last executing test programs: 6.913776393s ago: executing program 3 (id=2572): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xf, 0x0, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) unshare(0x40600) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0xde149196fe81722b, './file0\x00'}, 0x6e) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x1000000}, 0x1e20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) close(r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x8, 0x0, 0x1, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x67, 0x0, 0x80, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x50, 0x0, 0x2, [0xffff, 0x1ff, 0x0, 0x2, 0x4, 0x80]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xff, 0x3, 0x8, [{@rand_addr=0x64010101, 0x37}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', r9, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) socket(0x2c, 0x80000, 0x8) 5.891988693s ago: executing program 3 (id=2586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x9) unshare(0x62040200) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r4, 0x1ad72f7) accept4$netrom(r4, &(0x7f0000000640)={{0x3, @bcast}, [@bcast, @remote, @rose, @netrom, @default, @rose, @remote, @default]}, 0x0, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1102}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0xba01}, 0x810) write(r5, 0x0, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006160800000000000000000791280000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$rose(0xffffffffffffffff, &(0x7f0000000380)="106d86312f2e480ee95ed3f39a10514a6c2db733aec594b909ad86bdc0652c7a484a5131bb545969a3b48cce445b7f961782a220b76b5a4a557ecfe9f38833bfe2d6f1e45db1e8b53865b1165cadfa3a110f64a3277b1550e449880c155ffd5a72ec4086a7812b315237c52eb2273fd121d550f24f335618b61b00500114c119744f84e9b71178825dbd84723e60109e1aae60c68cf60ceb0b153062a289045cfcca2fff8535c32a374b9acbe8e462ad5d19b6009d1b0cbd4df5739a4556779c918143e012701f075d9b3577b36ea41baea1dd6db65e059b87fbdbbc0c553d706beb15f594ac4cdf9e4b1cf93bb73a", 0xef, 0x40010, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, [@bcast, @bcast, @default, @default, @bcast, @default]}, 0x40) close(0x3) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, r2) 4.86577399s ago: executing program 3 (id=2594): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x4, 0x2, "86a5"}, 0xa) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r4, 0x8}, &(0x7f0000000180)=0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)="b9d91ae915f321cf918fdc43a6de6475116f417029f038", 0x17}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.812943983s ago: executing program 3 (id=2596): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xf, 0x0, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) unshare(0x40600) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0xde149196fe81722b, './file0\x00'}, 0x6e) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x1000000}, 0x1e20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) close(r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x8, 0x0, 0x1, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x67, 0x0, 0x80, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x50, 0x0, 0x2, [0xffff, 0x1ff, 0x0, 0x2, 0x4, 0x80]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xff, 0x3, 0x8, [{@rand_addr=0x64010101, 0x37}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', r9, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) socket(0x2c, 0x80000, 0x8) 3.788595561s ago: executing program 3 (id=2606): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="740d1facece9b726cc728da98913f4be71049fa0ed80f6572d423a9d5d67a5d8a2462e78b4ad68d8be87bf101ea7854313923ef08b5b9e0c2fe807892ebff2d1f37e4dc3ba691d5f4c6369b04052fc1cc4e1756c0cd54de3f175020e52eb8dfafc6760bcdbada642e99aa5d42c0974ccee48f5a7ddb9e1e05ce0af0e92248a909914ba595e9250008965519c6f998428b927fdc2bb66db0dba15f47aaa2a5094abeeee9c4eec06dc58f5c9ba78ac0d64c08985", 0xb3}, {&(0x7f00000000c0)="6e0e1e0a6663fc760007270096489bd4527c53567a5239f41ed3ba2f5ba6607ed7a652bc32f994b6bdd0e5014b06e221e1aad35039cadd1da6ce9b300d27502c1f717da225d4784bf3884f5816518fd16763e3f9804256bfc9defa93bb9b44d40adc3365d4aba253a834dbc38f8f5883e419694cc1513f5414e7a0053a97a45af8dd38736a30bcb3649e2ae20b6533bd5a53392be041802652846948a013af8b540563ecd9986131bf2c05a864f7e731dcd736b07a5aefd317b44f6197fec7edf06e8d86f68f4a0f45409f2f635714ec6b976cb22927f0e7889e54eb847f3bd9ac95e9c76700b691d40681d36eaaf2040849b7f134e4ce7465", 0xf9}, {&(0x7f00000001c0)="fb9df6eb8379dc4b52c5d76e28f3cb709e06ad9510b673115af3bb8739129413b95f3f3f1d2af17045eb96d30af52a90272ca3e3c5f7e317bb3ec71e18449a3fd2238a9b5226862937b0547996f6c28edbbd08042815e6f33f5951ca221cd4be54865fb5c4cb60433fbbbe69655fc62e1960baa3a2c6c54005b0743f8ea49b0260dbb270e1403d4b33e497b8664fa37b501f7b2315e38669e9b22e348d1b1eadd2167585ebc90e0105c4afdcdac79188f58cfd66b22178f09562ac56f03031a5495278dd88091a714dd8c294acbafa7dd94bac30c6aef64c961536d05358d2de20eeb3b3f99b7f743b57e7e2b87c1ca1af3fe95939f9f95378a753b3", 0xfc}, {&(0x7f00000002c0)="f63f7a7f40e8f9bfbaff87d05b6e62c33db9d64a9d2e6c14821f7ecf4b3a163cc1177cbf8e766c96231fec174518d3264e6d17f18f3fa78f420db5851bfbc31c2852e2937ef1800cd792666817b3c33288dc21109177aa1c50e3af5d61dd567f4897f3b7771346204c573bcf52d24a1d6a07f05bb2321821da9579b0dd3c208e21d579de924af482f8399967321073a5e60942fc931ab491771611023d860280b0a2a04c9b949385ab3d61fe21bcdd7335ff62e7dce8cfc28f435c8479bad45a4c243a610842e5864c9c38b5548accf3c034a1d55df7f255dbc28d2cd67b4dbf35157ea5a40dff21", 0xe8}], 0x4, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x851}], 0x1, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x200040c0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000700)={0x7, &(0x7f0000000600)=[{0x0, 0x0, 0x0, @remote}, {}, {}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @link_local}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000c40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000003}, 0xc, &(0x7f0000000c00)={&(0x7f0000000780)={0x44c, 0x6, 0x10, 0x70bd2b, 0x25dfdbfb, {0xd}, [@generic="e712b69e353d89bf5a4592251ec8105590a1bb8794680a13ab8756b68d2b0df3b9d997d61634cc2465985802f8aaba4ab3c57c5fd78c7b359930c94210598b9f660535653290f711d78207a20b3c9da7e8b18be902078920483ae26d5eb9668dcce061c6a4575a1732f28d1b010e6eeab7012a971e7de79e9677f5f30a74d5055285cf95876370c88cbc4a3038cd790570713a001fd715ede50659", @generic="de9a0ed3fe34c3a977675758dbdd8bb5cbeebbd56f206c66961c4b47487dee8f0298e2f74f2496059ea59f186b44a9338f9a1b2456fad7f1c17785cc69efb491294f2522b8bbd0c8de00d4e1fe6b5bfba3b917104ac4c923a77cfadf010968a2d8ed8b7128f851005f2665", @nested={0xc, 0x126, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0xc, 0x88, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x314, 0x131, 0x0, 0x1, [@generic="bb0862e62429b3ebedba9636d18e2d75c4fc27bb0d52843dadfe546240521b4c8cbf8a0a6384dde9e3a95fa83cfcba39d9e7948c040c17966d59afe0bec4cdb5f560c67df16ac177a856a9355762fcb1ae9dee3fc0785e2274cd08f49309fac9ab7df6f22ae9807cfa9333e131840b023af9e15383f4873bf63c479c368473e059fb999063a95a63a569c613796247807dbff895d7c1ff806e8cfb04d85963a6ae2fabf045087c950a2112b6", @nested={0x4, 0x8}, @nested={0x4, 0xab}, @generic="4d31e9d3c8b4b269b91ef1514b30fa550490375fdee5b9326c17176b75e835cf48f8d3be255acc1526023d155515dcb2d5d2443599320bd5d0f27f8988873d0a799bef7bed91b9d330d1f2aed2af8a108872213a2a2fe7e1648a6d75402c62316544cdaccad0d31c1c7295e2bd08", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@empty}, @generic="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", @nested={0x4, 0x141}, @typed={0xd4, 0x148, 0x0, 0x0, @binary="52021ccd96298fb5339b943b5c7dab12f0add8213991ee6b8dfe0ecfdcd0bc0ffddf7e7a1897ac877e6cdf9fe38259331563bd102fe902f82bd3f88da245c53194d378f3fc1ad9d631d5d16e0b803979e82803cecb9ce530626a3d5306d364c2c389d39358d179a77451d8a1796c86afe7162288e502a06f283bb87497db12ed5687e757089f0701dabaf341bc7e3fb1da83d7451a5b0437510792ea681ca1b64604452e3bbe5f58e1bf78d351c9860563aca1ff5387be294f884ce3f882a597f65cfe6799965e95268740993817f3e0"}, @nested={0x4, 0x125}]}, @generic="a897ee253c"]}, 0x44c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c80)) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) ppoll(&(0x7f0000000cc0), 0x0, &(0x7f0000000d40)={r5, r6+10000000}, &(0x7f0000000d80)={[0xffffffffffff0000]}, 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000dc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000e00)=0x10, 0x80800) sendto$llc(r7, &(0x7f0000000e40)="9a48c75f9f96cadbd1c1e6cbb875200425d28d05916c08860d256632832bbbd3900690c166e7177639bc8bd82346ecda61192492c325fc09d1d61ec39e410d4f080fd1a4548cd329d9f12232028db668c53d6329db7d0cccd409b9bebe110b73f7112e990fd187654deef0076a5d80e5c80dac1988333a900efbd984b609f40a601f94bf7600ff709c336eabe2ef36b12e19fbba171eefd7e1157d864c0ef2d0ae5111f83ba3a403abaa4fa221bfc1", 0xaf, 0x20000810, &(0x7f0000000f00)={0x1a, 0x4, 0x40, 0x81, 0x2b, 0x9, @multicast}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x168, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x6e, 0xac, "547ab1d01a4192dca8b45978f7b4a4cb6037f8d39d7f5fccb77b36e86397612e5bc1573c000c52de3be08af337a73a0e42c2ae13c9723bc5b854c255c92de6547821df26c0fd841232876760339e1f17934522352e9f3bb8e4330f809938761e0936b903bcf2d9e2189d"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xcd, 0xac, "16c8ac162f8caa36ee14c6f05867c306c4d608afa81af7dca483c671ff6eaf3533e4db9bf6db5dd30091a3845fe942b2c007e618f73560c377c9a4c5de1c24b7536db3b168b412aab907064bbd716b6d7dfb8221649c1cd9100cbfa5f923d2c9d3c611bf8831740311aa2d3a539cb7e52c280e3c9efe744ab40b08bed7fe154d8a7144d37e1f83b2b96ee759e8864c67d09f719eadc5e4159a5abf0acec9f2220541292b3aaad452ae5d0e0b366a643f142897986a675a318d9d46ef5d839b8600e9c6e8a808926003"}]}, 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) ioctl$FIOCLEX(r3, 0x5451) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001200)) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x890) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001380)={r3}) getsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f00000013c0), &(0x7f0000001400)=0x4) socket$nl_audit(0x10, 0x3, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000001440)={0x0, r4}, 0x8) setsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f0000001480)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) 2.685771998s ago: executing program 3 (id=2616): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xf, 0x0, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) unshare(0x40600) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0xde149196fe81722b, './file0\x00'}, 0x6e) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x1000000}, 0x1e20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) close(r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x8, 0x0, 0x1, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x67, 0x0, 0x80, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x50, 0x0, 0x2, [0xffff, 0x1ff, 0x0, 0x2, 0x4, 0x80]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xff, 0x3, 0x8, [{@rand_addr=0x64010101, 0x37}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', r9, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) socket(0x2c, 0x80000, 0x8) 1.682566655s ago: executing program 4 (id=2631): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) unshare(0x24000400) r3 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0xfc5f) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x44}}, 0x0) 1.478738668s ago: executing program 4 (id=2635): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x21, 0x400008, 0xc, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x4000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000340), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8005}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000005c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x3, 0x5, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, r2, 0x0, 0x1, &(0x7f0000000840)='\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$unix(r7, &(0x7f0000002880)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="f001000017003dcb02000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x2, 0x88) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x18, r5, 0xfaac4106a1b87a7, 0xffffffff, 0xffffffa1, {0x7}, [@HEADER={0x4}]}, 0x18}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 1.198122227s ago: executing program 0 (id=2639): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x100, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_IFALIASn={0x4}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000280)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x68, &(0x7f0000000340)=""/104, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0x20000811) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x3c, r10, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}}, 0x24000000) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000ec0)={0x28, r7, 0x1, 0x70bd24, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x115b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 1.118724325s ago: executing program 1 (id=2640): r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$qrtr(r0, &(0x7f0000000000), 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00'}) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) recvfrom(r0, &(0x7f0000001180)=""/201, 0xc9, 0x10042, 0x0, 0x0) 977.225513ms ago: executing program 2 (id=2641): socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r1 = accept(r0, &(0x7f0000000040)=@llc, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}}, 0x20}}, 0x41) syz_emit_ethernet(0xd9, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @empty, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{}, {0x1}, {0x6}, {0xb5e, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x3ff, 0x0, 0x1}], @generic="e90ea44513a026c4661de0fe824162245dba8e6e4e303e5107ac633f699440efb538d8b3fbe7db490bf92e0b176174813d3d5a37c5fc3d707b2b1d524a5d10fdcef349ebbe7bd932e02ade11228680935271363a6fb4bb132c8ee06a9097c6178b777237115e2faafa47b8f622b43374ebadc50be372f873ca90c7adf1d396993c1600b0969f9d76672b1f960443452960d8b25222627cb64d5827fcd6d5e856f9ed4c198c5c4724183a4f0070898e"}}}}, &(0x7f0000000300)={0x1, 0x1, [0x9, 0x337, 0xc9d, 0xffffff81]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20048000) (async) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20048000) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5f}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040000}, 0x4041) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r4, &(0x7f0000000680)={0x28, 0x0, 0xffffffff, @host}, 0x10) (async) connect$vsock_stream(r4, &(0x7f0000000680)={0x28, 0x0, 0xffffffff, @host}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000006c0)=""/97, &(0x7f0000000740)=0x61) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000c5}, 0x40088a1) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000c5}, 0x40088a1) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0xf14f1c26dc4dc1df, 0xf, 0x52, 0xe, 0x4, @mcast2, @local, 0x8f10, 0x20, 0x8, 0x38}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1a, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x5, 0x8d, &(0x7f0000000c40)=""/141, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xf, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[r6, r5, r4], &(0x7f0000000dc0)=[{0x4, 0x5, 0xd, 0x3}, {0x2, 0x2, 0xb, 0x8}], 0x10, 0x10001, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1a, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x5, 0x8d, &(0x7f0000000c40)=""/141, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xf, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[r6, r5, r4], &(0x7f0000000dc0)=[{0x4, 0x5, 0xd, 0x3}, {0x2, 0x2, 0xb, 0x8}], 0x10, 0x10001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x36, 0x14, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x3}}}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x36, '\x00', r9, @fallback=0x15, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80), 0x8) accept4$packet(r11, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14, 0x81000) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000001040)={0x7, {{0xa, 0x4e21, 0x6, @private0, 0x6}}}, 0x88) socket(0x8, 0x1, 0xf) r12 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r12, 0x110, 0x1, &(0x7f0000001100)=']$:^\x00', 0x5) (async) setsockopt$RXRPC_SECURITY_KEY(r12, 0x110, 0x1, &(0x7f0000001100)=']$:^\x00', 0x5) 974.235105ms ago: executing program 4 (id=2642): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000480)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x48000) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/120, 0x78}], 0x1, &(0x7f0000000640)=""/211, 0xd3}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 973.899737ms ago: executing program 1 (id=2643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f8653bf71de3e4b0db5072d47ffa1dd9c2ce6c02013a9900005580c814e9e43e9ca522ee39260256ff"], 0x18}, 0x1, 0x0, 0x0, 0x4044912}, 0x50000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0303"], 0x1c}}, 0x0) 872.244363ms ago: executing program 1 (id=2644): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={'veth0\x00', {0x2, 0x4e21, @private=0xa010101}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1fc00, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="850000005e0000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x40, 0xf880, 0x2, 0x3, {{0x9, 0x4, 0x2, 0x1e, 0x24, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @remote, {[@generic={0x83, 0xd, "7ee5ca4bf94652a7919919"}, @generic={0x7, 0x3, "05"}]}}}}}) 869.547635ms ago: executing program 4 (id=2645): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="87000000000000006111480000000000850000008b00000095000000000000008911a497f879aa69cd74ff97dd8314ae55f5316d4591fc84fed9cd082ece7b472d10c335c3b19359e9e45e90c1e7da578cd06f5c3b58eac3324efd57cc4d4da91249da7cf61538b51abf570b0600a98e3aedb37260e5e9dabd7619dc10431e2850fc4e5f50c66208815d2cf72014f20df3e20a9d0cf0bc9ff55fdf30b03aecd504b038"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback={0x16}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_deladdrlabel={0xa0, 0x49, 0x10, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x78}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008001}, 0x4004014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x9, 0x5, 0x6, 0x0, 0x4, 0x350, 0x3, 0x8, 0x0, 0x8, 0x4, 0x9}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRES8=r0, @ANYRES64=r0], 0x4c}}, 0x10000050) 869.02041ms ago: executing program 2 (id=2646): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x71, r1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 758.826505ms ago: executing program 4 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0000001e0a050100000000e1ffffff070000070900020073050000000000000900010073797a30"], 0xb0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 693.875257ms ago: executing program 2 (id=2648): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/55], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008fc4400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) 690.707991ms ago: executing program 1 (id=2649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x500}}, 