last executing test programs: 1m23.557413608s ago: executing program 0 (id=5874): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x18}}], 0x1, 0x4000000) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) (async, rerun: 32) close(r4) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x6, 0x4000, @void, @value}, 0x10) (async, rerun: 64) setsockopt(r1, 0x10d, 0xe, 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003042abd70000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050029000a"], 0x44}}, 0x0) 1m23.485871298s ago: executing program 0 (id=5876): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000080000000100010009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0}}, 0x10) 1m23.364976886s ago: executing program 0 (id=5877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=@newchain={0x88, 0x64, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0x7, 0xfffa}, {0x4, 0xfff2}}, [@f_rsvp={{0x9}, {0x58, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x5, 0x40}, {0x8, 0x690, 0x6}, 0x33, 0x4b, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6000000, 0xc, 0x59}, {0x8, 0x200, 0xfffffffb}, 0x73, 0x7f, 0x40}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_POLICE={0x4}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x54}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$kcm(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x41010, r0, 0x1504c000) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x406, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 1m16.053133373s ago: executing program 0 (id=5877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=@newchain={0x88, 0x64, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0x7, 0xfffa}, {0x4, 0xfff2}}, [@f_rsvp={{0x9}, {0x58, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x5, 0x40}, {0x8, 0x690, 0x6}, 0x33, 0x4b, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6000000, 0xc, 0x59}, {0x8, 0x200, 0xfffffffb}, 0x73, 0x7f, 0x40}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_POLICE={0x4}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x54}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$kcm(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x41010, r0, 0x1504c000) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x406, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 1m3.011202714s ago: executing program 0 (id=5877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=@newchain={0x88, 0x64, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0x7, 0xfffa}, {0x4, 0xfff2}}, [@f_rsvp={{0x9}, {0x58, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x5, 0x40}, {0x8, 0x690, 0x6}, 0x33, 0x4b, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6000000, 0xc, 0x59}, {0x8, 0x200, 0xfffffffb}, 0x73, 0x7f, 0x40}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_POLICE={0x4}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x54}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$kcm(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x41010, r0, 0x1504c000) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x406, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 49.598038483s ago: executing program 0 (id=5877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=@newchain={0x88, 0x64, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0x7, 0xfffa}, {0x4, 0xfff2}}, [@f_rsvp={{0x9}, {0x58, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x5, 0x40}, {0x8, 0x690, 0x6}, 0x33, 0x4b, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6000000, 0xc, 0x59}, {0x8, 0x200, 0xfffffffb}, 0x73, 0x7f, 0x40}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_POLICE={0x4}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x54}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$kcm(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x41010, r0, 0x1504c000) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x406, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 28.073453898s ago: executing program 3 (id=6261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x800, 0x7, 0x205, 0x7ff, 0x2, 0x0, 0xffff0001, 0x3, r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd24, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x4}}]}]}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x64000000, @mcast2, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 28.01097665s ago: executing program 3 (id=6263): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000"], 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x90000004}) tee(r5, r1, 0x8, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r1, 0x1e, 0x1, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r9, r1, 0x31, 0x1a, r3, @void, @value=r5, @void, @void, r8}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r9, r1, 0x31, 0x1a, r3, @void, @value=r5, @void, @void, r8}, 0x20) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000600), &(0x7f0000000640)}, 0x1c) bind$bt_hci(r5, &(0x7f0000000480)={0x1f, 0x4, 0x2}, 0x6) 27.849970472s ago: executing program 3 (id=6266): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x130, 0x65, 0x0, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010101}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x90, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}, @TCA_ROUTE4_ACT={0x74, 0x6, [@m_nat={0x3c, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "3eaed48f5023f5c36bc9d8619f"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 27.748988337s ago: executing program 3 (id=6268): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000007000000000000000000000073014300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) r1 = accept4(r0, &(0x7f0000000480)=@xdp, &(0x7f0000000400)=0x80, 0x800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0xffffff66, 0x2, {{0x32, 0x4, 0x1, 0x7, 0xc8, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @timestamp_addr={0x44, 0x44, 0x24, 0x1, 0x3, [{@multicast2, 0x80000001}, {@private=0xa010100, 0x2}, {@empty, 0x6}, {@loopback, 0xfffffffe}, {@broadcast, 0x4}, {@empty, 0x9}, {@private=0xa010100, 0x7}, {@loopback, 0x40}]}, @timestamp_prespec={0x44, 0xc, 0xc8, 0x3, 0xa, [{@multicast2, 0x2}]}, @generic={0x7, 0x9, "d9f2a73fc9e5d6"}, @timestamp_addr={0x44, 0x34, 0x71, 0x1, 0xf, [{@rand_addr=0x64010101, 0x4}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x3592ee65}, {@multicast1}, {@multicast1, 0x4}]}, @end, @rr={0x7, 0x17, 0xed, [@loopback, @empty, @multicast2, @empty, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x2c, 0x3, 0x9, [{@loopback, 0x400}]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c00000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="00000000000000000400140078001680740001800c0003000000000000000000280001"], 0x9c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8000, 0x1, 0x4, 0x9, {{0x13, 0x4, 0x2, 0x35, 0x4c, 0x66, 0x0, 0xdb, 0x29, 0x0, @empty, @remote, {[@generic={0x89, 0x11, "9ff66d7de77d1838545021f4ee781c"}, @generic={0x94, 0x11, "a93c0cbddb823b789ef1338c1747e2"}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x8}, {@loopback, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)={0x33c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "7b2d75bba6009ad1d6fe012b0b6ca33f0cd85dcb167e612900c90e7c7bc184eff50050ea86d4ed610779573c001dc332efdcdef8c30f5d5a57cc24ae9f15bb07f9033dd2622c951b4d8aa5568164d6af54010278cfabba27f92d76baee5975774e6bd6b9195ab2505c542c2d9af4a1458fca6305369c6f54a5b0307818756a8535095e434ad88aae01ea51f2945f4c009f4e51172073645d8fe7238ed435b02972c70f5e2c9f417e102a672cf587728fcf85df43eabd9c33e4a892ce25807c57b239664dfde0d9d5a91ea8d2137882521ab0fc8076299f53347907"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "862d7e57b8e3c5fdde6ef16b47b5d32897cb5688b8b9650fcf3a4690da90bacd1e7f909ca45abc2c08ac1330fec41da8ee0ee6d9001e6720b53a9682140f5aa503b1b4a9ce77df2e5bd11abf1263a01c8b02b3da952de1b07337afed52a75cf48a3e69ac30252d54db5f339bc7dc9ab9b8a22ca2a62615625d6c02dc63387c"}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{+$--$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fa4ec98}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x884}, 0x24004084) r11 = socket$kcm(0x29, 0x6, 0x0) recvmsg$kcm(r11, &(0x7f0000000440)={&(0x7f0000000080)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/233, 0xe9}], 0x4, &(0x7f0000000400)}, 0x10020) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x1b, r9, 0x1, 0xdf, 0x6, @multicast}, 0x14) 21.727024511s ago: executing program 3 (id=6268): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000007000000000000000000000073014300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) r1 = accept4(r0, &(0x7f0000000480)=@xdp, &(0x7f0000000400)=0x80, 0x800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0xffffff66, 0x2, {{0x32, 0x4, 0x1, 0x7, 0xc8, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @timestamp_addr={0x44, 0x44, 0x24, 0x1, 0x3, [{@multicast2, 0x80000001}, {@private=0xa010100, 0x2}, {@empty, 0x6}, {@loopback, 0xfffffffe}, {@broadcast, 0x4}, {@empty, 0x9}, {@private=0xa010100, 0x7}, {@loopback, 0x40}]}, @timestamp_prespec={0x44, 0xc, 0xc8, 0x3, 0xa, [{@multicast2, 0x2}]}, @generic={0x7, 0x9, "d9f2a73fc9e5d6"}, @timestamp_addr={0x44, 0x34, 0x71, 0x1, 0xf, [{@rand_addr=0x64010101, 0x4}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x3592ee65}, {@multicast1}, {@multicast1, 0x4}]}, @end, @rr={0x7, 0x17, 0xed, [@loopback, @empty, @multicast2, @empty, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x2c, 0x3, 0x9, [{@loopback, 0x400}]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c00000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="00000000000000000400140078001680740001800c0003000000000000000000280001"], 0x9c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8000, 0x1, 0x4, 0x9, {{0x13, 0x4, 0x2, 0x35, 0x4c, 0x66, 0x0, 0xdb, 0x29, 0x0, @empty, @remote, {[@generic={0x89, 0x11, "9ff66d7de77d1838545021f4ee781c"}, @generic={0x94, 0x11, "a93c0cbddb823b789ef1338c1747e2"}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x8}, {@loopback, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)={0x33c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "7b2d75bba6009ad1d6fe012b0b6ca33f0cd85dcb167e612900c90e7c7bc184eff50050ea86d4ed610779573c001dc332efdcdef8c30f5d5a57cc24ae9f15bb07f9033dd2622c951b4d8aa5568164d6af54010278cfabba27f92d76baee5975774e6bd6b9195ab2505c542c2d9af4a1458fca6305369c6f54a5b0307818756a8535095e434ad88aae01ea51f2945f4c009f4e51172073645d8fe7238ed435b02972c70f5e2c9f417e102a672cf587728fcf85df43eabd9c33e4a892ce25807c57b239664dfde0d9d5a91ea8d2137882521ab0fc8076299f53347907"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "862d7e57b8e3c5fdde6ef16b47b5d32897cb5688b8b9650fcf3a4690da90bacd1e7f909ca45abc2c08ac1330fec41da8ee0ee6d9001e6720b53a9682140f5aa503b1b4a9ce77df2e5bd11abf1263a01c8b02b3da952de1b07337afed52a75cf48a3e69ac30252d54db5f339bc7dc9ab9b8a22ca2a62615625d6c02dc63387c"}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{+$--$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fa4ec98}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x884}, 0x24004084) r11 = socket$kcm(0x29, 0x6, 0x0) recvmsg$kcm(r11, &(0x7f0000000440)={&(0x7f0000000080)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/233, 0xe9}], 0x4, &(0x7f0000000400)}, 0x10020) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x1b, r9, 0x1, 0xdf, 0x6, @multicast}, 0x14) 9.937452759s ago: executing program 4 (id=6369): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x7f}, &(0x7f0000000280)=0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x4, 0x0) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30c6d1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f40e2ab1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81106db988096bba7772e6acc5956344eaa64fea7c6319a37312ad57490dd2ebcb9bdf2815aae851bbd55317b4fcdaa8b06d30ed3db8a117424fed41f68979ac996e7fcd4549daf29bff6a2643e184580eb0b0bf81046975ea8d5e06e7124790dfca059217a34f4120feb2bb", 0x142}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0x6a2}], 0x7}}], 0x1, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'veth1_to_batadv\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xc, 0x8, 0xffffdb49}}) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x44}}, 0x0) 9.395679574s ago: executing program 3 (id=6268): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000007000000000000000000000073014300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) r1 = accept4(r0, &(0x7f0000000480)=@xdp, &(0x7f0000000400)=0x80, 0x800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0xffffff66, 0x2, {{0x32, 0x4, 0x1, 0x7, 0xc8, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @timestamp_addr={0x44, 0x44, 0x24, 0x1, 0x3, [{@multicast2, 0x80000001}, {@private=0xa010100, 0x2}, {@empty, 0x6}, {@loopback, 0xfffffffe}, {@broadcast, 0x4}, {@empty, 0x9}, {@private=0xa010100, 0x7}, {@loopback, 0x40}]}, @timestamp_prespec={0x44, 0xc, 0xc8, 0x3, 0xa, [{@multicast2, 0x2}]}, @generic={0x7, 0x9, "d9f2a73fc9e5d6"}, @timestamp_addr={0x44, 0x34, 0x71, 0x1, 0xf, [{@rand_addr=0x64010101, 0x4}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x3592ee65}, {@multicast1}, {@multicast1, 0x4}]}, @end, @rr={0x7, 0x17, 0xed, [@loopback, @empty, @multicast2, @empty, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x2c, 0x3, 0x9, [{@loopback, 0x400}]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c00000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="00000000000000000400140078001680740001800c0003000000000000000000280001"], 0x9c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8000, 0x1, 0x4, 0x9, {{0x13, 0x4, 0x2, 0x35, 0x4c, 0x66, 0x0, 0xdb, 0x29, 0x0, @empty, @remote, {[@generic={0x89, 0x11, "9ff66d7de77d1838545021f4ee781c"}, @generic={0x94, 0x11, "a93c0cbddb823b789ef1338c1747e2"}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x8}, {@loopback, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)={0x33c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "7b2d75bba6009ad1d6fe012b0b6ca33f0cd85dcb167e612900c90e7c7bc184eff50050ea86d4ed610779573c001dc332efdcdef8c30f5d5a57cc24ae9f15bb07f9033dd2622c951b4d8aa5568164d6af54010278cfabba27f92d76baee5975774e6bd6b9195ab2505c542c2d9af4a1458fca6305369c6f54a5b0307818756a8535095e434ad88aae01ea51f2945f4c009f4e51172073645d8fe7238ed435b02972c70f5e2c9f417e102a672cf587728fcf85df43eabd9c33e4a892ce25807c57b239664dfde0d9d5a91ea8d2137882521ab0fc8076299f53347907"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "862d7e57b8e3c5fdde6ef16b47b5d32897cb5688b8b9650fcf3a4690da90bacd1e7f909ca45abc2c08ac1330fec41da8ee0ee6d9001e6720b53a9682140f5aa503b1b4a9ce77df2e5bd11abf1263a01c8b02b3da952de1b07337afed52a75cf48a3e69ac30252d54db5f339bc7dc9ab9b8a22ca2a62615625d6c02dc63387c"}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{+$--$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fa4ec98}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x884}, 0x24004084) r11 = socket$kcm(0x29, 0x6, 0x0) recvmsg$kcm(r11, &(0x7f0000000440)={&(0x7f0000000080)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/233, 0xe9}], 0x4, &(0x7f0000000400)}, 0x10020) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x1b, r9, 0x1, 0xdf, 0x6, @multicast}, 0x14) 8.854895426s ago: executing program 4 (id=6375): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x0, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x14c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x2}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x40, 0x1, 0x6, 0x177}]}}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x74, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x58, 0x6, [@m_connmark={0x54, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x2e, 0x800}, 0x6}}]}, {0x6, 0x6, 'f9'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.660857835s ago: executing program 4 (id=6378): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x4, 0x0, &(0x7f0000000140)="dd800000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) close(r0) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/113, 0x71}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) unshare(0x60020c80) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000980)=@framed={{}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x181}, @alu={0x4, 0x0, 0x7, 0x5, 0xb, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @alu={0x4, 0x1, 0x5, 0x4, 0xa, 0x6, 0x4}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, 0x0, &(0x7f0000000640)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r9, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000800)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x70, r8, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 6.267202761s ago: executing program 4 (id=6387): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x0, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r4 = socket(0x23, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r7) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) listen(r4, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd70000000000005000800180001801400020073797a5f74756e000000000000000000140003800400040008000200000003"], 0x40}}, 0x0) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0xb, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x68}}, 0x0) 5.918474927s ago: executing program 4 (id=6389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x2b1, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x27b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x525, 0x18, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {}]}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f911240685", 0x14}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='!', 0x1, 0x2400c005, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x15, 0x0, &(0x7f0000001040)) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x9, 0xfffffff9}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/321], 0x24}, 0x1, 0x0, 0x0, 0x24004064}, 0x20004004) 5.755480036s ago: executing program 4 (id=6391): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)=0x4b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x56}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00003a000000000000001200ffffe0000012fe8000000000000000000000000000aa8484000000000000223427d5c9a46b9f2e505b0c0a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a"], 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0xffffffde, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x0, 0x0, 0x6c, 0xfffffffc, 0x0, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0xffffffff, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x3ff, 0x3, 0x2}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) sendmsg$rds(r2, 0x0, 0x40000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x69ce918e3f55a83f, 0x6, 0x0, 0xc}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) close(r7) recvfrom(r5, &(0x7f00000001c0)=""/242, 0xf2, 0x40000020, 0x0, 0x0) shutdown(r5, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x4, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) 