last executing test programs: 4.033061963s ago: executing program 0 (id=1165): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x8004001) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x10001, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d0c0c00bdad446b9bbc7a", 0x5b}], 0x1}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x491, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.018758445s ago: executing program 3 (id=1172): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26c0}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x99c00000}]}, 0x50}}, 0x40014) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01d90000000000fa1b0012000c000100626f6e6400000000080002000800010005", @ANYRES64=r4, @ANYRES16=r1], 0x3c}}, 0x4008015) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002d610100000000000000000008000c00", @ANYRES32=r7, @ANYBLOB="0b000080976b64086860300005000180f1000000"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002d610100000000000000000008000c00", @ANYRES32=r7, @ANYBLOB="0b000080976b64086860300005000180f1000000"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) (async) sendmsg$alg(r9, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000880}, 0x4000002) sendmsg$nl_route_sched_retired(r9, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@newchain={0xd0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4}}}]}, {0x4b, 0x6, "c9884d8e16e9370d231296fe76063a8e6617cbdaef0ef28e2ece38f6b9798d3b2066f04efcd15734f711250c56f5629294b776497d6b0d2995306e1073d155b8a9b0e14f39058c"}, {0xc}, {0xc}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg$qrtr(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/224, 0xe0}], 0x1}, 0x38, 0x100) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f00000001c0)=0x4, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYBLOB="a4cb0c8aada0863b5fd7322861352ba70f5f643c5f0b1d5f12bac7a4851a3798d19ce787da1284243fdfde2788ebc636016b29b79829050b0a1a7146156203728e1951da9b861e15921e49b6ce32408ec1a1dae4da4697514353c167548160549842640fd181fd962461a74f24defd57ed83d60a737a97f546f629d781750a96e8de439c7973201f8ac3f2747b9c14adeebb2b3d75210434eda429ac72cb75", @ANYRESHEX=r11, @ANYRES32=0x0, @ANYRESOCT=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x2400c854) 2.528426073s ago: executing program 3 (id=1179): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl(r0, 0x8b2a, &(0x7f0000000040)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000400000024000008000400", @ANYRES32=r2, @ANYBLOB="06001500080000001800168014"], 0x44}}, 0x44040) 2.370799207s ago: executing program 3 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x9, 0x80, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20, 0x8000, 0xe, 0x8cc9}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x20, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x30, r4, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x200, 0x73}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x101}]}, 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0500000002000000000000e1ffffff000000000000000000050000002e9a4d8ac75752270b37aca92529da81886d954dc824fa78107daf17f028c8072d455482afb01c2f69d63c6aad4776dbb1fe3fa2e3df9e5b80920a7d35c2f1def2a3a6f194e2dfaeaaf8c8f78685d020fb6037c17bf629acc0f4c6d786c5"], 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r8, @ANYBLOB='\b\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="04000000000000000300000000000000000000000000000000000000efb1a8acaa2f8a88a5277934c502211e5e9cf4c4313b8ffa3b47e65808010598b2354638e9ffdc06a4a86a2d8b22dbdc59b97ae362846495ea7c3c64a2528f3c892a5091dd513f63050fb191aded4a2a7541ca2faf6ba088686907fd3d5144ec29e8e664c87c365d9a971298d7c9d1233177f16c0add8a2b121f8335f1a356533ab95ffa407720634d2096fea31cbcef5be9030324a139811da0dfcb25e05d590c096548bae435ac17d28f8a1b6fe8cb16428ab7de20f59a9515d44d749267c69c8a9bef5e3570afa854c902a34294d3d439d2be7754afe0816556b56ffe8eb4800c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pi6 \x00'}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r13}, &(0x7f0000000000), &(0x7f0000000040)=r14}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000060000000000000001000000b7080000000000007b8af8ff00000000b70800005e6454657b8af0ff00020000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xffffffff, 0x44, &(0x7f0000000640)=""/68, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x10, 0x1, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11, r12, r13], 0x0, 0x10, 0x2, @void, @value}, 0x94) listen(r9, 0x3) r15 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r15, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r15, &(0x7f0000000180)={0x2, 0xce20, @loopback}, 0x10) listen(r15, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x2c}}, 0x0) 2.245332913s ago: executing program 4 (id=1182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) select(0x0, 0x0, 0xfffffffffffffffc, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xd}, {0xfffd, 0x7}}}, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newchain={0x38, 0x64, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0xffff}, {0x3, 0xf}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0x800, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {0x5, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8042044) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) (async) bind$packet(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) close(0x3) 2.184369909s ago: executing program 2 (id=1183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = socket(0x28, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x2}, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x28, 0x6, 0x0, 0x20000000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c) listen(r1, 0x40005) r3 = accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) listen(r3, 0xecf) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x704, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 