last executing test programs: 4.802908279s ago: executing program 2 (id=2033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='dctcp-reno\x00', 0xb) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8907, 0x0) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffff6, 0x8001, 0xffa3, 0x5, 0x8001, 0x788, 0xe, 0x3}, &(0x7f00000002c0)={0x380, 0xfffd, 0x9, 0x3, 0x200, 0xc1, 0x22a12b40, 0x4}, &(0x7f0000000300)={0x5, 0x7, 0x9cfa, 0x9, 0x9, 0x7fffffff, 0x7900, 0x81}, &(0x7f0000000340)={0x77359400}, &(0x7f0000000400)={&(0x7f0000000380)={[0x7fffffff]}, 0x8}) 3.821958896s ago: executing program 2 (id=2046): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xfffffff8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x50}}, 0x4000) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x1, 0x4) 2.771786911s ago: executing program 2 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.358822814s ago: executing program 1 (id=2060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000400)=0x2, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="00000000003f0000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r9, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r10 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) read(r10, &(0x7f0000000200)=""/99, 0x63) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket(0x1, 0x803, 0x0) 2.085179289s ago: executing program 4 (id=2064): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 2.062811958s ago: executing program 3 (id=2065): pselect6(0x40, &(0x7f0000000000)={0x3, 0x4, 0x3, 0x10000, 0x0, 0x6, 0xe}, &(0x7f0000000040)={0x401, 0xfffffffffffffff0, 0xfdd, 0x173, 0x4, 0xdf, 0x4, 0x9}, &(0x7f0000000080)={0x9, 0x3, 0x8, 0x0, 0x0, 0x4, 0x3, 0x7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/184, 0xb8}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000440)=""/66, 0x42}], 0x3}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/229, 0xe5}, {&(0x7f0000001840)=""/192, 0xc0}], 0x6}}], 0x2, 0x20, &(0x7f0000001a00)={0x77359400}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r4, 0x0, 0x52, 0xf3, &(0x7f0000001ac0)="cae9935ef42689b9cdc3cbf6328fafc3495a915720228535999412fc6d572c3f099cd1497fcbb75098c4dc3c334a2985adaeae46fcc4f52bebc69ce6a4017ee9bae0696ad334632e0cab33d8e9e9dfa904e7", &(0x7f0000001b40)=""/243, 0x6, 0x0, 0x99, 0xa8, &(0x7f0000001c40)="df197c3426f684f49ee01e53bea969962d49e6d3cc0991638e84bc640f13d66cab10e9babed512ab2c0c126d2ce18ce932fec697b912328d800df8ad114ed9c7b212cd9704a79174a3f0110bd9894b94ad5905e328d64eb1d3f464af2844c1f0cc50324d85b703ff8f237da69ca65bb5475c6bc965ca3e23dd6cb7abec073411a619c52d0df6360b19cab8c1542edb71a921157bb0327b8cba", &(0x7f0000001d00)="de77c034b8b1cd87b91cba5fe1b97c4a81e0d50d512f6827755fab22cfe1abd779dd441ce173bbd6760bc651676b5761cce458ca1ee2107202d639f58e4a690f37c7bf428eebed1ba0b0d5cac172cc0f9972916df12bd23cc2befb497c31d2952938bd26959094168f10a938abda15ec1e09afa6edfc96b67e914573c7274955af5eb178f32a90e8c7ddcb719384afb6df017c0d177b42fe17208216f74533474da264c53d50d110", 0x6, 0x0, 0x8}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000001e40), &(0x7f0000001e80)=0x4) (async) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000001e40), &(0x7f0000001e80)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f40)={{}, &(0x7f0000001ec0), &(0x7f0000001f00)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)=r4}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001f80)={r0, 0x0, 0x7fff, 0x9}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002280), 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x11, 0x33, &(0x7f0000001fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x8, 0x9, 0x0, 0x50, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x6, 0x8, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x61260}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x3, 0x0, 0x7, 0x7, 0x10, 0x9cbb7735a83fdb7d}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd9d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002180)='GPL\x00', 0x0, 0xba, &(0x7f00000021c0)=""/186, 0x40f00, 0x45, '\x00', r3, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000022c0)={0x1, 0xe, 0xffff, 0x938f}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000002300)=[{0x3, 0x5, 0xe, 0x8}, {0x3, 0x4, 0xc, 0xa}], 0x10, 0x412}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000002400), r7) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000002400), r7) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002480), r8) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x60, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80040}, 0x88a5) (async) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x60, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80040}, 0x88a5) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002600), r5) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r11, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xe6ed74dc98119529}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r11, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xe6ed74dc98119529}, 0x20000000) openat$cgroup_devices(r7, &(0x7f0000002700)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(r7, &(0x7f0000002700)='devices.deny\x00', 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000002880)={&(0x7f0000002780)={0xf0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3b}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8ee5419dac5d5756}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040804}, 0x20004004) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000002b00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002940)={0x148, r10, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x148}, 0x1, 0x0, 0x0, 0x400}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000002b00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002940)={0x148, r10, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x148}, 0x1, 0x0, 0x0, 0x400}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002b80)=@generic={&(0x7f0000002b40)='./file0\x00', r7}, 0x18) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000002bc0)) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000002c00), &(0x7f0000002c40)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(r7, &(0x7f0000002c80)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) r12 = openat$cgroup_ro(r7, &(0x7f0000002c80)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000002d00), r7) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x44, r13, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x40881) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xb0}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xa, 0x5, 0x72d]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) 1.92292064s ago: executing program 4 (id=2066): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 1.828252615s ago: executing program 3 (id=2068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c00018005"], 0x28}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44840) 1.775928242s ago: executing program 2 (id=2069): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000)) 1.716963603s ago: executing program 4 (id=2070): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x17f) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x29c8c000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x2, 0x6, 0x500, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc145) 1.648266191s ago: executing program 3 (id=2071): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x130, 0x7203, 0x148, 0x130, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 1.617642764s ago: executing program 0 (id=2072): bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x6, 0x0, &(0x7f0000000140)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r4 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) (async) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 1.568955282s ago: executing program 3 (id=2073): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2002}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x801000, 0xfffff4e7, 0x1000, 0x3a, 0x178, 0xf84, 0x3}, 0x1c) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="240000001e005f0214fffffffffffff807002389d33ee703af7900001d00000000000000", 0x24) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'pim6reg\x00', 0x200}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x3a, {0x2, 0x4e21, @broadcast}, 'xfrm0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000300)='wg2\x00') sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2002}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x801000, 0xfffff4e7, 0x1000, 0x3a, 0x178, 0xf84, 0x3}, 0x1c) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) write(r1, &(0x7f0000000100)="240000001e005f0214fffffffffffff807002389d33ee703af7900001d00000000000000", 0x24) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'pim6reg\x00', 0x200}) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x3a, {0x2, 0x4e21, @broadcast}, 'xfrm0\x00'}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000300)='wg2\x00') (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async) 1.435917882s ago: executing program 0 (id=2074): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x19, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async, rerun: 64) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}, {&(0x7f00000000c0)}], 0x2) (rerun: 64) 1.289160837s ago: executing program 1 (id=2075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20004040) 1.244924869s ago: executing program 0 (id=2076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071108000000040009500000900000000"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000080000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200"/28, @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000fe80040000000000000000001c53ce75"], 0x40}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1006, 0x9}, 0x50) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xfff, 0x4, 0x1, 0x1, r5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20) close(0x4) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r4}, 0x10) (async) r9 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r9, r8, 0x0, 0x16, 0xfffffffffffffffe}, 0x30) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r9, r10, 0x0, 0x0, 0x0}, 0x30) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x0, @local}}) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.144140365s ago: executing program 3 (id=2077): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x54, &(0x7f0000000240)="61c779b8907b45132747e57603ff50bf53f48424b1496272d99d682ed47e52c86880cbe7027a9a88d720e7f6075c2ec3e7745b6447dd2c6febe8c714c092ff746906f6d84a46630365ff3d55dc30f47400d36dc5", 0x28, 0x0, &(0x7f00000002c0)="dd8a2b7fd9949055692ec68029ab7c868093fc39f4a45feebb5de3cb1b65d803137a8bdf2f839176"}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socketpair(0x21, 0x2, 0x5, &(0x7f00000000c0)) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) unshare(0x22020600) (async) clock_gettime(0x1, &(0x7f0000000300)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="190800000066405b00feffff07000000ff00008510000006000000181000005eebb0c4ae310c", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000360a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x8}, {0xb, 0x1}, {0x3, 0x2}, {0xc, 0x1}, {0xa, 0x2}, {0x2, 0x2}, {0xa, 0x4}, {0xa}]}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x6}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f00000004c0)=""/152, 0x80, 0x98, 0x1, 0xd}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, r7, 0x1, '\x00', r9, r10, 0x5, 0x0, 0x5}, 0x50) 976.252247ms ago: executing program 3 (id=2078): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x21, 0x81, 0xffffffffffffffff, 0xfffff80000000001, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000040)={0x3ff, 0x20, 0x0, 0x9, 0x6, 0x8, 0x7f, 0x401}, 0x0, 0x0) 934.417164ms ago: executing program 1 (id=2079): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a70700", 0x7}], 0x1, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r3, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x21}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x73}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x708}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xbe}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4044004}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000500), 0x0}, 0x20) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0) 848.179734ms ago: executing program 0 (id=2080): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}}, 0x40004) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) unshare(0x24060400) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, 0x0, 0x40040) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68001f00"/20, @ANYRES32=0x0, @ANYBLOB="0e00000014000100fe8800000000000000000000000000011400010000000000000000000000ffffffffffff0800020094e60e6a08000200b060f1101400010000000000000000000000000000000001"], 0x68}, 0x1, 0x0, 0x0, 0x40094}, 0x20000000) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'geneve1\x00', 0x2}, 0x18) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0x44, 0x4, 0x408, 0xffffffff, 0x108, 0x108, 0x0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0x108, 0x8502}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0xfffffb8b, 0x9, 0x0, 0x1}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {0x0, 0x11}, [@common=@ipv6header={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x0, 'SET\x00', 0x1, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffdc) 760.29331ms ago: executing program 2 (id=2081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0274204690d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000080)={0x11, @multicast1, 0x4e23, 0x3, 'fo\x00', 0x2b, 0xffff, 0xd}, 0x2c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x1000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa47a}]}}]}, 0x44}}, 0x8014) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240)=0x4) 734.269698ms ago: executing program 1 (id=2082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000b0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100037042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8902040000000000300012800b000100697036677265000020000280140006000000000000000000000000000000000106000f000f000000"], 0x50}, 0x1, 0x0, 0x0, 0x40844}, 0x0) 659.635192ms ago: executing program 4 (id=2083): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x81, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}}, {{0xa, 0x4e24, 0x9, @loopback, 0x96ac}}}, 0x108) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x2000) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0xb4807000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 578.317041ms ago: executing program 4 (id=2084): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000084140200500012800e00010069703665727370616e0000003c000280060002003000000708000400000000200500160002"], 0x70}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004040) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000200)={0x4004, 0x6, 0x7, 0x239}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="af", 0x1}], 0x1}}], 0x1, 0x4040005) syz_extract_tcp_res(0x0, 0xffffff04, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1c87f89e5e317392}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtfilter={0xc58, 0x2c, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc28, 0x2, [@TCA_CGROUP_POLICE={0xc24, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x400, 0x1, 0x1, 0x2, 0x2, 0x0, 0x5, 0x3, 0xe, 0x7, 0xe0000, 0x10001, 0x6, 0x2d27, 0x10000, 0x6, 0x2, 0x40, 0x3, 0x7838c8e, 0x800, 0x0, 0xf, 0x2, 0x7, 0x8, 0x9, 0x8, 0x3, 0xdd, 0x1, 0x7, 0xe, 0xe9, 0x3, 0x3, 0x7, 0x1, 0x8, 0xb2, 0x9, 0x3, 0x4, 0xfffffbff, 0xfffffff8, 0x1, 0x800, 0x7, 0x2, 0x4, 0x38, 0x58a, 0x8, 0x6, 0x9, 0x1ff, 0x7, 0x9be5, 0x6, 0x1000, 0x81, 0x10, 0x8, 0x2, 0x8, 0x24, 0x21, 0x1, 0xbd04, 0x4, 0x7, 0x2, 0x80000000, 0x2, 0x8, 0x7fffffff, 0xf8, 0x8, 0x80000000, 0x10, 0x4, 0xfffffffd, 0x15, 0xf, 0x10, 0x85d3, 0x6, 0x7, 0x6, 0xbc, 0x76, 0x7fff, 0x3, 0xb, 0xa5, 0x3ff, 0x4, 0xe8, 0x8000, 0x843180, 0xa, 0xa, 0xfffffb90, 0x3, 0x9, 0x7, 0x81, 0x8, 0xb8b5, 0x3, 0xfffffffa, 0x9, 0x80, 0x9, 0xfffffbff, 0x9, 0x8000, 0x80, 0xffffffb2, 0x1a, 0x946, 0x7bfed5ea, 0x8, 0xb4a, 0xffffffff, 0x54, 0x7fff, 0xf, 0x84e, 0x1, 0x6, 0x0, 0x5, 0x9, 0x8687, 0x493a, 0x0, 0x3ff, 0x4, 0x1ff, 0x9, 0xc2, 0x8, 0x6, 0x1, 0x4, 0x6, 0x5d9b2949, 0x5, 0x9b4, 0x3, 0xf, 0x2, 0x4, 0x1000, 0x6, 0x9, 0x200, 0x6, 0x4, 0x5, 0x3, 0xd7, 0x6, 0xfff, 0x7, 0x7, 0x5, 0x9, 0x20000, 0x5, 0x81, 0x10001, 0xffffffc0, 0x9, 0xcd0, 0xfffff0c6, 0x6, 0x401, 0x6, 0x0, 0xab51, 0x9, 0x400, 0x102, 0xb, 0x4, 0x0, 0xf, 0x9, 0x9935, 0x3, 0xfffeffff, 0x6, 0xb, 0x3ff, 0x1, 0x1, 0xfffffffd, 0x7, 0x1, 0xfffffffe, 0xee14, 0x10000, 0x800, 0x4000000, 0x7, 0x5, 0x42b, 0x8000, 0x8, 0x1, 0xe, 0x4, 0x4, 0x101, 0x0, 0x7, 0x6, 0x3, 0x942f, 0x9, 0x7, 0x8, 0x3, 0x2, 0x1, 0x6, 0xffffffff, 0x1, 0x9, 0x8, 0x800, 0x1, 0x8, 0x8, 0xa, 0x5000, 0x67, 0xfc000000, 0x7fffffff, 0x7, 0x401, 0x5, 0x4, 0xe, 0x7, 0x7, 0x5, 0x8, 0x2, 0x5, 0xc032, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0x3, 0x9, 0x10000, 0x4, 0x1, 0x7d, 0x1, 0x1, 0x10001, 0x20000000, 0x1, 0x0, 0x94, 0xd, 0x5, 0x6, 0x7ff, 0x5, 0x8cd, 0x0, 0x8001, 0x1, 0x7, 0x5, 0x5, 0x10000, 0x9c, 0x3, 0xff, 0x426, 0x7fff, 0x0, 0x0, 0x3, 0xfffffe00, 0x1, 0xdd, 0x6, 0xd6c, 0x1, 0x6, 0x9, 0x3, 0x9, 0x1, 0x8001, 0x9, 0x7e80, 0x6, 0x6, 0x10001, 0xff, 0x1, 0x9, 0x5, 0x9, 0x6, 0x2c, 0x1, 0x9, 0x0, 0xdf, 0xaa58, 0xfffffffb, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x2, 0x8001, 0xffffffff, 0x2, 0x2, 0x9, 0x2, 0x0, 0x0, 0x8b6d, 0x8001, 0x1000, 0x3, 0x1, 0x0, 0x9, 0x0, 0x5, 0x4, 0x81, 0x4, 0x6, 0x400, 0xeff0, 0xfffffff9, 0x4, 0x7f, 0x4, 0x4, 0x8a9, 0x9, 0xa2fd, 0x200, 0xffffffff, 0xf68f, 0xf4, 0xffffffff, 0x6, 0x10000, 0x79ca, 0x2, 0x578, 0xfffffffb, 0x40, 0x1000, 0x7, 0xfffffffc, 0x1, 0x6d, 0x1, 0x5, 0x5, 0x9, 0x9, 0x28, 0x10, 0x1, 0x100, 0x9, 0xffffffff, 0xd, 0x9, 0x3, 0xfffffffb, 0x400, 0x8, 0x7, 0x0, 0x8, 0x5f, 0x3, 0x7, 0x2, 0xaf4d, 0x2, 0x80000001, 0x5, 0x3, 0xae86, 0x3a6, 0x1, 0x0, 0x7fffffff, 0x3, 0x0, 0xfe, 0x10001, 0x4, 0x2, 0x7ff, 0x2, 0x1, 0x4, 0x5, 0x15b, 0xd, 0x4, 0xffff0000, 0x8, 0x4, 0x6f8bf82f, 0xe, 0x56, 0x387, 0xfff, 0x0, 0x86, 0x6, 0x9, 0x1, 0x9, 0x70e8643b, 0x6, 0x4, 0x8e, 0x401, 0xfffffffa, 0x9, 0x1, 0xdf7, 0x9, 0x7, 0x1, 0x9, 0x4, 0x1, 0x6, 0x8, 0x6, 0x80000000, 0x5004, 0xfff, 0x7, 0xffff, 0x80000000, 0x2, 0x876, 0x2, 0xffff, 0x47, 0xac, 0xaf2, 0x0, 0x10000, 0x1f, 0x9, 0x2, 0x0, 0x5, 0x6, 0x9, 0x6b, 0xa, 0x7fff, 0x90, 0x6, 0x1ff, 0x3, 0x8, 0x1, 0x7, 0x1, 0x98, 0x2, 0x3, 0x1, 0xa79, 0x9, 0x9, 0x0, 0x80000001, 0x10, 0xfffffffd, 0x10001, 0x40, 0x3, 0x9, 0x80, 0x0, 0x2, 0x1, 0x8, 0x6, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x87a, 0x9d, 0x64f9, 0x0, 0x4, 0x8859955f, 0x4, 0x8, 0x0, 0x100, 0x3ff, 0x9, 0x504, 0xd1db, 0xb8, 0x1, 0x540, 0x4, 0xc8, 0x5, 0x200, 0x9, 0x7, 0xfffffff0, 0xff, 0x79a, 0x5, 0x7, 0x7, 0x3, 0x5, 0x2, 0x6, 0xfdd1, 0x5, 0x0, 0x6, 0x6, 0x8, 0x6, 0x8, 0x0, 0x5, 0x10, 0x3, 0x6, 0x4, 0xfffffffe, 0x80, 0x8, 0xad82, 0x4, 0x3, 0x1, 0x7, 0x4e4e, 0x7, 0x400, 0x7d, 0x7, 0xc49b, 0x5, 0x5ee, 0x7ff, 0x100, 0x4, 0xffffffff, 0x4, 0x80000001, 0xc, 0x813, 0x5, 0x40, 0x5, 0x3, 0x9f68, 0x1, 0x8, 0x5a45, 0xdd0, 0x6, 0x1, 0x14, 0x1, 0xb, 0x7, 0x89, 0xa, 0x1, 0x320, 0x9, 0x3, 0x0, 0x10000, 0x0, 0x1, 0x6, 0xc93, 0x8, 0x597d, 0x8, 0xf55, 0x6, 0xfffffffe, 0x4, 0x3, 0xe8, 0xf740, 0x0, 0x7fffffff, 0x2, 0x8, 0x2b, 0x2, 0x1, 0x2, 0x5, 0x8, 0x5, 0x2, 0xfffffff3, 0xf9f, 0x80000001, 0x2, 0x1000, 0x8, 0x2, 0x8, 0x5, 0x101, 0xfffffff7, 0x0, 0x3, 0x0, 0xaa, 0xe08a, 0x7fff, 0x6, 0xc5, 0xffffff6c, 0x10000, 0x8, 0x6, 0xe, 0x1, 0x4f8, 0x6, 0xd, 0x9, 0x0, 0xf, 0x8000, 0x47, 0xffff, 0xfffffff7, 0x4, 0x6, 0x0, 0x81, 0xb108, 0x0, 0x0, 0x4, 0x8, 0xdc04, 0x92f6, 0x2, 0x8, 0xe, 0x6, 0xff, 0x4, 0x9, 0x101, 0x9, 0xb9d, 0xf38f, 0x0, 0xab1, 0xb, 0x7, 0xfe000000, 0x9745, 0x8000, 0x80000000, 