0x49d32d254ae22f79}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000f00)={0x2, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x88) 646.819524ms ago: executing program 0 (id=2650): shutdown(0xffffffffffffffff, 0x1) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) unshare(0x2c060000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 645.163632ms ago: executing program 4 (id=2651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x2, 0xf000000) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0xff, 0x2, 0x0, 0xb88f}, &(0x7f0000001200)=0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0003010000000000000000017c0000040008800c00018006000600800a000008000280040015"], 0x76}, 0x1, 0x0, 0x0, 0x10}, 0xc000) listen(r0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x46, &(0x7f0000000040)=0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000100000004001f00d0460180ca465a80080015", @ANYRESOCT=r7, @ANYRES32, @ANYRES16=r6, @ANYRES64=0x0, @ANYBLOB="a964f3e3dc08000000005461", @ANYRES8=r5], 0x46e8}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1011) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="d41b00003b0007010000000000000000017c00000400fc801000018054717f8008213700", @ANYRES32, @ANYBLOB="ac1b02"], 0x1bd4}}, 0xc000) 512.452436ms ago: executing program 0 (id=2652): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=0x0, 0x13, 0x1, 0x2, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r3, 0xffffffffffffffff, 0xa, 0x0, 0x4000, @void, @value, @void, @void, r5}, 0x20) sendto$packet(r7, &(0x7f0000000200)="01efae4d84151e88859787d9a0dfad6c37ef8d14c56a79d0dc79cc97f18aa77c12fb7594dac2b934c470afb5092b2f27b997bccc93ab123fac94ffd1fbc2c917ed891712521da7de12de9282194359d13d4f6dba4bcf67e2587dbb0d79", 0x5d, 0x20004805, &(0x7f00000002c0)={0x11, 0xf6, r4, 0x1, 0x10}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x22}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 465.870518ms ago: executing program 2 (id=2653): unshare(0x22020600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x7, &(0x7f0000000000), 0xa0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000090000006a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000182b17510000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc000900b800069900000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b31627481f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xf5}, {&(0x7f00000004c0)}], 0x2, 0x0, 0x0, 0x2663}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=""/66}, 0x20) 352.8235ms ago: executing program 0 (id=2654): r0 = accept(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x484}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0c1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000001c0)="c358cc561de0deca5f2f4f51c7c521694d477bff3d537d57a2e5bc9da440ccfe603042d76f8f80c1d9ff68d6a8242e9ab4878f85bd85f00d2604384af8db183820977632f2d9de413fde1e0f86a2beaefdc06d4946ba5c897eaf5954942265d6a686f375cd") ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000240)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffd}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x786}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x801) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x4010, r0, 0x90866000) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x10) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) (async, rerun: 64) socketpair(0x18, 0x1, 0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r2, 0x301, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x19}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @NL80211_ATTR_SSID={0xc, 0x34, @random="1a2145335ba48520"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040010}, 0x30040810) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000640)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000680)=0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000006c0)={r7, @in6={{0xa, 0x4e24, 0x3, @empty, 0x7}}, 0x101, 0x81}, 0x90) (async) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x3ff, 0x54e0, 0x81, 0x0, 0xffffffffffffffff, 0x4, '\x00', r8, r9, 0x5, 0x1, 0x5, 0xc, @void, @value, @void, @value}, 0x50) (async) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000900)="f5f6bb49c7244bb83317eae389ab43074f84d001607181cf1c20e4b43b9b370df0f3d63d6b5710689ed82159812c855fd898d0cd7c6f019b25997c7f47b11a436c1aa7911c20f85974bc354a91b174d103c1e4d300e4677c5efad1bf6c9c08776e97831d4a2e0afa5b83da8ba5d46d9b6c8af303f7372e2421320f60984406759339626c33cf969bc02f8571914513469f0b10ee8fc4eba5e92e41299ca1a520908e9b5e2f6a794436a6e9932048927e76068e30f6b49bd6f86bcd611318f6db46da", 0xc2}, {&(0x7f0000000a00)="194e7e2ebbf8df3624c217f4fce5bb0d0c20e50ee902d6a66ad68db9eb2636cd649e187ac5a1ad", 0x27}, {&(0x7f0000000a40)="ade2032a9d84608e02f50b20b6342573deeba8e6b71dcdcb6a94b66ca3e244791aaff07a1e6fadff03e8525ea55cfd76b9ebbd262e035a30aba14503f5d19b5480950a151c71c6fc9688a5996acdff4dc4c587f751793b6860a9fa727866bc2b750adf68f28f32d2d81a32afa11954dcc3571638693696ca8114f34b2ab995f10e39fd044c3ea3234755a72c93406fa66bd95616ea2745ab57fb48e5ec", 0x9d}, {&(0x7f0000000b00)="9190890ea41022a3beebd8ea1417534c58ac244a3761ef1435643f3a43a14edecb38fafdac5b6527e4f1c8d1c0e568ece0f05916829ce398e8a49e5c67bba7b989420d2d70a07b", 0x47}, {&(0x7f0000000b80)="a6a0c16fe0911e77c9d0de14ec975a8c6b07340561ace688767616539958c7cb06bf0133987bf190edbbe86fb7a09fb14e2579ad22cd611d6c4772a1ac626bf9139276d160860b555b99fb4102dc22", 0x4f}, {&(0x7f0000000c00)="24102fc5d55134026f13f9cabbc6c90368e7c1a239a1e8ecba584a54fb844c2460e7488090402a8c616e2d2f8403fd7d83e6e87f216cc5292f16dbea06f00416384d5d5b2c47271898dab765e6a1f8a786c6f0a3e102103a70a44f0bc11f7700aebfc6cf7e04a924935929e0d1f078c82d9e07ddb4ab371a2bc5097c177a20237bc68c244f1990f74a1bc96b732f36ffa7e0aac64d62bb1847da65608368cb5376945303586ae35c0eb9ca07b91ab3fff5acc21c4cc3a47a60403717be00d51732078226302988b75fa3ff928089cd95a4d6ab823d7523d5a580cddd8f6db49ae04ac617f2f71e1eb29c0b8d990a7fb03891a4fd143c13526e8c", 0xfa}, {&(0x7f0000000d00)="26f1f3c89a94787b073b17a70861e8eb0b794aa18fe7bc7fc0786acfd3b1124581677679ec856f853ccb85701ae74c4a07a50359855a266b3827e1aa2e3998c33a70a15fc860032f11e7e398dd16dfd2584faa7236c31647ea6d561cf30a62072ca5ed78221a7138eb172cab37a0e59467b9e2cead0d8b9405fbfa9dcfc28989cb63f02fe9ca7ce893132aaa5e98e197", 0x90}, {&(0x7f0000000dc0)="3dd0a34f7b6652f92de1e64a7f667a60b93cd1b9ff4a670856ebfeadb62a955f94e63bbedcae81ce83536521020200a0eb8ff353add6d1498a83e3f60296eaea2f8553dad25474bf184fb834f7c0c41137f2b576ba3872cf300ba8b2cf573e75804836a6074b0ea0bb9635f3313867e76ce04b2e40226984f2ea8ac17a36c6b262a82cb2f044d7192b949fbc745712ae4f023cce45f6378ebd692c79dd4c4068aa126876ff72f8b4f427bb86fe982c1eb17c53bc43d88099835690a591d7cde673c0", 0xc2}], 0x8, &(0x7f0000000f40)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x78}}], 0x1, 0x4000880) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x98, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf0}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x74}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xcb03}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6812}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x8800}, 0x20040810) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000011c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)={r11, r4, 0x0, 0x1, &(0x7f0000001200)='\x00'}, 0x30) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000001280)={{r12}, 0x6, 0x7f, 0x7fff}) (async, rerun: 32) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000012c0), &(0x7f0000001300)=0xe) 263.361632ms ago: executing program 2 (id=2655): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x48b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) 173.735056ms ago: executing program 1 (id=2656): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x0, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x7}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x3, 0x7, 0xfffffffffffffffe}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="01000062e7c3140000f295cdcc7bb760139a3b7e003ea959604c02040000000800000000000000c493c2d13ced79647000"/59], 0x3c}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x6, 0x9, 0xf, 0x0, 0x0, 0x80, 0x0, 0xfe, 0x0, 0x0, 0xfffffffc, 0x800, 0x5, 0x0, 0x0, [0xfffffffe]}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xbe}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7696324"}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d"], 0x28}}, 0x0) 154.434359ms ago: executing program 0 (id=2657): r0 = socket$kcm(0x21, 0x2, 0x2) (async) r1 = socket(0x18, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x101}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000801) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001b80)) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x4, @loopback}}, 0x73e, 0xff0a, 0x1, 0x78, 0xb1, 0xe}, &(0x7f0000000040)=0x9c) (rerun: 64) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r10, 0xb385}, &(0x7f0000000300)=0x8) (async) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="ee8ec9b048cc", 0x6}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) 87.602439ms ago: executing program 2 (id=2658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="01002dbd7100fcdbdf25200000002c002d80050001000600000005000400000000000500040000000000050004000000000005000400000000000c00060001"], 0xa0}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000000) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000340)={'nicvf0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000008d00)={0x2, 'macvlan0\x00', 0x3}, 0x18) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) write(r7, &(0x7f0000000040)="05000000010000", 0x7) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000032890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) 1.597569ms ago: executing program 1 (id=2659): r0 = socket(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, 0x0}, 0x2b0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@local, 0x800, 0x0, 0x1, 0x1}, 0x20) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001f7c244e8927f84f2adafd5ffd82b8490000b0d9aa3d4eba47a7768b68eaa4d563864f9323a1f0c079c570bf0d18001bf5a990576d83f92acbf6e95544adef9a48be2a8b75df3935566365552ef7d2caec793b83888eee4a2ef7d374bb4c5b30063fbae26eb51066aaaab9d03fe2d44bcc97bd35563961cefac0932e1ef51a213d9dff436af03f2a1d770f4636105e943d5808e1757cd9f7b8"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) listen(r8, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 0 (id=2660): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000001080)=ANY=[@ANYBLOB="05c38c886b60aaaaaaaaaabb86dd6012000800603afffe800000000000000000fdffffffffbaff02000000000000000000000023c7ae9432cee4000001860090780000000000000000000000000009a78ce54006598080a80300370040234987aafaff05000000000000002472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac1500001fe906d26efe30cc8dc18446d0a631f4c0ef6b1b1eb52082111ee9ebac614cd7b6c36d684f79e8c9e2c94bdd651fda7816d83f5105b00"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0xd}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) close(r3) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r3, 0x0, 0x7, 0x7}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x4c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r6, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") bind$bt_hci(0xffffffffffffffff, &(0x7f0000001ac0), 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000200000004001f00d0460180ca465a800800", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYBLOB="47f88351b83c4b3e3be861567a508c013a"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): 68] lo speed is unknown, defaulting to 1000 [ 201.466679][ T9971] tipc: Can't bind to reserved service type 0 [ 201.467613][ T9968] wlan0 speed is unknown, defaulting to 1000 [ 201.546902][ T5149] Bluetooth: hci4: link tx timeout [ 201.553130][ T5149] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.133907][T10001] vlan2: entered promiscuous mode [ 202.139943][T10001] vlan2: entered allmulticast mode [ 202.596143][T10016] syzkaller0: entered promiscuous mode [ 202.601723][T10016] syzkaller0: entered allmulticast mode [ 202.738858][T10025] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.748638][ T8008] IPVS: starting estimator thread 0... [ 202.763995][T10027] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 202.781562][T10027] macsec1: entered promiscuous mode [ 202.818979][T10027] macsec1: entered allmulticast mode [ 202.824357][T10027] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 202.867334][T10028] IPVS: using max 21 ests per chain, 50400 per kthread [ 203.085005][T10037] __nla_validate_parse: 14 callbacks suppressed [ 203.085029][T10037] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1227'. [ 203.330771][T10031] netlink: 'syz.1.1224': attribute type 17 has an invalid length. [ 203.379098][ T8008] lo speed is unknown, defaulting to 1000 [ 203.433289][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 203.533103][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 203.556700][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 203.586160][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 203.598894][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1234'. [ 203.671614][T10061] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1235'. [ 203.754882][T10067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1237'. [ 203.781714][T10065] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 203.789417][T10069] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1238'. [ 203.803423][T10065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1236'. [ 203.978071][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 204.020436][T10081] sock: sock_timestamping_bind_phc: sock not bind to device [ 204.053597][T10082] lo speed is unknown, defaulting to 1000 [ 204.082345][T10082] lo speed is unknown, defaulting to 1000 [ 204.133771][T10082] wlan0 speed is unknown, defaulting to 1000 [ 204.606748][T10109] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 204.970965][T10118] lo: entered promiscuous mode [ 204.981785][T10120] veth1_macvtap: mtu less than device minimum [ 205.367972][T10133] lo speed is unknown, defaulting to 1000 [ 205.386636][T10133] lo speed is unknown, defaulting to 1000 [ 205.428087][T10133] wlan0 speed is unknown, defaulting to 1000 [ 206.742235][T10181] bond2: entered promiscuous mode [ 206.747947][T10181] bond2: entered allmulticast mode [ 206.766312][T10181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.885900][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 206.886293][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 206.893538][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 206.898085][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 207.483490][T10225] netem: change failed [ 207.777285][T10235] policy can only be matched on NF_INET_PRE_ROUTING [ 207.777311][T10235] unable to load match [ 208.542018][T10254] __nla_validate_parse: 27 callbacks suppressed [ 208.542034][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 208.560085][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 208.589520][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1296'. [ 208.902173][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 209.045115][T10278] siw: device registration error -23 [ 209.314580][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 209.561018][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 209.571073][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 209.622253][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1310'. [ 209.740808][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 209.799613][T10305] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1312'. [ 209.908741][ C0] bridge0: port 1(ip6gretap0) entered learning state [ 210.094110][T10318] lo speed is unknown, defaulting to 1000 [ 210.134159][T10318] lo speed is unknown, defaulting to 1000 [ 210.153140][T10318] wlan0 speed is unknown, defaulting to 1000 [ 210.533298][T10337] openvswitch: netlink: Message has 54 unknown bytes. [ 210.866261][T10342] lo: entered promiscuous mode [ 211.251785][T10352] lo speed is unknown, defaulting to 1000 [ 211.275994][T10359] syzkaller0: entered promiscuous mode [ 211.281887][T10359] syzkaller0: entered allmulticast mode [ 211.347001][T10352] lo speed is unknown, defaulting to 1000 [ 211.433687][T10352] wlan0 speed is unknown, defaulting to 1000 [ 211.558333][T10367] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 212.337954][T10384] lo speed is unknown, defaulting to 1000 [ 212.378890][T10390] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 212.406131][T10390] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.478749][T10384] lo speed is unknown, defaulting to 1000 [ 212.596692][T10384] wlan0 speed is unknown, defaulting to 1000 [ 212.696456][T10397] netlink: 'syz.2.1344': attribute type 10 has an invalid length. [ 212.756096][T10398] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 212.780128][T10397] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.827755][T10397] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.876521][T10397] Unsupported ieee802154 address type: 0 [ 212.907346][T10397] netlink: 'syz.2.1344': attribute type 4 has an invalid length. [ 212.934753][T10405] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 213.146979][T10410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.176233][T10410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.241341][T10384] lo speed is unknown, defaulting to 1000 [ 213.263389][T10384] lo speed is unknown, defaulting to 1000 [ 213.303227][T10384] wlan0 speed is unknown, defaulting to 1000 [ 214.138477][T10451] ax25_connect(): syz.4.1358 uses autobind, please contact jreuter@yaina.de [ 214.363420][T10458] nbd: device at index 1 is going down [ 214.525948][T10460] vlan1: entered promiscuous mode [ 214.531049][T10460] macvtap0: entered promiscuous mode [ 214.949608][T10479] __nla_validate_parse: 16 callbacks suppressed [ 214.949633][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 215.076234][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1367'. [ 215.172496][T10489] lo speed is unknown, defaulting to 1000 [ 215.185012][T10489] lo speed is unknown, defaulting to 1000 [ 215.208666][T10489] wlan0 speed is unknown, defaulting to 1000 [ 215.759661][T10514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.952753][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'. [ 215.962673][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'. [ 215.968750][ T29] audit: type=1800 audit(1738856752.748:3): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1375" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0 [ 215.993847][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 216.018762][T10528] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 216.067945][T10528] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 216.096319][T10528] veth7: entered promiscuous mode [ 216.334685][T10544] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1384'. [ 216.618012][T10559] netlink: 'syz.2.1388': attribute type 3 has an invalid length. [ 216.920194][T10574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.951321][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1392'. [ 