2.104273077s ago: executing program 2 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb804, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0xa0000001}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x28}}, 0x0) 2.008160235s ago: executing program 3 (id=1186): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000000000760000176e78f250b1dce200000000019500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000400000001000000010000802f44aed3", @ANYRES32=r2, @ANYBLOB="040025004890d180dacd68a27c1b128027f4a1fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000010000000c00"/28], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20004840) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) poll(&(0x7f0000000300)=[{r8, 0x404}], 0x1, 0x1) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r9, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001a40)=ANY=[@ANYBLOB="10000000ed03"], 0x420}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) r10 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x88}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb10) socket(0x2a, 0x1, 0x401) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f0000006ec0)) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000008}, [@call={0x85, 0x0, 0x0, 0x7b}, @alu={0x7, 0x0, 0x1, 0x9, 0xa, 0x10, 0x8000000000000007}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.002785551s ago: executing program 4 (id=1188): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x1d5}, {&(0x7f0000000ec0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc99ad6e4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1", 0x61}, {&(0x7f0000000200)="397d5f2edc82d0337ae5ab9ee47dc3e798cf08cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d", 0x55}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="04000000c8ad1bf4a18cf5efad3334fcda11dfcdfd", 0x15}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000dc0)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c", 0x77}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="a45ea7ecf9a8d6a6dbcbf2f17ef46f78f2", 0x11}, {&(0x7f0000000fc0)="06fc9d07e28c2abd53418e2bb1a91f5b0ae78dc48ab1a481d28cac20f141865db86d0521495408103f8d8b85156d2662c316e46dbc2b06faa953b6b15127740f7ab393482880716d5d704cebe7b2fcdd5aeb0d5fe193c430c0271b3391ddb766d6f881e1056c4111ea395d41465a435165795ce43a058580fe8c50e64528246ce0306e2fe9e634397f2c53bd5b40e87caa41f0f3dcf9c68e2918ed886f08e6c14a1be2a18088a065143bc21d522797f8509983d3719af97a8195fed4c125979c2d6a313afe40d74dcd69b6c521f33f922b148278e3ef31575544", 0xda}, {&(0x7f00000006c0)="c0f95463a7d3909d925997579bf5c7a0decd9693d4af243f019596a865224ac5f38d0fdd888c35819dd13ab83dd27a554e5824ce53a23691c0b2a890fb71bab6e417d641d6bf02043fcac347f1cc99518239169aa5ec04fb0754bb672ad96eedf5", 0x61}], 0x3}}], 0x4, 0xc0) 1.932646598s ago: executing program 0 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004000}, 0x20004040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112180000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004000}, 0x20004040) (async) 1.84063098s ago: executing program 2 (id=1190): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000100000085000000860000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9fd1b208", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0x20100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 1.839089524s ago: executing program 4 (id=1191): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000080000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000feffffffb70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x89}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 1.708153593s ago: executing program 0 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4810000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX], 0x48}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480480001800a000100696e6e65720000003800028008000240000000840800034000000007080004400000000f080001400000000014000580090001006d65740200000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000020000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000050000611092000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32], 0x214}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000000000000017c0000040000000c00018006000600800a000004050280ff041400000000000000"], 0x528}, 0x1, 0x0, 0x0, 0x40}, 0xc000) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}, 0x1c) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000040)=0x400e01, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000fc0)=ANY=[@ANYRES64=r6, @ANYRESHEX=r7, @ANYRES64=r1, @ANYBLOB="6616e4221fc6bece52685661a84c17cda316dad49d11ba5c9a1d902625072f98e54d8bb8b0dbc0d25e6d3496936ae0b6054627692cb5ab588c70a60eaeb2068a4aff0a1a1d91b3d2c134416bd5bb38c80633dfa798bc9200f8ff37fbbbe705be43aab22bb7cba7c5b3256b7b686cf51f00e77b3ac54bd628dbf625b9568c0dcf2c453b60ef011be6f0aee47bf927475df147c92f2972e19cac5dbf1db562e0c2f88a8c22c00723cf2e5a98c07c28464870f1967fb3911505f8ab52216f4c8df297fa76dfab92eaaf9238068414f11f04a988d081dc8f7cf73b35b702313f78da1ed780832a008e3e0c823fd49f"], 0x5c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2c020400) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000001c0)={'pimreg1\x00', 0x7101}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000180)=r12) 1.603446028s ago: executing program 4 (id=1194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x17, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0xa, 0x7, 0x4, 0x80, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0x1, 0x6, 0x6, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @ldst={0x0, 0x1, 0x6, 0x1, 0x8, 0x100}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x13, &(0x7f0000000180)=""/19, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x7, 0x8}, 0x10, 0x2a3e9, 0xffffffffffffffff, 