active one [ 197.174305][ T9530] bond0: (slave vti0): Enslaving as an active interface with an up link [ 197.771137][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 197.841193][ T9512] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.938804][ T9512] syz.2.866 (9512) used greatest stack depth: 17616 bytes left [ 197.960510][ T9542] netlink: 'syz.4.873': attribute type 2 has an invalid length. [ 198.365332][ T9556] lo speed is unknown, defaulting to 1000 [ 198.419258][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 198.506794][ T9564] netlink: 'syz.2.878': attribute type 9 has an invalid length. [ 199.212547][ T9577] x_tables: duplicate underflow at hook 1 [ 199.235442][ T9583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.884'. [ 199.484698][ T9591] ip6t_srh: unknown srh match flags 5294 [ 200.076563][ T9618] netlink: 'syz.1.891': attribute type 9 has an invalid length. [ 200.287511][ T9625] bridge3: entered promiscuous mode [ 200.298830][ T9625] bridge3: entered allmulticast mode [ 200.346618][ T9625] team0: Port device bridge3 added [ 200.429082][ T9627] lo speed is unknown, defaulting to 1000 [ 200.544613][ T9634] netlink: 'syz.4.897': attribute type 1 has an invalid length. [ 201.737446][ T9662] lo speed is unknown, defaulting to 1000 [ 201.741611][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 201.751423][ T9664] Bluetooth: MGMT ver 1.23 [ 201.790200][ T9668] netlink: 'syz.0.904': attribute type 7 has an invalid length. [ 201.799198][ T9668] netlink: 208100 bytes leftover after parsing attributes in process `syz.0.904'. [ 202.158195][ T9682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.926142][ T9714] netlink: 'syz.4.918': attribute type 9 has an invalid length. [ 203.068757][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 203.119688][ T9716] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 203.460158][ T9733] veth0_to_team: left promiscuous mode [ 203.481963][ T9733] veth0_to_team: left allmulticast mode [ 203.503480][ T9728] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 203.512013][ T9728] netlink: 'syz.2.923': attribute type 4 has an invalid length. [ 203.520243][ T9728] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.923'. [ 203.539120][ T9733] bridge2: left promiscuous mode [ 203.552582][ T9733] bridge2: left allmulticast mode [ 203.579663][ T9733] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.593440][ T9733] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.600134][ T9745] netlink: 'syz.1.927': attribute type 13 has an invalid length. [ 203.614143][ T9745] netlink: 'syz.1.927': attribute type 4 has an invalid length. [ 203.623084][ T9733] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.655466][ T9733] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.687290][ T9733] gretap0: left promiscuous mode [ 203.713043][ T9733] macvlan3: left promiscuous mode [ 203.719232][ T9733] macvlan3: left allmulticast mode [ 203.736570][ T9733] bridge3: left promiscuous mode [ 203.741675][ T9733] bridge3: left allmulticast mode [ 203.766277][ T9753] netlink: 10 bytes leftover after parsing attributes in process `syz.1.928'. [ 203.992647][ T9760] lo speed is unknown, defaulting to 1000 [ 204.051433][ T9767] netlink: 'syz.3.933': attribute type 9 has an invalid length. [ 204.187077][ T9770] lo speed is unknown, defaulting to 1000 [ 204.202736][ T9773] ipvlan1: entered promiscuous mode [ 204.208964][ T9773] ipvlan1: entered allmulticast mode [ 204.214313][ T9773] vlan0: entered allmulticast mode [ 204.308519][ T9772] syzkaller0: entered promiscuous mode [ 204.314366][ T9772] syzkaller0: entered allmulticast mode [ 206.137292][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 206.635168][ T9805] gretap0: left allmulticast mode [ 206.645241][ T9805] gretap0: left promiscuous mode [ 206.652838][ T9805] bridge0: port 1(gretap0) entered disabled state [ 206.744185][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 206.749214][ T9812] openvswitch: netlink: Multiple metadata blocks provided [ 206.856201][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.947'. [ 207.039450][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 207.076922][ T9829] lo speed is unknown, defaulting to 1000 [ 207.360809][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.951'. [ 207.428728][ T9833] netlink: 'syz.4.951': attribute type 3 has an invalid length. [ 207.475148][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 207.715922][ T9845] SET target dimension over the limit! [ 207.799496][ T9845] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 207.808977][ T9845] netlink: 55 bytes leftover after parsing attributes in process `syz.3.954'. [ 207.816675][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.956'. [ 207.853144][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.956'. [ 207.882183][ T9853] ax25_connect(): syz.4.955 uses autobind, please contact jreuter@yaina.de [ 207.898844][ T9845] team0: Port device virt_wifi0 added [ 208.180808][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.958'. [ 208.252785][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.949'. [ 208.317806][ T9829] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 208.545866][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'. [ 208.901961][ T9901] lo: entered allmulticast mode [ 208.962385][ T9901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.613918][ T9929] lo speed is unknown, defaulting to 1000 [ 210.271603][ T9929] lo: entered promiscuous mode [ 210.278416][ T9929] tunl0: entered promiscuous mode [ 210.285296][ T9929] gre0: entered promiscuous mode [ 210.292062][ T9929] gretap0: entered promiscuous mode [ 210.305066][ T9929] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.755826][ T9972] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 210.806144][ T9974] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 210.836679][ T9974] netlink: 'syz.1.992': attribute type 1 has an invalid length. [ 211.147973][ T9995] netlink: 'syz.0.996': attribute type 39 has an invalid length. [ 212.002051][T10038] __nla_validate_parse: 11 callbacks suppressed [ 212.002072][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 212.035967][T10039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1009'. [ 212.058066][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 