4.115335769s ago: executing program 2 (id=6394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffeffffb, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, r0, 0x36, 0x28, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) 4.027886107s ago: executing program 2 (id=6395): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xfffffff7, "00000f0000000000000f00000e00"}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x6, &(0x7f0000000140)=""/50, &(0x7f0000000180)=0x32) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3.879496788s ago: executing program 2 (id=6396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x2d8, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2a2, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x525, 0x18, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f911240685", 0x14}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='!', 0x1, 0x2400c005, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x15, 0x0, &(0x7f0000001040)) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x9, 0xfffffff9}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001000d6ffffffa21cc928400122a0a57d571d66d50f3104ee1c95b51f3a90d260f1b96dc7c5f95dc9cf02ee8cc6b1c8ad1d454c37d6ac0505938ed058c2fbe1d296be207822c8a7174b8ba49fec1306059502196d922bbc682fb2cd91d36ddb8faf087a3410796c26efe41ebf95981baa95f57b6c1e3ff2a4000000009c8524dcb1bd4fa7294c7669dc62a9adbfbd137a2e8a39b0db270e91521997c390361919f479f24ebbfff2c925a69eb82efabdadb2d0ece460481abe778b4a8f275e3f2717f2b478dc7f5fd77eba8eb9cd3f58f280da574f6d5a92aa5b27c819dd2d1617327b8093b67fcfa33f12489b50264d6f5e81ae7f7365b4af17628f1e2fec3208c2844526aec749f6e06581aba452699911e2d9e2e200"/321], 0x24}, 0x1, 0x0, 0x0, 0x24004064}, 0x20004004) 3.705325429s ago: executing program 2 (id=6397): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x4, 0x0, &(0x7f0000000140)="dd800000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) close(r0) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/113, 0x71}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) unshare(0x60020c80) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000980)=@framed={{}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x181}, @alu={0x4, 0x0, 0x7, 0x5, 0xb, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @alu={0x4, 0x1, 0x5, 0x4, 0xa, 0x6, 0x4}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000600), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r8, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000800)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x70, r7, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3.507563726s ago: executing program 1 (id=6398): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r5 = accept$alg(r0, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x390, 0x238, 0x238, 0x390, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x270, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x0, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4008, r5}, 0x18) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0x4e23, 0x7, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000027c0)=ANY=[], 0x4}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x500, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffff0000000000000800000000300000000000019078ac1e0101ac1414aa0c0090780a0b0000450a9094007600f9031d0000ac1414bb00000000"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f00000008003c000500000008000300", @ANYRES32=r11, @ANYBLOB="27488a151bcccd9b55583f18a44faea00522a50e16f650314f12ac4e4e0aeb16e0db455060463e6186644aeb705e27317c674e5c417f1f002b91cc4a504b91a38469f82170a1835def7a1dd0b6986066e44f33750ed7338c938809cb91a1e28ac49f7e488fa59af9af8f6a6fa2cd215a0df0ba377aeb0b52d828e42691de6bea1432055654aa2eb38d0f951cfc7b0d15c919e4fff93716f804812c9a04c7e9"], 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)={[{0x2b, 'cpuacct'}, {0x2d, 'cpu'}, {0x2b, 'net_cls'}, {0x2b, 'devices'}, {0x2b, 'freezer'}, {0x2d, 'hugetlb'}, {0x2d, 'io'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2b, 'cpu'}]}, 0x51) 3.176748902s ago: executing program 1 (id=6399): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x0, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r4 = socket(0x23, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r7) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) listen(r4, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd70000000000005000800180001801400020073797a5f74756e000000000000000000140003800400040008000200000003"], 0x40}}, 0x0) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0xb, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x68}}, 0x0) 2.932498322s ago: executing program 1 (id=6400): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x0, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x14c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x2}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x400, 0x7, 0xfc}]}}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x74, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x58, 0x6, [@m_connmark={0x54, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x2e, 0x800}, 0x6}}]}, {0x6, 0x6, 'f9'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.313131866s ago: executing program 1 (id=6401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x8}, {0xffff}, {0x1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010a030000000000000000000100000a0900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 2.1334251s ago: executing program 1 (id=6402): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) close(r1) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000206000/0x3000)=nil, 0x3000, 0xe, 0x10010, r4, 0x3eb7a000) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', r7}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000000540)={'pim6reg0\x00'}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000001640)=0x1080, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000740)={'veth1_vlan\x00', &(0x7f0000000400)=@ethtool_stats={0x1d, 0x3, [0x0, 0x100, 0x3]}}) 637.998612ms ago: executing program 1 (id=6403): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r2, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x48, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f1}]}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x100, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69a62a25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37b26c35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x608f34fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e20504f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cad}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x185faee8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ad30c70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6152be18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4ec}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x232dc4c7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c9a8059}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000800), &(0x7f0000000840)=0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x2c, 0x0, 0x302, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0xc}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4c881) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x3d, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x42) 91.230868ms ago: executing program 2 (id=6404): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_getnexthop={0x20, 0x6a, 0x119, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 0s ago: executing program 2 (id=6405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffeffffb, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, r0, 0x36, 0x28, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) kernel console output (not intermixed with test programs): 26068] ? security_file_permission+0x74/0x280 [ 976.885310][T26068] vfs_write+0xaeb/0xd30 [ 976.889580][T26068] ? __pfx_sock_write_iter+0x10/0x10 [ 976.894889][T26068] ? __pfx_vfs_write+0x10/0x10 [ 976.899681][T26068] ? __fget_files+0x2a/0x410 [ 976.904303][T26068] ? __fget_files+0x2a/0x410 [ 976.908933][T26068] ksys_write+0x18f/0x2b0 [ 976.913292][T26068] ? __pfx_ksys_write+0x10/0x10 [ 976.918164][T26068] ? do_syscall_64+0x100/0x230 [ 976.922947][T26068] ? do_syscall_64+0xb6/0x230 [ 976.927657][T26068] do_syscall_64+0xf3/0x230 [ 976.932180][T26068] ? clear_bhb_loop+0x35/0x90 [ 976.936883][T26068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.942799][T26068] RIP: 0033:0x7fa2ce985d29 [ 976.947228][T26068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.966876][T26068] RSP: 002b:00007fa2cf7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 976.975318][T26068] RAX: ffffffffffffffda RBX: 00007fa2ceb75fa0 RCX: 00007fa2ce985d29 [ 976.983332][T26068] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 976.991325][T26068] RBP: 00007fa2cf7d0090 R08: 0000000000000000 R09: 0000000000000000 [ 976.999323][T26068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.007312][T26068] R13: 0000000000000000 R14: 00007fa2ceb75fa0 R15: 00007ffc175fe058 [ 977.015344][T26068] [ 977.206543][T26080] netlink: 'syz.3.5868': attribute type 13 has an invalid length. [ 977.966496][T26117] rdma_rxe: rxe_newlink: failed to add lo [ 978.709222][T26137] rdma_rxe: rxe_newlink: failed to add lo [ 978.814768][T16200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 978.827287][T16200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 978.839772][T16200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 978.850730][T16200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 978.860469][T16200] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 978.869075][T16200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 978.949499][T26139] netdevsim0 speed is unknown, defaulting to 1000 [ 978.962042][T26139] lo speed is unknown, defaulting to 1000 [ 979.275915][T26147] rdma_rxe: rxe_newlink: failed to add lo [ 979.544213][T26139] chnl_net:caif_netlink_parms(): no params data found [ 979.763353][T26139] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.796918][T26139] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.823563][T26139] bridge_slave_0: entered allmulticast mode [ 979.844151][T26139] bridge_slave_0: entered promiscuous mode [ 979.863954][T26139] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.882199][T26139] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.889569][T26139] bridge_slave_1: entered allmulticast mode [ 979.919281][T26139] bridge_slave_1: entered promiscuous mode [ 980.007948][T26139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.038275][T26139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.157624][T26139] team0: Port device team_slave_0 added [ 980.170432][T26139] team0: Port device team_slave_1 added [ 980.209362][T26139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.217679][T26139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.245663][T26139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.263611][T26139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.272634][T26182] __nla_validate_parse: 9 callbacks suppressed [ 980.272658][T26182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5898'. [ 980.288774][T26139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.319494][T26139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.428416][T26185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5898'. [ 980.457387][T26139] hsr_slave_0: entered promiscuous mode [ 980.464810][T26139] hsr_slave_1: entered promiscuous mode [ 980.504601][T26191] rdma_rxe: rxe_newlink: failed to add lo [ 980.527982][T26189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5901'. [ 980.730577][T26139] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.826101][T26198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5905'. [ 980.840830][T26139] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.874383][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5903'. [ 980.915796][T26202] ip6t_srh: unknown srh match flags 5294 [ 980.935744][T16200] Bluetooth: hci0: command tx timeout [ 980.958135][T26139] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.084298][T26139] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.359449][T26139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 981.389289][T26139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 981.436781][T26139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 981.453568][T26139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 981.506219][T26221] netdevsim0 speed is unknown, defaulting to 1000 [ 981.530520][T26221] lo speed is unknown, defaulting to 1000 [ 981.704713][T26139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.752268][T26139] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.769693][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.776898][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.807582][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.816153][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.211613][T26244] xt_l2tp: wrong L2TP version: 0 [ 982.219609][T26244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5918'. [ 982.223058][T26242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5917'. [ 982.313581][T26139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.409227][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5917'. [ 982.423782][T26247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5919'. [ 982.490410][T26251] syz0: rxe_newlink: already configured on lo [ 982.527759][T26252] ip6t_srh: unknown srh match flags 5294 [ 982.844425][T26139] veth0_vlan: entered promiscuous mode [ 982.918774][T26139] veth1_vlan: entered promiscuous mode [ 983.004024][T16200] Bluetooth: hci0: command tx timeout [ 983.065697][T26139] veth0_macvtap: entered promiscuous mode [ 983.085824][T26139] veth1_macvtap: entered promiscuous mode [ 983.155772][T26139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.205621][T26139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.240424][T26139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.276271][T26139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.286347][T26139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.316819][T26139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.506395][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.521905][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.529807][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.553587][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.603716][T26273] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5929'. [ 983.637736][T26273] block nbd0: NBD_DISCONNECT [ 983.654657][T26273] block nbd0: Send disconnect failed -32 [ 983.933983][T26283] ip6t_srh: unknown srh match flags 5294 [ 984.254438][T26296] syz0: rxe_newlink: already configured on lo [ 984.354773][T26300] rdma_rxe: rxe_newlink: failed to add lo [ 984.388350][T26299] netdevsim0 speed is unknown, defaulting to 1000 [ 984.436329][T26299] lo speed is unknown, defaulting to 1000 [ 985.221201][T26301] siw: device registration error -23 [ 985.268077][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.336060][T26322] rdma_rxe: rxe_newlink: failed to add lo [ 985.360973][T26317] __nla_validate_parse: 9 callbacks suppressed [ 985.360996][T26317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5940'. [ 985.415171][T26325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5942'. [ 985.419720][T26318] netdevsim0 speed is unknown, defaulting to 1000 [ 985.456195][T26325] netlink: 'syz.2.5942': attribute type 6 has an invalid length. [ 985.474011][T26325] netlink: 'syz.2.5942': attribute type 7 has an invalid length. [ 985.496992][T26325] netlink: 'syz.2.5942': attribute type 8 has an invalid length. [ 985.517538][T26318] lo speed is unknown, defaulting to 1000 [ 985.947411][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.137561][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.154759][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.208104][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.219096][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.234268][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 986.242515][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.251836][T26337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5945'. [ 986.343552][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.443754][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.487484][T26332] netdevsim0 speed is unknown, defaulting to 1000 [ 986.522130][T26332] lo speed is unknown, defaulting to 1000 [ 986.757126][ T1145] bridge_slave_1: left allmulticast mode [ 986.794606][ T1145] bridge_slave_1: left promiscuous mode [ 986.801570][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.897546][ T1145] bridge_slave_0: left allmulticast mode [ 986.904272][ T1145] bridge_slave_0: left promiscuous mode [ 986.911853][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.087973][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5949'. [ 987.860176][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.873718][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.886689][ T1145] bond0 (unregistering): Released all slaves [ 988.135819][T26379] FAULT_INJECTION: forcing a failure. [ 988.135819][T26379] name failslab, interval 1, probability 0, space 0, times 0 [ 988.191385][T26316] siw: device registration error -23 [ 988.246870][T26379] CPU: 1 UID: 0 PID: 26379 Comm: syz.2.5952 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 988.257719][T26379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 988.267835][T26379] Call Trace: [ 988.271165][T26379] [ 988.274140][T26379] dump_stack_lvl+0x241/0x360 [ 988.278887][T26379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 988.284147][T26379] ? __pfx__printk+0x10/0x10 [ 988.288805][T26379] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 988.294239][T26379] ? __pfx___might_resched+0x10/0x10 [ 988.299583][T26379] ? rcu_is_watching+0x15/0xb0 [ 988.304438][T26379] should_fail_ex+0x3b0/0x4e0 [ 988.309149][T26379] should_failslab+0xac/0x100 [ 988.313860][T26379] __kmalloc_node_noprof+0xe1/0x4d0 [ 988.319097][T26379] ? __kvmalloc_node_noprof+0x72/0x190 [ 988.324590][T26379] __kvmalloc_node_noprof+0x72/0x190 [ 988.329904][T26379] nf_hook_entries_grow+0x288/0x720 [ 988.335140][T26379] __nf_register_net_hook+0x278/0x8d0 [ 988.340546][T26379] nf_register_net_hook+0xb0/0x190 [ 988.345679][T26379] nf_register_net_hooks+0x41/0x1a0 [ 988.350897][T26379] nf_ct_netns_do_get+0x3b0/0x630 [ 988.355947][T26379] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 988.361526][T26379] xt_ct_tg_check+0xf8/0xdf0 [ 988.366138][T26379] ? __pfx_lock_release+0x10/0x10 [ 988.371184][T26379] ? trace_contention_end+0x3c/0x120 [ 988.376502][T26379] ? __mutex_lock+0x37f/0xee0 [ 