217.030026][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 217.198661][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 217.222708][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 217.274922][T10582] dummy0: entered promiscuous mode [ 217.280841][T10582] macsec2: entered promiscuous mode [ 217.286528][T10582] macsec2: entered allmulticast mode [ 217.292058][T10582] dummy0: entered allmulticast mode [ 217.315667][T10582] dummy0: left allmulticast mode [ 217.324031][T10582] dummy0: left promiscuous mode [ 217.566110][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 217.674908][T10608] syzkaller0: entered promiscuous mode [ 217.681263][T10608] syzkaller0: entered allmulticast mode [ 217.851379][T10614] netlink: 'syz.1.1404': attribute type 6 has an invalid length. [ 217.880980][T10614] netlink: 'syz.1.1404': attribute type 5 has an invalid length. [ 218.393198][T10638] netlink: 'syz.1.1412': attribute type 11 has an invalid length. [ 218.406248][T10638] netlink: 'syz.1.1412': attribute type 5 has an invalid length. [ 218.854567][T10658] dccp_v6_rcv: dropped packet with invalid checksum [ 218.933130][T10663] syzkaller1: entered promiscuous mode [ 218.976681][T10663] syzkaller1: entered allmulticast mode [ 219.010481][T10664] lo speed is unknown, defaulting to 1000 [ 219.121092][T10664] lo speed is unknown, defaulting to 1000 [ 219.141064][T10664] wlan0 speed is unknown, defaulting to 1000 [ 219.230084][T10674] FAULT_INJECTION: forcing a failure. [ 219.230084][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 219.294027][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.2.1424 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 219.294062][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 219.294075][T10674] Call Trace: [ 219.294089][T10674] [ 219.294099][T10674] dump_stack_lvl+0x241/0x360 [ 219.294130][T10674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.294153][T10674] ? __pfx__printk+0x10/0x10 [ 219.294190][T10674] ? kmem_cache_alloc_noprof+0x48/0x380 [ 219.294215][T10674] ? __pfx___might_resched+0x10/0x10 [ 219.294246][T10674] should_fail_ex+0x40a/0x550 [ 219.294276][T10674] should_failslab+0xac/0x100 [ 219.294323][T10674] ? ptlock_alloc+0x20/0x70 [ 219.294347][T10674] kmem_cache_alloc_noprof+0x70/0x380 [ 219.294375][T10674] ptlock_alloc+0x20/0x70 [ 219.294401][T10674] pte_alloc_one+0x73/0x160 [ 219.294449][T10674] __pte_alloc+0x79/0x220 [ 219.294483][T10674] ? __pfx___pte_alloc+0x10/0x10 [ 219.294518][T10674] ? __lock_acquire+0x1397/0x2100 [ 219.294553][T10674] __handle_mm_fault+0x5ea0/0x70f0 [ 219.294577][T10674] ? mark_lock+0x9a/0x360 [ 219.294636][T10674] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.294680][T10674] ? mt_find+0x2a9/0x920 [ 219.294707][T10674] ? __pfx_lock_release+0x10/0x10 [ 219.294749][T10674] ? mt_find+0x2a9/0x920 [ 219.294777][T10674] ? mt_find+0x6c8/0x920 [ 219.294805][T10674] ? mt_find+0x2a9/0x920 [ 219.294857][T10674] ? __pfx___might_resched+0x10/0x10 [ 219.294885][T10674] handle_mm_fault+0x3e5/0x8d0 [ 219.294921][T10674] __get_user_pages+0x1a92/0x4140 [ 219.294959][T10674] ? mark_lock+0x9a/0x360 [ 219.295014][T10674] ? __pfx___get_user_pages+0x10/0x10 [ 219.295044][T10674] ? __pfx_down_read_killable+0x10/0x10 [ 219.295088][T10674] ? __lock_acquire+0x1397/0x2100 [ 219.295132][T10674] __gup_longterm_locked+0xe64/0x17f0 [ 219.295175][T10674] ? mark_lock+0x9a/0x360 [ 219.295210][T10674] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.295239][T10674] ? __pfx___gup_longterm_locked+0x10/0x10 [ 219.295268][T10674] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.295296][T10674] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 219.295327][T10674] ? gup_fast_fallback+0x207e/0x29c0 [ 219.295359][T10674] gup_fast_fallback+0x2266/0x29c0 [ 219.295420][T10674] ? __pfx_gup_fast_fallback+0x10/0x10 [ 219.295456][T10674] ? irqentry_exit+0x63/0x90 [ 219.295498][T10674] ? nh_generic+0x3a1/0xc60 [ 219.295531][T10674] ? is_valid_gup_args+0x124/0x200 [ 219.295561][T10674] pin_user_pages_fast+0xcc/0x160 [ 219.295592][T10674] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 219.295623][T10674] ? nhpoly1305_units+0x3d4/0x420 [ 219.295658][T10674] iov_iter_extract_pages+0x3bb/0x5c0 [ 219.295689][T10674] extract_iter_to_sg+0xea6/0x2650 [ 219.295736][T10674] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 219.295767][T10674] ? unpin_user_page+0xe0/0x1e0 [ 219.295791][T10674] ? __pfx_unpin_user_page+0x10/0x10 [ 219.295814][T10674] ? __local_bh_enable_ip+0x168/0x200 [ 219.295841][T10674] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 219.295863][T10674] ? do_raw_spin_unlock+0x13c/0x8b0 [ 219.295893][T10674] ? __asan_memset+0x23/0x50 [ 219.295922][T10674] hash_sendmsg+0x513/0x1110 [ 219.295970][T10674] ? __pfx_hash_sendmsg+0x10/0x10 [ 219.295993][T10674] __sock_sendmsg+0x221/0x270 [ 219.296022][T10674] ____sys_sendmsg+0x52a/0x7e0 [ 219.296064][T10674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.296103][T10674] ? __fget_files+0x2a/0x410 [ 219.296130][T10674] ? __fget_files+0x2a/0x410 [ 219.296163][T10674] __sys_sendmsg+0x269/0x350 [ 219.296201][T10674] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.296248][T10674] ? do_sys_openat2+0x17a/0x1d0 [ 219.296301][T10674] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.296332][T10674] ? do_syscall_64+0x100/0x230 [ 219.296363][T10674] ? do_syscall_64+0xb6/0x230 [ 219.296394][T10674] do_syscall_64+0xf3/0x230 [ 219.296421][T10674] ? clear_bhb_loop+0x35/0x90 [ 219.296455][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.296483][T10674] RIP: 0033:0x7f026338cde9 [ 219.296502][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.296520][T10674] RSP: 002b:00007f02642c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.296542][T10674] RAX: ffffffffffffffda RBX: 00007f02635a5fa0 RCX: 00007f026338cde9 [ 219.296557][T10674] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 219.296570][T10674] RBP: 00007f02642c9090 R08: 0000000000000000 R09: 0000000000000000 [ 219.296588][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.296600][T10674] R13: 0000000000000000 R14: 00007f02635a5fa0 R15: 00007ffd2a167aa8 [ 219.296632][T10674] [ 219.355121][T10682] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 219.393832][T10677] lo speed is unknown, defaulting to 1000 [ 219.417504][T10682] netlink: 'syz.0.1427': attribute type 4 has an invalid length. [ 219.421886][T10677] lo speed is unknown, defaulting to 1000 [ 219.795243][T10677] wlan0 speed is unknown, defaulting to 1000 [ 219.971088][T10691] team0: Device gtp0 is of different type [ 220.061331][T10696] __nla_validate_parse: 18 callbacks suppressed [ 220.061356][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1429'. [ 220.166772][T10692] lo speed is unknown, defaulting to 1000 [ 220.278588][T10694] lo speed is unknown, defaulting to 1000 [ 220.285037][T10701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.310000][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1433'. [ 220.332465][T10701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.407057][T10692] lo speed is unknown, defaulting to 1000 [ 220.431652][T10694] lo speed is unknown, defaulting to 1000 [ 220.466956][T10694] wlan0 speed is unknown, defaulting to 1000 [ 220.551810][T10692] wlan0 speed is unknown, defaulting to 1000 [ 220.767104][T10720] IPv6: addrconf: prefix option has invalid lifetime [ 220.876816][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 220.905672][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 221.069526][T10736] lo speed is unknown, defaulting to 1000 [ 221.094342][T10736] lo speed is unknown, defaulting to 1000 [ 221.313950][T10736] wlan0 speed is unknown, defaulting to 1000 [ 221.366478][T10742] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.1443'. [ 221.385790][T10742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.570633][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1446'. [ 221.655459][T10751] sock: sock_timestamping_bind_phc: sock not bind to device [ 221.657542][T10746] veth1_to_hsr: entered allmulticast mode [ 221.696550][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 221.725830][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 221.819135][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1448'. [ 221.847235][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1448'. [ 221.934501][T10745] veth1_to_hsr: left allmulticast mode [ 222.111753][T10768] netlink: 'syz.1.1451': attribute type 13 has an invalid length. [ 222.124844][T10768] netlink: 'syz.1.1451': attribute type 3 has an invalid length. [ 222.302965][T10772] syzkaller0: entered promiscuous mode [ 222.309548][T10772] syzkaller0: entered allmulticast mode [ 224.533256][T10787] bridge5: entered allmulticast mode [ 225.156656][T10832] __nla_validate_parse: 8 callbacks suppressed [ 225.156681][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 225.177660][T10831] team0: Device gtp0 is of different type [ 225.268025][ C0] bridge0: port 1(ip6gretap0) entered forwarding state [ 225.275019][ C0] bridge0: topology change detected, propagating [ 225.502111][T10832] syzkaller0: entered promiscuous mode [ 225.525913][T10832] syzkaller0: entered allmulticast mode [ 225.580317][T10855] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1474'. [ 225.635750][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 225.758977][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1475'. [ 226.576714][T10897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1482'. [ 226.825279][T10909] netlink: 'syz.1.1482': attribute type 10 has an invalid length. [ 228.411470][T10909] syz_tun: entered promiscuous mode [ 228.438401][T10909] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 228.707431][T10926] openvswitch: netlink: IP tunnel dst address not specified [ 228.985432][T10933] C: renamed from team_slave_0 [ 228.996391][T10933] netlink: 'syz.2.1489': attribute type 4 has an invalid length. [ 229.004708][T10933] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1489'. [ 229.014912][T10933] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.050483][T10941] hsr0: entered promiscuous mode [ 229.093266][T10943] hsr0: left promiscuous mode [ 229.174882][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 229.289240][T10951] Dead loop on virtual device ip6_vti0, fix it urgently! [ 229.433695][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 229.551406][T10966] siw: device registration error -23 [ 229.704125][T10970] lo: left promiscuous mode [ 229.812634][T10975] netlink: 'syz.0.1503': attribute type 39 has an invalid length. [ 229.993094][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 229.997752][T10983] netlink: 'syz.4.1505': attribute type 2 has an invalid length. [ 230.455923][T10992] FAULT_INJECTION: forcing a failure. [ 230.455923][T10992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.495587][T10992] CPU: 0 UID: 0 PID: 10992 Comm: syz.0.1510 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 230.495618][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 230.495630][T10992] Call Trace: [ 230.495638][T10992] [ 230.495647][T10992] dump_stack_lvl+0x241/0x360 [ 230.495678][T10992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.495700][T10992] ? __pfx__printk+0x10/0x10 [ 230.495745][T10992] should_fail_ex+0x40a/0x550 [ 230.495773][T10992] prepare_alloc_pages+0x1da/0x5b0 [ 230.495810][T10992] __alloc_frozen_pages_noprof+0x16f/0x710 [ 230.495842][T10992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 230.495872][T10992] ? validate_chain+0x11e/0x5920 [ 230.495899][T10992] ? __pfx_validate_chain+0x10/0x10 [ 230.495922][T10992] alloc_pages_mpol+0x311/0x660 [ 230.495963][T10992] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 230.495985][T10992] ? __pfx_validate_chain+0x10/0x10 [ 230.496007][T10992] alloc_pages_noprof+0x121/0x190 [ 230.496032][T10992] pte_alloc_one+0x24/0x160 [ 230.496063][T10992] __pte_alloc+0x79/0x220 [ 230.496107][T10992] ? __pfx___pte_alloc+0x10/0x10 [ 230.496142][T10992] ? __lock_acquire+0x1397/0x2100 [ 230.496175][T10992] __handle_mm_fault+0x5ea0/0x70f0 [ 230.496199][T10992] ? mark_lock+0x9a/0x360 [ 230.496258][T10992] ? __pfx___handle_mm_fault+0x10/0x10 [ 230.496302][T10992] ? mt_find+0x2a9/0x920 [ 230.496329][T10992] ? __pfx_lock_release+0x10/0x10 [ 230.496371][T10992] ? mt_find+0x2a9/0x920 [ 230.496398][T10992] ? mt_find+0x6c8/0x920 [ 230.496426][T10992] ? mt_find+0x2a9/0x920 [ 230.496479][T10992] ? __pfx___might_resched+0x10/0x10 [ 230.496506][T10992] handle_mm_fault+0x3e5/0x8d0 [ 230.496544][T10992] __get_user_pages+0x1a92/0x4140 [ 230.496582][T10992] ? mark_lock+0x9a/0x360 [ 230.496639][T10992] ? __pfx___get_user_pages+0x10/0x10 [ 230.496669][T10992] ? __pfx_down_read_killable+0x10/0x10 [ 230.496702][T10992] ? __lock_acquire+0x1397/0x2100 [ 230.496747][T10992] __gup_longterm_locked+0xe64/0x17f0 [ 230.496789][T10992] ? mark_lock+0x9a/0x360 [ 230.496824][T10992] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.496853][T10992] ? __pfx___gup_longterm_locked+0x10/0x10 [ 230.496883][T10992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.496910][T10992] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 230.496941][T10992] ? gup_fast_fallback+0x207e/0x29c0 [ 230.496972][T10992] gup_fast_fallback+0x2266/0x29c0 [ 230.497035][T10992] ? __pfx_gup_fast_fallback+0x10/0x10 [ 230.497070][T10992] ? irqentry_exit+0x63/0x90 [ 230.497124][T10992] ? nh_generic+0x10b/0xc60 [ 230.497158][T10992] ? is_valid_gup_args+0x124/0x200 [ 230.497190][T10992] pin_user_pages_fast+0xcc/0x160 [ 230.497222][T10992] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 230.497252][T10992] ? nhpoly1305_units+0x3d4/0x420 [ 230.497286][T10992] iov_iter_extract_pages+0x3bb/0x5c0 [ 230.497316][T10992] extract_iter_to_sg+0xea6/0x2650 [ 230.497360][T10992] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 230.497390][T10992] ? unpin_user_page+0xe0/0x1e0 [ 230.497413][T10992] ? __pfx_unpin_user_page+0x10/0x10 [ 230.497435][T10992] ? __local_bh_enable_ip+0x168/0x200 [ 230.497461][T10992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 230.497482][T10992] ? do_raw_spin_unlock+0x13c/0x8b0 [ 230.497511][T10992] ? __asan_memset+0x23/0x50 [ 230.497537][T10992] hash_sendmsg+0x513/0x1110 [ 230.497580][T10992] ? __pfx_hash_sendmsg+0x10/0x10 [ 230.497601][T10992] __sock_sendmsg+0x221/0x270 [ 230.497634][T10992] ____sys_sendmsg+0x52a/0x7e0 [ 230.497673][T10992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.497701][T10992] ? __fget_files+0x2a/0x410 [ 230.497726][T10992] ? __fget_files+0x2a/0x410 [ 230.497758][T10992] __sys_sendmsg+0x269/0x350 [ 230.497795][T10992] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.497841][T10992] ? do_sys_openat2+0x17a/0x1d0 [ 230.497891][T10992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.497922][T10992] ? do_syscall_64+0x100/0x230 [ 230.497953][T10992] ? do_syscall_64+0xb6/0x230 [ 230.497982][T10992] do_syscall_64+0xf3/0x230 [ 230.498009][T10992] ? clear_bhb_loop+0x35/0x90 [ 230.498042][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.498070][T10992] RIP: 0033:0x7fd3b4d8cde9 [ 230.498087][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.498116][T10992] RSP: 002b:00007fd3b5b7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.498139][T10992] RAX: ffffffffffffffda RBX: 00007fd3b4fa5fa0 RCX: 00007fd3b4d8cde9 [ 230.498156][T10992] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 230.498169][T10992] RBP: 00007fd3b5b7a090 R08: 0000000000000000 R09: 0000000000000000 [ 230.498182][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.498194][T10992] R13: 0000000000000000 R14: 00007fd3b4fa5fa0 R15: 00007ffd8fac2568 [ 230.498227][T10992] [ 230.540371][T11005] siw: device registration error -23 [ 231.251196][T11025] netlink: 'syz.0.1516': attribute type 21 has an invalid length. [ 231.276530][T11028] tipc: Started in network mode [ 231.276990][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 231.290744][T11028] tipc: Node identity ac1414aa, cluster identity 4711 [ 231.306875][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 231.308665][T11028] tipc: Enabled bearer , priority 10 [ 231.333188][T11025] ip6gre2: entered allmulticast mode [ 231.506051][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1520'. [ 231.584701][T11040] sch_tbf: burst 4393 is lower than device lo mtu (11337746) ! [ 231.659683][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1523'. [ 232.042201][T11061] siw: device registration error -23 [ 232.110443][T11066] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 232.122633][T11066] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1529'. [ 232.132657][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 232.187804][T11066] lo speed is unknown, defaulting to 1000 [ 232.214145][T11066] lo speed is unknown, defaulting to 1000 [ 232.229191][T11066] wlan0 speed is unknown, defaulting to 1000 [ 232.287719][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 232.427473][ T7980] tipc: Node number set to 2886997162 [ 232.553119][T11084] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 232.561236][T11084] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1537'. [ 232.571508][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'. [ 232.572370][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1537'. [ 232.660317][T11086] netlink: zone id is out of range [ 232.697537][T11086] netlink: get zone limit has 8 unknown bytes [ 232.702382][T11087] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 58131 - 0 [ 232.728410][T11087] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 58131 - 0 [ 232.779718][T11087] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 58131 - 0 [ 232.815221][T11087] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 58131 - 0 [ 232.834591][T11087] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 59184 - 0 [ 232.864281][T11087] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 59184 - 0 [ 232.897397][T11087] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 59184 - 0 [ 232.923205][T11087] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 59184 - 0 [ 232.935757][T11087] geneve3: entered promiscuous mode [ 232.942773][T11087] geneve3: entered allmulticast mode [ 232.978522][T11066] ipt_rpfilter: unknown options [ 233.167583][T11101] vlan0: entered promiscuous mode [ 233.172908][T11101] vlan0: entered allmulticast mode [ 233.205890][T11101] hsr_slave_1: entered allmulticast mode [ 233.566273][T11121] syzkaller0: entered promiscuous mode [ 233.572088][T11121] syzkaller0: entered allmulticast mode [ 233.653501][T11125] syzkaller0: entered promiscuous mode [ 233.659452][T11125] syzkaller0: entered allmulticast mode [ 234.222473][T11141] siw: device registration error -23 [ 236.357633][T11150] __nla_validate_parse: 3 callbacks suppressed [ 236.357658][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 236.404253][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 238.583689][T11143] tipc: Enabling of bearer rejected, failed to enable media [ 238.604646][T11144] lo speed is unknown, defaulting to 1000 [ 238.612897][T11144] lo speed is unknown, defaulting to 1000 [ 238.620085][T11144] wlan0 