212.068626][T10039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1009'. [ 212.224330][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 212.282323][T10049] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 212.313849][T10049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.421402][T10058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1015'. [ 213.055215][T10086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.124615][T10086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.409995][T10105] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1031'. [ 213.449976][T10105] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1031'. [ 214.022356][T10131] lo: left allmulticast mode [ 214.052308][T10131] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 214.057990][T10134] netlink: 'syz.2.1041': attribute type 5 has an invalid length. [ 214.102421][T10134] : entered promiscuous mode [ 214.137260][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1042'. [ 214.202737][T10139] lo speed is unknown, defaulting to 1000 [ 214.774057][T10159] netlink: 'syz.0.1049': attribute type 11 has an invalid length. [ 214.815329][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 215.412099][T10184] ip6gretap0: entered promiscuous mode [ 215.422824][T10184] batadv_slave_0: entered promiscuous mode [ 215.652954][T10196] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 215.873132][T10211] netlink: 'syz.3.1065': attribute type 29 has an invalid length. [ 215.908214][T10210] xt_socket: unknown flags 0x4 [ 215.923273][T10211] netlink: 'syz.3.1065': attribute type 29 has an invalid length. [ 216.301079][T10231] lo speed is unknown, defaulting to 1000 [ 217.016453][T10280] __nla_validate_parse: 7 callbacks suppressed [ 217.016476][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 217.133801][T10284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 217.151787][T10284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 217.243140][ T5883] IPVS: starting estimator thread 0... [ 217.243463][T10287] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.345815][T10292] IPVS: using max 18 ests per chain, 43200 per kthread [ 217.605952][T10305] pim6reg: entered allmulticast mode [ 217.662648][T10310] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 217.673238][T10310] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 217.688714][T10301] pim6reg: left allmulticast mode [ 217.948425][T10318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.966087][ T5924] lo speed is unknown, defaulting to 1000 [ 218.236085][T10338] x_tables: duplicate underflow at hook 2 [ 218.253229][T10338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1105'. [ 218.297852][T10338] x_tables: duplicate underflow at hook 2 [ 218.312555][T10341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1105'. [ 218.527897][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 218.560642][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 218.648399][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 218.730640][T10361] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1113'. [ 218.961422][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 219.533353][T10406] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 219.654252][T10410] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 219.686744][T10413] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 219.709005][T10418] netlink: 'syz.4.1124': attribute type 4 has an invalid length. [ 219.741082][T10413] bond3: entered promiscuous mode [ 219.759571][T10413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.890535][T10430] lo speed is unknown, defaulting to 1000 [ 219.947497][T10428] ip6t_srh: unknown srh invflags 4000 [ 221.221583][T10467] netlink: 'syz.4.1147': attribute type 2 has an invalid length. [ 221.467555][T10473] delete_channel: no stack [ 221.809256][T10493] netem: change failed [ 222.101937][T10513] x_tables: duplicate underflow at hook 1 [ 222.115839][T10515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.278258][T10507] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 222.526555][T10538] nftables ruleset with unbound set [ 222.536044][T10538] __nla_validate_parse: 11 callbacks suppressed [ 222.536064][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 222.565902][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 222.586203][T10539] lo speed is unknown, defaulting to 1000 [ 222.678051][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 222.784781][T10549] lo speed is unknown, defaulting to 1000 [ 222.830094][T10550] pimreg: entered allmulticast mode [ 222.947804][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 222.962197][T10550] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.097047][T10550] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 223.459078][T10581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1181'. [ 223.933080][T10578] bond0: (slave team0): Releasing backup interface [ 223.935116][T10609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.961630][T10578] team0 (unregistering): Port device bridge2 removed [ 223.976542][T10578] team0 (unregistering): Port device syz_tun removed [ 223.994085][T10578] team0 (unregistering): Port device bridge3 removed [ 224.039079][T10604] netlink: 'syz.3.1185': attribute type 26 has an invalid length. [ 224.056352][T10612] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1187'. [ 224.525131][ T5147] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 224.664720][T10642] lo speed is unknown, defaulting to 1000 [ 224.880890][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 224.894826][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 224.971141][T10660] dvmrp5: entered allmulticast mode [ 225.315625][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 225.503388][T10674] : entered promiscuous mode [ 225.509247][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 225.629465][T10680] syzkaller1: entered promiscuous mode [ 225.635186][T10680] syzkaller1: entered allmulticast mode [ 225.644592][T10677] IPVS: Scheduler module ip_vs_sip not found [ 225.814365][T10659] dvmrp5: left allmulticast mode [ 225.911158][T10698] netlink: 'syz.2.1213': attribute type 39 has an invalid length. [ 225.964363][T10695] netlink: 'syz.3.1211': attribute type 21 has an invalid length. [ 226.145176][T10707] netlink: 