988.381201][T26379] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 988.386424][T26379] ? textsearch_prepare+0xf7/0x170 [ 988.391568][T26379] xt_check_target+0x3b9/0xa40 [ 988.396362][T26379] ? __pfx_xt_check_target+0x10/0x10 [ 988.401684][T26379] ? xt_find_target+0x1cf/0x200 [ 988.406676][T26379] translate_table+0x19b3/0x2260 [ 988.411667][T26379] ? __pfx_translate_table+0x10/0x10 [ 988.416980][T26379] ? __might_fault+0xaa/0x120 [ 988.421673][T26379] ? __pfx_lock_release+0x10/0x10 [ 988.426726][T26379] ? __virt_addr_valid+0x183/0x530 [ 988.431864][T26379] ? __might_fault+0xc6/0x120 [ 988.436562][T26379] ? _copy_from_user+0x99/0xc0 [ 988.441354][T26379] ? copy_from_sockptr_offset+0x6b/0xb0 [ 988.446926][T26379] do_ipt_set_ctl+0xe3d/0x1250 [ 988.451724][T26379] ? __pfx___mutex_trylock_common+0x10/0x10 [ 988.457647][T26379] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 988.462871][T26379] ? __pfx_lock_release+0x10/0x10 [ 988.467917][T26379] ? rcu_is_watching+0x15/0xb0 [ 988.472713][T26379] ? trace_contention_end+0x3c/0x120 [ 988.478070][T26379] ? __mutex_unlock_slowpath+0x21e/0x790 [ 988.483741][T26379] ? __pfx___mutex_lock+0x10/0x10 [ 988.488794][T26379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 988.494806][T26379] ? aa_sk_perm+0x96d/0xab0 [ 988.499352][T26379] ? __pfx_aa_sk_perm+0x10/0x10 [ 988.504759][T26379] nf_setsockopt+0x295/0x2c0 [ 988.509382][T26379] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 988.515326][T26379] do_sock_setsockopt+0x3af/0x720 [ 988.520377][T26379] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 988.525956][T26379] ? __fget_files+0x395/0x410 [ 988.530662][T26379] ? __fget_files+0x2a/0x410 [ 988.535281][T26379] __x64_sys_setsockopt+0x1ee/0x280 [ 988.540508][T26379] do_syscall_64+0xf3/0x230 [ 988.545039][T26379] ? clear_bhb_loop+0x35/0x90 [ 988.549753][T26379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.555671][T26379] RIP: 0033:0x7f85b8d85d29 [ 988.560112][T26379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.579757][T26379] RSP: 002b:00007f85b8bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 988.588233][T26379] RAX: ffffffffffffffda RBX: 00007f85b8f75fa0 RCX: 00007f85b8d85d29 [ 988.596223][T26379] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 988.604231][T26379] RBP: 00007f85b8bf9090 R08: 0000000000000360 R09: 0000000000000000 [ 988.612236][T26379] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 988.620230][T26379] R13: 0000000000000000 R14: 00007f85b8f75fa0 R15: 00007ffcb03e82f8 [ 988.628238][T26379] [ 988.636868][ T5143] Bluetooth: hci0: command tx timeout [ 988.786140][T26393] tc_dump_action: action bad kind [ 989.150750][T26332] chnl_net:caif_netlink_parms(): no params data found [ 989.754470][T26431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5962'. [ 989.768102][T26332] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.779659][T26332] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.813703][T26332] bridge_slave_0: entered allmulticast mode [ 989.844754][T26332] bridge_slave_0: entered promiscuous mode [ 989.864045][T26332] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.876836][T26332] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.905673][T26332] bridge_slave_1: entered allmulticast mode [ 989.919521][T26332] bridge_slave_1: entered promiscuous mode [ 989.994414][ T1145] hsr_slave_0: left promiscuous mode [ 990.043179][ T1145] hsr_slave_1: left promiscuous mode [ 990.062550][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.070204][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.103519][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.111034][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.167013][ T1145] veth1_macvtap: left promiscuous mode [ 990.173805][ T1145] veth0_macvtap: left promiscuous mode [ 990.181434][ T1145] veth1_vlan: left promiscuous mode [ 990.186991][ T1145] veth0_vlan: left promiscuous mode [ 990.681808][T16200] Bluetooth: hci0: command tx timeout [ 990.908578][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 990.966453][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 991.467501][T26332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.509206][T26332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.719897][T26332] team0: Port device team_slave_0 added [ 991.759701][T26332] team0: Port device team_slave_1 added [ 991.899326][T26332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.925662][T26332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.994417][T26332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.044776][T26473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5975'. [ 992.090119][T26473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5975'. [ 992.154045][T26332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.180074][T26332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.217484][T26332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.329990][T26485] netdevsim0 speed is unknown, defaulting to 1000 [ 992.426088][T26332] hsr_slave_0: entered promiscuous mode [ 992.457619][T26332] hsr_slave_1: entered promiscuous mode [ 992.475854][T26485] lo speed is unknown, defaulting to 1000 [ 992.778295][T16200] Bluetooth: hci0: command tx timeout [ 993.918244][T26531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5987'. [ 994.530310][T26332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 994.550663][T26332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 994.622879][T26332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 994.678270][T26332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 994.847241][T16200] Bluetooth: hci0: command tx timeout [ 994.947232][T26555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5993'. [ 994.969318][T26332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.032524][T26332] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.063115][T26555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5993'. [ 995.079591][T26555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5993'. [ 995.085163][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.095856][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.118284][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.125533][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.128071][T16200] block nbd0: Receive control failed (result -107) [ 995.192043][T26555] nbd0: detected capacity change from 0 to 256 [ 995.202005][T26108] block nbd0: Dead connection, failed to find a fallback [ 995.209098][T26108] block nbd0: shutting down sockets [ 995.227065][T26108] blk_print_req_error: 27 callbacks suppressed [ 995.227089][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.292143][T26108] buffer_io_error: 27 callbacks suppressed [ 995.292169][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.341516][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.375399][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.425493][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.464497][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.480593][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.492755][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.520257][T26574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6000'. [ 995.532214][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.558653][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.587591][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.643408][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.674250][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.701113][T26578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6000'. [ 995.731995][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6002'. [ 995.732539][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.777923][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.790375][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.827448][T26585] rdma_rxe: rxe_newlink: failed to add lo [ 995.849747][T26108] ldm_validate_partition_table(): Disk read failed. [ 995.878411][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 995.904867][T26583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6002'. [ 995.909663][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 995.968410][T26108] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 996.007342][T26108] Buffer I/O error on dev nbd0, logical block 0, async page read [ 996.050717][T26108] Dev nbd0: unable to read RDB block 0 [ 996.057609][T26108] nbd0: unable to read partition table [ 996.091200][T26108] ldm_validate_partition_table(): Disk read failed. [ 996.099155][T26108] Dev nbd0: unable to read RDB block 0 [ 996.106175][T26108] nbd0: unable to read partition table [ 996.192717][T26332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.365190][T26332] veth0_vlan: entered promiscuous mode [ 996.397214][T26332] veth1_vlan: entered promiscuous mode [ 996.507017][T26602] netlink: 'syz.3.6006': attribute type 7 has an invalid length. [ 996.520606][T26332] veth0_macvtap: entered promiscuous mode [ 996.569596][T26332] veth1_macvtap: entered promiscuous mode [ 996.605906][T26332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.635492][T26332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.658123][T26332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.669487][T26332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.679158][T26332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.688400][T26332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.979136][T24409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.000555][T24409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.043225][T26623] rdma_rxe: rxe_newlink: failed to add lo [ 997.091963][T24409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.119848][T24409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.194943][T26626] __nla_validate_parse: 2 callbacks suppressed [ 997.194967][T26626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6014'. [ 997.282858][T26631] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6015'. [ 997.608087][T26645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6019'. [ 997.643179][T26647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6020'. [ 997.660015][T26647] netlink: 'syz.3.6020': attribute type 6 has an invalid length. [ 997.680076][T26647] netlink: 'syz.3.6020': attribute type 7 has an invalid length. [ 997.692252][T26647] netlink: 'syz.3.6020': attribute type 8 has an invalid length. [ 997.745776][T26652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6019'. [ 997.832455][T26655] rdma_rxe: rxe_newlink: failed to add lo [ 997.954323][T26661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6022'. [ 998.377809][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.525953][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.538899][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.549935][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.574482][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.586097][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 998.602845][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 998.683588][T26682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.739875][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.747095][T26682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6027'. [ 998.805645][T26676] netdevsim0 speed is unknown, defaulting to 1000 [ 998.835672][T26676] lo speed is unknown, defaulting to 1000 [ 998.875119][T26691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6029'. [ 999.030091][T26696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6029'. [ 999.069445][T26699] FAULT_INJECTION: forcing a failure. [ 999.069445][T26699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.096967][T26699] CPU: 0 UID: 0 PID: 26699 Comm: syz.1.6031 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 999.107811][T26699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 999.117917][T26699] Call Trace: [ 999.121244][T26699] [ 999.124228][T26699] dump_stack_lvl+0x241/0x360 [ 999.128975][T26699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.134234][T26699] ? __pfx__printk+0x10/0x10 [ 999.138887][T26699] ? __pfx_lock_release+0x10/0x10 [ 999.143971][T26699] ? dev_ifsioc+0xaec/0xe70 [ 999.148527][T26699] should_fail_ex+0x3b0/0x4e0 [ 999.153271][T26699] _copy_to_user+0x31/0xb0 [ 999.157744][T26699] put_user_ifreq+0xe8/0x130 [ 999.162391][T26699] sock_ioctl+0x84a/0x8e0 [ 999.166782][T26699] ? __pfx_sock_ioctl+0x10/0x10 [ 999.171708][T26699] ? __pfx_sock_ioctl+0x10/0x10 [ 999.176620][T26699] __se_sys_ioctl+0xf5/0x170 [ 999.181259][T26699] do_syscall_64+0xf3/0x230 [ 999.185813][T26699] ? clear_bhb_loop+0x35/0x90 [ 999.190554][T26699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.196520][T26699] RIP: 0033:0x7ff2a8b85d29 [ 999.200950][T26699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.220590][T26699] RSP: 002b:00007ff2a9a25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.229063][T26699] RAX: ffffffffffffffda RBX: 00007ff2a8d75fa0 RCX: 00007ff2a8b85d29 [ 999.237088][T26699] RDX: 0000000020000900 RSI: 00000000000089f0 RDI: 0000000000000004 [ 999.245121][T26699] RBP: 00007ff2a9a25090 R08: 0000000000000000 R09: 0000000000000000 [ 999.253180][T26699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.261212][T26699] R13: 0000000000000000 R14: 00007ff2a8d75fa0 R15: 00007ffe25d8c108 [ 999.269374][T26699] [ 999.570645][T26705] rdma_rxe: rxe_newlink: failed to add lo [ 999.663131][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.785677][T26718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6034'. [ 999.845950][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.967369][T26725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.493382][T26676] chnl_net:caif_netlink_parms(): no params data found [ 1000.529035][ T11] bridge_slave_1: left allmulticast mode [ 1000.536640][ T11] bridge_slave_1: left promiscuous mode [ 1000.549134][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.574771][ T11] bridge_slave_0: left allmulticast mode [ 1000.590871][ T11] bridge_slave_0: left promiscuous mode [ 1000.597391][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.682630][ T5143] Bluetooth: hci0: command tx timeout [ 1001.357176][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.380996][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.398836][ T11] bond0 (unregistering): Released all slaves [ 1001.916663][T26815] tipc: Started in network mode [ 1001.926151][T26815] tipc: Node identity 7, cluster identity 4711 [ 1001.936294][T26815] tipc: Node number set to 7 [ 1001.959062][T26815] tipc: Cannot configure node identity twice [ 1002.073438][T26676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.105121][T26676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.120383][T26676] bridge_slave_0: entered allmulticast mode [ 1002.129551][T26676] bridge_slave_0: entered promiscuous mode [ 1002.146244][T26825] tipc: Started in network mode [ 1002.151177][T26825] tipc: Node identity 7, cluster identity 4711 [ 1002.173541][T26825] tipc: Node number set to 7 [ 1002.178644][T26825] tipc: Cannot configure node identity twice [ 1002.210313][T26826] __nla_validate_parse: 7 callbacks suppressed [ 1002.210334][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6050'. [ 1002.260552][T26831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6051'. [ 1002.294937][T26676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.308589][T26676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.318168][T26676] bridge_slave_1: entered allmulticast mode [ 1002.330342][T26676] bridge_slave_1: entered promiscuous mode [ 1002.339114][T26830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6048'. [ 1002.357836][T26832] syz0: rxe_newlink: already configured on lo [ 1002.379195][T26830] rdma_rxe: rxe_newlink: failed to add lo [ 1002.398196][T26825] block nbd4: backend image doesn't match with [ 1002.623203][T26676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.739746][T26676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.766828][ T5143] Bluetooth: hci0: command tx timeout [ 1002.819008][ T11] hsr_slave_0: left promiscuous mode [ 1002.827344][ T11] hsr_slave_1: left promiscuous mode [ 1002.836553][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.857866][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.884618][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.908990][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.990426][ T11] veth1_macvtap: left promiscuous mode [ 1003.011957][ T11] veth0_macvtap: left promiscuous mode [ 1003.019124][ T11] veth1_vlan: left promiscuous mode [ 1003.035092][ T11] veth0_vlan: left promiscuous mode [ 1003.799256][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1003.857988][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1004.372880][T26676] team0: Port device team_slave_0 added [ 1004.414565][T26676] team0: Port device team_slave_1 added [ 1004.575337][T26869] FAULT_INJECTION: forcing a failure. [ 1004.575337][T26869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.615125][T26869] CPU: 1 UID: 0 PID: 26869 Comm: syz.4.6060 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1004.625976][T26869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1004.636079][T26869] Call Trace: [ 1004.639415][T26869] [ 1004.642369][T26869] dump_stack_lvl+0x241/0x360 [ 1004.647100][T26869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.652318][T26869] ? __pfx__printk+0x10/0x10 [ 1004.656925][T26869] ? btf_parse_struct_metas+0x729/0x13a0 [ 1004.662609][T26869] ? __kmalloc_cache_noprof+0x243/0x390 [ 1004.668198][T26869] should_fail_ex+0x3b0/0x4e0 [ 1004.672904][T26869] _copy_to_user+0x31/0xb0 [ 1004.677354][T26869] finalize_log+0xed/0x250 [ 1004.681796][T26869] ? __pfx_finalize_log+0x10/0x10 [ 1004.686848][T26869] ? btf_check_type_tags+0x6aa/0x6b0 [ 1004.692178][T26869] btf_new_fd+0x9cd/0xd30 [ 1004.696537][T26869] ? __pfx_btf_new_fd+0x10/0x10 [ 1004.701416][T26869] ? bpf_btf_load+0xcf/0x1a0 [ 1004.706030][T26869] __sys_bpf+0x6ef/0x810 [ 1004.710288][T26869] ? __pfx___sys_bpf+0x10/0x10 [ 1004.715079][T26869] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1004.721166][T26869] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1004.727516][T26869] ? do_syscall_64+0x100/0x230 [ 1004.732303][T26869] __x64_sys_bpf+0x7c/0x90 [ 1004.736744][T26869] do_syscall_64+0xf3/0x230 [ 1004.741267][T26869] ? clear_bhb_loop+0x35/0x90 [ 1004.745963][T26869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.751877][T26869] RIP: 0033:0x7fc453b85d29 [ 1004.756309][T26869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.775933][T26869] RSP: 002b:00007fc45498c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1004.784395][T26869] RAX: ffffffffffffffda RBX: 00007fc453d75fa0 RCX: 00007fc453b85d29 [ 