0x0, 0x6, 0x48, 0x1, 0xfdb, 0xb9, 0x1, 0x7fff, 0x4af3b2cd, 0x0, 0xfffffff9, 0x1, 0x8, 0x7, 0x0, 0x4, 0x8001, 0x7fff, 0x38, 0x7, 0x1000, 0xb, 0x9, 0x922, 0x4, 0x100, 0x47d, 0x854, 0x5, 0x0, 0x80000000, 0x101, 0x3e8b, 0x9, 0x6, 0x1, 0x7fffffff, 0xff, 0x3, 0x9a06, 0x3, 0x4, 0x8001, 0x8b, 0x0, 0x1, 0x0, 0xc, 0x581c4072, 0x0, 0x6, 0xe8b5, 0x8e6, 0x2, 0x0, 0xc0bb, 0x47e1, 0x8000, 0x6, 0x8, 0x7, 0x6, 0x2, 0xfff, 0x81, 0x1, 0xf10, 0x3ff, 0xd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}]}]}}]}, 0xc58}, 0x1, 0x0, 0x0, 0x8080}, 0x44844) 572.437744ms ago: executing program 0 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x76, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000280)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_STAB={0x2e, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xf3, 0x3, 0x1, 0x2, 0xfffffff7, 0x6}}, {0x10, 0x2, [0xdc02, 0x5, 0xc, 0x2, 0x6, 0x7b2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0xfd, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40e00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="05b10730c435b4e3a52fe5dcba5d07eb5d6473a133ee2b955ec0fdc9b4c4468882445e7b305812bcc385374d1babd64bdd500ce7fd7f40791647a7391f615a92ec15cf544713c8aa49c510f1a58c5fc077604008f3c879acc76fb5d15c40d3485d64a6999258aa95c2cd9fcfb5411ffe4aec106e55da639990fdf2b59c3dc4fcd092e752ee72b380b096650093bee315d9cf05b854a9053afa44147a23ba427cff7ee2509dede8ab9ce4369ee70f45", 0xaf}, {&(0x7f0000000240)="c5ae52755d8b7a0e31b56bb6fda16889f1f2a2b846180559883f75b0c3f99eb49e077a2a421334153df7701b3f47b5079cb05ac2272124f0e2c459366127131e2ff1b8f02d803de98e316c7d215ff12d011c2e855b741fa39c000dedf82c2864b0a7488c5b9a4edc03360ab73b88c0459e4292b5496ac38de1b7be896f07e0d3ed63a62637951119e27ad2d7c05efa6b8a3294849faaf38c2f1be7253a1617", 0x9f}], 0x2, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x50}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="dfe97fe94e4db24debcc19d6be445eba9c8922282f15db62", 0x18}], 0x1, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x76}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}], 0x2, 0xc0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000140)={r12, 0x4}, 0x8) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 403.70759ms ago: executing program 2 (id=2086): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x55, &(0x7f0000000080)=0x1) syz_emit_ethernet(0x3c, &(0x7f00000000c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@arp={0x806, @generic={0x10e, 0x80f3, 0x6, 0xf, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, "0853bec683429030c6614ff5871f99", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "0d62eff5587dfe7245f0e1"}}}}, &(0x7f0000000100)={0x1, 0x1, [0xd97, 0x780, 0xc9, 0xafe]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/94, 0x5e, 0x0, &(0x7f00000001c0)=""/57, 0x39}}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x8001, 0x1, 0x1, 0x2, 0x5, 0x8}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000016c0)={'ip6tnl0\x00', &(0x7f0000001640)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0xde, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x40, 0x1, 0x4889, 0x1}}) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000300)="09cea177a0ac6fccb4787215d96fcc7e75db1bd24bc1a4f400e3c9978244fbf55d2c8091d993919b9364bfc559e5fe1f770d154cdc893bc15fce9956aa8a3547adfa9fd26489728c9ff61c6c11cba4579c0a732bf01888b7a878a4eab0e2a22aab3420360cfab403fc2c92109c39bb0aac999e6ca84f8fe880ec968ab1385c072288eaf8057b7962ead29edbfaa7abcfa7fdc4aeb441a1ece36904c24f145059310d0c4a3f", 0xa5}, {&(0x7f00000003c0)="ef0fe8c08218dd9d1c4fb712fc3956c9d501a2a266e122a284051d28419b9c3998987b36dc9249791582bed55e3d7677dfe17c253b9d76406ac2159f37a186f89ca09cfc0dbc408d3e545c827c1828cdc3fdeda4dedf9b37f65f669de5ce0c1ae50cec6977b4826464398b84b71d065ee244a61b2a455bf08a5c1f3517b76d1072cb87d710dd62e2ad6ab916da292b715d8cb95ba2dbe07fa50d7a15e0a0677bf341ec5ee4cf6972867f800ce83da6333dbb0940f8", 0xb5}, {&(0x7f0000000480)="7d022a97b3a00c7aa865fb0e4b9c5fff1bab7cc6f29f26fbd1ce91a7fbf370ee5225059663a52eb7679ea7c7a2e5ce5f610b9d60bb4aebc79eb5daf19ac02bed60d7c326feaac9c1856ad08caf2ef33f213e70fc4098bf9a2835ffc94e347a7925dde13a0a1c83279109280a4821aa8416", 0x71}, {&(0x7f0000000500)="3a46bfaf33014433adfce64f3cd6b451fda856b5874ef8e9cc3347166ee8212c069651d23193aa4833281944a007146fe38fd05bc4ac6d764ad9e71ea8c25e14cbeb675ad128ec8f906d5e800a37038ee23a5584742a714421cfb8698bda161233474b7231cdf4985124b204b7f880bfd42602c738d68cb7b067d1e3b3085b727a18e1d080f07ba4c24b75724127f621b958095bacafd0e3afc4ac174c98d5755858940c5d72fd7d534691bc2b9b3d565a833bba609194ea8cf913e7fb6871e1209f678e86", 0xc5}, {&(0x7f0000000600)="51d82c7b5a00dd02e92ed78abdba21ecbd3f17c7f8d303b33f8662713a2a55816e51589f7442747cf7f49bbcc6ba459b02093e2613c44a8989990503132794da43a529cc0c01cfb541b3a9a981d2dd3fdb58", 0x52}, {&(0x7f0000000680)="018469939e943a1e8b1047fe1d8c78247a33616ea14c41e119542d6110c53694581910a93959a65d664fd3586c7b6c24c5ea9fb0682400f34c5fc921d9e67302c80d62cc58b13565f04face197", 0x4d}, {&(0x7f0000000700)="a17a4eb4ba3fe812cdc9015492b1f159137bfdd7fdf3c6c4267a6b974c9ec84319a641418633c7dc6d59f3", 0x2b}, {&(0x7f0000000740)="d9acccacae3ec0b7eb9f52cbfa280ab437746bcdec2cc66806d8e4490e5bb5293e27e5b2177f85f5994719ec37c56d79b8f5767e5282871a5bcf725fd921bb4bb2fada0cc64090611445c6fa1a1a5fb095ca226bb6544b010ad73539a11dcd50744af108661c1ef06d8a5762418f73f7914b185bae2fb7516da1baef37bf11048ad7aa628b002c7b475e5cc478ff06462c65112883145c601aa5ef18bf75f15caeb7947774f92d3b7476e0e2a261db", 0xaf}], 0x8, &(0x7f0000000880)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x8, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x3b, 0xc, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x800, [0xa, 0x1fffe00000000, 0x6, 0xf, 0x3500000000000]}}]}}}], 0xb0}}, {{&(0x7f0000000940)={0xa, 0xb, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000980)="2d6fd3d19d9e97502cc150e9f86b63579b4b4a172124972d8cdaf1fbc61e49ec0dc416aaa9dfc777fd2e9f97c40ee8585e7dd5b28ce8ae8a7c0f874762ea57d951fe1f42ee3aa25af3f9bdfa", 0x4c}, {&(0x7f0000000a00)="46d76e970c400feb8d5e8ab4ad4bb9d7b73801804982b817ce3e0068c4670976ce9a44fb708611ce91d1f12c106e6995e9022fbc7be4aba0029db05eff1cbe333074124460b43d1ecefc931389cdd98f19992adf775b6591967624ce21ada89f5d2cc594a6d83a6da1d3f93fae3b2231466e89d0ea770ef0a56bab137e2b98e64db61ec206f531c0eb8e0c7541ded951a8d4514e921e", 0x96}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="1226e89ac9ab1b65be7884d9059ee18cd931bc73614b679dced22de3ff13", 0x1e}, {&(0x7f0000000b40)="7b8331481054ea3f69e93d60944667922a7f9e2b3409a53d6f66d471da5987a03a86d5358c608f10d3b494feeb68fb8cc48a77ef3043c6e30e4212ecb261c29fc7e8dff1206beb56075cb45b5069780f7c0368f21549ce712efc5b9e8739977aeddc1becfcfffb9b63e169ad98606c1f19b30a81a6d07e9c8d546143dcc2f9932d8d5902745992fd0b57a3314eb60b0c2fd40fa0d22f017b20c642a8a6a7f59e89f954d677", 0xa5}, {&(0x7f0000000c00)="7662abbdfb884d51350a09b9021bdd541cca961b596770b4a7695da6bd4f6c724b5398dcb9e13d37ac58f8d1fd3c8f5afbf821532f62989a274ef1a9aa0cd25b5726ed6a74809d281d49f6d34d09f6829ea0335812ecaf0c", 0x58}], 0x6, &(0x7f0000000d00)=[@hopopts={{0x30, 0x29, 0x36, {0x2e, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x490}, @jumbo={0xc2, 0x4, 0x4b3c}, @jumbo={0xc2, 0x4, 0x8}]}}}, @dstopts={{0x270, 0x29, 0x37, {0x2b, 0x4a, '\x00', [@enc_lim={0x4, 0x1, 0xe8}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x20, {0x0, 0x6, 0x5, 0x8, [0x2d, 0x7, 0x2]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x10, 0x1, [0x3, 0x3]}}, @generic={0x7d, 0xb0, "13a9a57a2a5866db38f8302e010b69fe7b820a853bdedd53630a5c7e8466ab01939b8038adb2972b0bb0875ac51ae60e693b428a0c53a0335a54415860b08dd8f83f71118e31e9be634db55bacd8a3fefd8b6365eb5b680d8578df1d3c5360d679cb511eeb55368c18e05af5df886ce3419d449719c71ee642eb6574b7678bd48a832ec0e8bc648f43a14bd1bca62398e1b0cebc0c420651529aeb2eef7eb86daef3f4a9e9e56fe10bffa2a819709208"}, @hao={0xc9, 0x10, @private1}, @generic={0x9, 0xf5, "698f2453e552f412a19ddaff2298761cb05b6f01b4bac7b69c4f18ba339e0f7761ca928ef91b11e7d60081cc0e9145624a33a67232ff412784327df0190b8f0de39dd0566a36044100196fe46d6c558940247c5a0e2944cfd7c4bcbba5f13cacc45e914d9728903f1502d1445d758616eceaa3ddec080301a31b2d8ac2b72f30dcda6a3ee6aadadacbd5411e734cad8cd493a3527a3bc9492a826668662d7e747c9a19b8c62e372b0619a56c773fc7b96876d6a9c21da4ed9825102e057f5a9be5bcbd0ad9c26dc5dce1755ec88ddf82c4e3fa906ba6b7ecdc94d756db76a93e7535cd9953289b6ec10641548c953b07d9213e4841"}, @calipso={0x7, 0x50, {0x2, 0x12, 0x1, 0x0, [0x4, 0x0, 0xb, 0x7, 0x8000000000000001, 0x7f, 0x4, 0x8, 0x100000001]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}], 0x2f8}}, {{&(0x7f0000001000)={0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001040)="4a8a4ceb445edf1a796bd67a5374df438ace24a35414960de5c7f58f91cc702f68ce23540f296e79e79cfdc036790eceabe11602425ab16874cf2bf9f687205596a4819b3563972ad222405b55e8ae835c5948b09d1f7fd548eb8ec4d72747c95d7af6c8191e39d50f5666d7c235f488c254641b3991f0832e7f74a7cad99bb8f5bc3520e6a0247ea8ec6bb5d22a3f2a9e7852b73279388b830ecdaf6cdc705ea71f7f45318d705708318eb2c4", 0xad}, {&(0x7f0000001100)="07a5df0a16fb9c77cb198ec730e1f006523b5d1e4d51d7fdcebc842a0ce9a5acb902101f92018f4c153cffcbd23bd9fc62a9474bf0ef1101cd86b38f1b38c6214a770b5a2bd016c4d7268a684ef0beb3ec499ad609cf8fb8978f2d1604ffb46dc95c7122ebc62aedacbfcd21aef9e71243cbf5a9d6d204b01975d4d82d6123da666d10236d7f0ddbe53c263de4b3d31df8efb0edc6fe155659b17bf05888d4b77e27e3969e06a8f5a058392c45f9c69b8c5f5beccbcbaa428d771c6b9f42662d733855c19d5b3cad22bde33a6b6688", 0xcf}, {&(0x7f0000001200)="9e8f9e9ffa56b0adf3f142e49161e72de73b398c0d9bbe6fa6d42ba8d402484265eadc42a73d0bdeaab36c29e74a2114e45b27a6ec39e4e7b35395be87f076bf91bc9fed5177ee755704fdfd7a442eeda91f258fa664930ac45e4b4a32e77258532f623efc3036830b97a4171bdb9465ee70478f91b7bbf5c77b530283077111ebbb24e6f50cbabca69c9c", 0x8b}, {&(0x7f00000012c0)="bfb8fc007e171f93cf13a72213c7d3479cdceecf091e6ad4e5fa48221a6688adc92e439207c823556d3f01e84b6959a6d420fb063a0fbdbc4a9d2fa7fae3e4560031a967c24bf7950c0feae816cc351f41ca1228f57e21226077d38ca1253d5069b103af0062d890098307ad380f72cffc978c64ea0bd42349207e19b379343450da8de1e94f076f25dca7ea786239280668c81c9fd1b7dfbefecbfcbcda2c305c90f203095c18ef299aa382dab3f244c517ddfe7a607cfc8f4abf76888a464944dbdaca4e8f7080f6621c22dd98b66f00630e90c0490d4e50ffbf96898b75d060c40f85a89aca803f043377731576c3fb14ab", 0xf3}, {&(0x7f00000013c0)="e699e84aa78c71d8d28aac511b01b6c05dc0254984d77e8c4f532e1dd749515615ee50543eb30cb9748c49adfb81d0986a8010e4c61b5ef462ea57107a338118c9f1dc20cf1d20128aa31ddf7a27d651d494e3d4067e97b996d09f9b07b33652048f243926eee7ca39fe7bb3edfdee1f6ccee12e9882868938801c5f5ad9810512f205dd5c340e5bead83c0cbafae3f8e7ba606f5d63cc87972d2301c854dfffa66120a1ccff724d19b750e9ff672347c65838f72b11f683", 0xb8}, {&(0x7f0000001480)="b77dbeceb49ea667450542c440e1667d1ad97b5ab60d9eb972852bdc11f90ad5e36a796a49e6212de9545e066ff99d9ce79f481dcde4cbbef7d3eb3f5d8ebd12c5aeecc74fd8d65ee9b7a0a05b5f97d7df70d2c6eaf1cb819c9d3d4af8c848493d0dbbee08384b357d4d81d4f8d07d40d83dfdd8f8baa9f914b38afe3ea1e7e49ddd5ec0cdc9a0041b7b6b327ad0f7", 0x8f}, {&(0x7f0000001540)="c2c313cf85e7a39b221fa319fcb4099a9f0ecb5e8f518971a2c697ac56899b9b86cb55e5d3a3cc5c39b6ba12d6db6a83f71b59f351c92a50b2e80f3702af60f161a2a55b803106c6a89d6801bef83813f50aa1b4315890165846b1dd975ecd688ba0d795b2710a89e2cba86c5b826212f4e6456a26cf0c84cd3733d3df699267", 0x80}], 0x7, &(0x7f0000001700)=[@hopopts_2292={{0x1090, 0x29, 0x36, {0xb8, 0x20e, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0xf78d, [0x9, 0xfffffffffffffff8, 0xb, 0x7, 0x5, 0x9, 0xffffffffffffff10, 0x5f]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x2211}, @pad1, @ra={0x5, 0x2, 0x6}, @generic={0x9, 0x1000, "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"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x14000000}}, @flowinfo={{0x14}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x73, 0xa, '\x00', [@pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0xf, 0x3, [0x7fffffffffffffff, 0x2, 0x5, 0x8, 0x2400000000000, 0x7f, 0x2400000000000, 0xb48, 0x8]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r3}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts={{0x68, 0x29, 0x36, {0x6c, 0xa, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0xf3, 0xe11, [0x4, 0xffffffffffffe51e]}}, @ra, @calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x8, [0xf, 0x80000000, 0x7c, 0x6, 0x7]}}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x88}}}], 0x1220}}], 0x3, 0x4000000) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000002a00)={0x1d, r3}, 0x10) r5 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000002a40), 0x80000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r5, 0x8459f000) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000002a80)=0x9c99) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000002ac0)={0x1d, r3}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000002b00)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000002b80)={0x1f, 0x7a, 0x4}, 0x6) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002bc0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002dc0)=r1, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000002e80), &(0x7f0000002ec0)='%pI4 \x00'}, 0x20) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002f80)={0x6, 0x1b, &(0x7f0000002c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x2, 0x0, 0x3, 0xa, 0xffffffffffffffe0, 0xffffffffffffffff}, @generic={0x9, 0x2, 0xe, 0x7f, 0x35}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0xc, 0x1, 0x7, 0x5, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002d40)='syzkaller\x00', 0xfffffe01, 0x37, &(0x7f0000002d80)=""/55, 0x40f00, 0x2, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000002e00)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002e40)={0x3, 0x2, 0x800, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002f40)=[r11, 0x1], 0x0, 0x10, 0x7}, 0x94) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000003040)={0x1ff, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x9}}}, 0x88) tee(r12, r4, 0xd, 0x4) sendto$inet6(r4, &(0x7f0000003100)="8c0030d1a8779edd74a1ff261f77596f0f7428cd7c1c8c2b2894819544426bec7c", 0x21, 0x0, &(0x7f0000003140)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00'}, 0x1c) unshare(0x40000000) splice(r10, &(0x7f0000003180)=0x7ff, r0, &(0x7f00000031c0)=0x8, 0x0, 0x4) read(r5, &(0x7f0000003200)=""/77, 0x4d) connect$pppl2tp(r11, &(0x7f0000003280)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x0, 0x0, 0x3, 0x1, {0xa, 0x4e22, 0x2, @local, 0x9}}}, 0x32) 401.483796ms ago: executing program 1 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) (async) unshare(0x24040000) (async) unshare(0x2c020400) 306.823872ms ago: executing program 0 (id=2088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1}}, {{&(0x7f00000022c0)=@can={0x1d, r4}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002340)='v', 0x5cc}], 0x1}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r10, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) 98.476238ms ago: executing program 4 (id=2089): socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x67, @remote, 0x0, 0x8, 'none\x00'}, {@local, 0x4, 0x0, 0x0, 0x100020, 0xfffffffe}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000b40)=""/137, 0x82}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000ac0)=""/106, 0x5f}, {&(0x7f0000000500)=""/111, 0x6f}, {&(0x7f0000000680)=""/160, 0xffffffffffffffa4}, {&(0x7f0000000740)=""/189, 0xbd}], 0x8, &(0x7f0000000880)=""/147, 0x93}, 0x40012122) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="187bbef5bfffd595eb4a09b95f0a30770590e60bbdff000f5e5d737a77b4d40e66a487ed7c510fd56fe6dcf5e78af16ad8c9bbcc5f69569dc6276d6694de6b459cbad6bc1b2f8dbf2c33c9110dc4c0c26c77c765454d71ed63d917d62534a6ab5a8b30bae7ef456b665219c33184890de09f0ec277d0574a0feb7d2e09d959b3c9c5aeda945543698f9b76aad7c9eb83becb3d8c91e94d38e0e68520dca894a998099881e2abaf6195bea5e17c397d8e4f8321d6a9812d791d824a6c97089395b60759b14ed3f68b98e24891623bb9c240d254eec7f201633e", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) shutdown(r6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x30, 0x18, 0x1, 0x2, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) 0s ago: executing program 1 (id=2090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x7}, {0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x2, 0x7, 0x201}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa86dd60f10200001c06fffc010000000000000000000000000001fe8000000400000000000000000000aa4e2000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6010000090780000000000002d675343"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) unshare(0x42000000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000500)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100033060000000008000080e0000002000000000000000000000000fe80000000000000000000000000002a00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000005000000ffffffffffffffe8000000000000000000000000050000000000000000000000000000000000000002000000000000000a000400000000000000000048000200656362286369706865725f6e750000290000000000000000000000000000000000000000000000000000000000000000000000000000000000003cd358840000000000007a74024166"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) kernel console output (not intermixed with test programs): 8422] should_fail_ex+0x414/0x560 [ 164.477979][ T8422] should_failslab+0xa8/0x100 [ 164.478002][ T8422] __kmalloc_noprof+0xcb/0x4f0 [ 164.478020][ T8422] ? dev_prep_valid_name+0x193/0x610 [ 164.478049][ T8422] dev_prep_valid_name+0x193/0x610 [ 164.478075][ T8422] ? __pfx___might_resched+0x10/0x10 [ 164.478105][ T8422] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 164.478137][ T8422] ? __raw_spin_lock_init+0x45/0x100 [ 164.478163][ T8422] register_netdevice+0x542/0x1ae0 [ 164.478204][ T8422] ? ip_tunnel_find+0x4f9/0x5d0 [ 164.478225][ T8422] ? __pfx_register_netdevice+0x10/0x10 [ 164.478248][ T8422] ? __pfx_ip_tunnel_find+0x10/0x10 [ 164.478269][ T8422] ? net_generic+0x1e/0x240 [ 164.478286][ T8422] ? ip_tunnel_newlink+0x237/0x8b0 [ 164.478314][ T8422] ip_tunnel_newlink+0x261/0x8b0 [ 164.478344][ T8422] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 164.478367][ T8422] ? __asan_memset+0x22/0x50 [ 164.478390][ T8422] ? ipgre_netlink_parms+0x666/0x9c0 [ 164.478425][ T8422] ipgre_newlink+0x354/0x420 [ 164.478456][ T8422] ? __pfx_ipgre_newlink+0x10/0x10 [ 164.478502][ T8422] ? __pfx_ipgre_newlink+0x10/0x10 [ 164.478526][ T8422] rtnl_newlink_create+0x30d/0xb00 [ 164.478551][ T8422] ? __mutex_lock+0x51b/0xe80 [ 164.478569][ T8422] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 164.478587][ T8422] ? rtnl_newlink+0x8db/0x1c70 [ 164.478607][ T8422] ? __pfx___mutex_lock+0x10/0x10 [ 164.478629][ T8422] ? ns_capable+0x8a/0xf0 [ 164.478653][ T8422] rtnl_newlink+0x16d6/0x1c70 [ 164.478683][ T8422] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.478699][ T8422] ? is_bpf_text_address+0x26/0x2b0 [ 164.478726][ T8422] ? __lock_acquire+0xab9/0xd20 [ 164.478755][ T8422] ? __lock_acquire+0xab9/0xd20 [ 164.478789][ T8422] ? is_bpf_text_address+0x26/0x2b0 [ 164.478813][ T8422] ? is_bpf_text_address+0x292/0x2b0 [ 164.478833][ T8422] ? is_bpf_text_address+0x26/0x2b0 [ 164.478856][ T8422] ? kernel_text_address+0xa5/0xe0 [ 164.478884][ T8422] ? __lock_acquire+0xab9/0xd20 [ 164.478922][ T8422] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.478958][ T8422] rtnetlink_rcv_msg+0x7cc/0xb70 [ 164.478981][ T8422] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 164.478998][ T8422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.479030][ T8422] netlink_rcv_skb+0x205/0x470 [ 164.479049][ T8422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.479069][ T8422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.479097][ T8422] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.479115][ T8422] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.479138][ T8422] netlink_unicast+0x758/0x8d0 [ 164.479174][ T8422] netlink_sendmsg+0x805/0xb30 [ 164.479223][ T8422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.479249][ T8422] ? aa_sock_msg_perm+0x94/0x160 [ 164.479270][ T8422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.479288][ T8422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.479308][ T8422] __sock_sendmsg+0x219/0x270 [ 164.479327][ T8422] ____sys_sendmsg+0x505/0x830 [ 164.479354][ T8422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.479395][ T8422] ? import_iovec+0x74/0xa0 [ 164.479421][ T8422] ___sys_sendmsg+0x21f/0x2a0 [ 164.479455][ T8422] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.479514][ T8422] ? __fget_files+0x2a/0x420 [ 164.479537][ T8422] ? __fget_files+0x3a0/0x420 [ 164.479572][ T8422] __x64_sys_sendmsg+0x19b/0x260 [ 164.479606][ T8422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.479638][ T8422] ? __pfx_ksys_write+0x10/0x10 [ 164.479649][ T8422] ? rcu_is_watching+0x15/0xb0 [ 164.479676][ T8422] ? do_syscall_64+0xbe/0x3b0 [ 164.479695][ T8422] do_syscall_64+0xfa/0x3b0 [ 164.479709][ T8422] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.479723][ T8422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.479737][ T8422] ? clear_bhb_loop+0x60/0xb0 [ 164.479755][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.479769][ T8422] RIP: 0033:0x7f765098e929 [ 164.479782][ T8422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.479794][ T8422] RSP: 002b:00007f7651897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.479809][ T8422] RAX: ffffffffffffffda RBX: 00007f7650bb5fa0 RCX: 00007f765098e929 [ 164.479819][ T8422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 164.479828][ T8422] RBP: 00007f7651897090 R08: 0000000000000000 R09: 0000000000000000 [ 164.479836][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.479844][ T8422] R13: 0000000000000000 R14: 00007f7650bb5fa0 R15: 00007fff0b64e068 [ 164.479867][ T8422] [ 166.413035][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 166.443304][ T8452] __nla_validate_parse: 10 callbacks suppressed [ 166.443325][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.731'. [ 166.459027][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 166.620889][ T8460] netlink: 120 bytes leftover after parsing attributes in process `syz.4.735'. [ 166.652329][ T8459] atomic_op ffff8880309e0998 conn xmit_atomic 0000000000000000 [ 166.694272][ T8468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.736'. [ 166.708132][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 166.739398][ T8468] FAULT_INJECTION: forcing a failure. [ 166.739398][ T8468] name failslab, interval 1, probability 0, space 0, times 0 [ 166.761575][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.2.736 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 166.761605][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.761616][ T8468] Call Trace: [ 166.761625][ T8468] [ 166.761634][ T8468] dump_stack_lvl+0x189/0x250 [ 166.761671][ T8468] ? __pfx____ratelimit+0x10/0x10 [ 166.761701][ T8468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.761733][ T8468] ? __pfx__printk+0x10/0x10 [ 166.761763][ T8468] ? __pfx___might_resched+0x10/0x10 [ 166.761794][ T8468] ? fs_reclaim_acquire+0x7d/0x100 [ 166.761824][ T8468] should_fail_ex+0x414/0x560 [ 166.761857][ T8468] should_failslab+0xa8/0x100 [ 166.761880][ T8468] __kmalloc_cache_noprof+0x70/0x3d0 [ 166.761900][ T8468] ? register_netdevice+0x58b/0x1ae0 [ 166.761926][ T8468] register_netdevice+0x58b/0x1ae0 [ 166.761962][ T8468] ? ip_tunnel_find+0x4f9/0x5d0 [ 166.761983][ T8468] ? __pfx_register_netdevice+0x10/0x10 [ 166.762007][ T8468] ? __pfx_ip_tunnel_find+0x10/0x10 [ 166.762029][ T8468] ? net_generic+0x1e/0x240 [ 166.762048][ T8468] ? ip_tunnel_newlink+0x237/0x8b0 [ 166.762078][ T8468] ip_tunnel_newlink+0x261/0x8b0 [ 166.762108][ T8468] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 166.762132][ T8468] ? __asan_memset+0x22/0x50 [ 166.762160][ T8468] ? ipgre_netlink_parms+0x666/0x9c0 [ 166.762197][ T8468] ipgre_newlink+0x354/0x420 [ 166.762230][ T8468] ? __pfx_ipgre_newlink+0x10/0x10 [ 166.762278][ T8468] ? __pfx_ipgre_newlink+0x10/0x10 [ 166.762310][ T8468] rtnl_newlink_create+0x30d/0xb00 [ 166.762345][ T8468] ? __mutex_lock+0x51b/0xe80 [ 166.762372][ T8468] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 166.762398][ T8468] ? rtnl_newlink+0x8db/0x1c70 [ 166.762427][ T8468] ? __pfx___mutex_lock+0x10/0x10 [ 166.762460][ T8468] ? ns_capable+0x8a/0xf0 [ 166.762496][ T8468] rtnl_newlink+0x16d6/0x1c70 [ 166.762541][ T8468] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.762564][ T8468] ? is_bpf_text_address+0x26/0x2b0 [ 166.762604][ T8468] ? __lock_acquire+0xab9/0xd20 [ 166.762647][ T8468] ? __lock_acquire+0xab9/0xd20 [ 166.762705][ T8468] ? is_bpf_text_address+0x26/0x2b0 [ 166.762741][ T8468] ? is_bpf_text_address+0x292/0x2b0 [ 166.762771][ T8468] ? is_bpf_text_address+0x26/0x2b0 [ 166.762805][ T8468] ? kernel_text_address+0xa5/0xe0 [ 166.762847][ T8468] ? __lock_acquire+0xab9/0xd20 [ 166.762903][ T8468] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.762929][ T8468] rtnetlink_rcv_msg+0x7cc/0xb70 [ 166.762959][ T8468] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 166.762984][ T8468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.763030][ T8468] netlink_rcv_skb+0x205/0x470 [ 166.763067][ T8468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.763095][ T8468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.763136][ T8468] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.763162][ T8468] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.763194][ T8468] netlink_unicast+0x758/0x8d0 [ 166.763231][ T8468] netlink_sendmsg+0x805/0xb30 [ 166.763269][ T8468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.763300][ T8468] ? aa_sock_msg_perm+0x94/0x160 [ 166.763329][ T8468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.763355][ T8468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.763382][ T8468] __sock_sendmsg+0x219/0x270 [ 166.763409][ T8468] ____sys_sendmsg+0x505/0x830 [ 166.763447][ T8468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.763487][ T8468] ? import_iovec+0x74/0xa0 [ 166.763512][ T8468] ___sys_sendmsg+0x21f/0x2a0 [ 166.763545][ T8468] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.763616][ T8468] ? __fget_files+0x2a/0x420 [ 166.763639][ T8468] ? __fget_files+0x3a0/0x420 [ 166.763674][ T8468] __x64_sys_sendmsg+0x19b/0x260 [ 166.763715][ T8468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.763757][ T8468] ? __pfx_ksys_write+0x10/0x10 [ 166.763773][ T8468] ? rcu_is_watching+0x15/0xb0 [ 166.763810][ T8468] ? do_syscall_64+0xbe/0x3b0 [ 166.763836][ T8468] do_syscall_64+0xfa/0x3b0 [ 166.763856][ T8468] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.763875][ T8468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.763895][ T8468] ? clear_bhb_loop+0x60/0xb0 [ 166.763919][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.763938][ T8468] RIP: 0033:0x7ff63218e929 [ 166.763957][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.763973][ T8468] RSP: 002b:00007ff63301c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.763994][ T8468] RAX: ffffffffffffffda RBX: 00007ff6323b5fa0 RCX: 00007ff63218e929 [ 166.764008][ T8468] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 166.764020][ T8468] RBP: 00007ff63301c090 R08: 0000000000000000 R09: 0000000000000000 [ 166.764032][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.764043][ T8468] R13: 0000000000000000 R14: 00007ff6323b5fa0 R15: 00007fff2f4e8678 [ 166.764075][ T8468] [ 167.636520][ T8486] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 167.779624][ T8498] netlink: 56 bytes leftover after parsing attributes in process `syz.3.746'. [ 167.789064][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 167.851287][ T8501] netlink: 56 bytes leftover after parsing attributes in process `syz.3.748'. [ 167.860307][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 167.876098][ T8501] FAULT_INJECTION: forcing a failure. [ 167.876098][ T8501] name failslab, interval 1, probability 0, space 0, times 0 [ 167.889030][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.3.748 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 167.889058][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.889070][ T8501] Call Trace: [ 167.889078][ T8501] [ 167.889086][ T8501] dump_stack_lvl+0x189/0x250 [ 167.889121][ T8501] ? __pfx____ratelimit+0x10/0x10 [ 167.889142][ T8501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.889172][ T8501] ? __pfx__printk+0x10/0x10 [ 167.889200][ T8501] ? __pfx___might_resched+0x10/0x10 [ 167.889229][ T8501] ? fs_reclaim_acquire+0x7d/0x100 [ 167.889258][ T8501] should_fail_ex+0x414/0x560 [ 167.889288][ T8501] should_failslab+0xa8/0x100 [ 167.889310][ T8501] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 167.889331][ T8501] ? __alloc_skb+0x112/0x2d0 [ 167.889362][ T8501] __alloc_skb+0x112/0x2d0 [ 167.889392][ T8501] netlink_ack+0x146/0xa50 [ 167.889414][ T8501] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.889455][ T8501] netlink_rcv_skb+0x28c/0x470 [ 167.889479][ T8501] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.889506][ T8501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.889544][ T8501] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.889568][ T8501] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.889606][ T8501] netlink_unicast+0x758/0x8d0 [ 167.889641][ T8501] netlink_sendmsg+0x805/0xb30 [ 167.889676][ T8501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.889705][ T8501] ? aa_sock_msg_perm+0x94/0x160 [ 167.889732][ T8501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.889757][ T8501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.889783][ T8501] __sock_sendmsg+0x219/0x270 [ 167.889809][ T8501] ____sys_sendmsg+0x505/0x830 [ 167.889845][ T8501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.889883][ T8501] ? import_iovec+0x74/0xa0 [ 167.889907][ T8501] ___sys_sendmsg+0x21f/0x2a0 [ 167.889938][ T8501] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.890006][ T8501] ? __fget_files+0x2a/0x420 [ 167.890027][ T8501] ? __fget_files+0x3a0/0x420 [ 167.890059][ T8501] __x64_sys_sendmsg+0x19b/0x260 [ 167.890091][ T8501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.890132][ T8501] ? __pfx_ksys_write+0x10/0x10 [ 167.890147][ T8501] ? rcu_is_watching+0x15/0xb0 [ 167.890183][ T8501] ? do_syscall_64+0xbe/0x3b0 [ 167.890209][ T8501] do_syscall_64+0xfa/0x3b0 [ 167.890246][ T8501] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.890265][ T8501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.890285][ T8501] ? clear_bhb_loop+0x60/0xb0 [ 167.890310][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.890329][ T8501] RIP: 0033:0x7f5bb418e929 [ 167.890347][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.890364][ T8501] RSP: 002b:00007f5bb4f73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.890385][ T8501] RAX: ffffffffffffffda RBX: 00007f5bb43b5fa0 RCX: 00007f5bb418e929 [ 167.890400][ T8501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 167.890412][ T8501] RBP: 00007f5bb4f73090 R08: 0000000000000000 R09: 0000000000000000 [ 167.890424][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.890435][ T8501] R13: 0000000000000000 R14: 00007f5bb43b5fa0 R15: 00007ffdde3891e8 [ 167.890467][ T8501] [ 168.465286][ T8517] netlink: 248 bytes leftover after parsing attributes in process `syz.0.753'. [ 168.735967][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 168.760071][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 168.807473][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 168.831795][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 168.839704][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 168.855507][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 168.882959][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 168.912988][ T8525] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 169.472070][ T8552] pim6reg: entered allmulticast mode [ 169.592926][ T8566] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.667386][ T8576] validate_nla: 61 callbacks suppressed [ 169.667407][ T8576] netlink: 'syz.1.770': attribute type 102 has an invalid length. [ 169.880493][ T8583] FAULT_INJECTION: forcing a failure. [ 169.880493][ T8583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.941831][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.3.774 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 169.941862][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.941875][ T8583] Call Trace: [ 169.941883][ T8583] [ 169.941892][ T8583] dump_stack_lvl+0x189/0x250 [ 169.941930][ T8583] ? __pfx____ratelimit+0x10/0x10 [ 169.941951][ T8583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.941982][ T8583] ? __pfx__printk+0x10/0x10 [ 169.942005][ T8583] ? __might_fault+0xb0/0x130 [ 169.942038][ T8583] should_fail_ex+0x414/0x560 [ 169.942070][ T8583] _copy_from_user+0x2d/0xb0 [ 169.942092][ T8583] kstrtouint_from_user+0xc4/0x170 [ 169.942124][ T8583] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 169.942172][ T8583] proc_fail_nth_write+0x88/0x240 [ 169.942197][ T8583] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 169.942229][ T8583] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 169.942256][ T8583] vfs_write+0x27b/0xa90 [ 169.942299][ T8583] ? __pfx_vfs_write+0x10/0x10 [ 169.942333][ T8583] ? __fget_files+0x2a/0x420 [ 169.942360][ T8583] ? __fget_files+0x3a0/0x420 [ 169.942381][ T8583] ? __fget_files+0x2a/0x420 [ 169.942413][ T8583] ksys_write+0x145/0x250 [ 169.942435][ T8583] ? __pfx_ksys_write+0x10/0x10 [ 169.942451][ T8583] ? rcu_is_watching+0x15/0xb0 [ 169.942489][ T8583] ? do_syscall_64+0xbe/0x3b0 [ 169.942515][ T8583] do_syscall_64+0xfa/0x3b0 [ 169.942534][ T8583] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.942554][ T8583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.942574][ T8583] ? clear_bhb_loop+0x60/0xb0 [ 169.942599][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.942618][ T8583] RIP: 0033:0x7f5bb418d3df [ 169.942636][ T8583] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 169.942652][ T8583] RSP: 002b:00007f5bb4f73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 169.942673][ T8583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bb418d3df [ 169.942687][ T8583] RDX: 0000000000000001 RSI: 00007f5bb4f730a0 RDI: 0000000000000004 [ 169.942706][ T8583] RBP: 00007f5bb4f73090 R08: 0000000000000000 R09: 0000000000000000 [ 169.942718][ T8583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 169.942729][ T8583] R13: 0000000000000000 R14: 00007f5bb43b5fa0 R15: 00007ffdde3891e8 [ 169.942761][ T8583] [ 170.197773][ T8589] tipc: Started in network mode [ 170.202921][ T8589] tipc: Node identity ac14142f, cluster identity 4711 [ 170.241544][ T8589] tipc: New replicast peer: 0.0.0.0 [ 170.288918][ T8589] tipc: Enabled bearer , priority 10 [ 170.296558][ T8598] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 170.439528][ T8609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 acpid: input device has been disconnected, fd 10 [ 171.002728][ T8637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 171.138616][ T8641] netlink: 'syz.4.791': attribute type 10 has an invalid length. [ 171.168566][ T8641] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.251330][ T5912] tipc: Node number set to 2886997039 [ 171.286456][ T8644] netlink: 'syz.1.792': attribute type 2 has an invalid length. [ 171.534589][ T8660] __nla_validate_parse: 15 callbacks suppressed [ 171.534611][ T8660] netlink: 56 bytes leftover after parsing attributes in process `syz.3.797'. [ 171.563752][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 171.627464][ T8661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.885716][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 171.903562][ T8680] ipvlan0: entered promiscuous mode [ 171.999325][ T8689] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 172.077993][ T8692] netlink: 80 bytes leftover after parsing attributes in process `syz.3.804'. [ 172.098690][ T8692] netlink: 80 bytes leftover after parsing attributes in process `syz.3.804'. [ 172.105914][ T8694] netlink: 'syz.2.807': attribute type 10 has an invalid length. [ 172.119023][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 172.298975][ T8702] netlink: 56 bytes leftover after parsing attributes in process `syz.1.810'. [ 172.310420][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 172.449315][ T8706] dummy0: entered promiscuous mode [ 172.458272][ T8705] dummy0: left promiscuous mode [ 172.649031][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 172.669888][ T8715] bond0: option min_links: invalid value (18446744073709551604) [ 172.690166][ T8715] bond0: option min_links: allowed values 0 - 2147483647 [ 172.864400][ T8723] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.816'. [ 172.946957][ T8725] netlink: 'syz.4.819': attribute type 10 has an invalid length. [ 173.570909][ T8757] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 174.704180][ T8803] netlink: 'syz.4.842': attribute type 2 has an invalid length. [ 174.828368][ T8812] tipc: Failed to remove unknown binding: 66,1,1/0:2143008514/2143008516 [ 175.367916][ T8838] bridge_slave_1: left allmulticast mode [ 175.391546][ T8838] bridge_slave_1: left promiscuous mode [ 175.419338][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.452488][ T8838] bridge_slave_0: left allmulticast mode [ 175.470851][ T8838] bridge_slave_0: left promiscuous mode [ 175.480316][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.580310][ T8852] netlink: 'syz.0.858': attribute type 39 has an invalid length. [ 175.914316][ T8887] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.942711][ T8887] netlink: 'syz.3.862': attribute type 97 has an invalid length. [ 175.950914][ T8858] xt_CT: No such helper "snmp" [ 176.089546][ T8904] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.190063][ T8904] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.327165][ T8921] ip6t_srh: unknown srh match flags 4000 [ 176.335691][ T8921] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 176.373349][ T8921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.398888][ T8921] lo speed is unknown, defaulting to 1000 [ 176.406098][ T8921] lo speed is unknown, defaulting to 1000 [ 176.412955][ T8921] lo speed is unknown, defaulting to 1000 [ 176.435626][ T8921] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 176.477108][ T8921] lo speed is unknown, defaulting to 1000 [ 176.493891][ T8921] lo speed is unknown, defaulting to 1000 [ 176.517027][ T8921] lo speed is unknown, defaulting to 1000 [ 176.532756][ T8927] geneve3: entered promiscuous mode [ 176.538031][ T8927] geneve3: entered allmulticast mode [ 176.554804][ T8921] lo speed is unknown, defaulting to 1000 [ 176.566591][ T8921] lo speed is unknown, defaulting to 1000 [ 176.579795][ T8921] lo speed is unknown, defaulting to 1000 [ 176.589224][ T8925] siw: device registration error -23 [ 176.692197][ T8932] __nla_validate_parse: 15 callbacks suppressed [ 176.692219][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 176.782787][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 176.861070][ T8945] netlink: 56 bytes leftover after parsing attributes in process `syz.2.873'. [ 176.885623][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 177.107367][ T8947] netlink: 'syz.3.875': attribute type 4 has an invalid length. [ 177.346697][ T8966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.881'. [ 177.758073][ T8988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.889'. [ 177.785768][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 177.960225][ T9001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.037055][ T9009] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.895'. [ 178.052869][ T9001] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.895'. [ 178.116727][ T9015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.120754][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 178.250924][ T9021] xt_hashlimit: size too large, truncated to 