'syz.1.1216': attribute type 3 has an invalid length. [ 226.387854][T10716] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 226.406934][T10720] batadv1: entered promiscuous mode [ 226.428425][T10720] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.520329][T10727] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.537919][T10727] netlink: 'syz.2.1221': attribute type 1 has an invalid length. [ 226.585157][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.323882][T10768] lo speed is unknown, defaulting to 1000 [ 227.423702][T10769] netlink: 'syz.0.1232': attribute type 4 has an invalid length. [ 227.605613][T10766] infiniband syz1: set down [ 227.610507][T10766] infiniband syz1: added team_slave_0 [ 227.703244][T10766] RDS/IB: syz1: added [ 227.733932][T10766] smc: adding ib device syz1 with port count 1 [ 227.764590][T10766] smc: ib device syz1 port 1 has pnetid [ 227.838274][T10781] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 227.867469][T10781] __nla_validate_parse: 9 callbacks suppressed [ 227.867491][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1239'. [ 228.606636][T10797] netlink: set zone limit has 8 unknown bytes [ 228.736307][T10800] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 228.867442][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1246'. [ 229.076009][T10819] Cannot find add_set index 3 as target [ 229.083492][T10819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1251'. [ 229.105553][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 229.133544][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1251'. [ 229.551325][T10830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1254'. [ 229.770583][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 229.876140][T10851] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 229.894449][T10851] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1260'. [ 230.364444][T10878] sctp: [Deprecated]: syz.1.1270 (pid 10878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.364444][T10878] Use struct sctp_sack_info instead [ 230.592284][T10894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1274'. [ 230.672197][T10900] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1273'. [ 231.096198][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 231.226748][T10911] veth7: entered promiscuous mode [ 231.231973][T10911] veth7: entered allmulticast mode [ 231.678977][T10939] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 231.811598][ T5924] IPVS: starting estimator thread 0... [ 231.837333][T10930] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 231.869686][T10947] sock: sock_set_timeout: `syz.1.1288' (pid 10947) tries to set negative timeout [ 231.911098][T10948] IPVS: using max 20 ests per chain, 48000 per kthread [ 232.030642][T10957] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 232.072119][T10958] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 232.120658][T10966] netlink: 'syz.2.1290': attribute type 10 has an invalid length. [ 232.503097][T10981] IPVS: set_ctl: invalid protocol: 2 172.20.20.55:20003 [ 232.514347][T10984] lo speed is unknown, defaulting to 1000 [ 232.591105][T10988] vlan3: entered promiscuous mode [ 232.604459][T10988] vlan3: entered allmulticast mode [ 232.663424][T10993] netlink: 'syz.4.1303': attribute type 8 has an invalid length. [ 232.993661][T11008] lo speed is unknown, defaulting to 1000 [ 233.110419][T11014] syz.4.1309: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.127195][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.4.1309 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 233.127224][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.127237][T11014] Call Trace: [ 233.127245][T11014] [ 233.127253][T11014] dump_stack_lvl+0x241/0x360 [ 233.127285][T11014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.127308][T11014] ? __pfx__printk+0x10/0x10 [ 233.127346][T11014] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 233.127370][T11014] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 233.127397][T11014] warn_alloc+0x278/0x410 [ 233.127427][T11014] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 233.127456][T11014] ? __pfx_warn_alloc+0x10/0x10 [ 233.127485][T11014] ? kasan_save_track+0x3f/0x80 [ 233.127510][T11014] ? __kasan_kmalloc+0x98/0xb0 [ 233.127539][T11014] ? xsk_setsockopt+0x4ea/0x950 [ 233.127570][T11014] ? do_sock_setsockopt+0x3af/0x720 [ 233.127599][T11014] ? __x64_sys_setsockopt+0x1ee/0x280 [ 233.127626][T11014] ? do_syscall_64+0xf3/0x230 [ 233.127651][T11014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.127696][T11014] __vmalloc_node_range_noprof+0x126/0x1380 [ 233.127755][T11014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.127788][T11014] ? __kasan_kmalloc+0x98/0xb0 [ 233.127824][T11014] vmalloc_user_noprof+0x74/0x80 [ 233.127851][T11014] ? xskq_create+0xb6/0x170 [ 233.127870][T11014] xskq_create+0xb6/0x170 [ 233.127893][T11014] xsk_init_queue+0xa1/0x100 [ 233.127916][T11014] xsk_setsockopt+0x4ea/0x950 [ 233.127952][T11014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.127985][T11014] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.128015][T11014] ? aa_sock_opt_perm+0x79/0x120 [ 233.128047][T11014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.128078][T11014] do_sock_setsockopt+0x3af/0x720 [ 233.128116][T11014] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 233.128153][T11014] ? __fget_files+0x395/0x410 [ 233.128173][T11014] ? __fget_files+0x2a/0x410 [ 233.128203][T11014] __x64_sys_setsockopt+0x1ee/0x280 [ 233.128241][T11014] do_syscall_64+0xf3/0x230 [ 233.128268][T11014] ? clear_bhb_loop+0x35/0x90 [ 233.128300][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.128328][T11014] RIP: 0033:0x7f172a78cde9 [ 233.128346][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.128363][T11014] RSP: 002b:00007f172b5df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.128384][T11014] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78cde9 [ 233.128399][T11014] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 233.128411][T11014] RBP: 00007f172a80e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 233.128424][T11014] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.128436][T11014] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 233.128468][T11014] [ 233.128476][T11014] Mem-Info: [ 