1004.792380][T26869] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 1004.800367][T26869] RBP: 00007fc45498c090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.808355][T26869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.816338][T26869] R13: 0000000000000001 R14: 00007fc453d75fa0 R15: 00007ffeab946e88 [ 1004.824343][T26869] [ 1004.873020][ T5143] Bluetooth: hci0: command tx timeout [ 1004.939055][T26875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6062'. [ 1004.954337][T26676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.961706][T26676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.988109][T26676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.001087][T26676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.008270][T26676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.034370][T26676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.134074][T26676] hsr_slave_0: entered promiscuous mode [ 1005.150618][T26676] hsr_slave_1: entered promiscuous mode [ 1005.243494][T26884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6062'. [ 1005.297850][T26884] syz0: rxe_newlink: already configured on lo [ 1005.439111][T26899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1005.557819][T26903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6066'. [ 1005.602629][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1005.676564][T26910] rdma_rxe: rxe_newlink: failed to add lo [ 1005.759376][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6066'. [ 1005.883955][T26916] rdma_rxe: rxe_newlink: failed to add lo [ 1006.268648][T26676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1006.299496][T26676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1006.329518][T26927] Bluetooth: MGMT ver 1.23 [ 1006.332929][T26676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1006.352059][T26676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1006.530883][T26676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.552291][T26676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.566303][T24411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.573847][T24411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.601038][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1006.627834][T24408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.635045][T24408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.729755][T26938] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1006.812446][T26942] bond17: (slave bridge17): Enslaving as an active interface with an up link [ 1006.843688][T26955] netlink: 'syz.4.6076': attribute type 11 has an invalid length. [ 1006.924350][T16200] Bluetooth: hci0: command tx timeout [ 1007.216905][T26676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.340001][T26676] veth0_vlan: entered promiscuous mode [ 1007.381497][T26676] veth1_vlan: entered promiscuous mode [ 1007.445556][T26676] veth0_macvtap: entered promiscuous mode [ 1007.480644][T26676] veth1_macvtap: entered promiscuous mode [ 1007.513339][T26982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1007.530256][T26676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.587712][T26676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.616036][T26676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.639759][T26676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.672272][T26676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.691936][T26989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1007.707395][T26676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.810085][T26995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6084'. [ 1007.821559][T26993] syz0: rxe_newlink: already configured on lo [ 1007.843728][T26991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1007.889083][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1007.973190][T27000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6084'. [ 1008.028182][T27006] rdma_rxe: rxe_newlink: failed to add lo [ 1008.064859][T27007] rdma_rxe: rxe_newlink: failed to add lo [ 1008.248237][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.273960][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.329473][T24408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.345731][T24408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.677326][T27018] FAULT_INJECTION: forcing a failure. [ 1008.677326][T27018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.718600][T27018] CPU: 1 UID: 0 PID: 27018 Comm: syz.4.6088 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1008.729482][T27018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1008.739574][T27018] Call Trace: [ 1008.742884][T27018] [ 1008.745845][T27018] dump_stack_lvl+0x241/0x360 [ 1008.750582][T27018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1008.755832][T27018] ? __pfx__printk+0x10/0x10 [ 1008.760476][T27018] ? __pfx_lock_release+0x10/0x10 [ 1008.765550][T27018] should_fail_ex+0x3b0/0x4e0 [ 1008.770270][T27018] _copy_from_user+0x2f/0xc0 [ 1008.774922][T27018] memdup_user+0x64/0xc0 [ 1008.779211][T27018] ppp_get_filter+0x1d1/0x2d0 [ 1008.783941][T27018] ? __pfx___mutex_lock+0x10/0x10 [ 1008.789018][T27018] ? __pfx_ppp_get_filter+0x10/0x10 [ 1008.794286][T27018] ppp_ioctl+0x11a1/0x1cd0 [ 1008.798759][T27018] ? __pfx_ppp_ioctl+0x10/0x10 [ 1008.803567][T27018] ? __fget_files+0x2a/0x410 [ 1008.808204][T27018] ? __fget_files+0x2a/0x410 [ 1008.812849][T27018] ? __pfx_ppp_ioctl+0x10/0x10 [ 1008.817666][T27018] __se_sys_ioctl+0xf5/0x170 [ 1008.822308][T27018] do_syscall_64+0xf3/0x230 [ 1008.826852][T27018] ? clear_bhb_loop+0x35/0x90 [ 1008.831555][T27018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.837470][T27018] RIP: 0033:0x7fc453b85d29 [ 1008.841899][T27018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.861522][T27018] RSP: 002b:00007fc45498c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.869956][T27018] RAX: ffffffffffffffda RBX: 00007fc453d75fa0 RCX: 00007fc453b85d29 [ 1008.877944][T27018] RDX: 0000000020000000 RSI: 0000000040107446 RDI: 0000000000000005 [ 1008.885926][T27018] RBP: 00007fc45498c090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.893937][T27018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.901928][T27018] R13: 0000000000000000 R14: 00007fc453d75fa0 R15: 00007ffeab946e88 [ 1008.909953][T27018] [ 1008.945150][T27021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1009.024385][T16200] Bluetooth: hci0: command 0x0405 tx timeout [ 1009.444881][T27039] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1009.657003][T27052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6100'. [ 1009.660003][T27053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1009.746443][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6100'. [ 1009.808586][T27058] rdma_rxe: rxe_newlink: failed to add lo [ 1009.820455][T27059] rdma_rxe: rxe_newlink: failed to add lo [ 1010.679683][T27074] netlink: 'syz.1.6108': attribute type 6 has an invalid length. [ 1010.695246][T27074] netlink: 'syz.1.6108': attribute type 7 has an invalid length. [ 1010.708857][T27074] netlink: 'syz.1.6108': attribute type 8 has an invalid length. [ 1010.724468][T27074] FAULT_INJECTION: forcing a failure. [ 1010.724468][T27074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.752347][T27074] CPU: 1 UID: 0 PID: 27074 Comm: syz.1.6108 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1010.763201][T27074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1010.773305][T27074] Call Trace: [ 1010.776626][T27074] [ 1010.779591][T27074] dump_stack_lvl+0x241/0x360 [ 1010.784333][T27074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1010.789588][T27074] ? __pfx__printk+0x10/0x10 [ 1010.794229][T27074] ? __pfx_lock_release+0x10/0x10 [ 1010.799313][T27074] should_fail_ex+0x3b0/0x4e0 [ 1010.804046][T27074] _copy_from_iter+0x1e9/0x1c20 [ 1010.807898][T27077] pim6reg9: entered allmulticast mode [ 1010.808920][T27074] ? __virt_addr_valid+0x183/0x530 [ 1010.819551][T27074] ? __alloc_skb+0x28f/0x440 [ 1010.824186][T27074] ? __pfx__copy_from_iter+0x10/0x10 [ 1010.829504][T27074] ? __virt_addr_valid+0x183/0x530 [ 1010.834641][T27074] ? __virt_addr_valid+0x183/0x530 [ 1010.839797][T27074] ? __virt_addr_valid+0x45f/0x530 [ 1010.844941][T27074] ? __phys_addr_symbol+0x2f/0x70 [ 1010.849985][T27074] ? __check_object_size+0x47a/0x730 [ 1010.855295][T27074] netlink_sendmsg+0x73d/0xcb0 [ 1010.860106][T27074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.865506][T27074] ? aa_sock_msg_perm+0x91/0x160 [ 1010.870467][T27074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.875770][T27074] __sock_sendmsg+0x221/0x270 [ 1010.880475][T27074] ____sys_sendmsg+0x52a/0x7e0 [ 1010.885319][T27074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1010.890628][T27074] ? __fget_files+0x2a/0x410 [ 1010.895242][T27074] ? __fget_files+0x2a/0x410 [ 1010.899866][T27074] __sys_sendmsg+0x269/0x350 [ 1010.904481][T27074] ? __pfx_lock_release+0x10/0x10 [ 1010.909547][T27074] ? __pfx___sys_sendmsg+0x10/0x10 [ 1010.914698][T27074] ? __pfx_vfs_write+0x10/0x10 [ 1010.919496][T27074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1010.925844][T27074] ? do_syscall_64+0x100/0x230 [ 1010.930630][T27074] ? do_syscall_64+0xb6/0x230 [ 1010.935328][T27074] do_syscall_64+0xf3/0x230 [ 1010.939858][T27074] ? clear_bhb_loop+0x35/0x90 [ 1010.944576][T27074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.950490][T27074] RIP: 0033:0x7ff2a8b85d29 [ 1010.954919][T27074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.974723][T27074] RSP: 002b:00007ff2a9a25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.983160][T27074] RAX: ffffffffffffffda RBX: 00007ff2a8d75fa0 RCX: 00007ff2a8b85d29 [ 1010.991147][T27074] RDX: 0000000000008000 RSI: 0000000020000300 RDI: 0000000000000007 [ 1010.999131][T27074] RBP: 00007ff2a9a25090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.007119][T27074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.015109][T27074] R13: 0000000000000000 R14: 00007ff2a8d75fa0 R15: 00007ffe25d8c108 [ 1011.023110][T27074] [ 1011.144429][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1011.161854][ T5143] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1011.169082][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1011.216709][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1011.471114][T27082] infiniband syz1: set down [ 1011.511430][T27082] infiniband syz1: added syzkaller0 [ 1011.684654][T24408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.707201][ T25] syzkaller0 speed is unknown, defaulting to 1000 [ 1011.718780][T27082] RDS/IB: syz1: added [ 1011.724443][T27082] smc: adding ib device syz1 with port count 1 [ 1011.738057][T27082] smc: ib device syz1 port 1 has pnetid [ 1011.799457][T24408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.831733][ T975] syzkaller0 speed is unknown, defaulting to 1000 [ 1011.838573][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1011.905287][T24408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.014385][T24408] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.053091][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1012.267796][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1012.419399][T27113] FAULT_INJECTION: forcing a failure. [ 1012.419399][T27113] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.438977][T27113] CPU: 1 UID: 0 PID: 27113 Comm: syz.3.6121 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1012.449829][T27113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1012.459925][T27113] Call Trace: [ 1012.463272][T27113] [ 1012.466239][T27113] dump_stack_lvl+0x241/0x360 [ 1012.470968][T27113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1012.476276][T27113] ? __pfx__printk+0x10/0x10 [ 1012.480920][T27113] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1012.486952][T27113] ? __pfx___might_resched+0x10/0x10 [ 1012.492286][T27113] should_fail_ex+0x3b0/0x4e0 [ 1012.496988][T27113] should_failslab+0xac/0x100 [ 1012.501689][T27113] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1012.507524][T27113] ? __alloc_skb+0x1c3/0x440 [ 1012.512138][T27113] __alloc_skb+0x1c3/0x440 [ 1012.516574][T27113] ? __pfx___alloc_skb+0x10/0x10 [ 1012.521532][T27113] ? netlink_autobind+0xd6/0x2f0 [ 1012.526488][T27113] ? netlink_autobind+0x2b0/0x2f0 [ 1012.531535][T27113] netlink_sendmsg+0x638/0xcb0 [ 1012.536330][T27113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.541648][T27113] ? aa_sock_msg_perm+0x91/0x160 [ 1012.546624][T27113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.551936][T27113] __sock_sendmsg+0x221/0x270 [ 1012.556681][T27113] ____sys_sendmsg+0x52a/0x7e0 [ 1012.561471][T27113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.566772][T27113] ? __fget_files+0x2a/0x410 [ 1012.571385][T27113] ? __fget_files+0x2a/0x410 [ 1012.576003][T27113] __sys_sendmmsg+0x36a/0x720 [ 1012.580710][T27113] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1012.585943][T27113] ? __pfx_lock_release+0x10/0x10 [ 1012.591012][T27113] ? kstrtouint_from_user+0x128/0x190 [ 1012.596437][T27113] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1012.602357][T27113] ? ksys_write+0x22a/0x2b0 [ 1012.606877][T27113] ? __pfx_lock_release+0x10/0x10 [ 1012.612150][T27113] ? vfs_write+0x730/0xd30 [ 1012.616585][T27113] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1012.622256][T27113] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1012.628256][T27113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1012.634602][T27113] ? do_syscall_64+0x100/0x230 [ 1012.639391][T27113] __x64_sys_sendmmsg+0xa0/0xb0 [ 1012.644272][T27113] do_syscall_64+0xf3/0x230 [ 1012.648802][T27113] ? clear_bhb_loop+0x35/0x90 [ 1012.653598][T27113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.659512][T27113] RIP: 0033:0x7f5ff6d85d29 [ 1012.663941][T27113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.683585][T27113] RSP: 002b:00007f5ff7c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1012.692032][T27113] RAX: ffffffffffffffda RBX: 00007f5ff6f75fa0 RCX: 00007f5ff6d85d29 [ 1012.700043][T27113] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1012.708045][T27113] RBP: 00007f5ff7c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.716042][T27113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.724048][T27113] R13: 0000000000000000 R14: 00007f5ff6f75fa0 R15: 00007ffc464015d8 [ 1012.732062][T27113] [ 1012.822247][T16200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.831745][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1012.854288][T16200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.864122][T16200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.882638][T16200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.902013][T16200] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1012.909410][T16200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.950267][T27119] FAULT_INJECTION: forcing a failure. [ 1012.950267][T27119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.970582][T27119] CPU: 0 UID: 0 PID: 27119 Comm: syz.3.6123 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1012.981424][T27119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1012.991524][T27119] Call Trace: [ 1012.994841][T27119] [ 1012.997807][T27119] dump_stack_lvl+0x241/0x360 [ 1013.002544][T27119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.007791][T27119] ? __pfx__printk+0x10/0x10 [ 1013.012513][T27119] ? __pfx_lock_release+0x10/0x10 [ 1013.017576][T27119] ? __mutex_trylock_common+0x183/0x2e0 [ 1013.023182][T27119] should_fail_ex+0x3b0/0x4e0 [ 1013.026405][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1013.027888][T27119] _copy_from_iter+0x1e9/0x1c20 [ 1013.027932][T27119] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1013.045229][T27119] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1013.051603][T27119] ? pipe_write+0xd5b/0x1a30 [ 1013.056243][T27119] ? __pfx__copy_from_iter+0x10/0x10 [ 1013.061573][T27119] ? __pfx___mutex_lock+0x10/0x10 [ 1013.066638][T27119] ? lockdep_hardirqs_on+0x99/0x150 [ 1013.071879][T27119] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1013.078247][T27119] ? page_copy_sane+0x46/0x260 [ 1013.083060][T27119] copy_page_from_iter+0x7a/0x100 [ 1013.088137][T27119] pipe_write+0x7f5/0x1a30 [ 1013.092634][T27119] ? __pfx_pipe_write+0x10/0x10 [ 1013.097526][T27119] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1013.103642][T27119] ? bpf_lsm_file_permission+0x9/0x10 [ 1013.109058][T27119] ? security_file_permission+0x74/0x280 [ 1013.114745][T27119] vfs_write+0xaeb/0xd30 [ 1013.119029][T27119] ? __pfx_pipe_write+0x10/0x10 [ 1013.123925][T27119] ? __pfx_vfs_write+0x10/0x10 [ 1013.128731][T27119] ? __fget_files+0x2a/0x410 [ 1013.133372][T27119] ? __fget_files+0x2a/0x410 [ 1013.138013][T27119] ksys_write+0x18f/0x2b0 [ 1013.142388][T27119] ? __pfx_ksys_write+0x10/0x10 [ 1013.147277][T27119] ? do_syscall_64+0x100/0x230 [ 1013.152091][T27119] ? do_syscall_64+0xb6/0x230 [ 1013.152672][T27082] syzkaller0 speed is unknown, defaulting to 1000 [ 1013.156791][T27119] do_syscall_64+0xf3/0x230 [ 1013.167744][T27119] ? clear_bhb_loop+0x35/0x90 [ 1013.172475][T27119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.178414][T27119] RIP: 0033:0x7f5ff6d85d29 [ 1013.182867][T27119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.202518][T27119] RSP: 002b:00007f5ff7c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1013.211082][T27119] RAX: ffffffffffffffda RBX: 00007f5ff6f75fa0 RCX: 00007f5ff6d85d29 [ 1013.219100][T27119] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 1013.227115][T27119] RBP: 00007f5ff7c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.235123][T27119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.243195][T27119] R13: 0000000000000000 R14: 00007f5ff6f75fa0 R15: 00007ffc464015d8 [ 1013.251227][T27119] [ 1013.308242][T27115] netdevsim0 speed is unknown, defaulting to 1000 [ 1013.315966][T27115] lo speed is unknown, defaulting to 1000 [ 1013.552411][T27115] syzkaller0 speed is unknown, defaulting to 1000 [ 1013.695064][T27104] rdma_rxe: rxe_newlink: failed to add lo [ 1013.715367][T27127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1013.729992][T27121] __nla_validate_parse: 8 callbacks suppressed [ 1013.730017][T27121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6124'. [ 1013.745954][T27127] FAULT_INJECTION: forcing a failure. [ 1013.745954][T27127] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.758938][T27127] CPU: 0 UID: 0 PID: 27127 Comm: syz.3.6126 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1013.769743][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1013.779914][T27127] Call Trace: [ 1013.783212][T27127] [ 1013.786157][T27127] dump_stack_lvl+0x241/0x360 [ 1013.790865][T27127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.796095][T27127] ? __pfx__printk+0x10/0x10 [ 