speed is unknown, defaulting to 1000 [ 238.861495][T11174] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 238.877680][T11177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1561'. [ 238.907535][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1564'. [ 239.038531][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1564'. [ 239.294662][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1564'. [ 239.330240][T11188] netlink: 'syz.3.1566': attribute type 1 has an invalid length. [ 239.562873][T11206] sctp: [Deprecated]: syz.0.1571 (pid 11206) Use of int in maxseg socket option. [ 239.562873][T11206] Use struct sctp_assoc_value instead [ 239.825403][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 239.846621][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 240.169806][T11224] openvswitch: netlink: Actions may not be safe on all matching packets [ 240.370493][T11236] netlink: 'syz.3.1582': attribute type 10 has an invalid length. [ 240.568040][T11242] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1583'. [ 240.583656][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 240.909306][T11245] lo speed is unknown, defaulting to 1000 [ 240.924413][T11245] lo speed is unknown, defaulting to 1000 [ 240.954106][T11245] wlan0 speed is unknown, defaulting to 1000 [ 240.985221][T11251] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 241.142978][T11259] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 241.542685][T11265] delete_channel: no stack [ 241.648322][T11275] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 241.666925][T11275] __nla_validate_parse: 5 callbacks suppressed [ 241.666949][T11275] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1594'. [ 241.833539][T11284] netlink: 'syz.1.1596': attribute type 5 has an invalid length. [ 241.872335][T11285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1595'. [ 241.907299][T11287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1595'. [ 241.941840][T11287] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1595'. [ 241.970195][T11287] netlink: 'syz.0.1595': attribute type 6 has an invalid length. [ 241.987078][T11282] FAULT_INJECTION: forcing a failure. [ 241.987078][T11282] name failslab, interval 1, probability 0, space 0, times 0 [ 242.005038][T11287] netlink: 'syz.0.1595': attribute type 5 has an invalid length. [ 242.015627][T11287] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1595'. [ 242.045711][T11282] CPU: 0 UID: 0 PID: 11282 Comm: syz.4.1597 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 242.045746][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 242.045759][T11282] Call Trace: [ 242.045767][T11282] [ 242.045776][T11282] dump_stack_lvl+0x241/0x360 [ 242.045808][T11282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.045831][T11282] ? __pfx__printk+0x10/0x10 [ 242.045867][T11282] ? kmem_cache_alloc_noprof+0x48/0x380 [ 242.045892][T11282] ? __pfx___might_resched+0x10/0x10 [ 242.045923][T11282] should_fail_ex+0x40a/0x550 [ 242.045952][T11282] should_failslab+0xac/0x100 [ 242.045987][T11282] ? ptlock_alloc+0x20/0x70 [ 242.046011][T11282] kmem_cache_alloc_noprof+0x70/0x380 [ 242.046039][T11282] ptlock_alloc+0x20/0x70 [ 242.046066][T11282] pte_alloc_one+0x73/0x160 [ 242.046096][T11282] __pte_alloc+0x79/0x220 [ 242.046131][T11282] ? __pfx___pte_alloc+0x10/0x10 [ 242.046169][T11282] ? __lock_acquire+0x1397/0x2100 [ 242.046204][T11282] __handle_mm_fault+0x5ea0/0x70f0 [ 242.046229][T11282] ? mark_lock+0x9a/0x360 [ 242.046288][T11282] ? __pfx___handle_mm_fault+0x10/0x10 [ 242.046332][T11282] ? mt_find+0x2a9/0x920 [ 242.046360][T11282] ? __pfx_lock_release+0x10/0x10 [ 242.046410][T11282] ? mt_find+0x2a9/0x920 [ 242.046438][T11282] ? mt_find+0x6c8/0x920 [ 242.046466][T11282] ? mt_find+0x2a9/0x920 [ 242.046518][T11282] ? __pfx___might_resched+0x10/0x10 [ 242.046547][T11282] handle_mm_fault+0x3e5/0x8d0 [ 242.046585][T11282] __get_user_pages+0x1a92/0x4140 [ 242.046624][T11282] ? mark_lock+0x9a/0x360 [ 242.046680][T11282] ? __pfx___get_user_pages+0x10/0x10 [ 242.046710][T11282] ? __pfx_down_read_killable+0x10/0x10 [ 242.046744][T11282] ? __lock_acquire+0x1397/0x2100 [ 242.046788][T11282] __gup_longterm_locked+0xe64/0x17f0 [ 242.046831][T11282] ? mark_lock+0x9a/0x360 [ 242.046865][T11282] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.046894][T11282] ? __pfx___gup_longterm_locked+0x10/0x10 [ 242.046923][T11282] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.046950][T11282] ? lockdep_hardirqs_on+0x99/0x150 [ 242.046973][T11282] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 242.047005][T11282] ? gup_fast_fallback+0x207e/0x29c0 [ 242.047036][T11282] gup_fast_fallback+0x2266/0x29c0 [ 242.047097][T11282] ? __pfx_gup_fast_fallback+0x10/0x10 [ 242.047133][T11282] ? irqentry_exit+0x63/0x90 [ 242.047178][T11282] ? nh_generic+0x1ee/0xc60 [ 242.047214][T11282] ? is_valid_gup_args+0x124/0x200 [ 242.047245][T11282] pin_user_pages_fast+0xcc/0x160 [ 242.047277][T11282] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 242.047307][T11282] ? nhpoly1305_units+0x3d4/0x420 [ 242.047343][T11282] iov_iter_extract_pages+0x3bb/0x5c0 [ 242.047381][T11282] extract_iter_to_sg+0xea6/0x2650 [ 242.047427][T11282] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 242.047458][T11282] ? unpin_user_page+0xe0/0x1e0 [ 242.047482][T11282] ? __pfx_unpin_user_page+0x10/0x10 [ 242.047505][T11282] ? __local_bh_enable_ip+0x168/0x200 [ 242.047531][T11282] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 242.047554][T11282] ? do_raw_spin_unlock+0x13c/0x8b0 [ 242.047583][T11282] ? __asan_memset+0x23/0x50 [ 242.047634][T11282] hash_sendmsg+0x513/0x1110 [ 242.047682][T11282] ? __pfx_hash_sendmsg+0x10/0x10 [ 242.047705][T11282] __sock_sendmsg+0x221/0x270 [ 242.047735][T11282] ____sys_sendmsg+0x52a/0x7e0 [ 242.047778][T11282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.047809][T11282] ? __fget_files+0x2a/0x410 [ 242.047835][T11282] ? __fget_files+0x2a/0x410 [ 242.047868][T11282] __sys_sendmsg+0x269/0x350 [ 242.047907][T11282] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.047955][T11282] ? do_sys_openat2+0x17a/0x1d0 [ 242.048008][T11282] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.048040][T11282] ? do_syscall_64+0x100/0x230 [ 242.048071][T11282] ? do_syscall_64+0xb6/0x230 [ 242.048101][T11282] do_syscall_64+0xf3/0x230 [ 242.048128][T11282] ? clear_bhb_loop+0x35/0x90 [ 242.048162][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.048190][T11282] RIP: 0033:0x7f21f158cde9 [ 242.048208][T11282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.048226][T11282] RSP: 002b:00007f21f234c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.048249][T11282] RAX: ffffffffffffffda RBX: 00007f21f17a5fa0 RCX: 00007f21f158cde9 [ 242.048264][T11282] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 242.048276][T11282] RBP: 00007f21f234c090 R08: 0000000000000000 R09: 0000000000000000 [ 242.048288][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.048300][T11282] R13: 0000000000000000 R14: 00007f21f17a5fa0 R15: 00007ffe21e07ad8 [ 242.048331][T11282] [ 242.580557][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 242.748570][T11298] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1601'. [ 242.898659][T11303] lo speed is unknown, defaulting to 1000 [ 242.907452][T11303] lo speed is unknown, defaulting to 1000 [ 242.914303][T11303] wlan0 speed is unknown, defaulting to 1000 [ 243.193749][T11313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 243.253180][T11311] netlink: 'syz.0.1605': attribute type 13 has an invalid length. [ 243.267739][T11311] lo: left promiscuous mode [ 243.380757][T11311] gretap0: refused to change device tx_queue_len [ 243.401639][T11311] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 243.438961][T11303] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 243.510032][T11311] syz.0.1605 (11311) used greatest stack depth: 18288 bytes left [ 243.797616][T11327] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1611'. [ 243.994275][T11324] FAULT_INJECTION: forcing a failure. [ 243.994275][T11324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.056374][T11324] CPU: 1 UID: 0 PID: 11324 Comm: syz.0.1610 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 244.056409][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.056422][T11324] Call Trace: [ 244.056429][T11324] [ 244.056439][T11324] dump_stack_lvl+0x241/0x360 [ 244.056469][T11324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.056492][T11324] ? __pfx__printk+0x10/0x10 [ 244.056531][T11324] ? snprintf+0xda/0x120 [ 244.056555][T11324] should_fail_ex+0x40a/0x550 [ 244.056584][T11324] _copy_to_user+0x31/0xb0 [ 244.056607][T11324] simple_read_from_buffer+0xca/0x150 [ 244.056644][T11324] proc_fail_nth_read+0x1e9/0x250 [ 244.056680][T11324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.056716][T11324] ? rw_verify_area+0x243/0x630 [ 244.056742][T11324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.056776][T11324] vfs_read+0x1f8/0xb40 [ 244.056804][T11324] ? fdget_pos+0x254/0x320 [ 244.056827][T11324] ? __pfx___mutex_lock+0x10/0x10 [ 244.056855][T11324] ? __pfx_vfs_read+0x10/0x10 [ 244.056885][T11324] ? __fget_files+0x2a/0x410 [ 244.056909][T11324] ? __fget_files+0x395/0x410 [ 244.056929][T11324] ? __fget_files+0x2a/0x410 [ 244.056961][T11324] ksys_read+0x18f/0x2b0 [ 244.056991][T11324] ? __pfx_ksys_read+0x10/0x10 [ 244.057018][T11324] ? do_syscall_64+0x100/0x230 [ 244.057049][T11324] ? do_syscall_64+0xb6/0x230 [ 244.057078][T11324] do_syscall_64+0xf3/0x230 [ 244.057105][T11324] ? clear_bhb_loop+0x35/0x90 [ 244.057138][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.057164][T11324] RIP: 0033:0x7fd3b4d8b7fc [ 244.057183][T11324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.057200][T11324] RSP: 002b:00007fd3b5b7a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.057221][T11324] RAX: ffffffffffffffda RBX: 00007fd3b4fa5fa0 RCX: 00007fd3b4d8b7fc [ 244.057234][T11324] RDX: 000000000000000f RSI: 00007fd3b5b7a0a0 RDI: 0000000000000005 [ 244.057246][T11324] RBP: 00007fd3b5b7a090 R08: 0000000000000000 R09: 0000000000000000 [ 244.057266][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.057278][T11324] R13: 0000000000000000 R14: 00007fd3b4fa5fa0 R15: 00007ffd8fac2568 [ 244.057309][T11324] [ 244.397695][T11334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'. [ 244.551056][T11345] FAULT_INJECTION: forcing a failure. [ 244.551056][T11345] name failslab, interval 1, probability 0, space 0, times 0 [ 244.564630][T11345] CPU: 0 UID: 0 PID: 11345 Comm: syz.4.1614 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 244.564659][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.564671][T11345] Call Trace: [ 244.564678][T11345] [ 244.564687][T11345] dump_stack_lvl+0x241/0x360 [ 244.564716][T11345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.564739][T11345] ? __pfx__printk+0x10/0x10 [ 244.564774][T11345] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 244.564797][T11345] ? __pfx___might_resched+0x10/0x10 [ 244.564826][T11345] should_fail_ex+0x40a/0x550 [ 244.564855][T11345] should_failslab+0xac/0x100 [ 244.564889][T11345] __kmalloc_node_noprof+0xe1/0x4d0 [ 244.564909][T11345] ? __kvmalloc_node_noprof+0x72/0x190 [ 244.564941][T11345] __kvmalloc_node_noprof+0x72/0x190 [ 244.564967][T11345] alloc_netdev_mqs+0xc92/0x1110 [ 244.565005][T11345] rtnl_create_link+0x2f9/0xc20 [ 244.565036][T11345] rtnl_newlink_create+0x210/0xa40 [ 244.565063][T11345] ? __pfx___mutex_lock+0x10/0x10 [ 244.565085][T11345] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 244.565111][T11345] ? ns_capable+0x8a/0xf0 [ 244.565133][T11345] rtnl_newlink+0x1c7e/0x2210 [ 244.565165][T11345] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.565183][T11345] ? __pfx_validate_chain+0x10/0x10 [ 244.565217][T11345] ? validate_chain+0x11e/0x5920 [ 244.565234][T11345] ? __pfx_lock_acquire+0x10/0x10 [ 244.565259][T11345] ? __pfx_lock_release+0x10/0x10 [ 244.565284][T11345] ? __pfx_validate_chain+0x10/0x10 [ 244.565302][T11345] ? mark_lock+0x9a/0x360 [ 244.565329][T11345] ? __lock_acquire+0x1397/0x2100 [ 244.565379][T11345] ? __pfx_lock_release+0x10/0x10 [ 244.565414][T11345] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.565435][T11345] rtnetlink_rcv_msg+0x791/0xcf0 [ 244.565455][T11345] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 244.565474][T11345] ? __lock_acquire+0x1397/0x2100 [ 244.565498][T11345] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.565531][T11345] netlink_rcv_skb+0x1e3/0x430 [ 244.565557][T11345] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.565577][T11345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.565622][T11345] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.565649][T11345] netlink_unicast+0x7f6/0x990 [ 244.565679][T11345] ? __pfx_netlink_unicast+0x10/0x10 [ 244.565700][T11345] ? __virt_addr_valid+0x45f/0x530 [ 244.565726][T11345] ? __phys_addr_symbol+0x2f/0x70 [ 244.565751][T11345] ? __check_object_size+0x47a/0x730 [ 244.565784][T11345] netlink_sendmsg+0x8e4/0xcb0 [ 244.565820][T11345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.565850][T11345] ? aa_sock_msg_perm+0x91/0x160 [ 244.565878][T11345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.565902][T11345] __sock_sendmsg+0x221/0x270 [ 244.565926][T11345] ____sys_sendmsg+0x52a/0x7e0 [ 244.565960][T11345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.566026][T11345] __sys_sendmsg+0x269/0x350 [ 244.566057][T11345] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.566094][T11345] ? __pfx_vfs_write+0x10/0x10 [ 244.566115][T11345] ? do_sys_openat2+0x17a/0x1d0 [ 244.566159][T11345] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.566185][T11345] ? do_syscall_64+0x100/0x230 [ 244.566211][T11345] ? do_syscall_64+0xb6/0x230 [ 244.566237][T11345] do_syscall_64+0xf3/0x230 [ 244.566260][T11345] ? clear_bhb_loop+0x35/0x90 [ 244.566289][T11345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.566313][T11345] RIP: 0033:0x7f21f158cde9 [ 244.566331][T11345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.566346][T11345] RSP: 002b:00007f21f232b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.566366][T11345] RAX: ffffffffffffffda RBX: 00007f21f17a6080 RCX: 00007f21f158cde9 [ 244.566379][T11345] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000012 [ 244.566390][T11345] RBP: 00007f21f232b090 R08: 0000000000000000 R09: 0000000000000000 [ 244.566401][T11345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.566411][T11345] R13: 0000000000000000 R14: 00007f21f17a6080 R15: 00007ffe21e07ad8 [ 244.566438][T11345] [ 245.597473][T11372] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 245.809322][T11391] syzkaller0: entered promiscuous mode [ 245.814881][T11391] syzkaller0: entered allmulticast mode [ 245.821867][T11393] FAULT_INJECTION: forcing a failure. [ 245.821867][T11393] name failslab, interval 1, probability 0, space 0, times 0 [ 245.839630][T11393] CPU: 1 UID: 0 PID: 11393 Comm: syz.3.1631 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 245.839657][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 245.839667][T11393] Call Trace: [ 245.839674][T11393] [ 245.839682][T11393] dump_stack_lvl+0x241/0x360 [ 245.839709][T11393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.839727][T11393] ? __pfx__printk+0x10/0x10 [ 245.839757][T11393] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 245.839778][T11393] ? __pfx___might_resched+0x10/0x10 [ 245.839806][T11393] should_fail_ex+0x40a/0x550 [ 245.839830][T11393] should_failslab+0xac/0x100 [ 245.839858][T11393] __kmalloc_node_noprof+0xe1/0x4d0 [ 245.839876][T11393] ? __kvmalloc_node_noprof+0x72/0x190 [ 245.839903][T11393] __kvmalloc_node_noprof+0x72/0x190 [ 245.839927][T11393] alloc_netdev_mqs+0xc92/0x1110 [ 245.839953][T11393] rtnl_create_link+0x2f9/0xc20 [ 245.839987][T11393] rtnl_newlink_create+0x210/0xa40 [ 245.840016][T11393] ? __pfx___mutex_lock+0x10/0x10 [ 245.840048][T11393] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 245.840077][T11393] ? ns_capable+0x8a/0xf0 [ 245.840100][T11393] rtnl_newlink+0x1c7e/0x2210 [ 245.840134][T11393] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.840153][T11393] ? __netlink_deliver_tap+0x56b/0x7f0 [ 245.840184][T11393] ? __pfx_validate_chain+0x10/0x10 [ 245.840201][T11393] ? __sock_sendmsg+0x221/0x270 [ 245.840222][T11393] ? ____sys_sendmsg+0x52a/0x7e0 [ 245.840250][T11393] ? __sys_sendmsg+0x269/0x350 [ 245.840278][T11393] ? do_syscall_64+0xf3/0x230 [ 245.840302][T11393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.840353][T11393] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.840386][T11393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.840422][T11393] ? mark_lock+0x9a/0x360 [ 245.840455][T11393] ? __lock_acquire+0x1397/0x2100 [ 245.840513][T11393] ? __pfx_lock_release+0x10/0x10 [ 245.840556][T11393] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.840582][T11393] rtnetlink_rcv_msg+0x791/0xcf0 [ 245.840604][T11393] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 245.840630][T11393] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.840659][T11393] ? ref_tracker_free+0x643/0x7e0 [ 245.840691][T11393] netlink_rcv_skb+0x1e3/0x430 [ 245.840720][T11393] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.840744][T11393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.840790][T11393] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.840818][T11393] netlink_unicast+0x7f6/0x990 [ 245.840853][T11393] ? __pfx_netlink_unicast+0x10/0x10 [ 245.840877][T11393] ? __virt_addr_valid+0x45f/0x530 [ 245.840907][T11393] ? __phys_addr_symbol+0x2f/0x70 [ 245.840935][T11393] ? __check_object_size+0x47a/0x730 [ 245.840972][T11393] netlink_sendmsg+0x8e4/0xcb0 [ 245.841012][T11393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.841057][T11393] ? aa_sock_msg_perm+0x91/0x160 [ 245.841090][T11393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.841118][T11393] __sock_sendmsg+0x221/0x270 [ 245.841145][T11393] ____sys_sendmsg+0x52a/0x7e0 [ 245.841185][T11393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.841232][T11393] __sys_sendmsg+0x269/0x350 [ 245.841267][T11393] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.841309][T11393] ? __pfx_vfs_write+0x10/0x10 [ 245.841332][T11393] ? do_sys_openat2+0x17a/0x1d0 [ 245.841383][T11393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.841414][T11393] ? do_syscall_64+0x100/0x230 [ 245.841443][T11393] ? do_syscall_64+0xb6/0x230 [ 245.841472][T11393] do_syscall_64+0xf3/0x230 [ 245.841498][T11393] ? clear_bhb_loop+0x35/0x90 [ 245.841529][T11393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.841555][T11393] RIP: 0033:0x7fc71098cde9 [ 245.841574][T11393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.841592][T11393] RSP: 002b:00007fc7118ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.841614][T11393] RAX: ffffffffffffffda RBX: 00007fc710ba5fa0 RCX: 00007fc71098cde9 [ 245.841627][T11393] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000011 [ 245.841639][T11393] RBP: 00007fc7118ca090 R08: 0000000000000000 R09: 0000000000000000 [ 245.841650][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.841662][T11393] R13: 