233.548148][T11024] __nla_validate_parse: 6 callbacks suppressed [ 233.548168][T11024] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1310'. [ 233.576119][T11014] active_anon:8790 inactive_anon:0 isolated_anon:0 [ 233.576119][T11014] active_file:1590 inactive_file:38357 isolated_file:0 [ 233.576119][T11014] unevictable:768 dirty:48 writeback:0 [ 233.576119][T11014] slab_reclaimable:11326 slab_unreclaimable:104039 [ 233.576119][T11014] mapped:30956 shmem:2697 pagetables:805 [ 233.576119][T11014] sec_pagetables:0 bounce:0 [ 233.576119][T11014] kernel_misc_reclaimable:0 [ 233.576119][T11014] free:1331384 free_pcp:1144 free_cma:0 [ 233.635909][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1310'. [ 233.674737][T11014] Node 0 active_anon:36760kB inactive_anon:0kB active_file:6360kB inactive_file:153356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125324kB dirty:192kB writeback:0kB shmem:10852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12236kB pagetables:3220kB sec_pagetables:0kB all_unreclaimable? no [ 233.775596][T11014] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 233.825661][T11014] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.873521][T11014] lowmem_reserve[]: 0 2491 2491 0 0 [ 233.883652][T11014] Node 0 DMA32 free:1396552kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:43520kB inactive_anon:0kB active_file:6360kB inactive_file:152780kB unevictable:1536kB writepending:192kB present:3129332kB managed:2551120kB mlocked:0kB bounce:0kB free_pcp:3308kB local_pcp:2072kB free_cma:0kB [ 233.931038][T11014] lowmem_reserve[]: 0 0 0 0 0 [ 233.935810][ T7713] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 233.997536][T11014] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 234.026156][T11014] lowmem_reserve[]: 0 0 0 0 0 [ 234.030957][T11014] Node 1 Normal free:3907288kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 234.061289][T11014] lowmem_reserve[]: 0 0 0 0 0 [ 234.067336][T11014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.081365][T11014] Node 0 DMA32: 321*4kB (UE) 0*8kB 15*16kB (UM) 104*32kB (UE) 74*64kB (UM) 48*128kB (UME) 58*256kB (UME) 30*512kB (UM) 18*1024kB (UME) 4*2048kB (UME) 321*4096kB (UM) = 1387380kB [ 234.107717][T11014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 234.124579][T11014] Node 1 Normal: 212*4kB (UE) 71*8kB (UME) 49*16kB (UME) 214*32kB (UME) 90*64kB (UME) 32*128kB (UME) 13*256kB (UM) 10*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3907288kB [ 234.160991][T11014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.180528][T11014] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.194492][T11014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.214495][T11014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.224467][T11014] 47128 total pagecache pages [ 234.231142][T11014] 0 pages in swap cache [ 234.235808][T11014] Free swap = 124996kB [ 234.240007][T11014] Total swap = 124996kB [ 234.244175][T11014] 2097051 pages RAM [ 234.248627][T11014] 0 pages HighMem/MovableOnly [ 234.253334][T11014] 427485 pages reserved [ 234.257689][T11014] 0 pages cma reserved [ 234.332758][T11026] lo speed is unknown, defaulting to 1000 [ 235.085637][ T7292] wlan1: Trigger new scan to find an IBSS to join [ 235.399041][T11061] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 235.832721][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1327'. [ 235.890693][T11068] lo speed is unknown, defaulting to 1000 [ 236.493891][T11118] lo speed is unknown, defaulting to 1000 [ 237.656920][T11139] netlink: 'syz.0.1341': attribute type 12 has an invalid length. [ 238.215234][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 238.259370][T11171] bridge_slave_1: left allmulticast mode [ 238.267615][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'. [ 238.281586][T11171] bridge_slave_1: left promiscuous mode [ 238.315247][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.333757][T11171] bridge_slave_0: left allmulticast mode [ 238.345108][T11171] bridge_slave_0: left promiscuous mode [ 238.354435][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.536802][T11183] netlink: 'syz.2.1351': attribute type 4 has an invalid length. [ 238.555739][T11183] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1351'. [ 238.634232][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 239.173218][T11215] x_tables: duplicate entry at hook 2 [ 239.621144][T11238] lo speed is unknown, defaulting to 1000 [ 239.637875][T11240] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1369'. [ 240.047108][ T7705] wlan1: Trigger new scan to find an IBSS to join [ 240.081903][T11258] netlink: 'syz.2.1374': attribute type 6 has an invalid length. [ 240.207319][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 240.333090][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 240.446294][T11238] x_tables: duplicate underflow at hook 1 [ 240.452756][T11238] netlink: 7084 bytes leftover after parsing attributes in process `syz.3.1369'. [ 240.661936][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 240.672060][T11270] netlink: 'syz.0.1378': attribute type 7 has an invalid length. [ 240.683059][T11270] netlink: 'syz.0.1378': attribute type 8 has an invalid length. [ 240.700192][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 240.723432][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 240.928345][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 241.011840][ T81] wlan1: Creating new IBSS network, BSSID 22:a1:49:5e:a5:47 [ 241.174384][T11289] SET target dimension over the limit! [ 241.466728][T11306] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 241.490682][T11306] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1386'. [ 242.043084][T11317] lo speed is unknown, defaulting to 1000 [ 242.148939][T11335] netlink: 'syz.0.1395': attribute type 27 has an invalid length. [ 242.191307][T11335] nbd: socks must be embedded in a SOCK_ITEM attr [ 242.737273][T11360] FAULT_INJECTION: forcing a failure. [ 242.737273][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 242.776654][T11360] CPU: 1 UID: 0 PID: 11360 Comm: syz.4.1402 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 242.776686][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 242.776698][T11360] Call Trace: [ 242.776706][T11360] [ 242.776714][T11360] dump_stack_lvl+0x241/0x360 [ 