1013.800711][T27127] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1013.806120][T27127] ? __pfx___might_resched+0x10/0x10 [ 1013.811445][T27127] should_fail_ex+0x3b0/0x4e0 [ 1013.816156][T27127] should_failslab+0xac/0x100 [ 1013.820857][T27127] __kmalloc_node_noprof+0xe1/0x4d0 [ 1013.826084][T27127] ? __kvmalloc_node_noprof+0x72/0x190 [ 1013.831572][T27127] __kvmalloc_node_noprof+0x72/0x190 [ 1013.836892][T27127] __nf_hook_entries_try_shrink+0x330/0x730 [ 1013.842813][T27127] __nf_unregister_net_hook+0x5cf/0x800 [ 1013.848387][T27127] nf_unregister_net_hooks+0xd0/0x140 [ 1013.853778][T27127] nf_ct_netns_put+0x3bc/0x510 [ 1013.858559][T27127] xt_ct_tg_check+0xa62/0xdf0 [ 1013.863256][T27127] ? __pfx_lock_release+0x10/0x10 [ 1013.868308][T27127] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 1013.873523][T27127] ? textsearch_prepare+0xf7/0x170 [ 1013.878663][T27127] xt_check_target+0x3b9/0xa40 [ 1013.883473][T27127] ? __pfx_xt_check_target+0x10/0x10 [ 1013.888786][T27127] ? xt_find_target+0x1cf/0x200 [ 1013.893712][T27127] translate_table+0x19b3/0x2260 [ 1013.898696][T27127] ? __pfx_translate_table+0x10/0x10 [ 1013.904007][T27127] ? __might_fault+0xaa/0x120 [ 1013.908704][T27127] ? __pfx_lock_release+0x10/0x10 [ 1013.913765][T27127] ? __virt_addr_valid+0x183/0x530 [ 1013.918903][T27127] ? __might_fault+0xc6/0x120 [ 1013.923598][T27127] ? _copy_from_user+0x99/0xc0 [ 1013.928389][T27127] ? copy_from_sockptr_offset+0x6b/0xb0 [ 1013.933960][T27127] do_ipt_set_ctl+0xe3d/0x1250 [ 1013.938751][T27127] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1013.944673][T27127] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1013.949897][T27127] ? __pfx_lock_release+0x10/0x10 [ 1013.954946][T27127] ? rcu_is_watching+0x15/0xb0 [ 1013.959737][T27127] ? trace_contention_end+0x3c/0x120 [ 1013.965060][T27127] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1013.970715][T27127] ? __pfx___mutex_lock+0x10/0x10 [ 1013.975777][T27127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1013.981779][T27127] ? aa_sk_perm+0x96d/0xab0 [ 1013.986329][T27127] ? __pfx_aa_sk_perm+0x10/0x10 [ 1013.991239][T27127] nf_setsockopt+0x295/0x2c0 [ 1013.995877][T27127] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1014.001798][T27127] do_sock_setsockopt+0x3af/0x720 [ 1014.006849][T27127] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1014.012522][T27127] ? __fget_files+0x395/0x410 [ 1014.017229][T27127] ? __fget_files+0x2a/0x410 [ 1014.021853][T27127] __x64_sys_setsockopt+0x1ee/0x280 [ 1014.027090][T27127] do_syscall_64+0xf3/0x230 [ 1014.031626][T27127] ? clear_bhb_loop+0x35/0x90 [ 1014.036342][T27127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.042258][T27127] RIP: 0033:0x7f5ff6d85d29 [ 1014.046689][T27127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.066313][T27127] RSP: 002b:00007f5ff7c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1014.074752][T27127] RAX: ffffffffffffffda RBX: 00007f5ff6f75fa0 RCX: 00007f5ff6d85d29 [ 1014.082740][T27127] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1014.090724][T27127] RBP: 00007f5ff7c87090 R08: 0000000000000360 R09: 0000000000000000 [ 1014.098801][T27127] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 1014.106790][T27127] R13: 0000000000000000 R14: 00007f5ff6f75fa0 R15: 00007ffc464015d8 [ 1014.114795][T27127] [ 1014.214636][T27122] ip6t_srh: unknown srh match flags 5294 [ 1014.249067][T27115] chnl_net:caif_netlink_parms(): no params data found [ 1014.367277][T27137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1014.385225][T27142] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6128'. [ 1014.611914][T27115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.619686][T27115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.658632][T27115] bridge_slave_0: entered allmulticast mode [ 1014.688546][T27115] bridge_slave_0: entered promiscuous mode [ 1014.733674][T27115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.734261][T27154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6133'. [ 1014.740821][T27115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.789405][T27115] bridge_slave_1: entered allmulticast mode [ 1014.798344][T27115] bridge_slave_1: entered promiscuous mode [ 1014.810714][T24408] bridge_slave_1: left allmulticast mode [ 1014.816635][T24408] bridge_slave_1: left promiscuous mode [ 1014.822814][T24408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.834905][T27161] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6135'. [ 1014.853520][T24408] bridge_slave_0: left allmulticast mode [ 1014.859244][T24408] bridge_slave_0: left promiscuous mode [ 1014.891929][T24408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.027477][T27166] rdma_rxe: rxe_newlink: failed to add lo [ 1015.330130][T16200] Bluetooth: hci0: command tx timeout [ 1015.568354][T27170] siw: device registration error -23 [ 1015.617345][T24408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.629655][T24408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.641147][T24408] bond0 (unregistering): Released all slaves [ 1015.679759][T27161] 0·: renamed from hsr0 [ 1015.689088][T27161] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1015.705204][T27161] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1015.716597][T27161] 0·: entered allmulticast mode [ 1015.722172][T27161] hsr_slave_0: entered allmulticast mode [ 1015.728070][T27161] hsr_slave_1: entered allmulticast mode [ 1015.740568][T27161] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1015.757903][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6133'. [ 1015.842613][T27115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.860730][T27158] netdevsim0 speed is unknown, defaulting to 1000 [ 1015.875374][T27115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.937797][T27158] lo speed is unknown, defaulting to 1000 [ 1016.109130][T27179] lo speed is unknown, defaulting to 1000 [ 1016.234304][T27115] team0: Port device team_slave_0 added [ 1016.255785][T27115] team0: Port device team_slave_1 added [ 1016.372647][T27183] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1016.395127][T27187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6139'. [ 1016.403742][T27183] bond0: (slave bond18): Enslaving as an active interface with a down link [ 1016.498922][T27115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.506276][T27115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.532656][T27115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.610090][T27187] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1016.628429][T27158] syzkaller0 speed is unknown, defaulting to 1000 [ 1016.648414][T27115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.671946][T27115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.746956][T27115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.897772][T27191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6141'. [ 1017.138226][T24408] hsr_slave_0: left promiscuous mode [ 1017.146510][T24408] hsr_slave_1: left promiscuous mode [ 1017.188751][T24408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.199654][T24408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.222419][T24408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.240290][T27207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1017.250254][T24408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.299868][T27212] nbd: must specify an index to disconnect [ 1017.316032][T24408] veth1_macvtap: left promiscuous mode [ 1017.325345][T24408] veth0_macvtap: left promiscuous mode [ 1017.331003][T24408] veth1_vlan: left promiscuous mode [ 1017.337082][T24408] veth0_vlan: left promiscuous mode [ 1017.401475][T16200] Bluetooth: hci0: command tx timeout [ 1017.540520][T27220] rdma_rxe: rxe_newlink: failed to add lo [ 1017.732810][T27227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1018.187129][T24408] team0 (unregistering): Port device team_slave_1 removed [ 1018.235675][T24408] team0 (unregistering): Port device team_slave_0 removed [ 1018.741032][T27115] hsr_slave_0: entered promiscuous mode [ 1018.748292][T27115] hsr_slave_1: entered promiscuous mode [ 1018.767840][T27214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1018.953377][T27233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6154'. [ 1019.135725][T27238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6154'. [ 1019.215780][T27241] rdma_rxe: rxe_newlink: failed to add lo [ 1019.482385][ T5143] Bluetooth: hci0: command tx timeout [ 1019.872839][T27115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1019.923099][T27115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1019.954801][T27115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1019.984697][T27115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1020.068534][T27115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.089022][T27115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.106145][T24408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.113389][T24408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.149164][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.156387][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.445057][T27115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.520931][T27115] veth0_vlan: entered promiscuous mode [ 1020.544135][T27115] veth1_vlan: entered promiscuous mode [ 1020.599917][T27115] veth0_macvtap: entered promiscuous mode [ 1020.610448][T27268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1020.613973][T27115] veth1_macvtap: entered promiscuous mode [ 1020.653678][T27115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.675849][T27115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.688772][T27115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.700560][T27115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.709861][T27115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.719303][T27115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.857298][T24408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.886876][T24408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.935105][T24408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.943975][T24408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.141685][T27284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1021.214539][T27287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1021.285750][T27292] rdma_rxe: rxe_newlink: failed to add lo [ 1021.316984][T27291] netdevsim0 speed is unknown, defaulting to 1000 [ 1021.341138][T27291] lo speed is unknown, defaulting to 1000 [ 1021.440289][T27295] netdevsim0 speed is unknown, defaulting to 1000 [ 1021.556589][T27295] lo speed is unknown, defaulting to 1000 [ 1021.562442][ T5143] Bluetooth: hci0: command 0x0419 tx timeout [ 1021.946352][T27291] syzkaller0 speed is unknown, defaulting to 1000 [ 1022.263712][T27306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1022.427605][T27295] syzkaller0 speed is unknown, defaulting to 1000 [ 1022.737312][T27299] siw: device registration error -23 [ 1022.744556][T27304] siw: device registration error -23 [ 1022.874079][T27325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1023.006727][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1023.098140][T27332] rdma_rxe: rxe_newlink: failed to add lo [ 1023.692152][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1023.969222][T27344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1024.202095][T27350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1024.237391][T27355] netdevsim0 speed is unknown, defaulting to 1000 [ 1024.254559][T27355] lo speed is unknown, defaulting to 1000 [ 1024.435693][T27366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1024.558463][T27369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1024.681449][T27374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6197'. [ 1024.717950][T27374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6197'. [ 1024.876304][T27355] syzkaller0 speed is unknown, defaulting to 1000 [ 1025.020062][T27373] rdma_rxe: rxe_newlink: failed to add lo [ 1025.031453][T27377] siw: device registration error -23 [ 1025.306723][T27386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6198'. [ 1026.069563][T27417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6206'. [ 1026.268726][T27427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6208'. [ 1026.486356][T27434] netdevsim0 speed is unknown, defaulting to 1000 [ 1026.525717][T27434] lo speed is unknown, defaulting to 1000 [ 1026.643732][T27437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1026.723626][T27438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1026.985100][T27445] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 1026.992928][T27445] macvlan17: entered allmulticast mode [ 1026.998543][T27445] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 1027.022471][T27445] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 1027.126362][T27434] syzkaller0 speed is unknown, defaulting to 1000 [ 1027.305500][T27456] netlink: 'syz.2.6215': attribute type 5 has an invalid length. [ 1027.362190][T27449] siw: device registration error -23 [ 1027.362360][T27439] rdma_rxe: rxe_newlink: failed to add lo [ 1028.053252][T27474] netlink: 'syz.4.6221': attribute type 3 has an invalid length. [ 1028.371957][T27488] netdevsim0 speed is unknown, defaulting to 1000 [ 1028.379269][T27488] lo speed is unknown, defaulting to 1000 [ 1028.899761][T27488] syzkaller0 speed is unknown, defaulting to 1000 [ 1029.097210][T27500] FAULT_INJECTION: forcing a failure. [ 1029.097210][T27500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1029.140998][T27500] CPU: 0 UID: 0 PID: 27500 Comm: syz.3.6229 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1029.151940][T27500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1029.162049][T27500] Call Trace: [ 1029.165366][T27500] [ 1029.168336][T27500] dump_stack_lvl+0x241/0x360 [ 1029.173077][T27500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.178344][T27500] ? __pfx__printk+0x10/0x10 [ 1029.183001][T27500] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1029.189213][T27500] should_fail_ex+0x3b0/0x4e0 [ 1029.193951][T27500] prepare_alloc_pages+0x1da/0x5b0 [ 1029.199127][T27500] __alloc_pages_noprof+0x16f/0x710 [ 1029.204382][T27500] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1029.210174][T27500] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1029.215698][T27500] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1029.221762][T27500] ? alloc_pages_noprof+0xef/0x170 [ 1029.226927][T27500] get_free_pages_noprof+0xc/0x30 [ 1029.232012][T27500] kasan_populate_vmalloc_pte+0x38/0xe0 [ 1029.237611][T27500] __apply_to_page_range+0x806/0xde0 [ 1029.242963][T27500] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 1029.249272][T27500] ? __pfx___apply_to_page_range+0x10/0x10 [ 1029.255146][T27500] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1029.260390][T27500] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1029.265914][T27500] alloc_vmap_area+0x1d4e/0x2400 [ 1029.271025][T27500] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1029.276375][T27500] ? __kasan_kmalloc+0x98/0xb0 [ 1029.281197][T27500] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 1029.287231][T27500] ? __get_vm_area_node+0x132/0x2d0 [ 1029.292489][T27500] ? dev_map_alloc+0x141/0x540 [ 1029.297307][T27500] __get_vm_area_node+0x1c8/0x2d0 [ 1029.302397][T27500] __vmalloc_node_range_noprof+0x344/0x1380 [ 1029.308338][T27500] ? dev_map_alloc+0x141/0x540 [ 1029.313211][T27500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1029.319606][T27500] ? rcu_is_watching+0x15/0xb0 [ 1029.324427][T27500] ? trace_kmalloc+0x1f/0xd0 [ 1029.329070][T27500] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 1029.334594][T27500] ? bpf_map_area_alloc+0x64/0x120 [ 1029.339754][T27500] bpf_map_area_alloc+0xfc/0x120 [ 1029.344744][T27500] ? dev_map_alloc+0x141/0x540 [ 1029.349553][T27500] dev_map_alloc+0x141/0x540 [ 1029.354182][T27500] ? ns_capable+0x8a/0xf0 [ 1029.358581][T27500] map_create+0x946/0x11c0 [ 1029.363056][T27500] __sys_bpf+0x6d1/0x810 [ 1029.367349][T27500] ? __pfx___sys_bpf+0x10/0x10 [ 1029.372180][T27500] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1029.378210][T27500] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1029.384601][T27500] ? do_syscall_64+0x100/0x230 [ 1029.389422][T27500] __x64_sys_bpf+0x7c/0x90 [ 1029.393900][T27500] do_syscall_64+0xf3/0x230 [ 1029.398451][T27500] ? clear_bhb_loop+0x35/0x90 [ 1029.403215][T27500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.409171][T27500] RIP: 0033:0x7f5ff6d85d29 [ 1029.413635][T27500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.433302][T27500] RSP: 002b:00007f5ff7c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1029.441783][T27500] RAX: ffffffffffffffda RBX: 00007f5ff6f75fa0 RCX: 00007f5ff6d85d29 [ 1029.449812][T27500] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 1029.457841][T27500] RBP: 00007f5ff7c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.465874][T27500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1029.473896][T27500] R13: 0000000000000000 R14: 00007f5ff6f75fa0 R15: 00007ffc464015d8 [ 1029.481936][T27500] [ 1029.642699][T27508] __nla_validate_parse: 2 callbacks suppressed [ 1029.642723][T27508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6231'. [ 1029.731124][T27508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6231'. [ 1030.198719][T27515] veth6: entered allmulticast mode [ 1030.285004][T27522] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1030.297497][T27522] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 1030.317768][T27522] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1030.388789][T27527] netdevsim0 speed is unknown, defaulting to 1000 [ 1030.399784][T27527] lo speed is unknown, defaulting to 1000 [ 1030.525981][T27532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1030.703986][T27537] openvswitch: netlink: Message has 8 unknown bytes. [ 1030.743625][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6241'. [ 1030.769053][T27537] netlink: 'syz.1.6241': attribute type 12 has an invalid length. [ 1030.964274][T27527] syzkaller0 speed is unknown, defaulting to 1000 [ 1031.276636][T27547] siw: device registration error -23 [ 1031.380538][T27554] pimreg: entered allmulticast mode [ 1031.437530][T27554] pimreg: left allmulticast mode [ 1031.509265][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1031.520066][T27559] netlink: 'syz.1.6245': attribute type 1 has an invalid length. [ 1031.767404][T27567] FAULT_INJECTION: forcing a failure. [ 1031.767404][T27567] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.781149][T27567] CPU: 0 UID: 0 PID: 27567 Comm: syz.3.6250 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1031.791977][T27567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1031.802074][T27567] Call Trace: [ 