1048576 [ 178.357728][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.386115][ T9028] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 179.065861][ T9062] netlink: 'syz.4.914': attribute type 7 has an invalid length. [ 179.274201][ T9073] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.331855][ T9080] ipt_ECN: cannot use operation on non-tcp rule [ 179.363917][ T9071] lo speed is unknown, defaulting to 1000 [ 179.929090][ T9105] netlink: 'syz.1.926': attribute type 4 has an invalid length. [ 180.358746][ T30] audit: type=1800 audit(1750865045.591:4): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.931" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1070 res=0 errno=0 [ 180.470221][ T9137] lo: left promiscuous mode [ 180.497323][ T9137] geneve2: left promiscuous mode [ 180.510788][ T9137] geneve2: left allmulticast mode [ 180.565849][ T8871] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 38274 - 0 [ 180.590867][ T8871] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 38274 - 0 [ 180.625701][ T8871] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 38274 - 0 [ 180.657332][ T8871] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 38274 - 0 [ 180.695201][ T9139] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 180.892422][ T9151] macvtap0: left promiscuous mode [ 180.903876][ T9151] macvtap0: left allmulticast mode [ 180.919713][ T9151] bond1: left promiscuous mode [ 180.927558][ T9151] bond1: left allmulticast mode [ 181.478084][ T9167] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 181.503334][ T9167] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 181.850272][ T9185] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 182.076193][ T9187] macsec1: entered allmulticast mode [ 182.082096][ T9187] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 182.475278][ T9201] __nla_validate_parse: 25 callbacks suppressed [ 182.475301][ T9201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.961'. [ 182.648691][ T9208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.962'. [ 182.668553][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 183.474682][ T9254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.975'. [ 183.485731][ T9256] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 183.511048][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.979'. [ 183.538838][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 183.566293][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 183.810403][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'. [ 184.037238][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 184.162940][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 184.466438][ T9307] ipvlan0: left promiscuous mode [ 184.523427][ T9307] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 184.530302][ T9307] macsec1: left allmulticast mode [ 184.650909][ T9314] netlink: 'syz.1.999': attribute type 3 has an invalid length. [ 185.228112][ T9339] batman_adv: batadv0: Adding interface: ip6gretap1 [ 185.244236][ T9339] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.270372][ T9339] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 185.309871][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.322330][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.330252][ T9345] batman_adv: batadv0: Removing interface: ip6gretap1 [ 185.358408][ T9348] netlink: 'syz.1.1012': attribute type 1 has an invalid length. [ 185.372430][ T9344] lo speed is unknown, defaulting to 1000 [ 185.388914][ T9348] netlink: 'syz.1.1012': attribute type 2 has an invalid length. [ 185.411492][ T9348] netlink: 'syz.1.1012': attribute type 1 has an invalid length. [ 185.441304][ T9348] netlink: 'syz.1.1012': attribute type 2 has an invalid length. [ 185.577292][ T9346] lo speed is unknown, defaulting to 1000 [ 185.696753][ T9358] vlan0: entered promiscuous mode [ 186.621948][ T9394] syzkaller0: entered promiscuous mode [ 186.627596][ T9394] syzkaller0: entered allmulticast mode [ 187.517929][ T9426] __nla_validate_parse: 20 callbacks suppressed [ 187.517952][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 187.591175][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1035'. [ 187.898012][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 188.954334][ T9463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1041'. [ 188.963763][ T9463] openvswitch: netlink: Flow key attr not present in new flow. [ 189.144133][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 189.315369][ T9467] vlan0: entered promiscuous mode [ 189.335525][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 189.369189][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 189.391817][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 189.400985][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 189.434747][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 189.777818][ T9493] bridge_slave_0: left allmulticast mode [ 189.792166][ T9493] bridge_slave_0: left promiscuous mode [ 189.801155][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.815817][ T9493] bridge_slave_1: left allmulticast mode [ 189.826529][ T9493] bridge_slave_1: left promiscuous mode [ 189.835937][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.864560][ T9493] bond1: (slave veth0_to_bond): Releasing active interface [ 189.884526][ T9493] bond0: (slave bond_slave_0): Releasing backup interface [ 189.898487][ T9493] bond0: (slave bond_slave_1): Releasing backup interface [ 189.918852][ T9493] team0: Port device team_slave_0 removed [ 189.929714][ T9493] team0: Port device team_slave_1 removed [ 189.937772][ T9493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.947083][ T9493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.956520][ T9493] bond1: (slave veth3): Releasing active interface [ 189.965295][ T9493] bond2: (slave ip6gretap2): Releasing active interface [ 189.975841][ T9503] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 190.060926][ T9505] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 190.176203][ T9509] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 190.196499][ T9509] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 190.254823][ T9513] sch_fq: defrate 1 ignored. [ 190.498514][ T9522] syzkaller0: entered promiscuous mode [ 190.504307][ T9522] syzkaller0: entered allmulticast mode [ 190.510817][ T9520] lo speed is unknown, defaulting to 1000 [ 190.934879][ T9534] IPv6: sit1: Disabled Multicast RS [ 191.067940][ T9538] lo speed is unknown, defaulting to 1000 [ 193.094660][ T9565] __nla_validate_parse: 69 callbacks suppressed [ 193.094681][ T9565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1071'. [ 193.159292][ T9575] lo speed is unknown, defaulting to 1000 [ 193.321172][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 193.368996][ T9585] geneve2: entered promiscuous mode [ 193.403195][ T9585] geneve2: entered allmulticast mode [ 193.415655][ T9587] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1078'. [ 193.458758][ T9587] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.509190][ T8900] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 44433 - 0 [ 193.518589][ T5912] IPVS: starting estimator thread 0... [ 193.541720][ T8900] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 44433 - 0 [ 193.552659][ T9594] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 193.560436][ T9594] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1077'. [ 193.602708][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 193.612049][ T9593] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.713337][ T8870] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 44433 - 0 [ 193.743877][ T8870] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 44433 - 0 [ 194.177492][ T9616] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 194.204186][ T9616] team0: Port device wlan1 added [ 194.419043][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.502434][ T9619] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1086'. [ 194.588308][ T9621] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 194.606718][ T9622] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 194.756259][ T9629] vlan0: left promiscuous mode [ 194.908682][ T9632] lo speed is unknown, defaulting to 1000 [ 195.132174][ T9645] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 195.145310][ T9647] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 195.205094][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 195.335172][ T9650] geneve2: entered promiscuous mode [ 195.340457][ T9650] geneve2: entered allmulticast mode [ 195.397948][ T8897] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 45450 - 0 [ 195.419643][ T9661] FAULT_INJECTION: forcing a failure. [ 195.419643][ T9661] name failslab, interval 1, probability 0, space 0, times 0 [ 195.437410][ T8897] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 45450 - 0 [ 195.447677][ T8897] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 45450 - 0 [ 195.466789][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.2.1099 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 195.466821][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.466834][ T9661] Call Trace: [ 195.466842][ T9661] [ 195.466852][ T9661] dump_stack_lvl+0x189/0x250 [ 195.466912][ T9661] ? __pfx____ratelimit+0x10/0x10 [ 195.466932][ T9661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.466964][ T9661] ? __pfx__printk+0x10/0x10 [ 195.466992][ T9661] ? __pfx___might_resched+0x10/0x10 [ 195.467030][ T9661] should_fail_ex+0x414/0x560 [ 195.467062][ T9661] should_failslab+0xa8/0x100 [ 195.467087][ T9661] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 195.467113][ T9661] ? __alloc_skb+0x112/0x2d0 [ 195.467146][ T9661] __alloc_skb+0x112/0x2d0 [ 195.467178][ T9661] netlink_sendmsg+0x5c6/0xb30 [ 195.467216][ T9661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.467245][ T9661] ? aa_sock_msg_perm+0x94/0x160 [ 195.467274][ T9661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.467300][ T9661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.467327][ T9661] __sock_sendmsg+0x219/0x270 [ 195.467354][ T9661] ____sys_sendmsg+0x505/0x830 [ 195.467391][ T9661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.467432][ T9661] ? import_iovec+0x74/0xa0 [ 195.467456][ T9661] ___sys_sendmsg+0x21f/0x2a0 [ 195.467490][ T9661] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.467561][ T9661] ? __fget_files+0x2a/0x420 [ 195.467582][ T9661] ? __fget_files+0x3a0/0x420 [ 195.467616][ T9661] __x64_sys_sendmsg+0x19b/0x260 [ 195.467651][ T9661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.467693][ T9661] ? __pfx_ksys_write+0x10/0x10 [ 195.467708][ T9661] ? rcu_is_watching+0x15/0xb0 [ 195.467746][ T9661] ? do_syscall_64+0xbe/0x3b0 [ 195.467776][ T9661] do_syscall_64+0xfa/0x3b0 [ 195.467797][ T9661] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.467816][ T9661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.467837][ T9661] ? clear_bhb_loop+0x60/0xb0 [ 195.467861][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.467887][ T9661] RIP: 0033:0x7ff63218e929 [ 195.467915][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.467933][ T9661] RSP: 002b:00007ff63301c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.467959][ T9661] RAX: ffffffffffffffda RBX: 00007ff6323b5fa0 RCX: 00007ff63218e929 [ 195.467975][ T9661] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 195.467988][ T9661] RBP: 00007ff63301c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.468000][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.468012][ T9661] R13: 0000000000000000 R14: 00007ff6323b5fa0 R15: 00007fff2f4e8678 [ 195.468045][ T9661] [ 195.470681][ T9644] lo speed is unknown, defaulting to 1000 [ 195.532589][ T8897] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 45450 - 0 [ 195.553189][ T9650] netlink: 'syz.3.1096': attribute type 1 has an invalid length. [ 195.767749][ T9650] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1096'. [ 195.781642][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 196.009586][ T9667] lo speed is unknown, defaulting to 1000 [ 196.027764][ T9667] lo speed is unknown, defaulting to 1000 [ 196.072308][ T9667] lo speed is unknown, defaulting to 1000 [ 196.098991][ T9675] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1103'. [ 196.214071][ T9675] lo speed is unknown, defaulting to 1000 [ 196.337068][ T9681] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 196.365003][ T9681] team0: Port device wlan1 added [ 196.470301][ T9667] infiniband syz0: set down [ 196.475340][ T5912] lo speed is unknown, defaulting to 1000 [ 196.484968][ T9667] infiniband syz0: added lo [ 196.498861][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.583669][ T9667] RDS/IB: syz0: added [ 196.588587][ T9667] smc: adding ib device syz0 with port count 1 [ 196.595197][ T9667] smc: ib device syz0 port 1 has pnetid [ 196.621035][ T9667] lo speed is unknown, defaulting to 1000 [ 196.628337][ T5912] lo speed is unknown, defaulting to 1000 [ 196.708992][ T9688] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 196.741665][ T9688] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 197.004282][ T9667] lo speed is unknown, defaulting to 1000 [ 197.358080][ T9700] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 197.416854][ T9700] wg1: entered promiscuous mode [ 197.424104][ T9700] wg1: entered allmulticast mode [ 197.577705][ T9667] lo speed is unknown, defaulting to 1000 [ 197.717064][ T9716] syzkaller1: entered promiscuous mode [ 197.728765][ T9716] syzkaller1: entered allmulticast mode [ 197.767451][ T9723] FAULT_INJECTION: forcing a failure. [ 197.767451][ T9723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.782193][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.4.1120 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 197.782222][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.782234][ T9723] Call Trace: [ 197.782242][ T9723] [ 197.782250][ T9723] dump_stack_lvl+0x189/0x250 [ 197.782286][ T9723] ? __pfx____ratelimit+0x10/0x10 [ 197.782307][ T9723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.782337][ T9723] ? __pfx__printk+0x10/0x10 [ 197.782358][ T9723] ? __might_fault+0xb0/0x130 [ 197.782390][ T9723] should_fail_ex+0x414/0x560 [ 197.782420][ T9723] _copy_from_iter+0x1db/0x16f0 [ 197.782454][ T9723] ? rcu_is_watching+0x15/0xb0 [ 197.782485][ T9723] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 197.782507][ T9723] ? __pfx__copy_from_iter+0x10/0x10 [ 197.782537][ T9723] ? __build_skb_around+0x257/0x3e0 [ 197.782568][ T9723] ? netlink_sendmsg+0x642/0xb30 [ 197.782591][ T9723] ? skb_put+0x11b/0x210 [ 197.782622][ T9723] netlink_sendmsg+0x6b2/0xb30 [ 197.782657][ T9723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.782686][ T9723] ? aa_sock_msg_perm+0x94/0x160 [ 197.782713][ T9723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.782737][ T9723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.782763][ T9723] __sock_sendmsg+0x219/0x270 [ 197.782789][ T9723] ____sys_sendmsg+0x505/0x830 [ 197.782824][ T9723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.782862][ T9723] ? import_iovec+0x74/0xa0 [ 197.782885][ T9723] ___sys_sendmsg+0x21f/0x2a0 [ 197.782916][ T9723] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.782984][ T9723] ? __fget_files+0x2a/0x420 [ 197.783012][ T9723] ? __fget_files+0x3a0/0x420 [ 197.783045][ T9723] __x64_sys_sendmsg+0x19b/0x260 [ 197.783078][ T9723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.783117][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 197.783134][ T9723] ? rcu_is_watching+0x15/0xb0 [ 197.783169][ T9723] ? do_syscall_64+0xbe/0x3b0 [ 197.783198][ T9723] do_syscall_64+0xfa/0x3b0 [ 197.783217][ T9723] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.783236][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.783256][ T9723] ? clear_bhb_loop+0x60/0xb0 [ 197.783280][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.783299][ T9723] RIP: 0033:0x7f22bd58e929 [ 197.783317][ T9723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.783335][ T9723] RSP: 002b:00007f22be3b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.783356][ T9723] RAX: ffffffffffffffda RBX: 00007f22bd7b5fa0 RCX: 00007f22bd58e929 [ 197.783370][ T9723] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 197.783383][ T9723] RBP: 00007f22be3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 197.783395][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.783407][ T9723] R13: 0000000000000000 R14: 00007f22bd7b5fa0 R15: 00007ffdf5894238 [ 197.783439][ T9723] [ 198.093414][ T9723] wg1: left promiscuous mode [ 198.099388][ T9723] wg1: left allmulticast mode [ 198.116912][ T9723] geneve2: left promiscuous mode [ 198.124389][ T9723] geneve2: left allmulticast mode [ 198.217101][ T8871] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 44433 - 0 [ 198.231269][ T8870] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 44433 - 0 [ 198.253545][ T8870] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 44433 - 0 [ 198.262183][ T8870] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 44433 - 0 [ 198.357971][ T9667] lo speed is unknown, defaulting to 1000 [ 198.405136][ T9738] __nla_validate_parse: 3 callbacks suppressed [ 198.405155][ T9738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1123'. [ 198.460786][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1124'. [ 198.478414][ T9739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1124'. [ 198.557432][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 198.793256][ T9667] lo speed is unknown, defaulting to 1000 [ 199.080850][ T9667] lo speed is unknown, defaulting to 1000 [ 199.443245][ T9764] FAULT_INJECTION: forcing a failure. [ 199.443245][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 199.471701][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.0.1132 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 199.471732][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.471745][ T9764] Call Trace: [ 199.471753][ T9764] [ 199.471762][ T9764] dump_stack_lvl+0x189/0x250 [ 199.471811][ T9764] ? __pfx____ratelimit+0x10/0x10 [ 199.471833][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.471863][ T9764] ? __pfx__printk+0x10/0x10 [ 199.471893][ T9764] ? __pfx___might_resched+0x10/0x10 [ 199.471922][ T9764] ? fs_reclaim_acquire+0x7d/0x100 [ 199.471952][ T9764] should_fail_ex+0x414/0x560 [ 199.471983][ T9764] should_failslab+0xa8/0x100 [ 199.472008][ T9764] __kmalloc_cache_noprof+0x70/0x3d0 [ 199.472027][ T9764] ? genl_start+0x1c9/0x6c0 [ 199.472050][ T9764] genl_start+0x1c9/0x6c0 [ 199.472068][ T9764] ? netlink_lookup+0x30/0x200 [ 199.472104][ T9764] __netlink_dump_start+0x466/0x7e0 [ 199.472138][ T9764] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 199.472162][ T9764] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 199.472180][ T9764] ? genl_get_cmd+0x7d9/0x910 [ 199.472217][ T9764] ? __pfx_genl_start+0x10/0x10 [ 199.472232][ T9764] ? __pfx_genl_dumpit+0x10/0x10 [ 199.472248][ T9764] ? __pfx_genl_done+0x10/0x10 [ 199.472282][ T9764] genl_rcv_msg+0x5da/0x790 [ 199.472309][ T9764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.472327][ T9764] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 199.472369][ T9764] netlink_rcv_skb+0x205/0x470 [ 199.472395][ T9764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.472415][ T9764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.472460][ T9764] ? down_read+0x1ad/0x2e0 [ 199.472486][ T9764] genl_rcv+0x28/0x40 [ 199.472514][ T9764] netlink_unicast+0x758/0x8d0 [ 199.472548][ T9764] netlink_sendmsg+0x805/0xb30 [ 199.472585][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.472614][ T9764] ? aa_sock_msg_perm+0x94/0x160 [ 199.472643][ T9764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.472668][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.472695][ T9764] __sock_sendmsg+0x219/0x270 [ 199.472722][ T9764] ____sys_sendmsg+0x505/0x830 [ 199.472758][ T9764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.472806][ T9764] ? import_iovec+0x74/0xa0 [ 199.472830][ T9764] ___sys_sendmsg+0x21f/0x2a0 [ 199.472862][ T9764] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.472934][ T9764] ? __fget_files+0x2a/0x420 [ 199.472955][ T9764] ? __fget_files+0x3a0/0x420 [ 199.472990][ T9764] __x64_sys_sendmsg+0x19b/0x260 [ 199.473022][ T9764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.473064][ T9764] ? __pfx_ksys_write+0x10/0x10 [ 199.473080][ T9764] ? rcu_is_watching+0x15/0xb0 [ 199.473116][ T9764] ? do_syscall_64+0xbe/0x3b0 [ 199.473142][ T9764] do_syscall_64+0xfa/0x3b0 [ 199.473161][ T9764] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.473181][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.473200][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 199.473224][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.473243][ T9764] RIP: 0033:0x7f0ff8d8e929 [ 199.473261][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.473277][ T9764] RSP: 002b:00007f0ff9bf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.473297][ T9764] RAX: ffffffffffffffda RBX: 00007f0ff8fb5fa0 RCX: 00007f0ff8d8e929 [ 199.473311][ T9764] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 199.473324][ T9764] RBP: 00007f0ff9bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 199.473336][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.473347][ T9764] R13: 0000000000000000 R14: 00007f0ff8fb5fa0 R15: 00007fff00ae2688 [ 199.473380][ T9764] [ 199.909567][ T9765] lo speed is unknown, defaulting to 1000 [ 199.918343][ T9765] lo speed is unknown, defaulting to 1000 [ 200.386996][ T9778] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1137'. [ 200.405052][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 200.815487][ T9779] lo speed is unknown, defaulting to 1000 [ 200.825351][ T9779] lo speed is unknown, defaulting to 1000 [ 200.956943][ T9786] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1140'. [ 201.560766][ T9794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1144'. [ 201.576794][ T9794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1144'. [ 201.608842][ T9794] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 201.633894][ T9794] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 201.676577][ T9795] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1144'. [ 201.839705][ T9797] FAULT_INJECTION: forcing a failure. [ 201.839705][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 201.889552][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.3.1145 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 201.889587][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.889600][ T9797] Call Trace: [ 201.889608][ T9797] [ 201.889618][ T9797] dump_stack_lvl+0x189/0x250 [ 201.889657][ T9797] ? __pfx____ratelimit+0x10/0x10 [ 201.889678][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.889711][ T9797] ? __pfx__printk+0x10/0x10 [ 201.889740][ T9797] ? __pfx___might_resched+0x10/0x10 [ 201.889778][ T9797] should_fail_ex+0x414/0x560 [ 201.889810][ T9797] should_failslab+0xa8/0x100 [ 201.889835][ T9797] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 201.889857][ T9797] ? __alloc_skb+0x112/0x2d0 [ 201.889890][ T9797] __alloc_skb+0x112/0x2d0 [ 201.889923][ T9797] netlink_dump+0x22b/0xe20 [ 201.889964][ T9797] ? __pfx_netlink_dump+0x10/0x10 [ 201.890005][ T9797] ? genl_start+0x499/0x6c0 [ 201.890034][ T9797] __netlink_dump_start+0x5cb/0x7e0 [ 201.890069][ T9797] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 201.890094][ T9797] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 201.890113][ T9797] ? genl_get_cmd+0x7d9/0x910 [ 201.890150][ T9797] ? __pfx_genl_start+0x10/0x10 [ 201.890166][ T9797] ? __pfx_genl_dumpit+0x10/0x10 [ 201.890182][ T9797] ? __pfx_genl_done+0x10/0x10 [ 201.890218][ T9797] genl_rcv_msg+0x5da/0x790 [ 201.890245][ T9797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.890272][ T9797] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 201.890316][ T9797] netlink_rcv_skb+0x205/0x470 [ 201.890344][ T9797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.890365][ T9797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.890412][ T9797] ? down_read+0x1ad/0x2e0 [ 201.890440][ T9797] genl_rcv+0x28/0x40 [ 201.890469][ T9797] netlink_unicast+0x758/0x8d0 [ 201.890507][ T9797] netlink_sendmsg+0x805/0xb30 [ 201.890545][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.890577][ T9797] ? aa_sock_msg_perm+0x94/0x160 [ 201.890606][ T9797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.890633][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.890661][ T9797] __sock_sendmsg+0x219/0x270 [ 201.890688][ T9797] ____sys_sendmsg+0x505/0x830 [ 201.890726][ T9797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.890768][ T9797] ? import_iovec+0x74/0xa0 [ 201.890794][ T9797] ___sys_sendmsg+0x21f/0x2a0 [ 201.890828][ T9797] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.890903][ T9797] ? __fget_files+0x2a/0x420 [ 201.890925][ T9797] ? __fget_files+0x3a0/0x420 [ 201.890960][ T9797] __x64_sys_sendmsg+0x19b/0x260 [ 201.890994][ T9797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.891037][ T9797] ? __pfx_ksys_write+0x10/0x10 [ 201.891053][ T9797] ? rcu_is_watching+0x15/0xb0 [ 201.891091][ T9797] ? do_syscall_64+0xbe/0x3b0 [ 201.891117][ T9797] do_syscall_64+0xfa/0x3b0 [ 201.891136][ T9797] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.891155][ T9797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.891176][ T9797] ? clear_bhb_loop+0x60/0xb0 [ 201.891202][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.891221][ T9797] RIP: 0033:0x7f5bb418e929 [ 201.891239][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.891256][ T9797] RSP: 002b:00007f5bb4f73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.891285][ T9797] RAX: ffffffffffffffda RBX: 00007f5bb43b5fa0 RCX: 00007f5bb418e929 [ 201.891301][ T9797] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 201.891314][ T9797] RBP: 00007f5bb4f73090 R08: 0000000000000000 R09: 0000000000000000 [ 201.891327][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.891339][ T9797] R13: 0000000000000000 R14: 00007f5bb43b5fa0 R15: 00007ffdde3891e8 [ 201.891373][ T9797] [ 202.281947][ T9798] vlan0: left promiscuous mode [ 202.289243][ T9798] geneve2: left promiscuous mode [ 202.304954][ T9798] geneve2: left allmulticast mode [ 202.360308][ T8897] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 45450 - 0 [ 202.419944][ T8897] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 45450 - 0 [ 202.467215][ T8897] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 45450 - 0 [ 202.532723][ T8897] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 45450 - 0 [ 202.853554][ T9828] xt_connbytes: Forcing CT accounting to be enabled [ 202.860699][ T9828] set match dimension is over the limit! [ 203.395887][ T9851] lo speed is unknown, defaulting to 1000 [ 203.404072][ T9851] lo speed is unknown, defaulting to 1000 [ 203.406185][ T9854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.730342][ T9863] FAULT_INJECTION: forcing a failure. [ 203.730342][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 203.747485][ T9863] CPU: 0 UID: 0 PID: 9863 Comm: syz.0.1164 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 203.747518][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.747531][ T9863] Call Trace: [ 203.747539][ T9863] [ 203.747548][ T9863] dump_stack_lvl+0x189/0x250 [ 203.747584][ T9863] ? __pfx____ratelimit+0x10/0x10 [ 203.747604][ T9863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.747635][ T9863] ? __pfx__printk+0x10/0x10 [ 203.747663][ T9863] ? __pfx___might_resched+0x10/0x10 [ 203.747698][ T9863] should_fail_ex+0x414/0x560 [ 203.747729][ T9863] should_failslab+0xa8/0x100 [ 203.747752][ T9863] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 203.747773][ T9863] ? __get_vm_area_node+0x13f/0x300 [ 203.747798][ T9863] __get_vm_area_node+0x13f/0x300 [ 203.747823][ T9863] __vmalloc_node_range_noprof+0x301/0x12f0 [ 203.747846][ T9863] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 203.747876][ T9863] ? is_bpf_text_address+0x26/0x2b0 [ 203.747932][ T9863] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.747952][ T9863] ? __might_fault+0xb0/0x130 [ 203.747970][ T9863] ? __pfx_aa_get_newest_label+0x10/0x10 [ 203.747995][ T9863] ? _parse_integer_limit+0x1ae/0x1f0 [ 203.748027][ T9863] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 203.748053][ T9863] __vmalloc_noprof+0xb1/0xf0 [ 203.748075][ T9863] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 203.748105][ T9863] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 203.748147][ T9863] bpf_prog_alloc+0x3c/0x1a0 [ 203.748178][ T9863] bpf_prog_load+0x735/0x1930 [ 203.748218][ T9863] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.748270][ T9863] ? bpf_lsm_bpf+0x9/0x20 [ 203.748286][ T9863] ? security_bpf+0x7e/0x300 [ 203.748312][ T9863] __sys_bpf+0x5f1/0x860 [ 203.748340][ T9863] ? __pfx___sys_bpf+0x10/0x10 [ 203.748380][ T9863] ? ksys_write+0x22a/0x250 [ 203.748402][ T9863] ? __pfx_ksys_write+0x10/0x10 [ 203.748418][ T9863] ? rcu_is_watching+0x15/0xb0 [ 203.748460][ T9863] __x64_sys_bpf+0x7c/0x90 [ 203.748485][ T9863] do_syscall_64+0xfa/0x3b0 [ 203.748505][ T9863] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.748524][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.748543][ T9863] ? clear_bhb_loop+0x60/0xb0 [ 203.748568][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.748587][ T9863] RIP: 0033:0x7f0ff8d8e929 [ 203.748605][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.748622][ T9863] RSP: 002b:00007f0ff9bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.748644][ T9863] RAX: ffffffffffffffda RBX: 00007f0ff8fb5fa0 RCX: 00007f0ff8d8e929 [ 203.748659][ T9863] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 203.748672][ T9863] RBP: 00007f0ff9bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 203.748684][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.748696][ T9863] R13: 0000000000000000 R14: 00007f0ff8fb5fa0 R15: 00007fff00ae2688 [ 203.748727][ T9863] [ 203.748830][ T9863] warn_alloc: 1 callbacks suppressed [ 203.748841][ T9863] syz.0.1164: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 203.978687][ T9865] x_tables: duplicate underflow at hook 1 [ 203.995634][ T9863] ,cpuset= [ 204.056181][ T9869] __nla_validate_parse: 6 callbacks suppressed [ 204.056296][ T9869] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1167'. [ 204.071909][ T9863] /,mems_allowed=0-1 [ 204.095792][ T9863] CPU: 0 UID: 0 PID: 9863 Comm: syz.0.1164 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 204.095820][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.095834][ T9863] Call Trace: [ 204.095842][ T9863] [ 204.095851][ T9863] dump_stack_lvl+0x189/0x250 [ 204.095888][ T9863] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 204.095916][ T9863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.095947][ T9863] ? __pfx__printk+0x10/0x10 [ 204.095970][ T9863] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.095993][ T9863] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.096042][ T9863] warn_alloc+0x214/0x310 [ 204.096074][ T9863] ? __pfx_warn_alloc+0x10/0x10 [ 204.096104][ T9863] ? __get_vm_area_node+0x13f/0x300 [ 204.096130][ T9863] ? __get_vm_area_node+0x2b5/0x300 [ 204.096159][ T9863] __vmalloc_node_range_noprof+0x326/0x12f0 [ 204.096183][ T9863] ? is_bpf_text_address+0x26/0x2b0 [ 204.096242][ T9863] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.096263][ T9863] ? __might_fault+0xb0/0x130 [ 204.096281][ T9863] ? __pfx_aa_get_newest_label+0x10/0x10 [ 204.096307][ T9863] ? _parse_integer_limit+0x1ae/0x1f0 [ 204.096342][ T9863] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 204.096369][ T9863] __vmalloc_noprof+0xb1/0xf0 [ 204.096391][ T9863] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 204.096423][ T9863] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 204.096458][ T9863] bpf_prog_alloc+0x3c/0x1a0 [ 204.096490][ T9863] bpf_prog_load+0x735/0x1930 [ 204.096532][ T9863] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.096586][ T9863] ? bpf_lsm_bpf+0x9/0x20 [ 204.096602][ T9863] ? security_bpf+0x7e/0x300 [ 204.096629][ T9863] __sys_bpf+0x5f1/0x860 [ 204.096658][ T9863] ? __pfx___sys_bpf+0x10/0x10 [ 204.096700][ T9863] ? ksys_write+0x22a/0x250 [ 204.096721][ T9863] ? __pfx_ksys_write+0x10/0x10 [ 204.096737][ T9863] ? rcu_is_watching+0x15/0xb0 [ 204.096776][ T9863] __x64_sys_bpf+0x7c/0x90 [ 204.096801][ T9863] do_syscall_64+0xfa/0x3b0 [ 204.096822][ T9863] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.096842][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.096862][ T9863] ? clear_bhb_loop+0x60/0xb0 [ 204.096887][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.096906][ T9863] RIP: 0033:0x7f0ff8d8e929 [ 204.096924][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.096941][ T9863] RSP: 002b:00007f0ff9bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.096962][ T9863] RAX: ffffffffffffffda RBX: 00007f0ff8fb5fa0 RCX: 00007f0ff8d8e929 [ 204.096977][ T9863] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 204.096990][ T9863] RBP: 00007f0ff9bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 204.097002][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.097013][ T9863] R13: 0000000000000000 R14: 00007f0ff8fb5fa0 R15: 00007fff00ae2688 [ 204.097045][ T9863] [ 204.097053][ T9863] Mem-Info: [ 204.291434][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 204.337106][ T9863] active_anon:4549 inactive_anon:0 isolated_anon:0 [ 204.337106][ T9863] active_file:1676 inactive_file:39875 isolated_file:0 [ 204.337106][ T9863] unevictable:768 dirty:477 writeback:0 [ 204.337106][ T9863] slab_reclaimable:12054 slab_unreclaimable:121081 [ 204.337106][ T9863] mapped:29554 shmem:1464 pagetables:941 [ 204.337106][ T9863] sec_pagetables:0 bounce:0 [ 204.337106][ T9863] kernel_misc_reclaimable:0 [ 204.337106][ T9863] free:1311060 free_pcp:16406 free_cma:0 [ 204.531180][ T9863] Node 0 active_anon:20996kB inactive_anon:0kB active_file:6704kB inactive_file:159296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124416kB dirty:1908kB writeback:0kB shmem:7420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13100kB pagetables:3732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.593710][ T9872] lo speed is unknown, defaulting to 1000 [ 204.622874][ T9863] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.686073][ T9872] lo speed is unknown, defaulting to 1000 [ 204.694555][ T9863] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.737460][ T9871] lo speed is unknown, defaulting to 1000 [ 204.780559][ T9863] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 204.827973][ T9863] Node 0 DMA32 free:1319108kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24952kB inactive_anon:0kB active_file:6704kB inactive_file:157464kB unevictable:1536kB writepending:1908kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:45248kB local_pcp:21644kB free_cma:0kB [ 204.932331][ T9863] lowmem_reserve[]: 0 0 1 1 1 [ 204.937140][ T9863] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 204.971776][ T9887] validate_nla: 1 callbacks suppressed [ 204.971798][ T9887] netlink: 'syz.4.1170': attribute type 194 has an invalid length. [ 205.011815][ T9863] lowmem_reserve[]: 0 0 0 0 0 [ 205.018408][ T9863] Node 1 Normal free:3904652kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:9184kB free_cma:0kB [ 205.147788][ T9863] lowmem_reserve[]: 0 0 0 0 0 [ 205.171952][ T9863] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.204612][ T9863] Node 0 DMA32: 3*4kB (UME) 2*8kB (UE) 13*16kB (UME) 247*32kB (UM) 57*64kB (UME) 45*128kB (UM) 17*256kB (UM) 13*512kB (UME) 6*1024kB (UM) 6*2048kB (ME) 310*4096kB (UM) = 1316748kB [ 205.254136][ T9863] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 205.316474][ T9863] Node 1 Normal: 147*4kB (U) 52*8kB (UME) 38*16kB (UME) 102*32kB (UME) 36*64kB (UME) 7*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3904652kB [ 205.358868][ T9863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.378807][ T9863] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.420272][ T9863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.449591][ T9863] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.466710][ T9863] 47111 total pagecache pages [ 205.489674][ T9863] 0 pages in swap cache [ 205.503539][ T9863] Free swap = 124996kB [ 205.513455][ T9863] Total swap = 124996kB [ 205.523963][ T9863] 2097051 pages RAM [ 205.532421][ T9863] 0 pages HighMem/MovableOnly [ 205.542730][ T9863] 424693 pages reserved [ 205.567032][ T9863] 0 pages cma reserved [ 205.825391][ T9871] lo speed is unknown, defaulting to 1000 [ 206.306698][ T9929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1177'. [ 206.520939][ T9939] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1179'. [ 206.558754][ T9925] lo speed is unknown, defaulting to 1000 [ 206.561184][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 206.589483][ T9931] lo speed is unknown, defaulting to 1000 [ 207.316625][ T9925] lo speed is unknown, defaulting to 1000 [ 207.603535][ T9931] lo speed is unknown, defaulting to 1000 [ 209.119150][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 209.255439][ T9977] netlink: 'syz.3.1185': attribute type 21 has an invalid length. [ 209.264116][ T9977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1185'. [ 209.306493][ T9982] netlink: 'syz.3.1185': attribute type 13 has an invalid length. [ 209.315455][ T9982] netlink: 'syz.3.1185': attribute type 17 has an invalid length. [ 209.363093][ T9985] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1187'. [ 209.380070][ T9979] lo speed is unknown, defaulting to 1000 [ 209.501334][ T9979] lo speed is unknown, defaulting to 1000 [ 209.710069][T10005] netlink: 'syz.1.1193': attribute type 41 has an invalid length. [ 209.729907][T10006] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1195'. [ 209.890801][T10015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1197'. [ 209.954449][T10019] lo speed is unknown, defaulting to 1000 [ 210.200424][T10019] lo speed is unknown, defaulting to 1000 [ 210.371727][T10031] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 210.387563][T10033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.594087][T10038] bond0: option min_links: invalid value (18446744073709551604) [ 210.618724][T10038] bond0: option min_links: allowed values 0 - 2147483647 [ 210.727982][T10042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.010327][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1208'. [ 211.039155][T10055] vlan0: entered promiscuous mode [ 211.170194][T10058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1209'. [ 211.207293][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 211.302483][T10062] wireguard0: entered promiscuous mode [ 211.308014][T10062] wireguard0: entered allmulticast mode [ 211.403887][T10065] dvmrp0: entered allmulticast mode [ 211.602532][T10070] dvmrp0: left allmulticast mode [ 211.663405][T10074] batadv_slave_1: entered promiscuous mode [ 211.672081][T10073] batadv_slave_1: left promiscuous mode [ 211.843453][T10087] wireguard1: entered promiscuous mode [ 211.854646][T10087] wireguard1: entered allmulticast mode [ 212.207773][T10106] batadv1: entered allmulticast mode [ 212.220479][T10106] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.249467][T10104] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 212.294212][T10112] netlink: 'syz.2.1221': attribute type 13 has an invalid length. [ 212.303386][T10110] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 212.330334][T10112] netlink: 'syz.2.1221': attribute type 17 has an invalid length. [ 212.439091][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 212.462343][T10116] openvswitch: netlink: Missing key (keys=40, expected=100) [ 212.472303][T10116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 