242.776746][T11360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.776768][T11360] ? __pfx__printk+0x10/0x10 [ 242.776804][T11360] ? __kmalloc_cache_noprof+0x48/0x390 [ 242.776828][T11360] ? __pfx___might_resched+0x10/0x10 [ 242.776859][T11360] should_fail_ex+0x40a/0x550 [ 242.776888][T11360] should_failslab+0xac/0x100 [ 242.776924][T11360] __kmalloc_cache_noprof+0x70/0x390 [ 242.776945][T11360] ? genl_start+0x1cb/0x6d0 [ 242.776975][T11360] genl_start+0x1cb/0x6d0 [ 242.777018][T11360] __netlink_dump_start+0x45c/0x790 [ 242.777062][T11360] genl_rcv_msg+0x88c/0xec0 [ 242.777096][T11360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.777129][T11360] ? __pfx_genl_start+0x10/0x10 [ 242.777150][T11360] ? __pfx_genl_dumpit+0x10/0x10 [ 242.777172][T11360] ? __pfx_genl_done+0x10/0x10 [ 242.777214][T11360] ? __pfx_lock_acquire+0x10/0x10 [ 242.777240][T11360] ? __pfx_smcr_nl_get_device+0x10/0x10 [ 242.777263][T11360] ? __pfx___might_resched+0x10/0x10 [ 242.777297][T11360] netlink_rcv_skb+0x1e3/0x430 [ 242.777330][T11360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.777356][T11360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.777420][T11360] genl_rcv+0x28/0x40 [ 242.777442][T11360] netlink_unicast+0x7f6/0x990 [ 242.777480][T11360] ? __pfx_netlink_unicast+0x10/0x10 [ 242.777507][T11360] ? __virt_addr_valid+0x45f/0x530 [ 242.777539][T11360] ? __phys_addr_symbol+0x2f/0x70 [ 242.777569][T11360] ? __check_object_size+0x47a/0x730 [ 242.777608][T11360] netlink_sendmsg+0x8e4/0xcb0 [ 242.777659][T11360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.777697][T11360] ? aa_sock_msg_perm+0x91/0x160 [ 242.777732][T11360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.777762][T11360] __sock_sendmsg+0x221/0x270 [ 242.777790][T11360] ____sys_sendmsg+0x52a/0x7e0 [ 242.777832][T11360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.777862][T11360] ? __fget_files+0x2a/0x410 [ 242.777888][T11360] ? __fget_files+0x2a/0x410 [ 242.777921][T11360] __sys_sendmsg+0x269/0x350 [ 242.777958][T11360] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.778006][T11360] ? do_sys_openat2+0x17a/0x1d0 [ 242.778067][T11360] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.778099][T11360] ? do_syscall_64+0x100/0x230 [ 242.778129][T11360] ? do_syscall_64+0xb6/0x230 [ 242.778157][T11360] do_syscall_64+0xf3/0x230 [ 242.778182][T11360] ? clear_bhb_loop+0x35/0x90 [ 242.778215][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.778243][T11360] RIP: 0033:0x7f172a78cde9 [ 242.778262][T11360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.778279][T11360] RSP: 002b:00007f172b5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.778300][T11360] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78cde9 [ 242.778314][T11360] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000003 [ 242.778326][T11360] RBP: 00007f172b5df090 R08: 0000000000000000 R09: 0000000000000000 [ 242.778338][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.778350][T11360] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 242.778384][T11360] [ 243.414597][T11383] batadv_slave_0: entered promiscuous mode [ 243.675325][T11390] bridge4: entered promiscuous mode [ 243.695374][T11390] bridge4: entered allmulticast mode [ 243.733146][T11390] team0: Port device bridge4 added [ 243.962471][T11406] FAULT_INJECTION: forcing a failure. [ 243.962471][T11406] name failslab, interval 1, probability 0, space 0, times 0 [ 243.976895][T11402] openvswitch: netlink: Tunnel attr 52 out of range max 16 [ 244.013769][T11406] CPU: 1 UID: 0 PID: 11406 Comm: syz.4.1414 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 244.013802][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.013815][T11406] Call Trace: [ 244.013822][T11406] [ 244.013831][T11406] dump_stack_lvl+0x241/0x360 [ 244.013863][T11406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.013885][T11406] ? __pfx__printk+0x10/0x10 [ 244.013930][T11406] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 244.013954][T11406] ? __pfx___might_resched+0x10/0x10 [ 244.013984][T11406] should_fail_ex+0x40a/0x550 [ 244.014010][T11406] should_failslab+0xac/0x100 [ 244.014046][T11406] kmem_cache_alloc_node_noprof+0x77/0x380 [ 244.014069][T11406] ? __alloc_skb+0x1c3/0x440 [ 244.014094][T11406] ? genl_rcv_msg+0x88c/0xec0 [ 244.014121][T11406] __alloc_skb+0x1c3/0x440 [ 244.014146][T11406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.014180][T11406] ? __pfx___alloc_skb+0x10/0x10 [ 244.014219][T11406] netlink_dump+0x239/0xe10 [ 244.014261][T11406] ? __pfx_netlink_dump+0x10/0x10 [ 244.014307][T11406] ? __asan_memset+0x23/0x50 [ 244.014334][T11406] ? genl_start+0x4ae/0x6d0 [ 244.014367][T11406] __netlink_dump_start+0x5a2/0x790 [ 244.014410][T11406] genl_rcv_msg+0x88c/0xec0 [ 244.014443][T11406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.014476][T11406] ? __pfx_genl_start+0x10/0x10 [ 244.014498][T11406] ? __pfx_genl_dumpit+0x10/0x10 [ 244.014520][T11406] ? __pfx_genl_done+0x10/0x10 [ 244.014562][T11406] ? __pfx_lock_acquire+0x10/0x10 [ 244.014591][T11406] ? __pfx_smcr_nl_get_device+0x10/0x10 [ 244.014616][T11406] ? __pfx___might_resched+0x10/0x10 [ 244.014652][T11406] netlink_rcv_skb+0x1e3/0x430 [ 244.014685][T11406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.014713][T11406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.014763][T11406] ? __rcu_read_unlock+0xa1/0x110 [ 244.014802][T11406] genl_rcv+0x28/0x40 [ 244.014825][T11406] netlink_unicast+0x7f6/0x990 [ 244.014863][T11406] ? __pfx_netlink_unicast+0x10/0x10 [ 244.014893][T11406] ? __virt_addr_valid+0x45f/0x530 [ 244.014933][T11406] ? __phys_addr_symbol+0x2f/0x70 [ 244.014961][T11406] ? __check_object_size+0x47a/0x730 [ 244.014999][T11406] netlink_sendmsg+0x8e4/0xcb0 [ 244.015046][T11406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.015083][T11406] ? aa_sock_msg_perm+0x91/0x160 [ 244.015118][T11406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.015148][T11406] __sock_sendmsg+0x221/0x270 [ 244.015177][T11406] ____sys_sendmsg+0x52a/0x7e0 [ 244.015219][T11406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.015249][T11406] ? __fget_files+0x2a/0x410 [ 244.015275][T11406] ? __fget_files+0x2a/0x410 [ 244.015307][T11406] __sys_sendmsg+0x269/0x350 [ 244.015346][T11406] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.015393][T11406] ? do_sys_openat2+0x17a/0x1d0 [ 244.015446][T11406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.015476][T11406] ? do_syscall_64+0x100/0x230 [ 244.015506][T11406] ? do_syscall_64+0xb6/0x230 [ 244.015537][T11406] do_syscall_64+0xf3/0x230 [ 244.015564][T11406] ? clear_bhb_loop+0x35/0x90 [ 244.015597][T11406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.015625][T11406] RIP: 0033:0x7f172a78cde9 [ 244.015644][T11406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.015661][T11406] RSP: 002b:00007f172b5df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.015683][T11406] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78cde9 [ 244.015698][T11406] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000003 [ 244.015710][T11406] RBP: 00007f172b5df090 R08: 0000000000000000 R09: 0000000000000000 [ 244.015722][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.015734][T11406] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 244.015766][T11406] [ 244.030194][T11408] x_tables: duplicate underflow at hook 1 [ 244.422265][T11404] netem: incorrect gi model size [ 244.443176][T11418] __nla_validate_parse: 4 callbacks suppressed [ 244.443197][T11418] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1416'. [ 244.465142][T11404] netem: change failed [ 244.482721][T11418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1416'. [ 244.613471][T11427] lo speed is unknown, defaulting to 1000 [ 245.334856][T11447] FAULT_INJECTION: forcing a failure. [ 245.334856][T11447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.386252][T11447] CPU: 0 UID: 0 PID: 11447 Comm: syz.4.1421 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 245.386288][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 245.386301][T11447] Call Trace: [ 245.386308][T11447] [ 245.386318][T11447] dump_stack_lvl+0x241/0x360 [ 245.386350][T11447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.386373][T11447] ? __pfx__printk+0x10/0x10 [ 245.386412][T11447] ? snprintf+0xda/0x120 [ 245.386437][T11447] should_fail_ex+0x40a/0x550 [ 245.386466][T11447] _copy_to_user+0x31/0xb0 [ 245.386487][T11447] simple_read_from_buffer+0xca/0x150 [ 245.386583][T11447] proc_fail_nth_read+0x1e9/0x250 [ 245.386634][T11447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.386667][T11447] ? rw_verify_area+0x243/0x630 [ 245.386690][T11447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.386720][T11447] vfs_read+0x1f8/0xb40 [ 245.386745][T11447] ? fdget_pos+0x254/0x320 [ 245.386765][T11447] ? __pfx___mutex_lock+0x10/0x10 [ 245.386789][T11447] ? __pfx_vfs_read+0x10/0x10 [ 245.386816][T11447] ? __fget_files+0x2a/0x410 [ 245.386844][T11447] ? __fget_files+0x395/0x410 [ 245.386862][T11447] ? __fget_files+0x2a/0x410 [ 245.386889][T11447] ksys_read+0x18f/0x2b0 [ 245.386915][T11447] ? __pfx_ksys_read+0x10/0x10 [ 245.386938][T11447] ? do_syscall_64+0x100/0x230 [ 245.386964][T11447] ? do_syscall_64+0xb6/0x230 [ 245.386988][T11447] do_syscall_64+0xf3/0x230 [ 245.387011][T11447] ? clear_bhb_loop+0x35/0x90 [ 245.387038][T11447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.387062][T11447] RIP: 0033:0x7f172a78b7fc [ 245.387080][T11447] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.387096][T11447] RSP: 002b:00007f172b5df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.387118][T11447] RAX: ffffffffffffffda RBX: 00007f172a9a5fa0 RCX: 00007f172a78b7fc [ 245.387133][T11447] RDX: 000000000000000f RSI: 00007f172b5df0a0 RDI: 0000000000000004 [ 245.387145][T11447] RBP: 00007f172b5df090 R08: 0000000000000000 R09: 0000000000000000 [ 245.387157][T11447] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 245.387168][T11447] R13: 0000000000000000 R14: 00007f172a9a5fa0 R15: 00007ffddb53ddc8 [ 245.387199][T11447] [ 245.660890][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 245.670882][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 245.738963][T11449] xt_CT: No such helper "snmp" [ 245.751999][T11451] xt_CT: No such helper "snmp" [ 246.359968][T11493] netlink: 'syz.2.1430': attribute type 10 has an invalid length. [ 246.368508][T11493] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1430'. [ 246.464595][T11479] delete_channel: no stack [ 246.508532][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 246.537616][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'. [ 246.689584][T11505] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.698595][T11505] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.707422][T11505] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.716257][T11505] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.732725][T11504] netlink: 'syz.0.1434': attribute type 8 has an invalid length. [ 246.887881][T11513] netlink: 'syz.0.1435': attribute type 9 has an invalid length. [ 246.928208][T11517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.068250][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 247.079651][T11520] batadv_slave_1: entered promiscuous mode [ 247.646289][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1448'. [ 247.886919][T11577] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1452'. [ 247.905653][T11577] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 247.973610][T11583] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 247.985851][T11583] team0: entered promiscuous mode [ 247.992116][T11583] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.045796][T11589] netlink: 'syz.3.1457': attribute type 9 has an invalid length. [ 248.242372][T11596] sctp: [Deprecated]: syz.3.1459 (pid 11596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.242372][T11596] Use struct sctp_sack_info instead [ 249.121103][T11617] lo speed is unknown, defaulting to 1000 [ 249.217691][T11623] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 249.265814][T11623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.307543][T11628] Unknown options in mask 1f4 [ 249.477586][T11642] __nla_validate_parse: 6 callbacks suppressed [ 249.477608][T11642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1473'. [ 249.581777][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1475'. [ 249.697084][T11651] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1475'. [ 249.706938][T11651] netlink: 149 bytes leftover after parsing attributes in process `syz.0.1475'. [ 249.978276][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 250.288100][T11691] dvmrp0: entered allmulticast mode [ 250.309138][T11686] vlan4: entered promiscuous mode [ 250.314237][T11686] bridge0: entered promiscuous mode [ 250.321418][T11686] vlan4: entered allmulticast mode [ 250.330357][T11686] bridge0: entered allmulticast mode [ 250.367803][T11690] dvmrp0: left allmulticast mode [ 250.399924][T11690] pimreg: left allmulticast mode [ 250.734269][T11714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1488'. [ 251.326431][T11744] netlink: 'syz.0.1496': attribute type 7 has an invalid length. [ 251.356357][T11744] veth0_vlan: entered allmulticast mode [ 251.695255][ T7782] ------------[ cut here ]------------ [ 251.701278][ T7782] Invalid VIF (ffff8880295be9d0) magic 0x0, 08:02:11:00:00:01, 1/0 [ 251.710074][ T7782] WARNING: CPU: 1 PID: 7782 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 mac80211_hwsim_tx+0x1b6f/0x23c0 [ 251.722111][ T7782] Modules linked in: [ 251.726108][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: kworker/1:7 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 251.736716][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 251.746861][ T7782] Workqueue: mld mld_ifc_work [ 251.751606][ T7782] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 251.757740][ T7782] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 e0 08 aa 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 42 fb 48 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 13 42 88 fa 90 0f 0b 90 e9 d5 f2 ff [ 251.777458][ T7782] RSP: 0018:ffffc90003adeb70 EFLAGS: 00010246 [ 251.783579][ T7782] RAX: 525c27d892966000 RBX: 0000000000000001 RCX: ffff88802550bc00 [ 251.791678][ T7782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.799758][ T7782] RBP: ffff8880295bee2a R08: ffffffff81802842 R09: fffffbfff1cfa57c [ 251.807815][ T7782] R10: dffffc0000000000 R11: fffffbfff1cfa57c R12: 0000000000000000 [ 251.815874][ T7782] R13: dffffc0000000000 R14: ffff8880295be9d0 R15: 0000000000000000 [ 251.823888][ T7782] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 251.832908][ T7782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.839597][ T7782] CR2: 00007fb3a79762d8 CR3: 000000003077c000 CR4: 00000000003526f0 [ 251.847675][ T7782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.855745][ T7782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.863769][ T7782] Call Trace: [ 251.867114][ T7782] [ 251.870083][ T7782] ? __warn+0x165/0x4d0 [ 251.874297][ T7782] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 251.879697][ T7782] ? report_bug+0x2b3/0x500 [ 251.884329][ T7782] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 251.889783][ T7782] ? handle_bug+0x60/0x90 [ 251.894176][ T7782] ? exc_invalid_op+0x1a/0x50 [ 251.898944][ T7782] ? asm_exc_invalid_op+0x1a/0x20 [ 251.904030][ T7782] ? __warn_printk+0x292/0x360 [ 251.908905][ T7782] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 251.914367][ T7782] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 251.920556][ T7782] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 251.927249][ T7782] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 251.932749][ T7782] ? do_raw_spin_unlock+0x13c/0x8b0 [ 251.938048][ T7782] ieee80211_queue_skb+0x1ae9/0x24b0 [ 251.943415][ T7782] ieee80211_tx+0x2c4/0x470 [ 251.948020][ T7782] ? __pfx_ieee80211_tx+0x10/0x10 [ 251.953120][ T7782] ? ieee80211_xmit+0x30f/0x3f0 [ 251.958066][ T7782] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 251.964096][ T7782] ? call_rcu+0x168/0xac0 [ 251.968499][ T7782] ? __dev_queue_xmit+0x87b/0x3f50 [ 251.973682][ T7782] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 251.979935][ T7782] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 251.986431][ T7782] ? __lock_acquire+0x1397/0x2100 [ 251.991511][ T7782] ieee80211_subif_start_xmit+0xde/0x4d0 [ 251.995601][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.997221][ T7782] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 252.010772][ T7782] ? __pfx_lock_acquire+0x10/0x10 [ 252.017577][ T7782] dev_hard_start_xmit+0x27a/0x7d0 [ 252.018282][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.022749][ T7782] __dev_queue_xmit+0x1b73/0x3f50 [ 252.033470][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.034864][ T7782] ? __dev_queue_xmit+0x2f4/0x3f50 [ 252.047012][ T7782] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.051208][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.052420][ T7782] ? neigh_resolve_output+0x450/0x740 [ 252.064802][ T7782] ? read_seqbegin+0x15a/0x2c0 [ 252.066162][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.069645][ T7782] ? lockdep_hardirqs_on+0x99/0x150 [ 252.081823][ T7782] ? read_seqbegin+0x200/0x2c0 [ 252.082048][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.086656][ T7782] ? __pfx_read_seqbegin+0x10/0x10 [ 252.086687][ T7782] ? neigh_resolve_output+0x2e5/0x740 [ 252.086715][ T7782] ? eth_header+0x11c/0x1f0 [ 252.086744][ T7782] ? __asan_memcpy+0x40/0x70 [ 252.086776][ T7782] ? eth_header+0x11c/0x1f0 [ 252.086807][ T7782] ? __pfx_eth_header+0x10/0x10 [ 252.086830][ T7782] ? neigh_resolve_output+0x61f/0x740 [ 252.086877][ T7782] ip6_finish_output2+0x12ad/0x1780 [ 252.086917][ T7782] ? ip6_finish_output2+0x61d/0x1780 [ 252.086952][ T7782] ? __pfx_ip6_finish_output2+0x10/0x10 [ 252.086991][ T7782] ? ip6_mtu+0x81/0x3f0 [ 252.087021][ T7782] ip6_finish_output+0x41e/0x840 [ 252.087056][ T7782] NF_HOOK+0x9e/0x430 [ 252.087082][ T7782] ? NF_HOOK+0xfa/0x430 [ 252.087105][ T7782] ? __pfx_NF_HOOK+0x10/0x10 [ 252.087135][ T7782] ? __pfx_dst_output+0x10/0x10 [ 252.087164][ T7782] ? icmp6_dst_alloc+0x3aa/0x420 [ 252.087194][ T7782] mld_sendpack+0x843/0xdb0 [ 252.087221][ T7782] ? __pfx_mld_newpack+0x10/0x10 [ 252.087264][ T7782] ? mld_sendpack+0x1e8/0xdb0 [ 252.181933][T11772] lo speed is unknown, defaulting to 1000 [ 252.186126][ T7782] ? __pfx_mld_sendpack+0x10/0x10 [ 252.186190][ T7782] mld_ifc_work+0x7d9/0xd90 [ 252.186225][ T7782] ? process_scheduled_works+0x976/0x1840 [ 252.186257][ T7782] process_scheduled_works+0xa66/0x1840 [ 252.186332][ T7782] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.186386][ T7782] ? assign_work+0x364/0x3d0 [ 252.186429][ T7782] worker_thread+0x870/0xd30 [ 252.186479][ T7782] ? __kthread_parkme+0x169/0x1d0 [ 252.186515][ T7782] ? __pfx_worker_thread+0x10/0x10 [ 252.186545][ T7782] kthread+0x7a9/0x920 [ 