0000000000000000 R14: 00007fc710ba5fa0 R15: 00007fffe2d84dd8 [ 245.841692][T11393] [ 247.065196][T11428] __nla_validate_parse: 10 callbacks suppressed [ 247.065221][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 247.507723][ T5853] Bluetooth: hci0: command 0x0401 tx timeout [ 248.763459][T11414] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1637'. [ 248.779825][T11419] netlink: 'syz.0.1639': attribute type 21 has an invalid length. [ 249.256739][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1647'. [ 249.514044][T11476] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1651'. [ 249.579735][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1652'. [ 249.759998][T11490] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1655'. [ 249.781609][T11483] syzkaller0: entered promiscuous mode [ 249.807734][T11483] syzkaller0: entered allmulticast mode [ 249.814656][T11487] netlink: 'syz.1.1654': attribute type 21 has an invalid length. [ 250.026379][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 250.044385][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'. [ 250.256025][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1661'. [ 252.393149][T11521] macsec1: entered promiscuous mode [ 252.432330][T11521] dummy0: entered promiscuous mode [ 252.441835][T11526] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1665'. [ 252.461357][T11521] macsec1: entered allmulticast mode [ 252.495144][T11521] dummy0: entered allmulticast mode [ 252.517417][T11521] dummy0: left allmulticast mode [ 252.522550][T11521] dummy0: left promiscuous mode [ 252.796660][T11550] netlink: 'syz.1.1670': attribute type 21 has an invalid length. [ 253.096498][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 253.318290][T11578] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 253.337865][T11577] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 253.506241][T11589] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1680'. [ 253.593051][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1681'. [ 253.626157][T11595] siw: device registration error -23 [ 253.916513][T11612] netlink: 'syz.0.1687': attribute type 21 has an invalid length. [ 253.936141][T11609] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1686'. [ 253.950814][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 254.039087][T11616] vlan2: entered promiscuous mode [ 254.259362][T11628] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1692'. [ 254.276159][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 254.291500][T11630] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1694'. [ 254.325739][ T29] audit: type=1107 audit(1738856791.098:4): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.403431][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1697'. [ 254.678759][T11644] netlink: 'syz.0.1700': attribute type 21 has an invalid length. [ 254.760556][T11651] syz.4.1702 uses old SIOCAX25GETINFO [ 254.929969][T11663] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 254.951489][T11663] team0: left promiscuous mode [ 254.959444][T11663] team_slave_0: left promiscuous mode [ 254.965184][T11663] team_slave_1: left promiscuous mode [ 254.991206][T11663] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.007552][T11663] bond0: (slave team0): Enslaving as an active interface with an up link [ 255.131626][T11672] siw: device registration error -23 [ 255.610396][T11695] netlink: 'syz.0.1716': attribute type 21 has an invalid length. [ 255.967287][T11706] siw: device registration error -23 [ 256.117119][T11705] syzkaller0: entered promiscuous mode [ 256.122856][T11705] syzkaller0: entered allmulticast mode [ 256.168731][T11712] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 256.510405][T11721] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 259.046064][T11738] siw: device registration error -23 [ 259.046906][T11739] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 259.080823][T11739] __nla_validate_parse: 7 callbacks suppressed [ 259.080846][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 259.214251][T11747] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 259.252739][T11747] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 259.367385][T11747] bond1: entered promiscuous mode [ 259.373112][T11747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.413217][T11752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.421152][T11752] bond1: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 259.448882][T11752] bond1: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 259.466296][T11752] bond1: (slave ip6gre3): making interface the new active one [ 259.474303][T11752] ip6gre3: entered promiscuous mode [ 259.483111][T11752] bond1: (slave ip6gre3): Enslaving as an active interface with an up link [ 259.493323][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 259.508324][T11759] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1728'. [ 259.545947][T11758] bridge0: entered promiscuous mode [ 259.620568][T11751] lo speed is unknown, defaulting to 1000 [ 259.632362][T11751] lo speed is unknown, defaulting to 1000 [ 259.721246][T11763] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58131 - 0 [ 259.739888][T11763] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 59184 - 0 [ 259.773367][T11751] wlan0 speed is unknown, defaulting to 1000 [ 259.779842][T11753] bridge0: left promiscuous mode [ 259.853802][T11763] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58131 - 0 [ 259.864397][T11763] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 59184 - 0 [ 259.954870][T11770] netlink: 'syz.0.1739': attribute type 2 has an invalid length. [ 259.977223][T11770] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1739'. [ 259.996389][T11763] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58131 - 0 [ 260.007071][T11763] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 59184 - 0 [ 260.075250][T11763] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58131 - 0 [ 260.107193][T11763] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 59184 - 0 [ 260.195992][T11763] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 59184 - 0 [ 260.215313][T11763] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 58131 - 0 [ 260.259098][T11763] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 59184 - 0 [ 260.267900][T11763] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 58131 - 0 [ 260.284979][T11763] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 59184 - 0 [ 260.325018][T11763] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 58131 - 0 [ 260.402626][T11763] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 59184 - 0 [ 260.433366][T11763] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 58131 - 0 [ 260.453827][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 260.486011][T11785] siw: device registration error -23 [ 260.567026][T11784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 260.605855][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 260.672094][T11784] geneve0: entered promiscuous mode [ 260.709812][T11784] geneve0: left promiscuous mode [ 260.816969][T11791] tipc: Started in network mode [ 260.836091][T11791] tipc: Node identity , cluster identity 4711 [ 260.854846][T11791] tipc: Failed to set node id, please configure manually [ 260.880559][T11791] tipc: Enabling of bearer rejected, failed to enable media [ 261.343118][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'. [ 261.423443][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 261.445944][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 261.512218][T11818] siw: device registration error -23 [ 261.685906][T11829] netlink: 'syz.2.1761': attribute type 2 has an invalid length. [ 261.693927][T11829] netlink: 'syz.2.1761': attribute type 9 has an invalid length. [ 262.037427][T11840] netpci0: tun_chr_ioctl cmd 1074025677 [ 262.043243][T11840] netpci0: linktype set to 773 [ 262.488471][T11861] siw: device registration error -23 [ 262.666000][T11868] netlink: 'syz.2.1773': attribute type 5 has an invalid length. [ 262.985369][T11882] netlink: 'syz.4.1777': attribute type 5 has an invalid length. [ 263.533477][T11901] lo speed is unknown, defaulting to 1000 [ 263.575016][T11901] lo speed is unknown, defaulting to 1000 [ 263.580063][T11911] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 263.609525][T11901] wlan0 speed is unknown, defaulting to 1000 [ 263.637716][T11912] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.646695][T11912] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.654936][T11912] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.663448][T11912] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.742923][T11917] openvswitch: netlink: Message has 8 unknown bytes. [ 264.050160][T11927] netlink: 'syz.0.1790': attribute type 21 has an invalid length. [ 264.073705][T11932] bridge0: entered promiscuous mode [ 264.095087][T11932] bridge0: left promiscuous mode [ 264.387087][T11946] siw: device registration error -23 [ 264.413453][T11946] FAULT_INJECTION: forcing a failure. [ 264.413453][T11946] name failslab, interval 1, probability 0, space 0, times 0 [ 264.442741][T11946] CPU: 1 UID: 0 PID: 11946 Comm: syz.4.1796 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 264.442772][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 264.442784][T11946] Call Trace: [ 264.442791][T11946] [ 264.442799][T11946] dump_stack_lvl+0x241/0x360 [ 264.442827][T11946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.442847][T11946] ? __pfx__printk+0x10/0x10 [ 264.442877][T11946] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 264.442900][T11946] ? __pfx___might_resched+0x10/0x10 [ 264.442919][T11946] ? aa_label_sk_perm+0x4f3/0x6c0 [ 264.442945][T11946] should_fail_ex+0x40a/0x550 [ 264.442969][T11946] should_failslab+0xac/0x100 [ 264.442999][T11946] kmem_cache_alloc_node_noprof+0x77/0x380 [ 264.443018][T11946] ? __alloc_skb+0x1c3/0x440 [ 264.443048][T11946] __alloc_skb+0x1c3/0x440 [ 264.443080][T11946] ? __pfx___alloc_skb+0x10/0x10 [ 264.443115][T11946] netlink_sendmsg+0x638/0xcb0 [ 264.443155][T11946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.443198][T11946] ? aa_sock_msg_perm+0x91/0x160 [ 264.443227][T11946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.443253][T11946] __sock_sendmsg+0x221/0x270 [ 264.443278][T11946] ____sys_sendmsg+0x52a/0x7e0 [ 264.443313][T11946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.443339][T11946] ? __fget_files+0x2a/0x410 [ 264.443361][T11946] ? __fget_files+0x2a/0x410 [ 264.443388][T11946] __sys_sendmsg+0x269/0x350 [ 264.443420][T11946] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.443460][T11946] ? do_sys_openat2+0x17a/0x1d0 [ 264.443505][T11946] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.443534][T11946] ? do_syscall_64+0x100/0x230 [ 264.443562][T11946] ? do_syscall_64+0xb6/0x230 [ 264.443587][T11946] do_syscall_64+0xf3/0x230 [ 264.443611][T11946] ? clear_bhb_loop+0x35/0x90 [ 264.443641][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.443665][T11946] RIP: 0033:0x7f21f158cde9 [ 264.443683][T11946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.443698][T11946] RSP: 002b:00007f21f234c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.443719][T11946] RAX: ffffffffffffffda RBX: 00007f21f17a5fa0 RCX: 00007f21f158cde9 [ 264.443733][T11946] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 264.443744][T11946] RBP: 00007f21f234c090 R08: 0000000000000000 R09: 0000000000000000 [ 264.443756][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.443767][T11946] R13: 0000000000000000 R14: 00007f21f17a5fa0 R15: 00007ffe21e07ad8 [ 264.443794][T11946] [ 264.784761][T11944] tipc: Enabling of bearer rejected, failed to enable media [ 264.852844][T11959] __nla_validate_parse: 13 callbacks suppressed [ 264.852867][T11959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1799'. [ 264.949994][T11965] netlink: 'syz.4.1802': attribute type 1 has an invalid length. [ 264.958285][T11965] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1802'. [ 264.975126][T11965] pim6reg: entered allmulticast mode [ 264.982320][T11965] pim6reg: left allmulticast mode [ 265.033633][T11964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1799'. [ 265.066991][T11959] macvlan0: entered promiscuous mode [ 265.088265][T11959] macvlan0: left promiscuous mode [ 265.105301][T11970] (unnamed net_device) (uninitialized): (slave team0): Device is not our slave [ 265.121737][T11970] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 265.505813][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1808'. [ 265.527695][T11991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.660840][T11997] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 265.688005][T11997] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 265.751390][T11997] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 265.761875][T11997] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 265.832480][T11997] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 265.845931][T11997] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 265.943680][T11997] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 265.985740][T11997] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 266.064935][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1815'. [ 266.137119][T11997] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 59184 - 0 [ 266.146145][T11997] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 58131 - 0 [ 266.188620][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 266.197532][T11997] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 59184 - 0 [ 266.197633][T11997] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 58131 - 0 [ 266.215435][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 266.226525][T11997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 59184 - 0 [ 266.234880][T11997] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 58131 - 0 [ 266.300287][T11997] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 59184 - 0 [ 266.316232][T11997] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 58131 - 0 [ 266.345978][T12022] delete_channel: no stack [ 266.362461][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 266.380931][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 266.492261][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 266.519249][T12027] vlan2: entered allmulticast mode [ 266.525659][T12027] xfrm0: entered allmulticast mode [ 266.804905][T12039] bridge6: entered promiscuous mode [ 266.818901][T12039] bridge6: entered allmulticast mode [ 266.857240][T12041] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 266.866872][T12039] team0: Port device bridge6 added [ 266.940049][T12039] bridge0: port 3(ip6gretap0) entered blocking state [ 266.947165][T12039] bridge0: port 3(ip6gretap0) entered disabled state [ 266.954267][T12039] ip6gretap0: entered allmulticast mode [ 266.971815][T12039] ip6gretap0: entered promiscuous mode [ 267.034503][T12047] siw: device registration error -23 [ 267.287415][T12061] openvswitch: netlink: Duplicate key (type 32). [ 267.438862][T12069] IPv6: sit3: Disabled Multicast RS [ 267.452289][T12069] sit3: entered allmulticast mode [ 268.077425][T12091] lo speed is unknown, defaulting to 1000 [ 268.112912][T12091] lo speed is unknown, defaulting to 1000 [ 268.155013][T12091] wlan0 speed is unknown, defaulting to 1000 [ 268.454320][T12109] netlink: 'syz.1.1849': attribute type 21 has an invalid length. [ 268.683672][T12111] rose0: entered allmulticast mode [ 268.820236][ T5889] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 268.922632][T12117] netlink: 'syz.3.1853': attribute type 13 has an invalid length. [ 269.126437][T12117] gretap0: refused to change device tx_queue_len [ 269.153962][T12117] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 269.416894][T12124] xt_CT: No such helper "snmp" [ 269.417656][T12134] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 269.754330][T12140] lo speed is unknown, defaulting to 1000 [ 269.775273][T12140] lo speed is unknown, defaulting to 1000 [ 269.816891][T12140] wlan0 speed is unknown, defaulting to 1000 [ 270.206841][T12154] __nla_validate_parse: 3 callbacks suppressed [ 270.206865][T12154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1863'. [ 270.489195][T12121] Can't find ip_set type hast,ip [ 270.536800][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 270.782475][T12176] x_tables: unsorted underflow at hook 4 [ 270.852009][T12044] Set syz1 is full, maxelem 65536 reached [ 271.241191][T12200] tipc: Started in network mode [ 271.252771][T12200] tipc: Node identity 262e545bafd1, cluster identity 4711 [ 271.262683][T12200] tipc: Enabled bearer , priority 0 [ 271.271724][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 271.284952][T12199] tipc: Disabling bearer [ 271.631011][T12218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1882'. [ 272.039827][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 272.139164][T12219] bridge0: port 1(ip6gretap0) entered disabled state [ 272.757640][T12219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.813256][T12219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.206197][T12219] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.214641][T12219] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.231853][T12219] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.241004][T12219] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.335168][T12219] vlan0: left promiscuous mode [ 273.511138][T12219] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 273.569552][T12218] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.580151][T12218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.668384][ T7980] lo speed is unknown, defaulting to 1000 [ 273.771927][T12241] gtp0: entered promiscuous mode [ 273.786651][T12241] gtp0: entered allmulticast mode [ 274.302186][T12274] siw: device registration error -23 [ 274.490882][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1900'. [ 274.633238][T12291] x_tables: duplicate underflow at hook 3 [ 274.712039][T12293] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1903'. [ 274.788547][T12295] siw: device registration error -23 [ 275.037232][T12307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 275.165970][T12316] netlink: 'syz.4.1911': attribute type 5 has an invalid length. [ 275.208439][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 275.247722][T12316] siw: device registration error -23 [ 275.288091][T12322] ipt_REJECT: TCP_RESET invalid for non-tcp [ 275.311287][T12324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 275.441358][T12331] lo speed is unknown, defaulting to 1000 [ 275.452508][T12331] lo speed is unknown, defaulting to 1000 [ 275.460883][T12331] wlan0 speed is unknown, defaulting to 1000 [ 275.577547][T12340] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 275.651434][T12342] siw: device registration error -23 [ 275.755102][T12351] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 275.775928][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1922'. [ 276.503946][T12335] macvlan2: left promiscuous mode [ 