212.627249][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.649063][T10112] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.676917][T10112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.712322][ T6648] lo speed is unknown, defaulting to 1000 [ 212.718276][ T6648] syz0: Port: 1 Link ACTIVE [ 212.753173][ T6649] lo speed is unknown, defaulting to 1000 [ 212.805990][T10121] syzkaller1: entered promiscuous mode [ 212.822068][T10121] syzkaller1: entered allmulticast mode [ 212.925871][ T30] audit: type=1804 audit(1750865078.161:5): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1227" name="/newroot/262/cgroup.controllers" dev="tmpfs" ino=1388 res=1 errno=0 [ 212.957516][ T30] audit: type=1800 audit(1750865078.161:6): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1227" name="cgroup.controllers" dev="tmpfs" ino=1388 res=0 errno=0 [ 213.039016][T10132] syz.0.1228 (10132) used obsolete PPPIOCDETACH ioctl [ 213.928965][T10184] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 213.969293][T10186] x_tables: duplicate underflow at hook 2 [ 214.099996][T10186] syzkaller0: entered promiscuous mode [ 214.148199][T10186] syzkaller0: entered allmulticast mode [ 215.851626][T10217] netlink: 'syz.4.1252': attribute type 7 has an invalid length. [ 216.351336][T10254] IPVS: Error connecting to the multicast addr [ 216.541710][T10266] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 216.595422][T10262] __nla_validate_parse: 3 callbacks suppressed [ 216.595442][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 216.658240][T10272] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1268'. [ 216.713206][T10266] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 216.747630][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 216.972513][T10228] Bluetooth: hci3: command 0x0406 tx timeout [ 216.978610][T10228] Bluetooth: hci1: command 0x0406 tx timeout [ 216.981288][T10227] Bluetooth: hci2: command 0x0406 tx timeout [ 217.049164][T10293] netlink: 'syz.4.1273': attribute type 4 has an invalid length. [ 217.224712][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 217.268318][T10307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.278131][T10303] bridge1: port 1(ip6gretap2) entered blocking state [ 217.285872][T10303] bridge1: port 1(ip6gretap2) entered disabled state [ 217.292920][T10303] ip6gretap2: entered allmulticast mode [ 217.325848][T10303] ip6gretap2: entered promiscuous mode [ 217.449226][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 217.477877][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 217.707781][T10328] lo speed is unknown, defaulting to 1000 [ 218.137873][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 218.152047][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'. [ 218.447796][T10369] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 218.494137][T10369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.719019][T10371] lo speed is unknown, defaulting to 1000 [ 218.866844][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1302'. [ 219.172738][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1304'. [ 219.528729][T10386] lo speed is unknown, defaulting to 1000 [ 219.664419][T10413] bond0: (slave bridge0): Releasing backup interface [ 219.675873][T10413] bridge_slave_0: left allmulticast mode [ 219.684762][T10413] bridge_slave_0: left promiscuous mode [ 219.690556][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.703532][T10413] bridge_slave_1: left allmulticast mode [ 219.717469][T10413] bridge_slave_1: left promiscuous mode [ 219.735446][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.750560][T10413] bond0: (slave bond_slave_0): Releasing backup interface [ 219.761126][T10413] bond0: (slave bond_slave_1): Releasing backup interface [ 219.774717][T10413] team0: Port device team_slave_0 removed [ 219.784798][T10413] team0: Port device team_slave_1 removed [ 219.797823][T10413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.809815][T10413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.833602][T10413] team0: Port device geneve0 removed [ 219.848986][T10413] bond1: (slave gretap1): Releasing active interface [ 220.048925][T10414] lo speed is unknown, defaulting to 1000 [ 220.635720][T10438] vlan0: entered promiscuous mode [ 220.640824][T10438] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 220.698122][T10438] vlan0: entered allmulticast mode [ 220.713564][T10438] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 221.055883][T10447] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) ! [ 221.616372][T10457] lo speed is unknown, defaulting to 1000 [ 221.783916][T10483] __nla_validate_parse: 6 callbacks suppressed [ 221.783938][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 222.078143][T10489] lo speed is unknown, defaulting to 1000 [ 222.367644][T10504] netlink: 'syz.0.1336': attribute type 1 has an invalid length. [ 223.607813][T10529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.890153][T10543] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1346'. [ 223.909972][T10548] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 223.927861][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 223.987953][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 224.142587][T10563] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 224.367116][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1355'. [ 224.376675][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1355'. [ 224.397483][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1355'. [ 224.413238][T10575] netlink: 'syz.1.1354': attribute type 29 has an invalid length. [ 224.443234][T10575] netlink: 'syz.1.1354': attribute type 29 has an invalid length. [ 224.460577][T10575] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1354'. [ 224.642074][T10589] netlink: 'syz.0.1359': attribute type 2 has an invalid length. [ 224.651561][T10589] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 224.659431][T10589] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 224.689290][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 224.719119][T10593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.975388][T10603] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.140575][T10609] lo speed is unknown, defaulting to 1000 [ 225.176102][T10611] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.197003][T10613] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1367'. [ 225.953683][T10650] syz.4.1377 uses old SIOCAX25GETINFO [ 226.105738][T10651] lo speed is unknown, defaulting to 1000 [ 226.154050][T10648] xt_CT: No such helper "snmp" [ 226.480007][T10660] lo speed is unknown, defaulting to 1000 [ 226.731447][T10664] batadv_slave_1: entered promiscuous mode [ 226.912495][T10673] __nla_validate_parse: 3 callbacks suppressed [ 226.912516][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1383'. [ 226.999615][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 227.351035][T10684] lo speed is unknown, defaulting to 1000 [ 227.811996][T10694] lo speed is unknown, defaulting to 1000 [ 228.168898][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1391'. [ 228.544987][T10708] lo speed is unknown, defaulting to 1000 [ 228.550897][T10708] lo speed is unknown, defaulting to 1000 [ 228.560576][T10706] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:20003 [ 228.611427][T10708] lo speed is unknown, defaulting to 1000 [ 228.620972][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 228.639721][T10708] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 228.918585][T10708] lo speed is unknown, defaulting to 1000 [ 228.966608][T10708] lo speed is unknown, defaulting to 1000 [ 228.990622][T10708] lo speed is unknown, defaulting to 1000 [ 229.004185][T10708] lo speed is unknown, defaulting to 1000 [ 229.018314][T10708] lo speed is unknown, defaulting to 1000 [ 229.026445][T10708] lo speed is unknown, defaulting to 1000 [ 229.399893][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 229.421563][T10726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1399'. [ 229.438023][T10720] lo speed is unknown, defaulting to 1000 [ 229.445333][T10724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.813335][T10734] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1403'. [ 229.860940][T10723] lo speed is unknown, defaulting to 1000 [ 229.908858][T10720] lo speed is unknown, defaulting to 1000 [ 229.978822][T10741] netlink: 'syz.2.1404': attribute type 83 has an invalid length. [ 230.061399][T10748] netlink: 'syz.2.1404': attribute type 83 has an invalid length. [ 230.209293][T10753] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1407'. [ 230.439799][T10766] netlink: 'syz.0.1411': attribute type 5 has an invalid length. [ 230.450021][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'. [ 230.493278][T10768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1412'. [ 230.569608][T10723] lo speed is unknown, defaulting to 1000 [ 230.569811][T10764] lo speed is unknown, defaulting to 1000 [ 230.832205][T10764] lo speed is unknown, defaulting to 1000 [ 230.947024][T10784] Cannot find add_set index 4 as target [ 231.223501][T10796] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 231.540870][T10796] bond5: entered promiscuous mode [ 231.579178][T10796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.818201][T10801] batadv3: entered promiscuous mode [ 231.830512][T10801] batadv3: entered allmulticast mode [ 231.844978][T10801] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 231.862287][T10801] bond5: (slave batadv3): making interface the new active one [ 231.877646][T10801] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 232.108762][T10820] __nla_validate_parse: 3 callbacks suppressed [ 232.108781][T10820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1423'. [ 232.443467][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 232.454416][T10828] lo speed is unknown, defaulting to 1000 [ 232.463336][T10835] netlink: 'syz.0.1427': attribute type 10 has an invalid length. [ 232.503371][T10835] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 232.608559][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 232.697328][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 232.767972][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 232.798602][T10850] netlink: 'syz.1.1430': attribute type 83 has an invalid length. [ 232.995945][T10853] xt_cluster: node mask cannot exceed total number of nodes [ 233.092588][T10828] lo speed is unknown, defaulting to 1000 [ 233.097683][T10826] lo speed is unknown, defaulting to 1000 [ 233.417969][T10875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1435'. [ 233.451420][T10875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1435'. [ 233.470423][T10863] batadv1: left allmulticast mode [ 233.507880][ T5912] lo speed is unknown, defaulting to 1000 [ 233.526521][ T5912] syz0: Port: 1 Link DOWN [ 233.678793][ T5945] lo speed is unknown, defaulting to 1000 [ 233.751625][T10881] netlink: 'syz.2.1437': attribute type 2 has an invalid length. [ 233.786660][T10875] netlink: 'syz.1.1435': attribute type 4 has an invalid length. [ 233.801469][T10873] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.810033][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 233.829387][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 233.848782][T10873] netlink: 'syz.1.1435': attribute type 4 has an invalid length. [ 233.945224][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 233.971763][T10886] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 233.982887][T10886] vlan2: entered promiscuous mode [ 233.988015][T10886] ip6gretap0: entered promiscuous mode [ 234.019973][T10868] lo speed is unknown, defaulting to 1000 [ 234.400321][T10868] lo speed is unknown, defaulting to 1000 [ 234.425924][T10826] lo speed is unknown, defaulting to 1000 [ 234.431923][T10891] lo speed is unknown, defaulting to 1000 [ 234.702293][T10899] lo speed is unknown, defaulting to 1000 [ 235.110846][T10899] lo speed is unknown, defaulting to 1000 [ 235.205721][T10891] lo speed is unknown, defaulting to 1000 [ 235.352337][T10907] x_tables: duplicate underflow at hook 1 [ 236.210537][T10932] netlink: 'syz.4.1452': attribute type 8 has an invalid length. [ 236.357097][T10931] sit0: entered promiscuous mode [ 236.384698][T10931] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 236.842322][T10960] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 236.885211][T10963] netlink: 'syz.3.1463': attribute type 15 has an invalid length. [ 236.919861][T10963] netlink: 'syz.3.1463': attribute type 3 has an invalid length. [ 237.079927][T10971] lo speed is unknown, defaulting to 1000 [ 237.132158][T10974] __nla_validate_parse: 8 callbacks suppressed [ 237.132179][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 237.263305][T10983] xt_cgroup: xt_cgroup: no path or classid specified [ 237.317529][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 237.499514][T10992] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1471'. [ 238.146985][T11001] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1474'. [ 238.206123][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 238.250201][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 238.287684][T11005] Bluetooth: MGMT ver 1.23 [ 238.300465][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 238.409714][T10981] lo speed is unknown, defaulting to 1000 [ 238.428713][T10971] lo speed is unknown, defaulting to 1000 [ 238.629408][T11020] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1480'. [ 238.866756][T11026] ip6t_srh: unknown srh invflags 4000 [ 238.869330][T10981] lo speed is unknown, defaulting to 1000 [ 239.123817][T11035] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1487'. [ 239.512490][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 239.525059][T11051] netlink: 'syz.3.1493': attribute type 12 has an invalid length. [ 240.058448][T11068] !: renamed from dummy0 [ 240.270893][T11074] lo speed is unknown, defaulting to 1000 [ 240.424272][T11079] veth6: entered allmulticast mode [ 240.531892][T11079] veth7: entered promiscuous mode [ 241.417785][T11113] netlink: 'syz.2.1508': attribute type 10 has an invalid length. [ 241.689744][T11125] !: renamed from dummy0 [ 241.726883][T11126] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 241.868562][T11074] lo speed is unknown, defaulting to 1000 [ 242.167954][T11134] lo speed is unknown, defaulting to 1000 [ 243.267522][T11173] batadv_slave_1: entered promiscuous mode [ 243.312202][T11172] batadv_slave_1: left promiscuous mode [ 243.583002][T11166] lo speed is unknown, defaulting to 1000 [ 243.588935][T11134] lo speed is unknown, defaulting to 1000 [ 243.682135][T11168] xt_TCPMSS: Only works on TCP SYN packets [ 243.696882][T11168] __nla_validate_parse: 5 callbacks suppressed [ 243.696904][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 243.730703][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1518'. [ 243.788753][T11182] netlink: 'syz.0.1523': attribute type 2 has an invalid length. [ 243.822363][T11182] netlink: 'syz.0.1523': attribute type 1 has an invalid length. [ 243.823486][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1524'. [ 244.207987][T11166] lo speed is unknown, defaulting to 1000 [ 244.238668][T11197] tap0: tun_chr_ioctl cmd 2148553947 [ 244.259148][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 244.310239][T11199] netlink: 'syz.3.1528': attribute type 10 has an invalid length. [ 244.318822][T11199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1528'. [ 244.356489][T11199] dummy0: entered promiscuous mode [ 244.366050][T11199] bridge0: port 3(dummy0) entered blocking state [ 244.384579][T11199] bridge0: port 3(dummy0) entered disabled state [ 244.395345][T11199] dummy0: entered allmulticast mode [ 245.057742][T11217] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1535'. [ 245.086701][T11217] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1535'. [ 245.107551][T11217] netlink: 'syz.3.1535': attribute type 10 has an invalid length. [ 245.123252][T11217] team0: Cannot enslave team device to itself [ 245.386079][T11224] lo speed is unknown, defaulting to 1000 [ 245.509504][T11240] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.363226][T11270] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1548'. [ 246.374195][T11273] netlink: 'syz.2.1547': attribute type 13 has an invalid length. [ 246.392671][T11273] netlink: 'syz.2.1547': attribute type 17 has an invalid length. [ 246.631921][T11273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.743271][T11273] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.841633][T11273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.877201][T11295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.942085][ T5892] lo speed is unknown, defaulting to 1000 [ 246.948962][ T5892] syz0: Port: 1 Link ACTIVE [ 246.949008][T11240] lo speed is unknown, defaulting to 1000 [ 246.978695][ T5892] lo speed is unknown, defaulting to 1000 [ 247.030648][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 247.060870][T11224] lo speed is unknown, defaulting to 1000 [ 247.217559][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.331971][T11273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.456494][T11284] lo speed is unknown, defaulting to 1000 [ 247.462680][T11240] lo speed is unknown, defaulting to 1000 [ 247.557922][T11313] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 247.675216][T11315] syzkaller1: entered promiscuous mode [ 247.680907][T11315] syzkaller1: entered allmulticast mode [ 247.861010][T11319] veth0: entered promiscuous mode [ 247.942050][T11319] vxcan3: entered allmulticast mode [ 248.018463][T11284] lo speed is unknown, defaulting to 1000 [ 248.125128][T11318] veth0: left promiscuous mode [ 248.668711][T11335] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1559'. [ 248.692318][T11335] netlink: 'syz.3.1559': attribute type 21 has an invalid length. [ 248.700236][ T30] audit: type=1800 audit(1750865113.931:7): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1559" name="memory.events" dev="tmpfs" ino=1737 res=0 errno=0 [ 248.797705][T11337] openvswitch: netlink: Key type 6672 is out of range max 32 [ 249.006684][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'. [ 249.268967][T11354] netlink: 'syz.1.1565': attribute type 10 has an invalid length. [ 249.278916][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 249.372463][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 249.418345][T11365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.439434][T11367] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 249.670954][T11375] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 249.770187][T11375] lo speed is unknown, defaulting to 1000 [ 250.163240][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 250.205958][T11391] macsec1: entered allmulticast mode [ 250.224916][T11391] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 250.262951][T11391] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 250.443845][T11375] lo speed is unknown, defaulting to 1000 [ 250.549549][T11402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1580'. [ 250.819879][T11407] lo speed is unknown, defaulting to 1000 [ 251.064800][T11415] netlink: 'syz.2.1584': attribute type 11 has an invalid length. [ 251.095191][T11415] netlink: 'syz.2.1584': attribute type 83 has an invalid length. [ 251.289607][T11407] lo speed is unknown, defaulting to 1000 [ 251.521374][T11432] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 251.689529][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 251.721882][T11445] netlink: 'syz.4.1594': attribute type 9 has an invalid length. [ 251.729668][T11445] netlink: 'syz.4.1594': attribute type 6 has an invalid length. [ 251.749283][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 251.771026][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 