1031.805402][T27567] [ 1031.808372][T27567] dump_stack_lvl+0x241/0x360 [ 1031.813109][T27567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1031.818360][T27567] ? __pfx__printk+0x10/0x10 [ 1031.822999][T27567] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1031.829032][T27567] ? __pfx___might_resched+0x10/0x10 [ 1031.834365][T27567] should_fail_ex+0x3b0/0x4e0 [ 1031.839086][T27567] should_failslab+0xac/0x100 [ 1031.843809][T27567] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1031.849745][T27567] ? __alloc_skb+0x1c3/0x440 [ 1031.854381][T27567] __alloc_skb+0x1c3/0x440 [ 1031.858840][T27567] ? __pfx___alloc_skb+0x10/0x10 [ 1031.863818][T27567] ? netlink_autobind+0xd6/0x2f0 [ 1031.868794][T27567] ? netlink_autobind+0x2b0/0x2f0 [ 1031.873865][T27567] netlink_sendmsg+0x638/0xcb0 [ 1031.876824][T27565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1031.878666][T27567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.892908][T27567] ? aa_sock_msg_perm+0x91/0x160 [ 1031.897891][T27567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.903216][T27567] __sock_sendmsg+0x221/0x270 [ 1031.907930][T27567] ____sys_sendmsg+0x52a/0x7e0 [ 1031.912724][T27567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.918034][T27567] ? __fget_files+0x2a/0x410 [ 1031.922654][T27567] ? __fget_files+0x2a/0x410 [ 1031.927273][T27567] __sys_sendmsg+0x269/0x350 [ 1031.931900][T27567] ? __pfx_lock_release+0x10/0x10 [ 1031.936963][T27567] ? __pfx___sys_sendmsg+0x10/0x10 [ 1031.942107][T27567] ? __pfx_vfs_write+0x10/0x10 [ 1031.946910][T27567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1031.953256][T27567] ? do_syscall_64+0x100/0x230 [ 1031.958046][T27567] ? do_syscall_64+0xb6/0x230 [ 1031.962741][T27567] do_syscall_64+0xf3/0x230 [ 1031.967265][T27567] ? clear_bhb_loop+0x35/0x90 [ 1031.971971][T27567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.977882][T27567] RIP: 0033:0x7f5ff6d85d29 [ 1031.982318][T27567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.001947][T27567] RSP: 002b:00007f5ff7c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.010384][T27567] RAX: ffffffffffffffda RBX: 00007f5ff6f75fa0 RCX: 00007f5ff6d85d29 [ 1032.018372][T27567] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1032.026360][T27567] RBP: 00007f5ff7c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.034350][T27567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.042340][T27567] R13: 0000000000000000 R14: 00007f5ff6f75fa0 R15: 00007ffc464015d8 [ 1032.050343][T27567] [ 1032.084431][T27569] bond0: option arp_validate: invalid value (15480413) [ 1032.250157][T27571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1032.393248][T27575] rdma_rxe: rxe_newlink: failed to add lo [ 1032.489520][T26552] IPVS: starting estimator thread 0... [ 1032.601520][T27580] IPVS: using max 20 ests per chain, 48000 per kthread [ 1032.623648][T27586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6256'. [ 1032.638866][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1032.727929][T27590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1032.866208][T27601] netlink: 'syz.2.6259': attribute type 7 has an invalid length. [ 1032.945522][T27603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'. [ 1033.024543][ T5143] block nbd1: Receive control failed (result -107) [ 1033.062417][T27603] nbd1: detected capacity change from 0 to 256 [ 1033.073838][T27611] siw: device registration error -23 [ 1033.080042][T27610] siw: device registration error -23 [ 1033.920609][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.930634][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.942515][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.957239][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.966098][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1033.974660][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1034.019821][T27638] netdevsim0 speed is unknown, defaulting to 1000 [ 1034.033866][T27638] lo speed is unknown, defaulting to 1000 [ 1034.324889][T27638] syzkaller0 speed is unknown, defaulting to 1000 [ 1034.644180][T27638] chnl_net:caif_netlink_parms(): no params data found [ 1034.670610][T27658] ip6t_srh: unknown srh match flags 5294 [ 1034.823190][T27638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.830459][T27638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.847787][T27638] bridge_slave_0: entered allmulticast mode [ 1034.856653][T27638] bridge_slave_0: entered promiscuous mode [ 1034.875142][T27638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.887759][T27638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.896746][T27638] bridge_slave_1: entered allmulticast mode [ 1034.911021][T27638] bridge_slave_1: entered promiscuous mode [ 1034.992072][T27638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.010888][T27638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.051539][T27638] team0: Port device team_slave_0 added [ 1035.062320][T27638] team0: Port device team_slave_1 added [ 1035.108979][T27638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.116314][T27638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.142449][T27638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.148908][T27674] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 1035.155499][T27638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.167089][T27674] netlink: 'syz.4.6284': attribute type 9 has an invalid length. [ 1035.168510][T27638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.168544][T27638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.202932][T27674] netlink: 'syz.4.6284': attribute type 7 has an invalid length. [ 1035.228963][T27674] netlink: 'syz.4.6284': attribute type 8 has an invalid length. [ 1035.315821][T27638] hsr_slave_0: entered promiscuous mode [ 1035.334090][T27638] hsr_slave_1: entered promiscuous mode [ 1035.340444][T27677] __nla_validate_parse: 4 callbacks suppressed [ 1035.340466][T27677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1035.356029][T27638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.382207][T27638] Cannot create hsr debugfs directory [ 1035.740867][T27685] netlink: 'syz.1.6288': attribute type 1 has an invalid length. [ 1035.808095][T27685] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1035.846470][ T975] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 1035.863424][T27638] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1035.892120][ T975] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 1035.993226][T27638] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1036.042417][ T5143] Bluetooth: hci1: command tx timeout [ 1036.085677][T27638] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1036.159082][T27638] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1036.327230][T27638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1036.349344][T27638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1036.394203][T27638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1036.523242][T27638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1036.618513][T27638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.639668][T27638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.658851][T24408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.665632][T27710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6295'. [ 1036.666073][T24408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.700777][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.707984][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.072039][T27638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.162788][T27638] veth0_vlan: entered promiscuous mode [ 1037.189895][T27638] veth1_vlan: entered promiscuous mode [ 1037.215024][T27719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6296'. [ 1037.293166][T27638] veth0_macvtap: entered promiscuous mode [ 1037.319104][T27638] veth1_macvtap: entered promiscuous mode [ 1037.360799][T27638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.383918][T27638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.396138][T27721] netlink: 'syz.1.6297': attribute type 9 has an invalid length. [ 1037.404094][T27721] netlink: 'syz.1.6297': attribute type 7 has an invalid length. [ 1037.415141][T27638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.423543][T27721] netlink: 'syz.1.6297': attribute type 8 has an invalid length. [ 1037.436038][T27638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.447804][T27638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.465718][T27638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.490800][T27638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.500720][T27638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.509843][T27638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.518978][T27638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.758819][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.775738][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.800520][T27728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6300'. [ 1037.836744][T24408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.846981][T24408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.914488][T27733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6300'. [ 1037.980793][T27735] rdma_rxe: rxe_newlink: failed to add lo [ 1038.482895][T27736] delete_channel: no stack [ 1038.717338][T27745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6306'. [ 1038.786194][T27745] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1038.903216][T27756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1038.919903][T27751] bond17: (slave bridge13): Enslaving as an active interface with an up link [ 1039.046627][T27760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6309'. [ 1039.082564][T27760] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1039.113124][T27760] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 1039.210637][T27763] netlink: 'syz.1.6311': attribute type 9 has an invalid length. [ 1039.223588][T27765] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 1039.235031][T27763] netlink: 'syz.1.6311': attribute type 7 has an invalid length. [ 1039.248058][T27763] netlink: 'syz.1.6311': attribute type 8 has an invalid length. [ 1039.279795][T27765] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1039.359464][T27768] bond18: (slave bridge14): making interface the new active one [ 1039.392129][T27765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6310'. [ 1039.410370][T27768] bond18: (slave bridge14): Enslaving as an active interface with an up link [ 1039.580712][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.678414][T27774] netdevsim0 speed is unknown, defaulting to 1000 [ 1039.791131][T27774] lo speed is unknown, defaulting to 1000 [ 1040.092359][T27782] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1040.095717][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1040.113286][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1040.125535][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1040.136482][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1040.146200][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1040.155043][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.212795][T27785] netdevsim0 speed is unknown, defaulting to 1000 [ 1040.228115][T27785] lo speed is unknown, defaulting to 1000 [ 1040.472159][T27774] syzkaller0 speed is unknown, defaulting to 1000 [ 1040.660120][T27785] syzkaller0 speed is unknown, defaulting to 1000 [ 1040.807692][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.864090][T27791] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 1040.880117][T27791] macvlan9: entered allmulticast mode [ 1040.895876][T27800] __nla_validate_parse: 1 callbacks suppressed [ 1040.895899][T27800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6316'. [ 1040.928274][T27791] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 1040.940685][T27775] siw: device registration error -23 [ 1040.998153][T27791] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 1041.098984][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.117663][T27806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1041.203390][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.326323][T27810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1041.442200][T27812] rdma_rxe: rxe_newlink: failed to add lo [ 1041.523634][ T11] bridge_slave_1: left allmulticast mode [ 1041.535498][ T11] bridge_slave_1: left promiscuous mode [ 1041.545261][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.617635][ T11] bridge_slave_0: left allmulticast mode [ 1041.636130][ T11] bridge_slave_0: left promiscuous mode [ 1041.662233][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.837412][T27814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1042.059920][T27818] FAULT_INJECTION: forcing a failure. [ 1042.059920][T27818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.082774][T27818] CPU: 0 UID: 0 PID: 27818 Comm: syz.1.6319 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1042.093622][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1042.103729][T27818] Call Trace: [ 1042.107052][T27818] [ 1042.110024][T27818] dump_stack_lvl+0x241/0x360 [ 1042.114771][T27818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.120019][T27818] ? __pfx__printk+0x10/0x10 [ 1042.124639][T27818] ? __pfx_lock_release+0x10/0x10 [ 1042.129715][T27818] should_fail_ex+0x3b0/0x4e0 [ 1042.134429][T27818] _copy_from_iter+0x1e9/0x1c20 [ 1042.139314][T27818] ? __virt_addr_valid+0x183/0x530 [ 1042.144447][T27818] ? __alloc_skb+0x28f/0x440 [ 1042.149061][T27818] ? __pfx__copy_from_iter+0x10/0x10 [ 1042.154373][T27818] ? __virt_addr_valid+0x183/0x530 [ 1042.159514][T27818] ? __virt_addr_valid+0x183/0x530 [ 1042.164638][T27818] ? __virt_addr_valid+0x45f/0x530 [ 1042.169765][T27818] ? __phys_addr_symbol+0x2f/0x70 [ 1042.174819][T27818] ? __check_object_size+0x47a/0x730 [ 1042.180158][T27818] netlink_sendmsg+0x73d/0xcb0 [ 1042.184983][T27818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.190338][T27818] ? aa_sock_msg_perm+0x91/0x160 [ 1042.195306][T27818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.200621][T27818] __sock_sendmsg+0x221/0x270 [ 1042.203412][ T5838] Bluetooth: hci1: command tx timeout [ 1042.205310][T27818] ____sys_sendmsg+0x52a/0x7e0 [ 1042.215780][T27818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.218362][T27820] rdma_rxe: rxe_newlink: failed to add lo [ 1042.221091][T27818] ? __fget_files+0x2a/0x410 [ 1042.231448][T27818] ? __fget_files+0x2a/0x410 [ 1042.236097][T27818] __sys_sendmsg+0x269/0x350 [ 1042.240725][T27818] ? __pfx_lock_release+0x10/0x10 [ 1042.245795][T27818] ? __pfx___sys_sendmsg+0x10/0x10 [ 1042.250948][T27818] ? __pfx_vfs_write+0x10/0x10 [ 1042.255780][T27818] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1042.262157][T27818] ? do_syscall_64+0x100/0x230 [ 1042.266956][T27818] ? do_syscall_64+0xb6/0x230 [ 1042.271662][T27818] do_syscall_64+0xf3/0x230 [ 1042.276211][T27818] ? clear_bhb_loop+0x35/0x90 [ 1042.280941][T27818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.286873][T27818] RIP: 0033:0x7ff2a8b85d29 [ 1042.291313][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.310952][T27818] RSP: 002b:00007ff2a9a25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.319388][T27818] RAX: ffffffffffffffda RBX: 00007ff2a8d75fa0 RCX: 00007ff2a8b85d29 [ 1042.327403][T27818] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 1042.335403][T27818] RBP: 00007ff2a9a25090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.343417][T27818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.351424][T27818] R13: 0000000000000000 R14: 00007ff2a8d75fa0 R15: 00007ffe25d8c108 [ 1042.359441][T27818] [ 1042.548898][T27824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1042.628774][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.648750][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.665568][ T11] bond0 (unregistering): Released all slaves [ 1042.686609][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1042.908798][T27832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.927909][T27832] FAULT_INJECTION: forcing a failure. [ 1042.927909][T27832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.933099][T27785] chnl_net:caif_netlink_parms(): no params data found [ 1042.948445][T27832] CPU: 0 UID: 0 PID: 27832 Comm: syz.1.6323 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1042.959347][T27832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1042.969445][T27832] Call Trace: [ 1042.972757][T27832] [ 1042.975764][T27832] dump_stack_lvl+0x241/0x360 [ 1042.980502][T27832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.985758][T27832] ? __pfx__printk+0x10/0x10 [ 1042.990418][T27832] ? snprintf+0xda/0x120 [ 1042.994721][T27832] should_fail_ex+0x3b0/0x4e0 [ 1042.999456][T27832] _copy_to_user+0x31/0xb0 [ 1043.003969][T27832] simple_read_from_buffer+0xca/0x150 [ 1043.009404][T27832] proc_fail_nth_read+0x1e9/0x250 [ 1043.014482][T27832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1043.020084][T27832] ? rw_verify_area+0x55e/0x6f0 [ 1043.024977][T27832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1043.030576][T27832] vfs_read+0x1fc/0xb70 [ 1043.034788][T27832] ? __pfx___mutex_lock+0x10/0x10 [ 1043.039864][T27832] ? __pfx_vfs_read+0x10/0x10 [ 1043.044590][T27832] ? __fget_files+0x2a/0x410 [ 1043.049236][T27832] ? __fget_files+0x395/0x410 [ 1043.053968][T27832] ? __fget_files+0x2a/0x410 [ 1043.058625][T27832] ksys_read+0x18f/0x2b0 [ 1043.062916][T27832] ? __pfx_ksys_read+0x10/0x10 [ 1043.067730][T27832] ? do_syscall_64+0x100/0x230 [ 1043.072550][T27832] ? do_syscall_64+0xb6/0x230 [ 1043.077280][T27832] do_syscall_64+0xf3/0x230 [ 1043.081849][T27832] ? clear_bhb_loop+0x35/0x90 [ 1043.086566][T27832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.092490][T27832] RIP: 0033:0x7ff2a8b8473c [ 1043.096935][T27832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1043.116573][T27832] RSP: 002b:00007ff2a9a25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1043.125019][T27832] RAX: ffffffffffffffda RBX: 00007ff2a8d75fa0 RCX: 00007ff2a8b8473c [ 1043.133033][T27832] RDX: 000000000000000f RSI: 00007ff2a9a250a0 RDI: 0000000000000004 [ 1043.141047][T27832] RBP: 00007ff2a9a25090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.149068][T27832] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 1043.157086][T27832] R13: 0000000000000000 R14: 00007ff2a8d75fa0 R15: 00007ffe25d8c108 [ 1043.165123][T27832] [ 1043.258199][T27841] netlink: 'syz.2.6324': attribute type 9 has an invalid length. [ 1043.268057][T27841] netlink: 'syz.2.6324': attribute type 7 has an invalid length. [ 1043.277883][T27841] netlink: 'syz.2.6324': attribute type 8 has an invalid length. [ 