276.514628][T12335] bridge0: left promiscuous mode [ 276.519934][T12335] bridge0: left allmulticast mode [ 276.526758][T12335] macsec1: left promiscuous mode [ 276.531763][T12335] macsec1: left allmulticast mode [ 276.537968][T12335] bridge5: left allmulticast mode [ 276.544294][T12335] gtp0: left promiscuous mode [ 276.552571][T12335] gtp0: left allmulticast mode [ 276.573531][ T5942] lo speed is unknown, defaulting to 1000 [ 276.579733][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 276.778356][T12370] siw: device registration error -23 [ 276.810711][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1927'. [ 276.976828][T12373] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 277.225251][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1932'. [ 277.416574][T12398] bridge8: entered promiscuous mode [ 277.451732][T12398] bridge8: entered allmulticast mode [ 277.465691][T12398] team0: Port device bridge8 added [ 277.743439][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 278.237698][T12444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1948'. [ 278.541208][T12453] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 278.555191][T12453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1953'. [ 278.786029][T12462] siw: device registration error -23 [ 279.068270][T12471] lo speed is unknown, defaulting to 1000 [ 279.194560][T12471] lo speed is unknown, defaulting to 1000 [ 279.209066][T12471] wlan0 speed is unknown, defaulting to 1000 [ 279.224782][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 279.271922][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'. [ 280.417086][T12512] siw: device registration error -23 [ 280.639073][T12522] __nla_validate_parse: 1 callbacks suppressed [ 280.639098][T12522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1975'. [ 280.660190][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 280.669874][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1975'. [ 280.696085][T12520] lo speed is unknown, defaulting to 1000 [ 280.728035][T12520] lo speed is unknown, defaulting to 1000 [ 280.769406][T12520] wlan0 speed is unknown, defaulting to 1000 [ 280.944871][T12535] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1980'. [ 280.975414][T12535] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.027939][T12537] IPVS: length: 156 != 8 [ 281.172767][T12543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1984'. [ 281.442828][T12549] siw: device registration error -23 [ 281.519487][T12564] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 281.678209][T12570] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 281.739303][T12570] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 281.861812][T12570] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 281.878347][T12570] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 281.931592][T12576] lo speed is unknown, defaulting to 1000 [ 281.979290][T12570] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 281.997875][T12570] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 282.060380][T12576] lo speed is unknown, defaulting to 1000 [ 282.087813][T12570] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 59184 - 0 [ 282.115791][T12570] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 58131 - 0 [ 282.140572][T12576] wlan0 speed is unknown, defaulting to 1000 [ 282.304440][T12570] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 59184 - 0 [ 282.340406][T12570] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 58131 - 0 [ 282.423930][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1996'. [ 282.488359][T12570] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 59184 - 0 [ 282.505814][T12570] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 58131 - 0 [ 282.541384][T12600] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 282.560135][T12570] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 59184 - 0 [ 282.569607][T12570] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 58131 - 0 [ 282.732586][T12570] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 59184 - 0 [ 282.741116][T12610] ax25_connect(): syz.3.1999 uses autobind, please contact jreuter@yaina.de [ 282.754137][T12570] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 58131 - 0 [ 283.014584][T12618] netlink: 'syz.0.2002': attribute type 10 has an invalid length. [ 283.112228][T12622] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2001'. [ 283.240507][T12618] team0: Device ipvlan1 failed to register rx_handler [ 283.681462][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2009'. [ 283.748797][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 283.782292][T12645] netlink: 392 bytes leftover after parsing attributes in process `syz.4.2011'. [ 284.118734][T12654] gre0: entered promiscuous mode [ 285.118069][T12693] FAULT_INJECTION: forcing a failure. [ 285.118069][T12693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.148376][T12697] siw: device registration error -23 [ 285.166809][T12696] macsec1: entered promiscuous mode [ 285.173516][T12696] dummy0: entered promiscuous mode [ 285.183826][T12696] macsec1: entered allmulticast mode [ 285.191060][T12696] dummy0: entered allmulticast mode [ 285.200111][T12693] CPU: 1 UID: 0 PID: 12693 Comm: syz.1.2027 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 285.200142][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 285.200156][T12693] Call Trace: [ 285.200164][T12693] [ 285.200173][T12693] dump_stack_lvl+0x241/0x360 [ 285.200204][T12693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.200227][T12693] ? __pfx__printk+0x10/0x10 [ 285.200267][T12693] ? snprintf+0xda/0x120 [ 285.200291][T12693] should_fail_ex+0x40a/0x550 [ 285.200319][T12693] _copy_to_user+0x31/0xb0 [ 285.200342][T12693] simple_read_from_buffer+0xca/0x150 [ 285.200386][T12693] proc_fail_nth_read+0x1e9/0x250 [ 285.200423][T12693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.200460][T12693] ? rw_verify_area+0x243/0x630 [ 285.200487][T12693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.200521][T12693] vfs_read+0x1f8/0xb40 [ 285.200550][T12693] ? fdget_pos+0x254/0x320 [ 285.200573][T12693] ? __pfx___mutex_lock+0x10/0x10 [ 285.200601][T12693] ? __pfx_vfs_read+0x10/0x10 [ 285.200626][T12693] ? do_sys_openat2+0x17a/0x1d0 [ 285.200649][T12693] ? __fget_files+0x2a/0x410 [ 285.200673][T12693] ? __fget_files+0x395/0x410 [ 285.200693][T12693] ? __fget_files+0x2a/0x410 [ 285.200725][T12693] ksys_read+0x18f/0x2b0 [ 285.200755][T12693] ? __pfx_ksys_read+0x10/0x10 [ 285.200783][T12693] ? do_syscall_64+0x100/0x230 [ 285.200814][T12693] ? do_syscall_64+0xb6/0x230 [ 285.200844][T12693] do_syscall_64+0xf3/0x230 [ 285.200870][T12693] ? clear_bhb_loop+0x35/0x90 [ 285.200903][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.200930][T12693] RIP: 0033:0x7f5cecd8b7fc [ 285.200950][T12693] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 285.200968][T12693] RSP: 002b:00007f5cedb3c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.200990][T12693] RAX: ffffffffffffffda RBX: 00007f5cecfa5fa0 RCX: 00007f5cecd8b7fc [ 285.201004][T12693] RDX: 000000000000000f RSI: 00007f5cedb3c0a0 RDI: 0000000000000006 [ 285.201017][T12693] RBP: 00007f5cedb3c090 R08: 0000000000000000 R09: 0000000000000000 [ 285.201029][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.201040][T12693] R13: 0000000000000000 R14: 00007f5cecfa5fa0 R15: 00007fffa4ba26f8 [ 285.201072][T12693] [ 285.470397][T12696] dummy0: left allmulticast mode [ 285.491115][T12696] dummy0: left promiscuous mode [ 285.722360][T12727] __nla_validate_parse: 12 callbacks suppressed [ 285.722382][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2035'. [ 285.893903][T12733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2038'. [ 285.936161][T12740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.956718][T12733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2038'. [ 285.983938][T12739] netlink: 'syz.0.2039': attribute type 10 has an invalid length. [ 286.010860][T12739] team0: Device ipvlan1 failed to register rx_handler [ 286.027186][T12743] Cannot find del_set index 286 as target [ 286.062144][T12740] netlink: 'syz.0.2039': attribute type 2 has an invalid length. [ 286.121139][T12740] fþ²¹¥‰: entered promiscuous mode [ 286.270161][T12756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2045'. [ 286.306517][T12758] macsec3: entered promiscuous mode [ 286.311846][T12758] dummy0: entered promiscuous mode [ 286.318252][T12758] macsec3: entered allmulticast mode [ 286.323645][T12758] dummy0: entered allmulticast mode [ 286.370601][T12758] dummy0: left allmulticast mode [ 286.376157][T12758] dummy0: left promiscuous mode [ 286.514988][T12757] lo speed is unknown, defaulting to 1000 [ 286.537603][T12768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2051'. [ 286.600589][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'. [ 286.640798][T12757] lo speed is unknown, defaulting to 1000 [ 286.677583][T12757] wlan0 speed is unknown, defaulting to 1000 [ 286.739665][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'. [ 286.981449][T12788] IPVS: set_ctl: invalid protocol: 42354 255.255.255.255:20000 [ 287.026789][T12757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2046'. [ 287.176478][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.245904][T12804] netlink: 'syz.1.2059': attribute type 4 has an invalid length. [ 287.264270][T12800] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 287.337560][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 287.424737][T12810] netlink: 'syz.4.2063': attribute type 12 has an invalid length. [ 287.789365][T12834] netlink: ct family unspecified [ 287.794824][T12834] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.965716][T12844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2073'. [ 288.053939][T12846] netlink: 'syz.4.2074': attribute type 4 has an invalid length. [ 288.143802][T12849] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 288.354548][T12853] macsec2: entered promiscuous mode [ 288.360914][T12853] dummy0: entered promiscuous mode [ 288.368515][T12853] macsec2: entered allmulticast mode [ 288.374307][T12853] dummy0: entered allmulticast mode [ 288.383896][T12853] dummy0: left allmulticast mode [ 288.389546][T12853] dummy0: left promiscuous mode [ 288.716285][T12868] netlink: 'syz.4.2083': attribute type 10 has an invalid length. [ 288.731838][T12868] veth0_macvtap: left promiscuous mode [ 288.742158][T12868] team0: Device veth0_macvtap failed to register rx_handler [ 288.938628][T12883] raw_sendmsg: syz.0.2088 forgot to set AF_INET. Fix it! [ 289.267519][ T5853] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 289.273792][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 289.438712][T12908] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 289.724040][T12926] No such timeout policy "syz0" [ 290.110921][T12935] netlink: 'syz.0.2105': attribute type 10 has an invalid length. [ 290.227757][T12939] lo speed is unknown, defaulting to 1000 [ 290.291268][T12939] lo speed is unknown, defaulting to 1000 [ 290.363783][T12941] lo speed is unknown, defaulting to 1000 [ 290.379568][T12939] wlan0 speed is unknown, defaulting to 1000 [ 290.413561][T12951] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 290.568750][T12941] lo speed is unknown, defaulting to 1000 [ 290.635431][T12941] wlan0 speed is unknown, defaulting to 1000 [ 290.741439][T12962] __nla_validate_parse: 2 callbacks suppressed [ 290.741461][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 290.775877][T12964] siw: device registration error -23 [ 290.786085][T12962] lo: entered promiscuous mode [ 290.791162][T12962] netlink: 392 bytes leftover after parsing attributes in process `syz.3.2113'. [ 291.086025][T12970] netlink: 'syz.0.2115': attribute type 3 has an invalid length. [ 291.105706][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 291.118190][T12971] macsec3: entered promiscuous mode [ 291.123600][T12971] dummy0: entered promiscuous mode [ 291.155829][T12971] macsec3: entered allmulticast mode [ 291.162615][T12971] dummy0: entered allmulticast mode [ 291.188335][T12971] dummy0: left allmulticast mode [ 291.193514][T12971] dummy0: left promiscuous mode [ 291.261361][T12970] IPv6: sit1: Disabled Multicast RS [ 291.464289][T12979] siw: device registration error -23 [ 291.621375][T12984] tap0: tun_chr_ioctl cmd 1074025678 [ 291.627322][T12984] tap0: group set to 0 [ 291.975636][T12994] netlink: 'syz.0.2125': attribute type 6 has an invalid length. [ 292.016199][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 292.025160][T12996] netlink: 392 bytes leftover after parsing attributes in process `syz.1.2124'. [ 292.349709][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2132'. [ 292.374397][T13013] lo speed is unknown, defaulting to 1000 [ 292.429804][T13013] lo speed is unknown, defaulting to 1000 [ 292.467044][T13013] wlan0 speed is unknown, defaulting to 1000 [ 292.508200][T13018] IPVS: set_ctl: invalid protocol: 139 10.1.1.1:20001 [ 293.289544][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'. [ 293.304736][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2131'. [ 293.383415][T13051] lo speed is unknown, defaulting to 1000 [ 293.392376][T13051] lo speed is unknown, defaulting to 1000 [ 293.404649][T13051] wlan0 speed is unknown, defaulting to 1000 [ 293.640344][T13053] lo speed is unknown, defaulting to 1000 [ 293.726140][T13053] lo speed is unknown, defaulting to 1000 [ 293.763686][T13053] wlan0 speed is unknown, defaulting to 1000 [ 293.771633][T13062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2149'. [ 293.910904][ T29] audit: type=1800 audit(1738856830.688:5): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2149" name="memory.events" dev="tmpfs" ino=2393 res=0 errno=0 [ 293.936624][ T29] audit: type=1804 audit(1738856830.688:6): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2149" name="/newroot/461/memory.events" dev="tmpfs" ino=2393 res=1 errno=0 [ 294.194195][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2152'. [ 294.290557][T13074] lo speed is unknown, defaulting to 1000 [ 294.452428][T13078] lo: entered promiscuous mode [ 294.481902][T13074] lo speed is unknown, defaulting to 1000 [ 294.536144][T13074] wlan0 speed is unknown, defaulting to 1000 [ 294.621156][T13088] openvswitch: netlink: Message has 2 unknown bytes. [ 295.105426][T13104] lo speed is unknown, defaulting to 1000 [ 295.130761][T13104] lo speed is unknown, defaulting to 1000 [ 295.154326][T13104] wlan0 speed is unknown, defaulting to 1000 [ 295.555184][T13126] netlink: 'syz.0.2169': attribute type 11 has an invalid length. [ 295.614631][T13124] siw: device registration error -23 [ 295.627605][T13124] netlink: 'syz.4.2170': attribute type 5 has an invalid length. [ 295.797221][T13137] __nla_validate_parse: 15 callbacks suppressed [ 295.797242][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'. [ 295.860532][T13133] hsr_slave_1: left allmulticast mode [ 295.886245][T13137] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2173'. [ 296.174634][T13143] lo speed is unknown, defaulting to 1000 [ 296.199086][T13143] lo speed is unknown, defaulting to 1000 [ 296.210398][T13143] wlan0 speed is unknown, defaulting to 1000 [ 296.298594][T13152] siw: device registration error -23 [ 296.570405][T13158] netlink: 'syz.3.2182': attribute type 10 has an invalid length. [ 296.640704][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 296.659804][T13160] lo speed is unknown, defaulting to 1000 [ 296.772183][T13160] lo speed is unknown, defaulting to 1000 [ 296.950310][T13176] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2187'. [ 296.999355][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'. [ 297.010884][T13181] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2188'. [ 297.020061][T13160] wlan0 speed is unknown, defaulting to 1000 [ 297.354966][T13197] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2193'. [ 297.513756][T13197] batadv1: entered promiscuous mode [ 297.544034][T13197] batadv1: entered allmulticast mode [ 297.580779][T13202] vlan0: entered promiscuous mode [ 297.638612][T13204] tipc: Started in network mode [ 297.643735][T13204] tipc: Node identity 080211000001, cluster identity 4711 [ 297.657618][T13204] tipc: Enabled bearer , priority 0 [ 297.837252][T13210] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2196'. [ 297.883425][T13213] syzkaller0: entered promiscuous mode [ 297.894244][T13213] syzkaller0: entered allmulticast mode [ 298.124187][T13223] siw: device registration error -23 [ 298.156777][T13219] syz.3.2199: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.175906][T13219] CPU: 0 UID: 0 PID: 13219 Comm: syz.3.2199 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 298.175934][T13219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 298.175947][T13219] Call Trace: [ 298.175954][T13219] [ 298.175962][T13219] dump_stack_lvl+0x241/0x360 [ 298.175991][T13219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.176013][T13219] ? __pfx__printk+0x10/0x10 [ 298.176051][T13219] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 298.176076][T13219] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 298.176103][T13219] warn_alloc+0x278/0x410 [ 298.176137][T13219] ? __pfx_warn_alloc+0x10/0x10 [ 298.176173][T13219] ? xskq_create+0xb6/0x170 [ 298.176193][T13219] ? __get_vm_area_node+0x1c8/0x2d0 [ 298.176217][T13219] ? __get_vm_area_node+0x25c/0x2d0 [ 298.176249][T13219] __vmalloc_node_range_noprof+0x62f/0x1380 [ 298.176308][T13219] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.176339][T13219] ? __kasan_kmalloc+0x98/0xb0 [ 298.176372][T13219] vmalloc_user_noprof+0x74/0x80 [ 298.176399][T13219] ? xskq_create+0xb6/0x170 [ 298.176418][T13219] xskq_create+0xb6/0x170 [ 298.176441][T13219] xsk_init_queue+0xa1/0x100 [ 298.176465][T13219] xsk_setsockopt+0x598/0x950 [ 298.176502][T13219] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.176535][T13219] ? __pfx_aa_sk_perm+0x10/0x10 [ 298.176572][T13219] ? __pfx_lock_acquire+0x10/0x10 [ 298.176599][T13219] ? aa_sock_opt_perm+0x79/0x120 [ 298.176632][T13219] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.176664][T13219] do_sock_setsockopt+0x3af/0x720 [ 298.176702][T13219] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 298.176750][T13219] ? __fget_files+0x395/0x410 [ 298.176771][T13219] ? __fget_files+0x2a/0x410 [ 298.176803][T13219] __x64_sys_setsockopt+0x1ee/0x280 [ 298.176842][T13219] do_syscall_64+0xf3/0x230 [ 298.176869][T13219] ? clear_bhb_loop+0x35/0x90 [ 298.176903][T13219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.176935][T13219] RIP: 0033:0x7fc71098cde9 [ 298.176954][T13219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.176972][T13219] RSP: 002b:00007fc7118ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.176995][T13219] RAX: ffffffffffffffda RBX: 00007fc710ba5fa0 RCX: 00007fc71098cde9 [ 298.177011][T13219] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 298.177024][T13219] RBP: 00007fc710a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 298.177037][T13219] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 298.177051][T13219] R13: 