251.791041][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'. [ 252.076663][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 252.186928][T11469] x_tables: duplicate underflow at hook 2 [ 253.093713][T11507] netlink: 'syz.0.1606': attribute type 5 has an invalid length. [ 253.118692][T11502] bridge3: port 1(veth7) entered blocking state [ 253.130270][T11502] bridge3: port 1(veth7) entered disabled state [ 253.150606][T11502] veth7: entered allmulticast mode [ 253.166959][T11502] veth7: entered promiscuous mode [ 253.178887][T11508] bridge3: port 2(veth0_to_bond) entered blocking state [ 253.200091][T11508] bridge3: port 2(veth0_to_bond) entered disabled state [ 253.227587][T11508] veth0_to_bond: entered allmulticast mode [ 253.236254][T11508] veth0_to_bond: entered promiscuous mode [ 253.275994][T11513] vlan3: entered allmulticast mode [ 253.299201][T11513] veth1: entered allmulticast mode [ 253.327034][T11513] bridge3: port 3(vlan3) entered blocking state [ 253.341804][T11513] bridge3: port 3(vlan3) entered disabled state [ 253.350482][T11513] vlan3: entered promiscuous mode [ 253.357355][T11513] veth1: entered promiscuous mode [ 253.605374][T11536] netlink: 'syz.0.1614': attribute type 7 has an invalid length. [ 253.634653][T11536] netlink: 'syz.0.1614': attribute type 6 has an invalid length. [ 254.367358][T11530] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 254.460373][T11577] lo speed is unknown, defaulting to 1000 [ 254.868272][T11601] __nla_validate_parse: 2 callbacks suppressed [ 254.868293][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1632'. [ 254.972610][T10226] Bluetooth: hci4: command 0x0405 tx timeout [ 255.070664][T11607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.190005][T11577] lo speed is unknown, defaulting to 1000 [ 255.199642][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 255.239708][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1635'. [ 255.354222][T11616] bridge: RTM_NEWNEIGH with invalid ether address [ 255.545262][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 255.618666][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 255.854845][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.361485][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1648'. [ 256.479079][T11671] IPVS: length: 209 != 24 [ 256.612898][T11678] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1653'. [ 256.633273][T11678] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1653'. [ 256.718611][T11683] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1657'. [ 256.744545][T11689] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.1655'. [ 256.850886][T11688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.869901][T11688] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.885809][T11688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.918765][ T6623] lo speed is unknown, defaulting to 1000 [ 256.957055][ T6623] syz2: Port: 1 Link ACTIVE [ 257.148982][T11701] pim6reg: entered allmulticast mode [ 257.198245][T11710] netlink: 'syz.3.1663': attribute type 30 has an invalid length. [ 257.413547][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 257.540335][T11728] netlink: 'syz.4.1668': attribute type 10 has an invalid length. [ 257.556184][T11728] veth0_vlan: left promiscuous mode [ 257.566383][T11728] veth0_vlan: entered promiscuous mode [ 257.583608][T11728] team0: Device veth0_vlan failed to register rx_handler [ 258.085477][T11732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.093209][T11732] IPv6: NLM_F_CREATE should be set when creating new route [ 258.100682][T11732] IPv6: NLM_F_CREATE should be set when creating new route [ 258.107975][T11732] IPv6: NLM_F_CREATE should be set when creating new route [ 258.144274][T11732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.755254][T11768] lo speed is unknown, defaulting to 1000 [ 258.775672][T11771] sctp: [Deprecated]: syz.2.1680 (pid 11771) Use of int in max_burst socket option. [ 258.775672][T11771] Use struct sctp_assoc_value instead [ 258.986485][T11781] ip6t_srh: unknown srh invflags 4449 [ 259.811293][T11768] lo speed is unknown, defaulting to 1000 [ 260.020420][T11819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.040408][ T8870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.049764][ T8870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.479436][T11828] __nla_validate_parse: 13 callbacks suppressed [ 260.479458][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1694'. [ 260.536877][T11835] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 260.661030][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 260.674586][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'. [ 260.687397][T11843] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1698'. [ 260.688209][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 260.709090][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'. [ 260.718395][T11838] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1697'. [ 260.774521][T11843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.806648][T11846] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 260.821668][T11843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.832641][T11843] bond0 (unregistering): Released all slaves [ 260.858014][T11848] x_tables: duplicate underflow at hook 2 [ 261.189532][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 261.206552][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 261.621509][T11885] netlink: 'syz.4.1712': attribute type 9 has an invalid length. [ 261.661287][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 261.738983][T11894] xfrm1: entered promiscuous mode [ 261.747150][T11894] xfrm1: entered allmulticast mode [ 261.779934][T11894] xt_hashlimit: size too large, truncated to 1048576 [ 261.780304][T11895] xt_hashlimit: size too large, truncated to 1048576 [ 261.901203][T11895] syz.4.1714: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.965823][T11895] CPU: 0 UID: 0 PID: 11895 Comm: syz.4.1714 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 261.965855][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.965881][T11895] Call Trace: [ 261.965895][T11895] [ 261.965904][T11895] dump_stack_lvl+0x189/0x250 [ 261.965946][T11895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.965978][T11895] ? __pfx__printk+0x10/0x10 [ 261.966000][T11895] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.966024][T11895] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.966049][T11895] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 261.966075][T11895] warn_alloc+0x214/0x310 [ 261.966106][T11895] ? __pfx_warn_alloc+0x10/0x10 [ 261.966140][T11895] ? __get_vm_area_node+0x28f/0x300 [ 261.966162][T11895] ? htable_create+0xfc/0x7a0 [ 261.966185][T11895] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 261.966242][T11895] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.966271][T11895] ? rcu_is_watching+0x15/0xb0 [ 261.966304][T11895] ? htable_create+0xfc/0x7a0 [ 261.966321][T11895] ? htable_create+0xfc/0x7a0 [ 261.966336][T11895] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 261.966366][T11895] ? htable_create+0xfc/0x7a0 [ 261.966381][T11895] ? hashlimit_pernet+0x23/0x240 [ 261.966407][T11895] htable_create+0xfc/0x7a0 [ 261.966434][T11895] hashlimit_mt_check_common+0x719/0xa10 [ 261.966477][T11895] hashlimit_mt_check_v1+0x221/0x360 [ 261.966512][T11895] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 261.966550][T11895] ? xt_find_match+0x1f7/0x250 [ 261.966586][T11895] xt_check_match+0x3d1/0xab0 [ 261.966614][T11895] ? __pfx___mutex_lock+0x10/0x10 [ 261.966642][T11895] ? __pfx_xt_check_match+0x10/0x10 [ 261.966674][T11895] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 261.966706][T11895] ? xt_find_match+0x1f7/0x250 [ 261.966743][T11895] translate_table+0x1553/0x2040 [ 261.966800][T11895] ? __pfx_translate_table+0x10/0x10 [ 261.966831][T11895] ? __might_fault+0xb0/0x130 [ 261.966889][T11895] ? _copy_from_user+0x94/0xb0 [ 261.966915][T11895] do_ip6t_set_ctl+0x970/0xce0 [ 261.966952][T11895] ? rcu_is_watching+0x15/0xb0 [ 261.966981][T11895] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 261.967030][T11895] ? __pfx___mutex_lock+0x10/0x10 [ 261.967052][T11895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.967081][T11895] ? __pfx_futex_wait+0x10/0x10 [ 261.967118][T11895] nf_setsockopt+0x26f/0x290 [ 261.967153][T11895] rawv6_setsockopt+0x23b/0x5b0 [ 261.967172][T11895] ? __lock_acquire+0xab9/0xd20 [ 261.967202][T11895] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 261.967221][T11895] ? aa_sock_opt_perm+0x74/0x110 [ 261.967247][T11895] ? sock_common_setsockopt+0x36/0xc0 [ 261.967271][T11895] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 261.967298][T11895] do_sock_setsockopt+0x25a/0x3e0 [ 261.967330][T11895] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 261.967369][T11895] ? __fget_files+0x2a/0x420 [ 261.967401][T11895] __x64_sys_setsockopt+0x18b/0x220 [ 261.967434][T11895] do_syscall_64+0xfa/0x3b0 [ 261.967453][T11895] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.967470][T11895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.967490][T11895] ? clear_bhb_loop+0x60/0xb0 [ 261.967510][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.967527][T11895] RIP: 0033:0x7f22bd58e929 [ 261.967545][T11895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.967563][T11895] RSP: 002b:00007f22be392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.967585][T11895] RAX: ffffffffffffffda RBX: 00007f22bd7b6080 RCX: 00007f22bd58e929 [ 261.967600][T11895] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000f [ 261.967611][T11895] RBP: 00007f22bd610b39 R08: 00000000000004c0 R09: 0000000000000000 [ 261.967624][T11895] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 261.967636][T11895] R13: 0000000000000000 R14: 00007f22bd7b6080 R15: 00007ffdf5894238 [ 261.967668][T11895] [ 262.368740][T11895] Mem-Info: [ 262.507917][T11895] active_anon:4453 inactive_anon:0 isolated_anon:0 [ 262.507917][T11895] active_file:1693 inactive_file:39900 isolated_file:0 [ 262.507917][T11895] unevictable:768 dirty:167 writeback:0 [ 262.507917][T11895] slab_reclaimable:12347 slab_unreclaimable:151025 [ 262.507917][T11895] mapped:29227 shmem:1364 pagetables:937 [ 262.507917][T11895] sec_pagetables:0 bounce:0 [ 262.507917][T11895] kernel_misc_reclaimable:0 [ 262.507917][T11895] free:1273082 free_pcp:17516 free_cma:0 [ 262.601185][ T5839] Bluetooth: hci0: command tx timeout [ 262.619135][T11895] Node 0 active_anon:17712kB inactive_anon:0kB active_file:6772kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116908kB dirty:668kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13224kB pagetables:3616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 262.652810][T11895] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 262.655540][T11908] pimreg: entered allmulticast mode [ 262.684389][T11895] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.684458][T11895] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 262.684507][T11895] Node 0 DMA32 free:1186920kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17568kB inactive_anon:0kB active_file:6772kB inactive_file:157564kB unevictable:1536kB writepending:668kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:53208kB local_pcp:20832kB free_cma:0kB [ 262.684573][T11895] lowmem_reserve[]: 0 0 1 1 1 [ 262.684618][T11895] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 262.684674][T11895] lowmem_reserve[]: 0 0 0 0 0 [ 262.684718][T11895] Node 1 Normal free:3904936kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:8352kB free_cma:0kB [ 262.684776][T11895] lowmem_reserve[]: 0 0 0 0 0 [ 262.684820][T11895] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 262.684956][T11895] Node 0 DMA32: 1034*4kB (UME) 499*8kB (UME) 261*16kB (UME) 358*32kB (UME) 109*64kB (UME) 46*128kB (UME) 23*256kB (UME) 17*512kB (UM) 9*1024kB (UME) 6*2048kB (UM) 272*4096kB (M) = 1186832kB [ 262.685145][T11895] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 262.685265][T11895] Node 1 Normal: 146*4kB (U) 52*8kB (UME) 38*16kB (UME) 109*32kB (UME) 37*64kB (UME) 7*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB [ 262.877143][T11911] pimreg: left allmulticast mode [ 262.885829][T11895] (M) = 3904936kB [ 262.928436][T11895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.938489][T11895] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.948310][T11895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.958558][T11895] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.968040][T11895] 42954 total pagecache pages [ 262.973793][T11895] 0 pages in swap cache [ 262.978075][T11895] Free swap = 124996kB [ 262.982852][T11895] Total swap = 124996kB [ 262.987233][T11895] 2097051 pages RAM [ 262.991336][T11895] 0 pages HighMem/MovableOnly [ 262.996097][T11895] 424693 pages reserved [ 263.000454][T11895] 0 pages cma reserved [ 263.337528][T11929] lo speed is unknown, defaulting to 1000 [ 263.445441][T11936] netlink: 'syz.3.1725': attribute type 3 has an invalid length. [ 263.784937][T11950] netlink: 'syz.0.1731': attribute type 142 has an invalid length. [ 263.893501][T11954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 264.262292][T11966] tipc: Started in network mode [ 264.272380][T11966] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 264.284409][T11966] tipc: Enabled bearer , priority 10 [ 264.305895][T11929] lo speed is unknown, defaulting to 1000 [ 264.432345][T11970] lo speed is unknown, defaulting to 1000 [ 264.600603][T11971] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 264.782416][T11973] lo speed is unknown, defaulting to 1000 [ 265.096069][T11973] lo speed is unknown, defaulting to 1000 [ 265.159846][T11970] lo speed is unknown, defaulting to 1000 [ 265.401651][ T5892] tipc: Node number set to 9480874 [ 266.081542][T11997] __nla_validate_parse: 6 callbacks suppressed [ 266.081561][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 266.216681][T12000] lo speed is unknown, defaulting to 1000 [ 266.613644][T12016] x_tables: duplicate underflow at hook 3 [ 266.620768][T12016] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1746'. [ 266.630135][T12016] 0ªX¹¦À: renamed from caif0 [ 266.640880][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 266.660402][T12016] 0ªX¹¦À: entered allmulticast mode [ 266.668059][T12016] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 266.670543][T12019] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.728501][T12000] lo speed is unknown, defaulting to 1000 [ 266.739530][T12019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1747'. [ 267.477640][T12038] netlink: 'syz.0.1753': attribute type 4 has an invalid length. [ 268.121592][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'. [ 268.150455][T12054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.179997][T12054] team0: Port device batadv0 added [ 268.195211][T12057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1759'. [ 268.292743][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1756'. [ 268.304082][T12062] syzkaller0: entered allmulticast mode [ 268.314948][T12062] syzkaller0 (unregistering): left allmulticast mode [ 268.472688][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1763'. [ 268.482588][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 268.733809][T12078] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 268.770035][T12078] lo speed is unknown, defaulting to 1000 [ 268.959209][T12078] lo speed is unknown, defaulting to 1000 [ 269.160028][T12086] ip6t_srh: unknown srh match flags 5294 [ 269.207552][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 269.281940][T12091] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 269.332349][T12091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.397007][T12091] bond6: (slave veth9): Enslaving as an active interface with a down link [ 269.437240][T12091] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 269.478608][T12091] vlan1: entered allmulticast mode [ 269.488498][T12091] veth1: entered allmulticast mode [ 269.499975][T12091] bond6: (slave vlan1): Opening slave failed [ 270.480421][T12128] bpq0: entered promiscuous mode [ 270.496945][T12128] bpq0: entered allmulticast mode [ 270.881996][T12147] tc_dump_action: action bad kind [ 270.902953][T12147] nbd: illegal input index -381222912 [ 271.185476][T12157] __nla_validate_parse: 8 callbacks suppressed [ 271.185496][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 271.235941][T12157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1790'. [ 271.720110][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 272.287621][T12198] lo speed is unknown, defaulting to 1000 [ 272.705405][T12210] netlink: 'syz.4.1803': attribute type 2 has an invalid length. [ 272.857265][T12210] þ`Ì: entered promiscuous mode [ 272.892954][T12218] sctp: [Deprecated]: syz.2.1805 (pid 12218) Use of int in max_burst socket option. [ 272.892954][T12218] Use struct sctp_assoc_value instead [ 273.108443][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'. [ 273.125821][T12218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.159352][T12214] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 273.308708][T12214] macvlan0: entered allmulticast mode [ 273.317168][T12214] veth1_vlan: entered allmulticast mode [ 273.335985][T12214] team0: Port device macvlan0 added [ 273.545801][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1807'. [ 273.561788][T12198] lo speed is unknown, defaulting to 1000 [ 273.567650][T12207] lo speed is unknown, defaulting to 1000 [ 274.132117][T12207] lo speed is unknown, defaulting to 1000 [ 274.176502][T12253] netlink: 'syz.3.1815': attribute type 2 has an invalid length. [ 274.189225][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 274.540868][T12259] can: request_module (can-proto-5) failed. [ 274.737723][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 275.214778][T12288] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 275.271399][T12288] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1824'. [ 275.460436][T12294] x_tables: duplicate entry at hook 3 [ 275.565111][T12297] ipvlan0: entered promiscuous mode [ 275.583821][T12298] ip6erspan0: entered promiscuous mode [ 275.706822][T12303] netlink: 'syz.2.1831': attribute type 3 has an invalid length. [ 275.780136][T12311] netlink: 'syz.2.1831': attribute type 9 has an invalid length. [ 275.835832][T12300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 275.989586][T12315] lo speed is unknown, defaulting to 1000 [ 276.009163][T12316] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1835'. [ 276.052892][T12310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.142089][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 276.197979][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 276.269437][T12322] veth11: entered promiscuous mode [ 276.437476][T12328] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1838'. [ 276.553843][T12315] lo speed is unknown, defaulting to 1000 [ 276.581524][T12316] lo speed is unknown, defaulting to 1000 [ 276.842172][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1844'. [ 277.030778][T12342] lo speed is unknown, defaulting to 1000 [ 277.066462][T12353] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1845'. [ 277.086831][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 277.273156][T12316] lo speed is unknown, defaulting to 1000 [ 277.298316][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.471430][T12342] lo speed is unknown, defaulting to 1000 [ 278.202433][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1856'. [ 278.350041][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1857'. [ 278.495403][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 278.529322][T12388] netlink: 'syz.4.1858': attribute type 101 has an invalid length. [ 278.735882][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 278.760836][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 