1043.428381][T27785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.436633][T27785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.453024][T27785] bridge_slave_0: entered allmulticast mode [ 1043.465340][T27785] bridge_slave_0: entered promiscuous mode [ 1043.528518][T27785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.553794][T27785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.561417][T27785] bridge_slave_1: entered allmulticast mode [ 1043.586488][T27785] bridge_slave_1: entered promiscuous mode [ 1043.793633][T27785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.816801][T27857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6329'. [ 1043.908613][T27785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.921384][T27861] FAULT_INJECTION: forcing a failure. [ 1043.921384][T27861] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.969349][T27861] CPU: 0 UID: 0 PID: 27861 Comm: syz.1.6331 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1043.980208][T27861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1043.990295][T27861] Call Trace: [ 1043.993592][T27861] [ 1043.996539][T27861] dump_stack_lvl+0x241/0x360 [ 1044.001254][T27861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.006494][T27861] ? __pfx__printk+0x10/0x10 [ 1044.011108][T27861] ? fs_reclaim_acquire+0x93/0x130 [ 1044.016241][T27861] ? __pfx___might_resched+0x10/0x10 [ 1044.021555][T27861] ? dynamic_dname+0x141/0x1b0 [ 1044.026361][T27861] should_fail_ex+0x3b0/0x4e0 [ 1044.031058][T27861] should_failslab+0xac/0x100 [ 1044.035768][T27861] __kmalloc_noprof+0xdd/0x4c0 [ 1044.040559][T27861] ? tomoyo_encode+0x26f/0x540 [ 1044.045349][T27861] tomoyo_encode+0x26f/0x540 [ 1044.049960][T27861] ? __pfx_sockfs_dname+0x10/0x10 [ 1044.055019][T27861] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1044.060682][T27861] tomoyo_path_number_perm+0x236/0x860 [ 1044.066166][T27861] ? __lock_acquire+0x1397/0x2100 [ 1044.071217][T27861] ? tomoyo_path_number_perm+0x206/0x860 [ 1044.076926][T27861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1044.082971][T27861] ? __fget_files+0x2a/0x410 [ 1044.087590][T27861] ? __fget_files+0x2a/0x410 [ 1044.092204][T27861] security_file_ioctl+0xc6/0x2a0 [ 1044.097287][T27861] __se_sys_ioctl+0x46/0x170 [ 1044.101900][T27861] do_syscall_64+0xf3/0x230 [ 1044.106427][T27861] ? clear_bhb_loop+0x35/0x90 [ 1044.111126][T27861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.117041][T27861] RIP: 0033:0x7ff2a8b85d29 [ 1044.121479][T27861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.141121][T27861] RSP: 002b:00007ff2a9a25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.149558][T27861] RAX: ffffffffffffffda RBX: 00007ff2a8d75fa0 RCX: 00007ff2a8b85d29 [ 1044.157547][T27861] RDX: 0000000020006100 RSI: 00000000000089f3 RDI: 0000000000000003 [ 1044.165537][T27861] RBP: 00007ff2a9a25090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.173527][T27861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.181515][T27861] R13: 0000000000000000 R14: 00007ff2a8d75fa0 R15: 00007ffe25d8c108 [ 1044.189528][T27861] [ 1044.194096][T27861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1044.256119][T27863] rdma_rxe: rxe_newlink: failed to add lo [ 1044.281975][ T5838] Bluetooth: hci1: command tx timeout [ 1044.317856][T27859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6329'. [ 1044.451686][T27785] team0: Port device team_slave_0 added [ 1044.488623][T27785] team0: Port device team_slave_1 added [ 1044.500607][T27869] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6333'. [ 1044.538937][ T11] hsr_slave_0: left promiscuous mode [ 1044.547422][ T11] hsr_slave_1: left promiscuous mode [ 1044.553916][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.561719][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.570160][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.578925][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.616431][ T11] veth1_macvtap: left promiscuous mode [ 1044.622276][ T11] veth0_macvtap: left promiscuous mode [ 1044.627912][ T11] veth1_vlan: left promiscuous mode [ 1044.636031][ T11] veth0_vlan: left promiscuous mode [ 1045.389738][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1045.457386][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1045.846428][T27884] siw: device registration error -23 [ 1046.181551][T27785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.198422][T27785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.225313][T27785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.261843][T27785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.271924][T27785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.298348][T27785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.310942][T27879] netdevsim0 speed is unknown, defaulting to 1000 [ 1046.359021][T27879] lo speed is unknown, defaulting to 1000 [ 1046.365905][ T5838] Bluetooth: hci1: command tx timeout [ 1046.370096][T27785] hsr_slave_0: entered promiscuous mode [ 1046.390352][T27889] netlink: 'syz.1.6337': attribute type 9 has an invalid length. [ 1046.399108][T27889] netlink: 'syz.1.6337': attribute type 7 has an invalid length. [ 1046.407046][T27889] netlink: 'syz.1.6337': attribute type 8 has an invalid length. [ 1046.419881][T27785] hsr_slave_1: entered promiscuous mode [ 1046.446514][T27785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.465105][T27785] Cannot create hsr debugfs directory [ 1046.659172][T27892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6339'. [ 1046.686541][T27892] netlink: 'syz.4.6339': attribute type 11 has an invalid length. [ 1046.751601][T27879] syzkaller0 speed is unknown, defaulting to 1000 [ 1047.505437][T27785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1047.656652][T27785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1047.688753][T27910] bridge14: entered promiscuous mode [ 1047.725497][T27785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1047.748161][T27785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1047.900120][T27785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.979553][T27785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.998353][T24411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.005566][T24411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.057536][T24411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.064740][T24411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.289624][T27785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.389742][T27785] veth0_vlan: entered promiscuous mode [ 1048.433177][T27785] veth1_vlan: entered promiscuous mode [ 1048.441360][ T5838] Bluetooth: hci1: command tx timeout [ 1048.515349][T27785] veth0_macvtap: entered promiscuous mode [ 1048.573469][T27785] veth1_macvtap: entered promiscuous mode [ 1048.658829][T27785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.676292][T27785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.688261][T27785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.700511][T27785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.711822][T27785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.724183][T27785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.735451][T27785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.744872][T27785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.754481][T27785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.764140][T27785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.814232][T27948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6356'. [ 1048.840987][T27948] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1048.989952][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.032380][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.078204][T27955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6358'. [ 1049.100200][T27955] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1049.115652][T27958] FAULT_INJECTION: forcing a failure. [ 1049.115652][T27958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1049.128444][T24411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.129552][T27958] CPU: 0 UID: 0 PID: 27958 Comm: syz.2.6357 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1049.147597][T27958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1049.157713][T27958] Call Trace: [ 1049.161032][T27958] [ 1049.162705][T24411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.163976][T27958] dump_stack_lvl+0x241/0x360 [ 1049.175987][T27958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.181229][T27958] ? __pfx__printk+0x10/0x10 [ 1049.185869][T27958] ? __lock_acquire+0x1397/0x2100 [ 1049.190967][T27958] should_fail_ex+0x3b0/0x4e0 [ 1049.195692][T27958] prepare_alloc_pages+0x1da/0x5b0 [ 1049.200859][T27958] __alloc_pages_noprof+0x16f/0x710 [ 1049.206114][T27958] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1049.211910][T27958] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1049.217433][T27958] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1049.223460][T27958] vma_alloc_folio_noprof+0x12e/0x230 [ 1049.228892][T27958] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1049.234857][T27958] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1049.240205][T27958] folio_prealloc+0x2e/0x170 [ 1049.244846][T27958] do_wp_page+0x1253/0x49b0 [ 1049.249436][T27958] ? __pfx_do_wp_page+0x10/0x10 [ 1049.254659][T27958] ? __pfx_lock_acquire+0x10/0x10 [ 1049.259729][T27958] ? rcu_is_watching+0x15/0xb0 [ 1049.264548][T27958] ? do_raw_spin_lock+0x14f/0x370 [ 1049.269611][T27958] ? __pfx___pte_offset_map+0x10/0x10 [ 1049.275039][T27958] handle_pte_fault+0xfa5/0x5ed0 [ 1049.280017][T27958] ? __lock_acquire+0x1397/0x2100 [ 1049.285065][T27958] ? __pfx_handle_pte_fault+0x10/0x10 [ 1049.290539][T27958] ? __lock_acquire+0x1397/0x2100 [ 1049.295626][T27958] ? __pfx_lock_acquire+0x10/0x10 [ 1049.300684][T27958] ? count_memcg_event_mm+0x94/0x420 [ 1049.305992][T27958] ? do_raw_spin_lock+0x14f/0x370 [ 1049.311033][T27958] handle_mm_fault+0x1106/0x1bb0 [ 1049.316033][T27958] ? __pfx_handle_mm_fault+0x10/0x10 [ 1049.321373][T27958] ? follow_page_pte+0xef6/0x1ca0 [ 1049.326464][T27958] ? __pfx_find_vma+0x10/0x10 [ 1049.331162][T27958] ? vma_is_secretmem+0xd/0x50 [ 1049.335964][T27958] ? check_vma_flags+0x52b/0x5a0 [ 1049.340944][T27958] __get_user_pages+0x1c82/0x49e0 [ 1049.346003][T27958] ? mark_lock+0x9a/0x360 [ 1049.350365][T27958] ? __pfx___get_user_pages+0x10/0x10 [ 1049.355810][T27958] ? __pfx_down_read_killable+0x10/0x10 [ 1049.361411][T27958] ? __pfx_lock_acquire+0x10/0x10 [ 1049.366471][T27958] ? try_get_folio+0xf1/0x6f0 [ 1049.371304][T27958] ? __pfx_lock_release+0x10/0x10 [ 1049.376386][T27958] __gup_longterm_locked+0xe64/0x17f0 [ 1049.381815][T27958] ? mark_lock+0x9a/0x360 [ 1049.386190][T27958] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1049.392194][T27958] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1049.398109][T27958] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 1049.404165][T27958] gup_fast_fallback+0x2266/0x29c0 [ 1049.409315][T27958] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1049.414801][T27958] ? 0xffffffffa0000960 [ 1049.418985][T27958] ? is_bpf_text_address+0x26/0x2a0 [ 1049.424222][T27958] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1049.430392][T27958] ? kernel_text_address+0xa7/0xe0 [ 1049.435541][T27958] ? __kernel_text_address+0xd/0x40 [ 1049.440810][T27958] ? unwind_get_return_address+0x4d/0x90 [ 1049.446466][T27958] ? arch_stack_walk+0xfd/0x150 [ 1049.451365][T27958] ? stack_trace_save+0x118/0x1d0 [ 1049.456437][T27958] ? __pfx_lock_release+0x10/0x10 [ 1049.461506][T27958] ? is_valid_gup_args+0x124/0x200 [ 1049.466668][T27958] pin_user_pages_fast+0xcc/0x160 [ 1049.471727][T27958] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1049.477428][T27958] iov_iter_extract_pages+0x3bb/0x5c0 [ 1049.482836][T27958] ? __x64_sys_recvmmsg+0x199/0x250 [ 1049.488073][T27958] extract_iter_to_sg+0xea6/0x2650 [ 1049.493239][T27958] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1049.498836][T27958] ? __asan_memset+0x23/0x50 [ 1049.503460][T27958] af_alg_get_rsgl+0x41e/0x850 [ 1049.508314][T27958] skcipher_recvmsg+0x3f8/0x1230 [ 1049.513301][T27958] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1049.518710][T27958] ? aa_sock_msg_perm+0x91/0x160 [ 1049.523666][T27958] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1049.528977][T27958] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1049.534380][T27958] sock_recvmsg+0x22f/0x280 [ 1049.539020][T27958] ____sys_recvmsg+0x1c6/0x480 [ 1049.543826][T27958] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1049.549178][T27958] do_recvmmsg+0x426/0xab0 [ 1049.553643][T27958] ? __pfx_do_recvmmsg+0x10/0x10 [ 1049.558651][T27958] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1049.564587][T27958] ? ksys_write+0x22a/0x2b0 [ 1049.569105][T27958] ? __pfx_lock_release+0x10/0x10 [ 1049.574176][T27958] ? vfs_write+0x730/0xd30 [ 1049.578632][T27958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1049.584662][T27958] ? __fget_files+0x2a/0x410 [ 1049.589307][T27958] __x64_sys_recvmmsg+0x199/0x250 [ 1049.594495][T27958] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1049.600091][T27958] ? do_syscall_64+0x100/0x230 [ 1049.604907][T27958] ? do_syscall_64+0xb6/0x230 [ 1049.609603][T27958] do_syscall_64+0xf3/0x230 [ 1049.614169][T27958] ? clear_bhb_loop+0x35/0x90 [ 1049.618892][T27958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.624817][T27958] RIP: 0033:0x7f85b8d85d29 [ 1049.629245][T27958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.648882][T27958] RSP: 002b:00007f85b8bd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1049.657368][T27958] RAX: ffffffffffffffda RBX: 00007f85b8f76080 RCX: 00007f85b8d85d29 [ 1049.665367][T27958] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000004 [ 1049.673369][T27958] RBP: 00007f85b8bd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.681379][T27958] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 1049.689381][T27958] R13: 0000000000000001 R14: 00007f85b8f76080 R15: 00007ffcb03e82f8 [ 1049.697414][T27958] [ 1049.725317][T27960] bond15: (slave bridge15): Enslaving as an active interface with an up link [ 1050.033786][T27964] netdevsim0 speed is unknown, defaulting to 1000 [ 1050.053054][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1050.053992][T27964] lo speed is unknown, defaulting to 1000 [ 1050.607276][T27964] syzkaller0 speed is unknown, defaulting to 1000 [ 1050.753597][T27987] siw: device registration error -23 [ 1051.138443][T27994] sctp: [Deprecated]: syz.4.6369 (pid 27994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1051.138443][T27994] Use struct sctp_sack_info instead [ 1051.232427][T27996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6370'. [ 1051.401591][T27999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6370'. [ 1051.504170][T28000] rdma_rxe: rxe_newlink: failed to add lo [ 1051.826284][T24409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.487854][T28026] netdevsim0 speed is unknown, defaulting to 1000 [ 1052.509667][T28026] lo speed is unknown, defaulting to 1000 [ 1052.536631][T28025] FAULT_INJECTION: forcing a failure. [ 1052.536631][T28025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.564598][T28025] CPU: 0 UID: 0 PID: 28025 Comm: syz.1.6377 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1052.575444][T28025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1052.585549][T28025] Call Trace: [ 1052.588911][T28025] [ 1052.591882][T28025] dump_stack_lvl+0x241/0x360 [ 1052.596619][T28025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1052.601882][T28025] ? __pfx__printk+0x10/0x10 [ 1052.606548][T28025] ? __pfx_lock_release+0x10/0x10 [ 1052.611717][T28025] ? percpu_ref_get_many+0x19/0x140 [ 1052.616980][T28025] should_fail_ex+0x3b0/0x4e0 [ 1052.621712][T28025] _copy_from_iter+0x1e9/0x1c20 [ 1052.626677][T28025] ? pipe_write+0xd5b/0x1a30 [ 1052.631325][T28025] ? __pfx__copy_from_iter+0x10/0x10 [ 1052.636670][T28025] ? alloc_pages_mpol_noprof+0x417/0x680 [ 1052.642363][T28025] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1052.648394][T28025] ? page_copy_sane+0x46/0x260 [ 1052.653212][T28025] copy_page_from_iter+0x7a/0x100 [ 1052.658296][T28025] pipe_write+0x7f5/0x1a30 [ 1052.662791][T28025] ? __pfx_pipe_write+0x10/0x10 [ 1052.667699][T28025] ? common_file_perm+0x1a6/0x210 [ 1052.672811][T28025] ? bpf_lsm_file_permission+0x9/0x10 [ 1052.678238][T28025] ? security_file_permission+0x74/0x280 [ 1052.683942][T28025] vfs_write+0xaeb/0xd30 [ 1052.688226][T28025] ? __pfx_pipe_write+0x10/0x10 [ 1052.693124][T28025] ? __pfx_vfs_write+0x10/0x10 [ 1052.697934][T28025] ? __fget_files+0x2a/0x410 [ 1052.702581][T28025] ? __fget_files+0x2a/0x410 [ 1052.707228][T28025] ksys_write+0x18f/0x2b0 [ 1052.711602][T28025] ? __pfx_ksys_write+0x10/0x10 [ 1052.716498][T28025] ? do_syscall_64+0x100/0x230 [ 1052.721343][T28025] ? do_syscall_64+0xb6/0x230 [ 1052.726076][T28025] do_syscall_64+0xf3/0x230 [ 1052.730627][T28025] ? clear_bhb_loop+0x35/0x90 [ 1052.735354][T28025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.741295][T28025] RIP: 0033:0x7ff2a8b85d29 [ 1052.745772][T28025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.765457][T28025] RSP: 002b:00007ff2a9a25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1052.773928][T28025] RAX: ffffffffffffffda RBX: 00007ff2a8d75fa0 RCX: 00007ff2a8b85d29 [ 1052.781941][T28025] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 1052.789952][T28025] RBP: 00007ff2a9a25090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.797967][T28025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1052.805983][T28025] R13: 0000000000000000 R14: 00007ff2a8d75fa0 R15: 00007ffe25d8c108 [ 1052.814016][T28025] [ 1052.819830][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1052.834536][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1052.846699][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1052.857090][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1052.865763][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1052.873863][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1052.974853][T24409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.107166][T28028] netdevsim0 speed is unknown, defaulting to 1000 [ 1053.121559][T28026] syzkaller0 speed is unknown, defaulting to 1000 [ 1053.303283][T24409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.330793][T28039] netlink: 'syz.2.6382': attribute type 4 has an invalid length. [ 1053.347826][T28039] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6382'. [ 1053.374532][T28028] lo speed is unknown, defaulting to 1000 [ 1053.485422][T24409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.577012][T28049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1053.587867][T28043] ipt_rpfilter: unknown options [ 