252.186575][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.186611][ T7782] ? __pfx_worker_thread+0x10/0x10 [ 252.186647][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.186676][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.186714][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.186744][ T7782] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.186769][ T7782] ? lockdep_hardirqs_on+0x99/0x150 [ 252.186798][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.186833][ T7782] ret_from_fork+0x4b/0x80 [ 252.186863][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.186897][ T7782] ret_from_fork_asm+0x1a/0x30 [ 252.186946][ T7782] [ 252.186976][ T7782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.186990][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: kworker/1:7 Not tainted 6.13.0-syzkaller-09699-g0bea93fdbaf8 #0 [ 252.187013][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.187028][ T7782] Workqueue: mld mld_ifc_work [ 252.187051][ T7782] Call Trace: [ 252.187059][ T7782] [ 252.187069][ T7782] dump_stack_lvl+0x241/0x360 [ 252.187099][ T7782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.187126][ T7782] ? __pfx__printk+0x10/0x10 [ 252.187174][ T7782] ? vscnprintf+0x5d/0x90 [ 252.187201][ T7782] panic+0x349/0x880 [ 252.187240][ T7782] ? __warn+0x174/0x4d0 [ 252.187272][ T7782] ? __pfx_panic+0x10/0x10 [ 252.187322][ T7782] ? ret_from_fork_asm+0x1a/0x30 [ 252.187357][ T7782] __warn+0x344/0x4d0 [ 252.187386][ T7782] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 252.187427][ T7782] report_bug+0x2b3/0x500 [ 252.187454][ T7782] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 252.187498][ T7782] handle_bug+0x60/0x90 [ 252.187528][ T7782] exc_invalid_op+0x1a/0x50 [ 252.187568][ T7782] asm_exc_invalid_op+0x1a/0x20 [ 252.187598][ T7782] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 252.187639][ T7782] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 e0 08 aa 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 42 fb 48 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 13 42 88 fa 90 0f 0b 90 e9 d5 f2 ff [ 252.187659][ T7782] RSP: 0018:ffffc90003adeb70 EFLAGS: 00010246 [ 252.187680][ T7782] RAX: 525c27d892966000 RBX: 0000000000000001 RCX: ffff88802550bc00 [ 252.187697][ T7782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.187712][ T7782] RBP: ffff8880295bee2a R08: ffffffff81802842 R09: fffffbfff1cfa57c [ 252.187729][ T7782] R10: dffffc0000000000 R11: fffffbfff1cfa57c R12: 0000000000000000 [ 252.187745][ T7782] R13: dffffc0000000000 R14: ffff8880295be9d0 R15: 0000000000000000 [ 252.187772][ T7782] ? __warn_printk+0x292/0x360 [ 252.187842][ T7782] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 252.187878][ T7782] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 252.187902][ T7782] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 252.187927][ T7782] ? do_raw_spin_unlock+0x13c/0x8b0 [ 252.187967][ T7782] ieee80211_queue_skb+0x1ae9/0x24b0 [ 252.188031][ T7782] ieee80211_tx+0x2c4/0x470 [ 252.188059][ T7782] ? __pfx_ieee80211_tx+0x10/0x10 [ 252.188111][ T7782] ? ieee80211_xmit+0x30f/0x3f0 [ 252.188144][ T7782] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 252.188170][ T7782] ? call_rcu+0x168/0xac0 [ 252.188192][ T7782] ? __dev_queue_xmit+0x87b/0x3f50 [ 252.188242][ T7782] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 252.188271][ T7782] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 252.188304][ T7782] ? __lock_acquire+0x1397/0x2100 [ 252.188347][ T7782] ieee80211_subif_start_xmit+0xde/0x4d0 [ 252.188383][ T7782] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 252.188433][ T7782] ? __pfx_lock_acquire+0x10/0x10 [ 252.188476][ T7782] dev_hard_start_xmit+0x27a/0x7d0 [ 252.188534][ T7782] __dev_queue_xmit+0x1b73/0x3f50 [ 252.188592][ T7782] ? __dev_queue_xmit+0x2f4/0x3f50 [ 252.188640][ T7782] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.188678][ T7782] ? neigh_resolve_output+0x450/0x740 [ 252.188701][ T7782] ? read_seqbegin+0x15a/0x2c0 [ 252.188724][ T7782] ? lockdep_hardirqs_on+0x99/0x150 [ 252.188754][ T7782] ? read_seqbegin+0x200/0x2c0 [ 252.188783][ T7782] ? __pfx_read_seqbegin+0x10/0x10 [ 252.188806][ T7782] ? neigh_resolve_output+0x2e5/0x740 [ 252.188830][ T7782] ? eth_header+0x11c/0x1f0 [ 252.188858][ T7782] ? __asan_memcpy+0x40/0x70 [ 252.188889][ T7782] ? eth_header+0x11c/0x1f0 [ 252.188918][ T7782] ? __pfx_eth_header+0x10/0x10 [ 252.188940][ T7782] ? neigh_resolve_output+0x61f/0x740 [ 252.188986][ T7782] ip6_finish_output2+0x12ad/0x1780 [ 252.189024][ T7782] ? ip6_finish_output2+0x61d/0x1780 [ 252.189057][ T7782] ? __pfx_ip6_finish_output2+0x10/0x10 [ 252.189097][ T7782] ? ip6_mtu+0x81/0x3f0 [ 252.189126][ T7782] ip6_finish_output+0x41e/0x840 [ 252.189158][ T7782] NF_HOOK+0x9e/0x430 [ 252.189183][ T7782] ? NF_HOOK+0xfa/0x430 [ 252.189206][ T7782] ? __pfx_NF_HOOK+0x10/0x10 [ 252.189235][ T7782] ? __pfx_dst_output+0x10/0x10 [ 252.189263][ T7782] ? icmp6_dst_alloc+0x3aa/0x420 [ 252.189295][ T7782] mld_sendpack+0x843/0xdb0 [ 252.189319][ T7782] ? __pfx_mld_newpack+0x10/0x10 [ 252.189363][ T7782] ? mld_sendpack+0x1e8/0xdb0 [ 252.189388][ T7782] ? __pfx_mld_sendpack+0x10/0x10 [ 252.189442][ T7782] mld_ifc_work+0x7d9/0xd90 [ 252.189474][ T7782] ? process_scheduled_works+0x976/0x1840 [ 252.189503][ T7782] process_scheduled_works+0xa66/0x1840 [ 252.189571][ T7782] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.189613][ T7782] ? assign_work+0x364/0x3d0 [ 252.189654][ T7782] worker_thread+0x870/0xd30 [ 252.189703][ T7782] ? __kthread_parkme+0x169/0x1d0 [ 252.189737][ T7782] ? __pfx_worker_thread+0x10/0x10 [ 252.189766][ T7782] kthread+0x7a9/0x920 [ 252.189795][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.189830][ T7782] ? __pfx_worker_thread+0x10/0x10 [ 252.189859][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.189889][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.189926][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.189957][ T7782] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.189981][ T7782] ? lockdep_hardirqs_on+0x99/0x150 [ 252.190007][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.190041][ T7782] ret_from_fork+0x4b/0x80 [ 252.190069][ T7782] ? __pfx_kthread+0x10/0x10 [ 252.190102][ T7782] ret_from_fork_asm+0x1a/0x30 [ 252.190151][ T7782] [ 252.192001][ T7782] Kernel Offset: disabled