278.899075][T12409] veth0: entered promiscuous mode [ 278.921188][T12409] veth0: left promiscuous mode [ 279.359819][T12427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.186732][T12473] x_tables: unsorted entry at hook 2 [ 280.197177][T12470] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.841535][T12504] lo speed is unknown, defaulting to 1000 [ 281.224505][T12516] __nla_validate_parse: 8 callbacks suppressed [ 281.224527][T12516] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1901'. [ 281.262462][T12516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.497905][T12514] lo speed is unknown, defaulting to 1000 [ 281.519646][T12504] lo speed is unknown, defaulting to 1000 [ 281.607764][T12528] x_tables: duplicate underflow at hook 2 [ 282.097343][T12514] lo speed is unknown, defaulting to 1000 [ 282.344704][T12548] ipvlan2: entered promiscuous mode [ 282.350457][T12548] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 282.451773][T12552] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 282.795033][T12565] tipc: Enabling of bearer rejected, failed to enable media [ 283.047385][T12569] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1916'. [ 283.072126][T12569] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1916'. [ 283.655207][T12597] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 283.663343][ T6623] IPVS: starting estimator thread 0... [ 283.712813][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1928'. [ 283.749268][T12602] vxcan3: entered allmulticast mode [ 283.754950][T12600] IPVS: using max 27 ests per chain, 64800 per kthread [ 283.819844][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1927'. [ 284.037901][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1931'. [ 284.098875][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'. [ 284.306010][ T8865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.336494][ T8865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.356403][ T8865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.381231][ T8865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.460024][T12635] openvswitch: netlink: Duplicate or invalid key (type 0). [ 284.468016][T12635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.623276][T12640] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 284.639181][T12640] netlink: 'syz.3.1938': attribute type 4 has an invalid length. [ 284.648957][T12640] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1938'. [ 284.660247][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 284.682110][T12641] No such timeout policy "syz1" [ 284.849622][T12650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 284.896350][T12654] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1939'. [ 285.027899][T12652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 acpid: input device has been disconnected, fd 3 acpid: input device has been disconnected, fd 3 [ 285.523886][T12678] openvswitch: netlink: Duplicate or invalid key (type 0). [ 285.551253][T12678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.717525][T12685] netlink: 'syz.1.1950': attribute type 21 has an invalid length. [ 286.109167][T12699] lo speed is unknown, defaulting to 1000 [ 286.511454][T12717] openvswitch: netlink: Duplicate or invalid key (type 0). [ 286.518826][T12717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.883960][T12699] lo speed is unknown, defaulting to 1000 [ 286.898599][T12721] __nla_validate_parse: 4 callbacks suppressed [ 286.898622][T12721] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1962'. [ 287.294591][T12728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1965'. [ 287.366634][T12728] macsec1: entered promiscuous mode [ 287.372981][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 287.407135][T12728] bond1: entered promiscuous mode [ 287.537896][T12728] bond1: left promiscuous mode [ 288.323221][T12753] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1971'. [ 288.351566][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 288.383084][T12750] lo speed is unknown, defaulting to 1000 [ 288.871963][T12750] lo speed is unknown, defaulting to 1000 [ 288.878139][T12761] xt_CT: No such helper "snmp" [ 289.049539][T12770] netlink: 'syz.4.1975': attribute type 10 has an invalid length. [ 289.057773][T12770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1975'. [ 289.129713][T12770] bridge0: port 1(dummy0) entered blocking state [ 289.150567][T12770] bridge0: port 1(dummy0) entered disabled state [ 289.173929][T12770] dummy0: entered allmulticast mode [ 289.181616][T12770] dummy0: entered promiscuous mode [ 289.194367][T12770] bridge0: port 1(dummy0) entered blocking state [ 289.200940][T12770] bridge0: port 1(dummy0) entered forwarding state [ 289.224080][T12774] netlink: 'syz.2.1976': attribute type 2 has an invalid length. [ 289.257359][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1978'. [ 289.530988][T12770] lo speed is unknown, defaulting to 1000 [ 289.883313][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 289.893768][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 290.172414][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 290.291125][T12817] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 290.293697][T12770] lo speed is unknown, defaulting to 1000 [ 290.379981][T12817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.466232][T12817] veth11: entered promiscuous mode [ 290.480222][T12817] bond0: (slave veth11): Enslaving as a backup interface with a down link [ 290.493038][T12824] dummy0: left allmulticast mode [ 290.509562][T12824] bridge0: port 3(dummy0) entered disabled state [ 290.585057][T12824] bridge_slave_0: left allmulticast mode [ 290.607196][T12824] bridge_slave_0: left promiscuous mode [ 290.621523][T12824] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.645777][T12824] bridge_slave_1: left allmulticast mode [ 290.658075][T12824] bridge_slave_1: left promiscuous mode [ 290.666500][T12824] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.677957][T12824] veth0_to_bond: left allmulticast mode [ 290.690831][T12824] veth0_to_bond: left promiscuous mode [ 290.709560][T12824] bridge3: port 2(veth0_to_bond) entered disabled state [ 290.729839][T12824] team0: Port device team_slave_0 removed [ 290.766598][T12824] team0: Port device team_slave_1 removed [ 290.802139][T12824] ip6gretap2: left allmulticast mode [ 290.807499][T12824] ip6gretap2: left promiscuous mode [ 290.817629][T12824] bridge1: port 1(ip6gretap2) entered disabled state [ 290.829429][T12824] veth7: left allmulticast mode [ 290.836317][T12824] veth7: left promiscuous mode [ 290.841390][T12824] bridge3: port 1(veth7) entered disabled state [ 290.853358][T12824] vlan3: left promiscuous mode [ 290.858627][T12824] veth1: left promiscuous mode [ 290.864144][T12824] bridge3: port 3(vlan3) entered disabled state [ 290.887642][T12824] team0: Port device batadv0 removed [ 290.896205][T12824] bond0: (slave veth11): Releasing backup interface [ 291.009333][T12832] lo speed is unknown, defaulting to 1000 [ 291.553818][T12855] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 291.739674][T12862] bond7: (slave gretap1): making interface the new active one [ 291.780560][T12862] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 292.136021][T12887] __nla_validate_parse: 3 callbacks suppressed [ 292.136042][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 292.173627][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 292.511907][T12832] lo speed is unknown, defaulting to 1000 [ 292.721844][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 293.134997][T12932] netlink: 'syz.3.2016': attribute type 6 has an invalid length. [ 293.388161][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2020'. [ 293.425917][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 293.584330][T12953] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 293.584956][T12946] xt_CT: No such helper "syz1" [ 293.975723][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 293.996515][T12969] ip6gretap2: entered allmulticast mode [ 294.005185][T12969] tipc: Started in network mode [ 294.010229][T12969] tipc: Node identity ac14140f, cluster identity 4711 [ 294.019728][T12969] tipc: New replicast peer: 255.255.255.255 [ 294.026480][T12969] tipc: Enabled bearer , priority 10 [ 294.034938][T12970] wg2: entered promiscuous mode [ 294.095634][T12974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2030'. [ 294.107546][T12970] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2029'. [ 294.353089][T12984] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 294.485397][T12984] wg1: entered promiscuous mode [ 294.509493][T12984] wg1: entered allmulticast mode [ 294.787749][T13008] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 294.810426][T13005] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2040'. [ 294.827451][T13007] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 294.834634][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 294.900998][T13005] openvswitch: netlink: Duplicate or invalid key (type 0). [ 294.930698][T13005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.021499][ T6623] tipc: Node number set to 2886997007 [ 295.675675][T13033] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 296.083779][T13044] netlink: 'syz.3.2050': attribute type 27 has an invalid length. [ 297.187015][T13090] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 297.209383][T13090] netlink: 'syz.3.2068': attribute type 4 has an invalid length. [ 297.258177][T13090] __nla_validate_parse: 2 callbacks suppressed [ 297.258194][T13090] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2068'. [ 297.359422][T13098] xt_time: unknown flags 0x4 [ 297.426717][T13099] lo speed is unknown, defaulting to 1000 [ 297.610193][T13121] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 297.694681][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'. [ 297.905998][T13099] lo speed is unknown, defaulting to 1000 [ 298.186437][T13141] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 298.195016][T13141] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 298.330391][T13145] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 298.432272][T13143] ip6gre1: entered allmulticast mode [ 298.524038][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2084'. [ 298.606178][T13152] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2085'. [ 299.026239][T13168] [ 299.028621][T13168] ====================================================== [ 299.035661][T13168] WARNING: possible circular locking dependency detected [ 299.042694][T13168] 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 Not tainted [ 299.049801][T13168] ------------------------------------------------------ [ 299.056817][T13168] syz.0.2088/13168 is trying to acquire lock: [ 299.062899][T13168] ffff8880257b0e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 299.072309][T13168] [ 299.072309][T13168] but task is already holding lock: [ 299.079672][T13168] ffff888077d90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x11b/0x140 [ 299.089516][T13168] [ 299.089516][T13168] which lock already depends on the new lock. [ 299.089516][T13168] [ 299.099911][T13168] [ 299.099911][T13168] the existing dependency chain (in reverse order) is: [ 299.108922][T13168] [ 299.108922][T13168] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 299.116662][T13168] lock_acquire+0x120/0x360 [ 299.121700][T13168] __mutex_lock+0x182/0xe80 [ 299.126736][T13168] ieee80211_open+0xed/0x1f0 [ 299.131851][T13168] __dev_open+0x470/0x880 [ 299.136713][T13168] netif_open+0xaa/0x170 [ 299.141481][T13168] dev_open+0x125/0x260 [ 299.146162][T13168] team_add_slave+0xb36/0x2840 [ 299.151452][T13168] do_set_master+0x530/0x6d0 [ 299.156567][T13168] do_setlink+0xcf0/0x41c0 [ 299.161512][T13168] rtnl_newlink+0x160b/0x1c70 [ 299.166734][T13168] rtnetlink_rcv_msg+0x7cc/0xb70 [ 299.172202][T13168] netlink_rcv_skb+0x205/0x470 [ 299.177488][T13168] netlink_unicast+0x758/0x8d0 [ 299.182790][T13168] netlink_sendmsg+0x805/0xb30 [ 299.188084][T13168] __sock_sendmsg+0x219/0x270 [ 299.193284][T13168] ____sys_sendmsg+0x505/0x830 [ 299.198666][T13168] ___sys_sendmsg+0x21f/0x2a0 [ 299.203874][T13168] __x64_sys_sendmsg+0x19b/0x260 [ 299.209338][T13168] do_syscall_64+0xfa/0x3b0 [ 299.214367][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.220784][T13168] [ 299.220784][T13168] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 299.228786][T13168] validate_chain+0xb9b/0x2140 [ 299.234194][T13168] __lock_acquire+0xab9/0xd20 [ 299.239409][T13168] lock_acquire+0x120/0x360 [ 299.244450][T13168] __mutex_lock+0x182/0xe80 [ 299.249496][T13168] team_del_slave+0x32/0x1c0 [ 299.254632][T13168] team_device_event+0x285/0xa20 [ 299.260150][T13168] notifier_call_chain+0x1b3/0x3e0 [ 299.265798][T13168] unregister_netdevice_many_notify+0x15d8/0x2320 [ 299.272744][T13168] unregister_netdevice_queue+0x33c/0x380 [ 299.279045][T13168] _cfg80211_unregister_wdev+0x165/0x590 [ 299.285209][T13168] ieee80211_if_remove+0x256/0x310 [ 299.290860][T13168] ieee80211_del_iface+0x19/0x30 [ 299.296333][T13168] cfg80211_remove_virtual_intf+0x22e/0x3f0 [ 299.302750][T13168] genl_family_rcv_msg_doit+0x215/0x300 [ 299.308822][T13168] genl_rcv_msg+0x60e/0x790 [ 299.313850][T13168] netlink_rcv_skb+0x205/0x470 [ 299.319142][T13168] genl_rcv+0x28/0x40 [ 299.323655][T13168] netlink_unicast+0x758/0x8d0 [ 299.328946][T13168] netlink_sendmsg+0x805/0xb30 [ 299.334240][T13168] __sock_sendmsg+0x219/0x270 [ 299.339439][T13168] ____sys_sendmsg+0x505/0x830 [ 299.344730][T13168] ___sys_sendmsg+0x21f/0x2a0 [ 299.349948][T13168] __x64_sys_sendmsg+0x19b/0x260 [ 299.355416][T13168] do_syscall_64+0xfa/0x3b0 [ 299.360440][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.366862][T13168] [ 299.366862][T13168] other info that might help us debug this: [ 299.366862][T13168] [ 299.377100][T13168] Possible unsafe locking scenario: [ 299.377100][T13168] [ 299.384555][T13168] CPU0 CPU1 [ 299.389918][T13168] ---- ---- [ 299.395275][T13168] lock(&rdev->wiphy.mtx); [ 299.399778][T13168] lock(team->team_lock_key); [ 299.407064][T13168] lock(&rdev->wiphy.mtx); [ 299.414095][T13168] lock(team->team_lock_key); [ 299.418907][T13168] [ 299.418907][T13168] *** DEADLOCK *** [ 299.418907][T13168] [ 299.427225][T13168] 3 locks held by syz.0.2088/13168: [ 299.432419][T13168] #0: ffffffff8f577bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 299.440632][T13168] #1: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 299.449884][T13168] #2: ffff888077d90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x11b/0x140 [ 299.460161][T13168] [ 299.460161][T13168] stack backtrace: [ 299.466052][T13168] CPU: 0 UID: 0 PID: 13168 Comm: syz.0.2088 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 299.466078][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.466089][T13168] Call Trace: [ 299.466097][T13168] [ 299.466105][T13168] dump_stack_lvl+0x189/0x250 [ 299.466136][T13168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.466162][T13168] ? __pfx__printk+0x10/0x10 [ 299.466181][T13168] ? print_lock_name+0xde/0x100 [ 299.466200][T13168] print_circular_bug+0x2ee/0x310 [ 299.466219][T13168] check_noncircular+0x134/0x160 [ 299.466238][T13168] validate_chain+0xb9b/0x2140 [ 299.466259][T13168] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.466280][T13168] __lock_acquire+0xab9/0xd20 [ 299.466306][T13168] ? team_del_slave+0x32/0x1c0 [ 299.466323][T13168] lock_acquire+0x120/0x360 [ 299.466344][T13168] ? team_del_slave+0x32/0x1c0 [ 299.466363][T13168] ? __mutex_trylock_common+0x153/0x260 [ 299.466383][T13168] __mutex_lock+0x182/0xe80 [ 299.466400][T13168] ? team_del_slave+0x32/0x1c0 [ 299.466416][T13168] ? rcu_is_watching+0x15/0xb0 [ 299.466446][T13168] ? team_del_slave+0x32/0x1c0 [ 299.466463][T13168] ? __pfx___mutex_lock+0x10/0x10 [ 299.466481][T13168] ? bond_netdev_event+0xd9/0xe80 [ 299.466500][T13168] ? __pfx___mutex_lock+0x10/0x10 [ 299.466520][T13168] ? __pfx_bond_netdev_event+0x10/0x10 [ 299.466543][T13168] team_del_slave+0x32/0x1c0 [ 299.466562][T13168] team_device_event+0x285/0xa20 [ 299.466587][T13168] notifier_call_chain+0x1b3/0x3e0 [ 299.466617][T13168] unregister_netdevice_many_notify+0x15d8/0x2320 [ 299.466643][T13168] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 299.466681][T13168] ? call_rcu+0x6dd/0x990 [ 299.466698][T13168] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.466719][T13168] ? __pfx_call_rcu+0x10/0x10 [ 299.466737][T13168] unregister_netdevice_queue+0x33c/0x380 [ 299.466753][T13168] ? kernfs_remove_by_name_ns+0xee/0x130 [ 299.466779][T13168] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 299.466801][T13168] _cfg80211_unregister_wdev+0x165/0x590 [ 299.466826][T13168] ieee80211_if_remove+0x256/0x310 [ 299.466847][T13168] ieee80211_del_iface+0x19/0x30 [ 299.466873][T13168] cfg80211_remove_virtual_intf+0x22e/0x3f0 [ 299.466894][T13168] genl_family_rcv_msg_doit+0x215/0x300 [ 299.466914][T13168] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 299.466943][T13168] ? bpf_lsm_capable+0x9/0x20 [ 299.466959][T13168] ? security_capable+0x7e/0x2e0 [ 299.466983][T13168] genl_rcv_msg+0x60e/0x790 [ 299.467001][T13168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.467015][T13168] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 299.467040][T13168] ? __pfx_nl80211_del_interface+0x10/0x10 [ 299.467056][T13168] ? __pfx_nl80211_post_doit+0x10/0x10 [ 299.467088][T13168] netlink_rcv_skb+0x205/0x470 [ 299.467110][T13168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.467125][T13168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.467153][T13168] ? down_read+0x1ad/0x2e0 [ 299.467173][T13168] genl_rcv+0x28/0x40 [ 299.467198][T13168] netlink_unicast+0x758/0x8d0 [ 299.467232][T13168] netlink_sendmsg+0x805/0xb30 [ 299.467258][T13168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.467280][T13168] ? aa_sock_msg_perm+0x94/0x160 [ 299.467302][T13168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.467322][T13168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.467343][T13168] __sock_sendmsg+0x219/0x270 [ 299.467363][T13168] ____sys_sendmsg+0x505/0x830 [ 299.467389][T13168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.467417][T13168] ? import_iovec+0x74/0xa0 [ 299.467434][T13168] ___sys_sendmsg+0x21f/0x2a0 [ 299.467459][T13168] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.467499][T13168] ? __fget_files+0x2a/0x420 [ 299.467517][T13168] ? __fget_files+0x3a0/0x420 [ 299.467538][T13168] __x64_sys_sendmsg+0x19b/0x260 [ 299.467563][T13168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.467593][T13168] ? do_user_addr_fault+0xc8a/0x1390 [ 299.467616][T13168] ? do_syscall_64+0xbe/0x3b0 [ 299.467635][T13168] do_syscall_64+0xfa/0x3b0 [ 299.467651][T13168] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.467666][T13168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.467684][T13168] ? clear_bhb_loop+0x60/0xb0 [ 299.467702][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.467718][T13168] RIP: 0033:0x7f0ff8d8e929 [ 299.467733][T13168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.467748][T13168] RSP: 002b:00007f0ff9bd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.467765][T13168] RAX: ffffffffffffffda RBX: 00007f0ff8fb6080 RCX: 00007f0ff8d8e929 [ 299.467778][T13168] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 299.467788][T13168] RBP: 00007f0ff8e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 299.467799][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.467808][T13168] R13: 0000000000000001 R14: 00007f0ff8fb6080 R15: 00007fff00ae2688 [ 299.467827][T13168] [ 299.950922][T13168] team0: Port device wlan1 removed [ 299.971020][T13158] lo speed is unknown, defaulting to 1000 [ 300.058345][T13158] lo speed is unknown, defaulting to 1000 [ 300.093411][T13175] lo speed is unknown, defaulting to 1000 [ 300.250377][T13175] lo speed is unknown, defaulting to 1000