0000000000000000 R14: 00007fc710ba5fa0 R15: 00007fffe2d84dd8 [ 298.177083][T13219] [ 298.177181][T13219] Mem-Info: [ 298.323213][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 298.350108][T13219] active_anon:7256 inactive_anon:0 isolated_anon:0 [ 298.350108][T13219] active_file:1844 inactive_file:38387 isolated_file:0 [ 298.350108][T13219] unevictable:768 dirty:139 writeback:0 [ 298.350108][T13219] slab_reclaimable:11626 slab_unreclaimable:103494 [ 298.350108][T13219] mapped:28801 shmem:1430 pagetables:816 [ 298.350108][T13219] sec_pagetables:0 bounce:0 [ 298.350108][T13219] kernel_misc_reclaimable:0 [ 298.350108][T13219] free:1327673 free_pcp:381 free_cma:0 [ 298.424082][T13229] netlink: 'syz.4.2201': attribute type 39 has an invalid length. [ 298.430840][T13228] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2203'. [ 298.444235][T13219] Node 0 active_anon:29024kB inactive_anon:0kB active_file:7376kB inactive_file:153472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115204kB dirty:556kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11904kB pagetables:3164kB sec_pagetables:0kB all_unreclaimable? no [ 298.485787][T13232] siw: device registration error -23 [ 298.514145][T13219] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 298.602426][T13219] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.644364][T13219] lowmem_reserve[]: 0 2491 2491 0 0 [ 298.649937][T13219] Node 0 DMA32 free:1385524kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:28884kB inactive_anon:0kB active_file:7376kB inactive_file:152892kB unevictable:1536kB writepending:556kB present:3129332kB managed:2551116kB mlocked:0kB bounce:0kB free_pcp:2236kB local_pcp:768kB free_cma:0kB [ 298.698934][T13219] lowmem_reserve[]: 0 0 0 0 0 [ 298.703778][T13219] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.704033][T13236] nftables ruleset with unbound chain [ 298.739487][T13219] lowmem_reserve[]: 0 0 0 0 0 [ 298.744704][T13219] Node 1 Normal free:3909112kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.781972][T13219] lowmem_reserve[]: 0 0 0 0 0 [ 298.795929][ T9] tipc: Node number set to 134418688 [ 298.808301][T13219] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.845217][T13219] Node 0 DMA32: 333*4kB (UME) 324*8kB (UM) 88*16kB (UME) 179*32kB (UME) 281*64kB (UME) 95*128kB (UME) 38*256kB (UME) 10*512kB (M) 8*1024kB (UME) 7*2048kB (UM) 319*4096kB (UM) = 1385204kB [ 298.874217][T13219] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.886847][T13219] Node 1 Normal: 228*4kB (U) 53*8kB (UME) 42*16kB (UME) 223*32kB (UME) 101*64kB (UME) 32*128kB (UME) 13*256kB (UME) 8*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3909112kB [ 298.906523][T13219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.917167][T13219] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.927295][T13219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.940517][T13219] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.965210][T13219] 41661 total pagecache pages [ 298.985624][T13219] 0 pages in swap cache [ 298.990136][T13219] Free swap = 124996kB [ 298.994603][T13219] Total swap = 124996kB [ 299.000236][T13219] 2097051 pages RAM [ 299.004193][T13219] 0 pages HighMem/MovableOnly [ 299.013993][T13219] 427486 pages reserved [ 299.019006][T13219] 0 pages cma reserved [ 299.239511][T13252] Cannot find del_set index 4 as target [ 299.290377][T13255] vlan0: entered promiscuous mode [ 299.904576][T13316] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 300.263983][T13332] lo speed is unknown, defaulting to 1000 [ 300.276530][T13332] lo speed is unknown, defaulting to 1000 [ 300.287172][T13332] wlan0 speed is unknown, defaulting to 1000 [ 300.471544][T13345] netlink: 'syz.4.2234': attribute type 4 has an invalid length. [ 300.488465][T13345] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 300.507591][T13345] netlink: 'syz.4.2234': attribute type 9 has an invalid length. [ 300.690289][T13355] siw: device registration error -23 [ 300.840442][T13360] __nla_validate_parse: 11 callbacks suppressed [ 300.840465][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 300.841117][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 300.874513][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2238'. [ 300.934766][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2240'. [ 300.952186][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2241'. [ 301.345665][ T5853] Bluetooth: hci0: command 0x0401 tx timeout [ 301.345677][ T5848] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 301.401439][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2246'. [ 301.410916][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2246'. [ 301.423284][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 301.433222][T13387] netlink: 392 bytes leftover after parsing attributes in process `syz.4.2246'. [ 301.510234][T13389] lo speed is unknown, defaulting to 1000 [ 301.539136][T13388] lo speed is unknown, defaulting to 1000 [ 301.547321][T13388] lo speed is unknown, defaulting to 1000 [ 301.554264][T13388] wlan0 speed is unknown, defaulting to 1000 [ 301.571319][T13389] lo speed is unknown, defaulting to 1000 [ 301.612795][T13389] wlan0 speed is unknown, defaulting to 1000 [ 301.621486][T13397] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2250'. [ 301.799571][T13401] siw: device registration error -23 [ 301.890267][T13399] lo speed is unknown, defaulting to 1000 [ 301.989619][T13399] lo speed is unknown, defaulting to 1000 [ 302.032958][T13408] netlink: 'syz.3.2253': attribute type 18 has an invalid length. [ 302.034226][T13399] wlan0 speed is unknown, defaulting to 1000 [ 302.376382][T13418] lo speed is unknown, defaulting to 1000 [ 302.424429][T13418] lo speed is unknown, defaulting to 1000 [ 302.463408][T13418] wlan0 speed is unknown, defaulting to 1000 [ 302.802744][T13432] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 302.955706][T13439] netlink: 'syz.4.2262': attribute type 10 has an invalid length. [ 303.189491][T13448] lo speed is unknown, defaulting to 1000 [ 303.223525][T13448] lo speed is unknown, defaulting to 1000 [ 303.231018][T13448] wlan0 speed is unknown, defaulting to 1000 [ 303.418196][T13421] syzkaller1: entered promiscuous mode [ 303.427143][T13421] syzkaller1: entered allmulticast mode [ 303.667805][T13468] Bluetooth: MGMT ver 1.23 [ 303.677772][T13468] netlink: 'syz.3.2271': attribute type 10 has an invalid length. [ 304.158259][T13488] siw: device registration error -23 [ 304.438127][T13490] lo speed is unknown, defaulting to 1000 [ 304.476516][T13490] lo speed is unknown, defaulting to 1000 [ 304.483809][T13500] netlink: 'syz.4.2278': attribute type 10 has an invalid length. [ 304.615839][T13490] wlan0 speed is unknown, defaulting to 1000 [ 304.701448][T13504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 305.186995][T13279] wlan0: Trigger new scan to find an IBSS to join [ 305.491501][T13551] netlink: 'syz.1.2297': attribute type 1 has an invalid length. [ 305.577740][T13551] bond4: entered promiscuous mode [ 305.668756][T13551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.730106][T13558] batadv0: entered promiscuous mode [ 305.735407][T13558] batadv0: entered allmulticast mode [ 305.764516][T13558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.790503][T13558] bond4: (slave batadv0): making interface the new active one [ 305.835983][T13558] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 305.886443][T13569] Bluetooth: MGMT ver 1.23 [ 306.078426][T13576] x_tables: duplicate underflow at hook 1 [ 306.769688][T13599] netlink: 'syz.1.2311': attribute type 5 has an invalid length. [ 306.796315][T13599] netlink: 'syz.1.2311': attribute type 10 has an invalid length. [ 306.817025][T13599] __nla_validate_parse: 9 callbacks suppressed [ 306.817048][T13599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2311'. [ 307.235956][T13620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2316'. [ 307.246771][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 307.528368][T13637] nbd: must specify a size in bytes for the device [ 307.667051][T13649] x_tables: unsorted underflow at hook 3 [ 307.694932][T13653] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 307.736915][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2327'. [ 307.758993][T13654] netlink: 'syz.1.2327': attribute type 10 has an invalid length. [ 307.773156][T13654] team0: Device dummy0 failed to register rx_handler [ 307.832275][T13658] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 [ 307.843626][T13658] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20003 [ 307.851716][T13658] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 307.945790][T13664] SET target dimension over the limit! [ 307.951429][T13662] macsec2: entered promiscuous mode [ 307.951455][T13662] dummy0: entered promiscuous mode [ 307.962796][T13662] macsec2: entered allmulticast mode [ 307.970836][T13662] dummy0: entered allmulticast mode [ 307.978989][T13662] dummy0: left allmulticast mode [ 307.984018][T13662] dummy0: left promiscuous mode [ 308.099108][T13669] netlink: 46 bytes leftover after parsing attributes in process `syz.4.2333'. [ 308.228215][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 308.345196][T13678] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2336'. [ 308.354899][T13678] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2336'. [ 308.370631][T13677] tipc: Enabling of bearer rejected, failed to enable media [ 308.390747][T13677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.399727][T13677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.415764][T13677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.424699][T13677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.783603][T13698] macsec2: entered promiscuous mode [ 308.799631][T13698] dummy0: entered promiscuous mode [ 308.813069][T13698] macsec2: entered allmulticast mode [ 308.825015][T13698] dummy0: entered allmulticast mode [ 308.834265][T13698] dummy0: left allmulticast mode [ 308.839840][T13698] dummy0: left promiscuous mode [ 309.100737][T13709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2348'. [ 309.115836][T13709] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2348'. [ 309.263887][T13712] lo speed is unknown, defaulting to 1000 [ 309.272303][T13712] lo speed is unknown, defaulting to 1000 [ 309.283700][T13712] wlan0 speed is unknown, defaulting to 1000 [ 309.579653][T13722] lo speed is unknown, defaulting to 1000 [ 309.925917][T13722] lo speed is unknown, defaulting to 1000 [ 309.932910][T13722] wlan0 speed is unknown, defaulting to 1000 [ 310.163159][T13745] macsec2: entered promiscuous mode [ 310.182585][T13745] dummy0: entered promiscuous mode [ 310.195920][T13745] macsec2: entered allmulticast mode [ 310.222057][T13745] dummy0: entered allmulticast mode [ 310.232903][T13745] dummy0: left allmulticast mode [ 310.250582][T13745] dummy0: left promiscuous mode [ 310.525766][T13740] lo speed is unknown, defaulting to 1000 [ 310.534118][T13740] lo speed is unknown, defaulting to 1000 [ 310.577460][T13740] wlan0 speed is unknown, defaulting to 1000 [ 310.704287][T13722] ip6gre1: entered promiscuous mode [ 311.197049][T13772] tipc: Cannot configure node identity twice [ 311.238385][T13775] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 311.807544][T13802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.842726][T13802] ipt_REJECT: TCP_RESET invalid for non-tcp [ 312.026244][T13813] lo speed is unknown, defaulting to 1000 [ 312.034104][T13813] lo speed is unknown, defaulting to 1000 [ 312.208346][T13813] wlan0 speed is unknown, defaulting to 1000 [ 312.429640][T13834] __nla_validate_parse: 7 callbacks suppressed [ 312.429663][T13834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2385'. [ 312.466626][T13836] SET target dimension over the limit! [ 312.530209][T13838] netlink: 'syz.1.2386': attribute type 16 has an invalid length. [ 312.558950][T13838] netlink: 'syz.1.2386': attribute type 17 has an invalid length. [ 312.570016][T13838] tipc: Resetting bearer [ 313.155310][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2393'. [ 313.389776][T13885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2393'. [ 313.412505][T13885] nbd: must specify at least one socket [ 313.712365][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 313.881892][T13900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2399'. [ 313.981356][T13905] netlink: 'syz.0.2400': attribute type 39 has an invalid length. [ 314.568769][T13928] syzkaller1: entered promiscuous mode [ 314.585723][T13928] syzkaller1: entered allmulticast mode [ 314.737187][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 314.897412][T13948] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 314.910928][T13948] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2413'. [ 315.097470][T13955] lo speed is unknown, defaulting to 1000 [ 315.111129][T13955] lo speed is unknown, defaulting to 1000 [ 315.121133][T13955] wlan0 speed is unknown, defaulting to 1000 [ 315.382197][T13962] lo speed is unknown, defaulting to 1000 [ 315.405883][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 315.471127][T13962] lo speed is unknown, defaulting to 1000 [ 315.536702][T13962] wlan0 speed is unknown, defaulting to 1000 [ 315.616025][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 315.625114][T13970] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 315.888497][T13975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 315.991713][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2424'. [ 316.438222][T13998] Cannot find add_set index 2 as target [ 316.680974][T14008] netlink: 'syz.3.2430': attribute type 4 has an invalid length. [ 316.723999][T14016] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 317.511544][T14030] bond0: (slave team0): Releasing backup interface [ 317.543642][T14030] team0 (unregistering): Port device team_slave_0 removed [ 317.563239][T14030] team0 (unregistering): Port device team_slave_1 removed [ 317.587398][T14030] team0 (unregistering): Port device bridge1 removed [ 317.946271][T14051] __nla_validate_parse: 4 callbacks suppressed [ 317.946295][T14051] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.2444'. [ 318.004459][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 318.034184][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2444'. [ 318.388147][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 318.399985][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 318.411166][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 318.435821][T14070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2447'. [ 318.472802][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'. [ 318.861691][T14091] siw: device registration error -23 [ 318.982971][T14095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.622786][T14108] netlink: 'syz.1.2462': attribute type 2 has an invalid length. [ 319.632467][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2461'. [ 319.793693][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2464'. [ 320.045275][T14125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.052664][T14125] IPv6: NLM_F_CREATE should be set when creating new route [ 320.060220][T14125] IPv6: NLM_F_CREATE should be set when creating new route [ 320.067539][T14125] IPv6: NLM_F_CREATE should be set when creating new route [ 320.432690][T14137] syzkaller0: entered promiscuous mode [ 320.438770][T14137] syzkaller0: entered allmulticast mode [ 320.505248][T14148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.698476][T14145] netlink: 'syz.2.2476': attribute type 11 has an invalid length. [ 322.090614][T14184] IPVS: set_ctl: invalid protocol: 0 172.20.20.14:20001 [ 323.550347][T14189] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 323.583810][T14173] lo speed is unknown, defaulting to 1000 [ 323.608813][T14173] lo speed is unknown, defaulting to 1000 [ 323.618003][T14173] wlan0 speed is unknown, defaulting to 1000 [ 323.891497][T14207] netlink: 'syz.1.2492': attribute type 10 has an invalid length. [ 323.949599][T14207] syz_tun: left promiscuous mode [ 323.954807][T14207] syz_tun: entered allmulticast mode [ 323.991922][T14210] __nla_validate_parse: 5 callbacks suppressed [ 323.991943][T14210] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2493'. [ 324.221642][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2494'. [ 324.412961][T14221] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2497'. [ 324.860962][T14232] netlink: 'syz.2.2498': attribute type 15 has an invalid length. [ 324.875698][T14232] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2498'. [ 325.111730][T14243] siw: device registration error -23 [ 325.361243][T14255] netlink: 'syz.2.2506': attribute type 12 has an invalid length. [ 325.376212][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 325.543567][T14259] lo speed is unknown, defaulting to 1000 [ 325.594446][T14259] lo speed is unknown, defaulting to 1000 [ 325.604134][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 325.628998][T14259] wlan0 speed is unknown, defaulting to 1000 [ 325.776288][T14267] netlink: 700 bytes leftover after parsing attributes in process `syz.1.2510'. [ 325.973435][T14273] pim6reg: entered allmulticast mode [ 325.984740][T14273] pim6reg: left allmulticast mode [ 326.043527][T14275] pim6reg: entered allmulticast mode [ 326.050753][T14275] pim6reg: left allmulticast mode [ 326.134987][T14281] netlink: 'syz.4.2511': attribute type 3 has an invalid length. [ 326.783796][T14305] netlink: 'syz.1.2519': attribute type 4 has an invalid length. [ 326.794703][T14305] netlink: 'syz.1.2519': attribute type 4 has an invalid length. [ 327.302487][T14319] netlink: 'syz.1.2523': attribute type 66 has an invalid length. [ 327.627342][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2528'. [ 327.664785][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 327.695646][T14332] netlink: 'syz.4.2529': attribute type 1 has an invalid length. [ 327.704075][T14332] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2529'. [ 327.794099][T14340] netlink: 'syz.1.2531': attribute type 4 has an invalid length. [ 327.831095][T14340] netlink: 'syz.1.2531': attribute type 4 has an invalid length. [ 327.855033][T14334] netlink: 'syz.4.2529': attribute type 8 has an invalid length. [ 328.490603][T14369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.651695][T14374] siw: device registration error -23 [ 328.971856][T14384] wlan1: mtu less than device minimum [ 328.977659][T14384] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 329.107793][T14390] __nla_validate_parse: 1 callbacks suppressed [ 329.107817][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2550'. [ 329.224529][T14395] syzkaller1: entered promiscuous mode [ 329.230775][T14395] syzkaller1: entered allmulticast mode [ 329.267858][T14398] siw: device registration error -23 [ 329.737641][T14422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2564'. [ 329.747891][T14422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2564'. [ 329.907108][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 329.923880][T14428] macvlan4: entered