1053.752131][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1053.781476][T28028] syzkaller0 speed is unknown, defaulting to 1000 [ 1053.927270][T28027] siw: device registration error -23 [ 1053.928697][T28047] netdevsim0 speed is unknown, defaulting to 1000 [ 1053.975521][T28047] lo speed is unknown, defaulting to 1000 [ 1054.236712][T28028] chnl_net:caif_netlink_parms(): no params data found [ 1054.388393][T28028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.403779][T28028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.411124][T28028] bridge_slave_0: entered allmulticast mode [ 1054.418492][T28028] bridge_slave_0: entered promiscuous mode [ 1054.426272][T28047] syzkaller0 speed is unknown, defaulting to 1000 [ 1054.427102][T28028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.442526][T28028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.449880][T28028] bridge_slave_1: entered allmulticast mode [ 1054.458196][T28028] bridge_slave_1: entered promiscuous mode [ 1054.517945][T28028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.538777][T28028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.602793][T28055] rdma_rxe: rxe_newlink: failed to add lo [ 1054.633321][T28028] team0: Port device team_slave_0 added [ 1054.657877][T28028] team0: Port device team_slave_1 added [ 1054.735938][T28028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.744053][T28028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.773752][T28028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.790696][T28028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.798639][T28028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.825777][T28028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.006274][T27275] hid-generic 0005:07C0:0058.0002: item fetching failed at offset 0/1 [ 1055.008116][ T5838] Bluetooth: hci1: command tx timeout [ 1055.023451][T27275] hid-generic 0005:07C0:0058.0002: probe with driver hid-generic failed with error -22 [ 1055.054583][T28028] hsr_slave_0: entered promiscuous mode [ 1055.083604][T28028] hsr_slave_1: entered promiscuous mode [ 1055.108813][T28028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.125787][T28028] Cannot create hsr debugfs directory [ 1055.202542][T24409] bridge_slave_1: left allmulticast mode [ 1055.208266][T24409] bridge_slave_1: left promiscuous mode [ 1055.239898][T24409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.312714][T24409] bridge_slave_0: left allmulticast mode [ 1055.320320][T24409] bridge_slave_0: left promiscuous mode [ 1055.336844][T24409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.104685][T24409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.117103][T24409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.129510][T24409] bond0 (unregistering): Released all slaves [ 1056.272274][T28086] netdevsim0 speed is unknown, defaulting to 1000 [ 1056.282629][T28080] netdevsim0 speed is unknown, defaulting to 1000 [ 1056.320875][T28086] lo speed is unknown, defaulting to 1000 [ 1056.755667][T28080] lo speed is unknown, defaulting to 1000 [ 1057.032674][T28028] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1057.069428][T28028] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1057.081548][ T5838] Bluetooth: hci1: command tx timeout [ 1057.140226][T28028] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1057.217468][T28028] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1057.351915][T28086] syzkaller0 speed is unknown, defaulting to 1000 [ 1057.408608][T28028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.456260][T28028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.480856][T28103] netdevsim0 speed is unknown, defaulting to 1000 [ 1057.534629][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.541854][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.551039][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.558335][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.580804][T28106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1057.609484][T28103] lo speed is unknown, defaulting to 1000 [ 1058.034041][T28080] syzkaller0 speed is unknown, defaulting to 1000 [ 1058.078379][T28028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.313025][T28028] veth0_vlan: entered promiscuous mode [ 1058.324835][T28028] veth1_vlan: entered promiscuous mode [ 1058.348759][T28028] veth0_macvtap: entered promiscuous mode [ 1058.359254][T28028] veth1_macvtap: entered promiscuous mode [ 1058.375398][T28028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.386021][T28028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.396493][T28028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.408107][T28028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.420030][T28028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.463820][T28028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.475988][T28028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.508178][T28028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.528256][T28028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.563186][T28028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.576789][T28103] syzkaller0 speed is unknown, defaulting to 1000 [ 1058.584939][T28028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.613565][T28028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.625935][T28028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.636636][T28028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.945752][T28104] siw: device registration error -23 [ 1058.990307][T24409] hsr_slave_0: left promiscuous mode [ 1059.008082][T24409] hsr_slave_1: left promiscuous mode [ 1059.015441][T24409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.028745][T24409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.040420][T24409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.050868][T24409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.084932][T24409] veth1_macvtap: left promiscuous mode [ 1059.090574][T24409] veth0_macvtap: left promiscuous mode [ 1059.096506][T24409] veth1_vlan: left promiscuous mode [ 1059.102246][T24409] veth0_vlan: left promiscuous mode [ 1059.162186][ T5838] Bluetooth: hci1: command tx timeout [ 1059.708101][T24409] team0 (unregistering): Port device team_slave_1 removed [ 1059.760119][T24409] team0 (unregistering): Port device team_slave_0 removed [ 1060.378106][T24408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.439630][T24408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.513969][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.519535][T28132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1060.587184][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.672223][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1060.794023][T28136] rdma_rxe: rxe_newlink: failed to add lo [ 1061.079984][T28073] ================================================================== [ 1061.088118][T28073] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 1061.095613][T28073] Read of size 8 at addr ffff8880668b0060 by task khidpd_07c00058/28073 [ 1061.103940][T28073] [ 1061.106266][T28073] CPU: 1 UID: 0 PID: 28073 Comm: khidpd_07c00058 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1061.117475][T28073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1061.127569][T28073] Call Trace: [ 1061.130878][T28073] [ 1061.133839][T28073] dump_stack_lvl+0x241/0x360 [ 1061.138562][T28073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1061.143810][T28073] ? __pfx__printk+0x10/0x10 [ 1061.148478][T28073] ? _printk+0xd5/0x120 [ 1061.152677][T28073] ? __virt_addr_valid+0x183/0x530 [ 1061.157826][T28073] ? __virt_addr_valid+0x183/0x530 [ 1061.162959][T28073] print_report+0x169/0x550 [ 1061.167478][T28073] ? __virt_addr_valid+0x183/0x530 [ 1061.172605][T28073] ? __virt_addr_valid+0x183/0x530 [ 1061.177730][T28073] ? __virt_addr_valid+0x45f/0x530 [ 1061.182860][T28073] ? __phys_addr+0xba/0x170 [ 1061.187384][T28073] ? __mutex_lock+0x7fb/0xee0 [ 1061.192074][T28073] kasan_report+0x143/0x180 [ 1061.196601][T28073] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1061.202508][T28073] ? __mutex_lock+0x7fb/0xee0 [ 1061.207210][T28073] __mutex_lock+0x7fb/0xee0 [ 1061.211732][T28073] ? __mutex_lock+0x5ef/0xee0 [ 1061.216427][T28073] ? l2cap_unregister_user+0x6a/0x1c0 [ 1061.221817][T28073] ? __pfx___mutex_lock+0x10/0x10 [ 1061.226865][T28073] ? __pfx___timer_delete_sync+0x10/0x10 [ 1061.232518][T28073] l2cap_unregister_user+0x6a/0x1c0 [ 1061.237735][T28073] hidp_session_thread+0x450/0x490 [ 1061.242858][T28073] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1061.248803][T28073] ? __pfx_hidp_session_thread+0x10/0x10 [ 1061.254488][T28073] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1061.260392][T28073] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1061.266670][T28073] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1061.272923][T28073] ? __kthread_parkme+0x169/0x1d0 [ 1061.277961][T28073] ? __pfx_hidp_session_thread+0x10/0x10 [ 1061.283624][T28073] kthread+0x2f0/0x390 [ 1061.287708][T28073] ? __pfx_hidp_session_thread+0x10/0x10 [ 1061.293367][T28073] ? __pfx_kthread+0x10/0x10 [ 1061.298001][T28073] ret_from_fork+0x4b/0x80 [ 1061.302520][T28073] ? __pfx_kthread+0x10/0x10 [ 1061.307130][T28073] ret_from_fork_asm+0x1a/0x30 [ 1061.311911][T28073] [ 1061.314937][T28073] [ 1061.317262][T28073] Allocated by task 28028: [ 1061.321681][T28073] kasan_save_track+0x3f/0x80 [ 1061.326370][T28073] __kasan_kmalloc+0x98/0xb0 [ 1061.330973][T28073] __kmalloc_noprof+0x285/0x4c0 [ 1061.335843][T28073] hci_alloc_dev_priv+0x27/0x2030 [ 1061.340883][T28073] vhci_create_device+0x116/0x6a0 [ 1061.345927][T28073] vhci_write+0x3cf/0x490 [ 1061.350272][T28073] vfs_write+0xaeb/0xd30 [ 1061.354554][T28073] ksys_write+0x18f/0x2b0 [ 1061.358895][T28073] do_syscall_64+0xf3/0x230 [ 1061.363411][T28073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.369319][T28073] [ 1061.371646][T28073] Freed by task 28028: [ 1061.375712][T28073] kasan_save_track+0x3f/0x80 [ 1061.380408][T28073] kasan_save_free_info+0x40/0x50 [ 1061.385451][T28073] __kasan_slab_free+0x59/0x70 [ 1061.390226][T28073] kfree+0x196/0x430 [ 1061.394134][T28073] hci_release_dev+0x1525/0x16b0 [ 1061.399090][T28073] bt_host_release+0x83/0x90 [ 1061.403698][T28073] device_release+0x99/0x1c0 [ 1061.408305][T28073] kobject_put+0x22f/0x480 [ 1061.412736][T28073] vhci_release+0x88/0xd0 [ 1061.417088][T28073] __fput+0x23c/0xa50 [ 1061.421112][T28073] task_work_run+0x24f/0x310 [ 1061.425744][T28073] do_exit+0xa2f/0x28e0 [ 1061.429932][T28073] do_group_exit+0x207/0x2c0 [ 1061.434556][T28073] __x64_sys_exit_group+0x3f/0x40 [ 1061.439627][T28073] x64_sys_call+0x26a8/0x26b0 [ 1061.444315][T28073] do_syscall_64+0xf3/0x230 [ 1061.448835][T28073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.454746][T28073] [ 1061.457077][T28073] Last potentially related work creation: [ 1061.462806][T28073] kasan_save_stack+0x3f/0x60 [ 1061.467499][T28073] __kasan_record_aux_stack+0xac/0xc0 [ 1061.472889][T28073] insert_work+0x3e/0x330 [ 1061.477226][T28073] __queue_work+0xb66/0xf50 [ 1061.481737][T28073] queue_work_on+0x1c2/0x380 [ 1061.486360][T28073] process_scheduled_works+0xa66/0x1840 [ 1061.491915][T28073] worker_thread+0x870/0xd30 [ 1061.496529][T28073] kthread+0x2f0/0x390 [ 1061.500618][T28073] ret_from_fork+0x4b/0x80 [ 1061.505052][T28073] ret_from_fork_asm+0x1a/0x30 [ 1061.509836][T28073] [ 1061.512180][T28073] Second to last potentially related work creation: [ 1061.518788][T28073] kasan_save_stack+0x3f/0x60 [ 1061.523487][T28073] __kasan_record_aux_stack+0xac/0xc0 [ 1061.528875][T28073] insert_work+0x3e/0x330 [ 1061.533217][T28073] __queue_work+0xc8b/0xf50 [ 1061.537731][T28073] call_timer_fn+0x187/0x650 [ 1061.542338][T28073] __run_timer_base+0x695/0x8e0 [ 1061.547200][T28073] run_timer_softirq+0xb7/0x170 [ 1061.552065][T28073] handle_softirqs+0x2d4/0x9b0 [ 1061.556846][T28073] do_softirq+0x11b/0x1e0 [ 1061.561197][T28073] __local_bh_enable_ip+0x1bb/0x200 [ 1061.566418][T28073] __neigh_ifdown+0x1c6/0x400 [ 1061.571107][T28073] neigh_ifdown+0x1f/0x30 [ 1061.575452][T28073] rt6_disable_ip+0x78f/0x800 [ 1061.580147][T28073] addrconf_ifdown+0x15d/0x1bd0 [ 1061.585009][T28073] addrconf_notify+0x3cb/0x1020 [ 1061.589881][T28073] notifier_call_chain+0x1a5/0x3f0 [ 1061.595003][T28073] dev_close_many+0x33c/0x4c0 [ 1061.599697][T28073] unregister_netdevice_many_notify+0x530/0x1da0 [ 1061.606045][T28073] default_device_exit_batch+0xa1f/0xaa0 [ 1061.611698][T28073] cleanup_net+0x89d/0xd50 [ 1061.616123][T28073] process_scheduled_works+0xa66/0x1840 [ 1061.621679][T28073] worker_thread+0x870/0xd30 [ 1061.626281][T28073] kthread+0x2f0/0x390 [ 1061.630363][T28073] ret_from_fork+0x4b/0x80 [ 1061.634797][T28073] ret_from_fork_asm+0x1a/0x30 [ 1061.639573][T28073] [ 1061.641902][T28073] The buggy address belongs to the object at ffff8880668b0000 [ 1061.641902][T28073] which belongs to the cache kmalloc-8k of size 8192 [ 1061.655971][T28073] The buggy address is located 96 bytes inside of [ 1061.655971][T28073] freed 8192-byte region [ffff8880668b0000, ffff8880668b2000) [ 1061.669812][T28073] [ 1061.672142][T28073] The buggy address belongs to the physical page: [ 1061.678567][T28073] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x668b0 [ 1061.687350][T28073] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1061.695955][T28073] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1061.703514][T28073] page_type: f5(slab) [ 1061.707509][T28073] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 1061.716101][T28073] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 1061.724695][T28073] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 1061.733380][T28073] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 1061.742062][T28073] head: 00fff00000000003 ffffea00019a2c01 ffffffffffffffff 0000000000000000 [ 1061.750742][T28073] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1061.759415][T28073] page dumped because: kasan: bad access detected [ 1061.765853][T28073] page_owner tracks the page as allocated [ 1061.771572][T28073] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 28028, tgid 28028 (syz-executor), ts 1052563324424, free_ts 1039549668002 [ 1061.793554][T28073] post_alloc_hook+0x1f3/0x230 [ 1061.798344][T28073] get_page_from_freelist+0x365c/0x37a0 [ 1061.803899][T28073] __alloc_pages_noprof+0x292/0x710 [ 1061.809108][T28073] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1061.814582][T28073] alloc_slab_page+0x6a/0x110 [ 1061.819269][T28073] allocate_slab+0x5a/0x2b0 [ 1061.823778][T28073] ___slab_alloc+0xc27/0x14a0 [ 1061.828471][T28073] __slab_alloc+0x58/0xa0 [ 1061.832822][T28073] __kmalloc_noprof+0x2e6/0x4c0 [ 1061.837689][T28073] hci_alloc_dev_priv+0x27/0x2030 [ 1061.842737][T28073] vhci_create_device+0x116/0x6a0 [ 1061.847867][T28073] vhci_write+0x3cf/0x490 [ 1061.852213][T28073] vfs_write+0xaeb/0xd30 [ 1061.856464][T28073] ksys_write+0x18f/0x2b0 [ 1061.860798][T28073] do_syscall_64+0xf3/0x230 [ 1061.865317][T28073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.871244][T28073] page last free pid 27622 tgid 27622 stack trace: [ 1061.877748][T28073] free_unref_page+0xd3f/0x1010 [ 1061.882620][T28073] vfree+0x186/0x2e0 [ 1061.886531][T28073] kcov_close+0x28/0x50 [ 1061.890699][T28073] __fput+0x23c/0xa50 [ 1061.894699][T28073] task_work_run+0x24f/0x310 [ 1061.899302][T28073] do_exit+0xa2f/0x28e0 [ 1061.903468][T28073] do_group_exit+0x207/0x2c0 [ 1061.908189][T28073] __x64_sys_exit_group+0x3f/0x40 [ 1061.913227][T28073] x64_sys_call+0x26a8/0x26b0 [ 1061.917913][T28073] do_syscall_64+0xf3/0x230 [ 1061.922431][T28073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.928340][T28073] [ 1061.930714][T28073] Memory state around the buggy address: [ 1061.936352][T28073] ffff8880668aff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1061.944420][T28073] ffff8880668aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1061.952488][T28073] >ffff8880668b0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1061.960554][T28073] ^ [ 1061.967755][T28073] ffff8880668b0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1061.975824][T28073] ffff8880668b0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1061.983891][T28073] ================================================================== [ 1061.994644][T28073] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1062.001881][T28073] CPU: 1 UID: 0 PID: 28073 Comm: khidpd_07c00058 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 1062.013095][T28073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1062.023161][T28073] Call Trace: [ 1062.026449][T28073] [ 1062.029396][T28073] dump_stack_lvl+0x241/0x360 [ 1062.034100][T28073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1062.039321][T28073] ? __pfx__printk+0x10/0x10 [ 1062.043950][T28073] ? vscnprintf+0x5d/0x90 [ 1062.048308][T28073] panic+0x349/0x880 [ 1062.052226][T28073] ? check_panic_on_warn+0x21/0xb0 [ 1062.057386][T28073] ? __pfx_panic+0x10/0x10 [ 1062.061823][T28073] ? mark_lock+0x9a/0x360 [ 1062.066171][T28073] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 1062.072080][T28073] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1062.077990][T28073] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1062.084325][T28073] ? print_report+0x502/0x550 [ 1062.089046][T28073] check_panic_on_warn+0x86/0xb0 [ 1062.094005][T28073] ? __mutex_lock+0x7fb/0xee0 [ 1062.098695][T28073] end_report+0x77/0x160 [ 1062.102957][T28073] kasan_report+0x154/0x180 [ 1062.107488][T28073] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1062.113400][T28073] ? __mutex_lock+0x7fb/0xee0 [ 1062.118105][T28073] __mutex_lock+0x7fb/0xee0 [ 1062.122620][T28073] ? __mutex_lock+0x5ef/0xee0 [ 1062.127313][T28073] ? l2cap_unregister_user+0x6a/0x1c0 [ 1062.132699][T28073] ? __pfx___mutex_lock+0x10/0x10 [ 1062.137745][T28073] ? __pfx___timer_delete_sync+0x10/0x10 [ 1062.143398][T28073] l2cap_unregister_user+0x6a/0x1c0 [ 1062.148617][T28073] hidp_session_thread+0x450/0x490 [ 1062.153753][T28073] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1062.159659][T28073] ? __pfx_hidp_session_thread+0x10/0x10 [ 1062.165336][T28073] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1062.171241][T28073] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1062.177515][T28073] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1062.183771][T28073] ? __kthread_parkme+0x169/0x1d0 [ 1062.188826][T28073] ? __pfx_hidp_session_thread+0x10/0x10 [ 1062.194481][T28073] kthread+0x2f0/0x390 [ 1062.198567][T28073] ? __pfx_hidp_session_thread+0x10/0x10 [ 1062.204313][T28073] ? __pfx_kthread+0x10/0x10 [ 1062.208926][T28073] ret_from_fork+0x4b/0x80 [ 1062.213357][T28073] ? __pfx_kthread+0x10/0x10 [ 1062.217963][T28073] ret_from_fork_asm+0x1a/0x30 [ 1062.222752][T28073] [ 1062.226100][T28073] Kernel Offset: disabled [ 1062.230433][T28073] Rebooting in 86400 seconds..