promiscuous mode [ 329.930533][T14428] bond0: entered promiscuous mode [ 329.935868][T14428] bond_slave_0: entered promiscuous mode [ 329.942247][T14428] bond_slave_1: entered promiscuous mode [ 329.948510][T14428] team0: entered promiscuous mode [ 329.953979][T14428] team_slave_0: entered promiscuous mode [ 329.965141][T14428] team_slave_1: entered promiscuous mode [ 329.990202][T14428] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 330.088541][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 330.242648][T14435] FAULT_INJECTION: forcing a failure. [ 330.242648][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.257129][T14435] CPU: 0 UID: 0 PID: 14435 Comm: syz.0.2568 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 330.257161][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.257189][T14435] Call Trace: [ 330.257197][T14435] [ 330.257206][T14435] dump_stack_lvl+0x241/0x360 [ 330.257237][T14435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.257260][T14435] ? __pfx__printk+0x10/0x10 [ 330.257295][T14435] ? __pfx_lock_release+0x10/0x10 [ 330.257331][T14435] should_fail_ex+0x40a/0x550 [ 330.257358][T14435] _copy_from_user+0x2d/0xb0 [ 330.257380][T14435] copy_msghdr_from_user+0xae/0x680 [ 330.257411][T14435] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 330.257434][T14435] ? __fget_files+0x2a/0x410 [ 330.257460][T14435] ? __fget_files+0x2a/0x410 [ 330.257491][T14435] __sys_sendmsg+0x209/0x350 [ 330.257529][T14435] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.257582][T14435] ? do_sys_openat2+0x17a/0x1d0 [ 330.257631][T14435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.257662][T14435] ? do_syscall_64+0x100/0x230 [ 330.257692][T14435] ? do_syscall_64+0xb6/0x230 [ 330.257722][T14435] do_syscall_64+0xf3/0x230 [ 330.257748][T14435] ? clear_bhb_loop+0x35/0x90 [ 330.257781][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.257809][T14435] RIP: 0033:0x7fd3b4d8cde9 [ 330.257829][T14435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.257851][T14435] RSP: 002b:00007fd3b5b7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.257872][T14435] RAX: ffffffffffffffda RBX: 00007fd3b4fa5fa0 RCX: 00007fd3b4d8cde9 [ 330.257888][T14435] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 330.257901][T14435] RBP: 00007fd3b5b7a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.257914][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.257926][T14435] R13: 0000000000000000 R14: 00007fd3b4fa5fa0 R15: 00007ffd8fac2568 [ 330.257957][T14435] [ 330.754687][T14448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2575'. [ 330.771341][T14452] siw: device registration error -23 [ 330.793944][T14451] lo: left promiscuous mode [ 330.800427][T14451] syz_tun: left allmulticast mode [ 330.824114][T14451] wg2: left promiscuous mode [ 330.855274][T14451] wg2: left allmulticast mode [ 330.889434][T14451] batadv_slave_1: left promiscuous mode [ 330.901997][T14451] tipc: Resetting bearer [ 330.955412][T14451] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 330.970440][T14451] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 331.000741][T14451] gretap0: left promiscuous mode [ 331.013795][T14451] vlan2: left promiscuous mode [ 331.052087][T14451] veth7: left promiscuous mode [ 331.065210][T14451] bridge6: left promiscuous mode [ 331.070332][T14451] bridge6: left allmulticast mode [ 331.077828][T14451] bridge8: left promiscuous mode [ 331.089583][T14451] bridge8: left allmulticast mode [ 331.123549][T14451] bond4: left promiscuous mode [ 331.150520][T14451] batadv0: left promiscuous mode [ 331.160012][T14451] batadv0: left allmulticast mode [ 331.206009][T14461] lo speed is unknown, defaulting to 1000 [ 331.213539][T14461] lo speed is unknown, defaulting to 1000 [ 331.242497][T14461] wlan0 speed is unknown, defaulting to 1000 [ 331.328101][T14467] lo speed is unknown, defaulting to 1000 [ 331.337127][T14467] lo speed is unknown, defaulting to 1000 [ 331.349334][T14467] wlan0 speed is unknown, defaulting to 1000 [ 331.471538][T14473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2580'. [ 331.643368][T14483] validate_nla: 3 callbacks suppressed [ 331.643390][T14483] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 331.659853][T14484] FAULT_INJECTION: forcing a failure. [ 331.659853][T14484] name failslab, interval 1, probability 0, space 0, times 0 [ 331.681694][T14480] bridge10: entered promiscuous mode [ 331.707120][T14484] CPU: 1 UID: 0 PID: 14484 Comm: syz.2.2585 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 331.707158][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 331.707171][T14484] Call Trace: [ 331.707178][T14484] [ 331.707187][T14484] dump_stack_lvl+0x241/0x360 [ 331.707224][T14484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.707258][T14484] ? __pfx__printk+0x10/0x10 [ 331.707294][T14484] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 331.707320][T14484] ? __pfx___might_resched+0x10/0x10 [ 331.707350][T14484] should_fail_ex+0x40a/0x550 [ 331.707378][T14484] should_failslab+0xac/0x100 [ 331.707414][T14484] kmem_cache_alloc_node_noprof+0x77/0x380 [ 331.707436][T14484] ? __alloc_skb+0x1c3/0x440 [ 331.707470][T14484] __alloc_skb+0x1c3/0x440 [ 331.707504][T14484] ? __pfx___alloc_skb+0x10/0x10 [ 331.707536][T14484] ? netlink_autobind+0xd6/0x2f0 [ 331.707554][T14484] ? netlink_autobind+0x2b0/0x2f0 [ 331.707580][T14484] netlink_sendmsg+0x638/0xcb0 [ 331.707625][T14484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.707673][T14484] ? aa_sock_msg_perm+0x91/0x160 [ 331.707706][T14484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.707736][T14484] __sock_sendmsg+0x221/0x270 [ 331.707765][T14484] ____sys_sendmsg+0x52a/0x7e0 [ 331.707806][T14484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.707836][T14484] ? __fget_files+0x2a/0x410 [ 331.707862][T14484] ? __fget_files+0x2a/0x410 [ 331.707893][T14484] __sys_sendmsg+0x269/0x350 [ 331.707931][T14484] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.707977][T14484] ? do_sys_openat2+0x17a/0x1d0 [ 331.708030][T14484] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.708061][T14484] ? do_syscall_64+0x100/0x230 [ 331.708092][T14484] ? do_syscall_64+0xb6/0x230 [ 331.708122][T14484] do_syscall_64+0xf3/0x230 [ 331.708149][T14484] ? clear_bhb_loop+0x35/0x90 [ 331.708182][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.708210][T14484] RIP: 0033:0x7f026338cde9 [ 331.708229][T14484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.708246][T14484] RSP: 002b:00007f02642c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.708268][T14484] RAX: ffffffffffffffda RBX: 00007f02635a5fa0 RCX: 00007f026338cde9 [ 331.708283][T14484] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 331.708296][T14484] RBP: 00007f02642c9090 R08: 0000000000000000 R09: 0000000000000000 [ 331.708309][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.708321][T14484] R13: 0000000000000000 R14: 00007f02635a5fa0 R15: 00007ffd2a167aa8 [ 331.708354][T14484] [ 331.745881][T14480] bridge10: entered allmulticast mode [ 331.935336][T14494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2587'. [ 331.939713][T14493] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.2586'. [ 332.030795][T14493] netlink: zone id is out of range [ 332.048360][T14480] team0: Port device bridge10 added [ 332.053809][T14493] netlink: zone id is out of range [ 332.068724][T14493] netlink: zone id is out of range [ 332.080992][T14493] netlink: zone id is out of range [ 332.177875][T14493] netlink: zone id is out of range [ 332.184054][T14499] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 332.197483][T14493] netlink: zone id is out of range [ 332.203109][T14498] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 332.211662][T14493] netlink: zone id is out of range [ 332.228024][T14493] netlink: zone id is out of range [ 332.244217][T14487] lo speed is unknown, defaulting to 1000 [ 332.276252][T14493] netlink: zone id is out of range [ 332.334714][T14487] lo speed is unknown, defaulting to 1000 [ 332.344938][T14487] wlan0 speed is unknown, defaulting to 1000 [ 332.666432][T14514] netlink: 'syz.1.2593': attribute type 12 has an invalid length. [ 332.973257][T14526] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2598'. [ 334.101066][T14555] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 334.894573][T14580] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 335.122529][T14587] __nla_validate_parse: 1 callbacks suppressed [ 335.122550][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'. [ 335.184207][T14593] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2621'. [ 335.250185][T14599] net_ratelimit: 3 callbacks suppressed [ 335.250207][T14599] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 335.253573][T14594] xt_CT: No such helper "netbios-ns" [ 335.703783][T14621] ksmbd: Unknown IPC event: 4, ignore. [ 335.754708][T14626] ksmbd: Unknown IPC event: 4, ignore. [ 335.890994][T14632] IPVS: length: 78 != 422621984 [ 335.909220][T14632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2632'. [ 335.979424][T14640] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2634'. [ 336.076683][T14638] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2634'. [ 336.209211][T14647] siw: device registration error -23 [ 336.229366][T14645] lo: left promiscuous mode [ 336.317008][T14645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.350418][T14645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.566033][T14656] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2639'. [ 336.596981][T14653] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2639'. [ 336.688178][T14653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 336.903542][T14676] siw: device registration error -23 [ 336.911867][T14676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2648'. [ 336.961588][T14681] netlink: 'syz.4.2651': attribute type 12 has an invalid length. [ 337.171007][T14681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.184257][T14681] netlink: zone id is out of range [ 337.190090][T14681] netlink: zone id is out of range [ 337.196391][T14681] netlink: zone id is out of range [ 337.246651][T14687] netlink: 'syz.4.2651': attribute type 2 has an invalid length. [ 337.328048][T14687] Tq€!7: entered promiscuous mode [ 337.428889][T14681] netlink: set zone limit has 4 unknown bytes [ 337.524380][T14703] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2658'. [ 337.602767][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 337.617259][T14703] IPVS: stopping backup sync thread 7696 ... [ 337.627987][T14703] [ 337.630376][T14703] ====================================================== [ 337.637507][T14703] WARNING: possible circular locking dependency detected [ 337.644545][T14703] 6.13.0-syzkaller-09720-g3924fa995cdf #0 Not tainted [ 337.651327][T14703] ------------------------------------------------------ [ 337.658368][T14703] syz.2.2658/14703 is trying to acquire lock: [ 337.664453][T14703] ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x81/0x280 [ 337.673393][T14703] [ 337.673393][T14703] but task is already holding lock: [ 337.680888][T14703] ffff888031b521a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 337.691117][T14703] [ 337.691117][T14703] which lock already depends on the new lock. [ 337.691117][T14703] [ 337.701576][T14703] [ 337.701576][T14703] the existing dependency chain (in reverse order) is: [ 337.710597][T14703] [ 337.710597][T14703] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 337.719216][T14703] lock_acquire+0x1ed/0x550 [ 337.724254][T14703] __mutex_lock+0x19c/0x1010 [ 337.729377][T14703] smc_switch_to_fallback+0x35/0xd90 [ 337.735193][T14703] smc_sendmsg+0x11f/0x530 [ 337.740232][T14703] __sock_sendmsg+0x221/0x270 [ 337.745475][T14703] __sys_sendto+0x363/0x4c0 [ 337.750521][T14703] __x64_sys_sendto+0xde/0x100 [ 337.755847][T14703] do_syscall_64+0xf3/0x230 [ 337.760900][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.767714][T14703] [ 337.767714][T14703] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 337.775835][T14703] lock_acquire+0x1ed/0x550 [ 337.780894][T14703] lock_sock_nested+0x48/0x100 [ 337.786226][T14703] do_ip_setsockopt+0x1a2d/0x3cd0 [ 337.791779][T14703] ip_setsockopt+0x63/0x100 [ 337.796814][T14703] do_sock_setsockopt+0x3af/0x720 [ 337.802376][T14703] __x64_sys_setsockopt+0x1ee/0x280 [ 337.808108][T14703] do_syscall_64+0xf3/0x230 [ 337.813147][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.819577][T14703] [ 337.819577][T14703] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.826805][T14703] validate_chain+0x18ef/0x5920 [ 337.832182][T14703] __lock_acquire+0x1397/0x2100 [ 337.837571][T14703] lock_acquire+0x1ed/0x550 [ 337.842607][T14703] __mutex_lock+0x19c/0x1010 [ 337.847731][T14703] ip_mc_drop_socket+0x81/0x280 [ 337.853131][T14703] inet_release+0x96/0x200 [ 337.858164][T14703] sock_release+0x82/0x150 [ 337.863131][T14703] stop_sync_thread+0x4e6/0x5e0 [ 337.868519][T14703] do_ip_vs_set_ctl+0x47b/0x13d0 [ 337.874000][T14703] nf_setsockopt+0x295/0x2c0 [ 337.879168][T14703] smc_setsockopt+0x275/0xe50 [ 337.884388][T14703] do_sock_setsockopt+0x3af/0x720 [ 337.889948][T14703] __x64_sys_setsockopt+0x1ee/0x280 [ 337.895795][T14703] do_syscall_64+0xf3/0x230 [ 337.900841][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.907302][T14703] [ 337.907302][T14703] other info that might help us debug this: [ 337.907302][T14703] [ 337.917544][T14703] Chain exists of: [ 337.917544][T14703] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 337.917544][T14703] [ 337.931129][T14703] Possible unsafe locking scenario: [ 337.931129][T14703] [ 337.938591][T14703] CPU0 CPU1 [ 337.943962][T14703] ---- ---- [ 337.949332][T14703] lock(&smc->clcsock_release_lock); [ 337.954809][T14703] lock(sk_lock-AF_INET); [ 337.961754][T14703] lock(&smc->clcsock_release_lock); [ 337.969673][T14703] lock(rtnl_mutex); [ 337.973667][T14703] [ 337.973667][T14703] *** DEADLOCK *** [ 337.973667][T14703] [ 337.981828][T14703] 1 lock held by syz.2.2658/14703: [ 337.986974][T14703] #0: ffff888031b521a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 337.997530][T14703] [ 337.997530][T14703] stack backtrace: [ 338.003434][T14703] CPU: 1 UID: 0 PID: 14703 Comm: syz.2.2658 Not tainted 6.13.0-syzkaller-09720-g3924fa995cdf #0 [ 338.003455][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 338.003466][T14703] Call Trace: [ 338.003474][T14703] [ 338.003484][T14703] dump_stack_lvl+0x241/0x360 [ 338.003506][T14703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.003522][T14703] ? __pfx__printk+0x10/0x10 [ 338.003553][T14703] print_circular_bug+0x13a/0x1b0 [ 338.003571][T14703] check_noncircular+0x36a/0x4a0 [ 338.003589][T14703] ? __pfx_check_noncircular+0x10/0x10 [ 338.003606][T14703] ? lockdep_lock+0x123/0x2b0 [ 338.003632][T14703] validate_chain+0x18ef/0x5920 [ 338.003646][T14703] ? mark_lock+0x9a/0x360 [ 338.003679][T14703] ? __pfx_validate_chain+0x10/0x10 [ 338.003697][T14703] ? mark_lock+0x9a/0x360 [ 338.003723][T14703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.003748][T14703] ? finish_task_switch+0x1e5/0x870 [ 338.003773][T14703] ? lockdep_hardirqs_on+0x99/0x150 [ 338.003794][T14703] ? mark_lock+0x9a/0x360 [ 338.003818][T14703] __lock_acquire+0x1397/0x2100 [ 338.003847][T14703] lock_acquire+0x1ed/0x550 [ 338.003868][T14703] ? ip_mc_drop_socket+0x81/0x280 [ 338.003892][T14703] ? __pfx_lock_acquire+0x10/0x10 [ 338.003915][T14703] ? __pfx___might_resched+0x10/0x10 [ 338.003941][T14703] __mutex_lock+0x19c/0x1010 [ 338.003962][T14703] ? ip_mc_drop_socket+0x81/0x280 [ 338.003983][T14703] ? __pfx_lock_release+0x10/0x10 [ 338.004005][T14703] ? lockdep_hardirqs_on+0x99/0x150 [ 338.004025][T14703] ? ip_mc_drop_socket+0x81/0x280 [ 338.004045][T14703] ? wait_for_completion+0x555/0x620 [ 338.004063][T14703] ? __pfx___mutex_lock+0x10/0x10 [ 338.004083][T14703] ? try_to_wake_up+0x9c3/0x1470 [ 338.004109][T14703] ? _printk+0xd5/0x120 [ 338.004135][T14703] ip_mc_drop_socket+0x81/0x280 [ 338.004157][T14703] inet_release+0x96/0x200 [ 338.004189][T14703] sock_release+0x82/0x150 [ 338.004208][T14703] stop_sync_thread+0x4e6/0x5e0 [ 338.004231][T14703] ? __might_fault+0xc6/0x120 [ 338.004253][T14703] do_ip_vs_set_ctl+0x47b/0x13d0 [ 338.004282][T14703] ? nf_setsockopt+0x240/0x2c0 [ 338.004306][T14703] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 338.004324][T14703] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 338.004352][T14703] ? __mutex_lock+0x397/0x1010 [ 338.004374][T14703] ? __mutex_unlock_slowpath+0x227/0x800 [ 338.004398][T14703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.004421][T14703] ? __pfx___mutex_lock+0x10/0x10 [ 338.004445][T14703] nf_setsockopt+0x295/0x2c0 [ 338.004472][T14703] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 338.004493][T14703] smc_setsockopt+0x275/0xe50 [ 338.004517][T14703] ? __pfx_smc_setsockopt+0x10/0x10 [ 338.004538][T14703] ? aa_sock_opt_perm+0x79/0x120 [ 338.004561][T14703] ? __pfx_smc_setsockopt+0x10/0x10 [ 338.004581][T14703] do_sock_setsockopt+0x3af/0x720 [ 338.004608][T14703] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 338.004634][T14703] ? __fget_files+0x395/0x410 [ 338.004650][T14703] ? __fget_files+0x2a/0x410 [ 338.004669][T14703] __x64_sys_setsockopt+0x1ee/0x280 [ 338.004696][T14703] do_syscall_64+0xf3/0x230 [ 338.004717][T14703] ? clear_bhb_loop+0x35/0x90 [ 338.004742][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.004765][T14703] RIP: 0033:0x7f026338cde9 [ 338.004780][T14703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.004794][T14703] RSP: 002b:00007f02642c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.004811][T14703] RAX: ffffffffffffffda RBX: 00007f02635a5fa0 RCX: 00007f026338cde9 [ 338.004823][T14703] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000008 [ 338.004833][T14703] RBP: 00007f026340e2a0 R08: 0000000000000018 R09: 0000000000000000 [ 338.004844][T14703] R10: 0000200000008d00 R11: 0000000000000246 R12: 0000000000000000 [ 338.004854][T14703] R13: 0000000000000000 R14: 00007f02635a5fa0 R15: 00007ffd2a167aa8 [ 338.004872][T14703] [ 338.451273][T14714] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.462107][T14714] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.517565][T14714] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.528089][T14714] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.608275][T14714] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.618904][T14714] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.698936][T14714] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.725577][T14714] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.807915][T14714] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.837757][T14714] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.849856][T14714] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.875505][T14714] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.897968][T14714] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.925574][T14714] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.938262][T14714] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.965620][T14714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0