0x1, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x5, 0x1, 0x5, 0x6}], 0x10, 0x7ff, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x8, 0x1, 0x4, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r2, 0x8, 0x1c, 0x0, @void, @value=r1, @void, @void, r3}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) write(r5, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 1.176776985s ago: executing program 0 (id=1197): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xffa, &(0x7f000062b000)=""/4090, 0x0, 0x1f, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x40}}, 0x800) 1.02828507s ago: executing program 1 (id=1198): unshare(0x24020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = socket$inet6(0xa, 0x3, 0x4) unshare(0x20500) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001a40)={0x1, &(0x7f0000000740)=[{0x6}]}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4c011}, 0x20000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000003000000000000000500000d00000000030000000200000007000000010000000e000000020000000000000000000000080000000000000000000000000000020300000008000000000000100200000000000005c480588f89ab52577902a931a5d2be69ca1d03ab9b3dacde1fb01729b34690997ba9e10c0fb5b4b3b17bfdbae7e8ea39a1c46ac8d133df88449c9d6331b9a693bfd255df5e17"], &(0x7f00000002c0)=""/238, 0x67, 0xee, 0x1, 0xfffff6f6, 0x0, @void, @value}, 0x28) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0xc, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x6}, 0x5}, 0x1c) 1.027693512s ago: executing program 3 (id=1199): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x2, 0x70bd2c, 0x20, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000010000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x1129f, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000480)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) close(r6) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r6, 0x0, 0x7, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x4c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r8, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket(0x2, 0x80805, 0x0) 905.128052ms ago: executing program 0 (id=1200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES32=r2], 0x54}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES32=r2], 0x54}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 874.021965ms ago: executing program 1 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x88}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x40000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x38, 0x3, 0x3}]}}]}, 0x48}}, 0x58800) 692.341113ms ago: executing program 2 (id=1202): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100)) 688.987167ms ago: executing program 0 (id=1203): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0xd6, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket(0xa, 0x3, 0x3a) write$tun(r4, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfca) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x0, r3}, 0x10) 668.185443ms ago: executing program 3 (id=1204): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x2, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4805}, 0x20000090) 596.410844ms ago: executing program 2 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800100000000000000000000018110000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000002000000850000003300000085000000230000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x48400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYRESOCT=r5, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x700, 0x8, 0xffffff3d, 0x5990, {{0x17, 0x4, 0x3, 0x1f, 0x5c, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @end, @noop, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0x8, [{@remote}, {@local, 0xfffffffe}]}, @lsrr={0x83, 0x1b, 0xa8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @lsrr={0x83, 0xf, 0xba, [@multicast2, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2]}]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES16=r6, @ANYRESDEC=r1, @ANYRESDEC=r4, @ANYBLOB="b117c648e63fe5d961ed9678ad68272114", @ANYRESHEX=r0, @ANYRES16=r7, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 516.380886ms ago: executing program 1 (id=1206): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x5}, 0x8, 0x1, 0x1, 0x0, 0x9, 0x8}, 0x20) accept4(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x80, 0x80000) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 384.340523ms ago: executing program 4 (id=1207): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x10) 367.180994ms ago: executing program 2 (id=1208): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c) socket$inet6(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r4], 0x48}}, 0x0) r8 = socket(0x10, 0x80803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x3, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r10, &(0x7f0000000040), 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r10, r11, 0x0, 0xffffffff000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=r8], 0x1c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 263.249505ms ago: executing program 1 (id=1209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f0000009880)=[{0x0}, {0x0}, {&(0x7f0000009700)="fe", 0x1}], 0x3}}], 0x1, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4006, 0x0, 0x2, 0x5}, {0x5, 0xf8, 0x9, 0x7fffffff}, {0x3, 0x2, 0x9, 0x92}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) 198.487183ms ago: executing program 1 (id=1210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x40020) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000004feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000001e010000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6fbe9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000000300)="49723b3ab53a13274c50e00d5be19f87e669877bbc7b640cb48fd1bbea325e5d363770ef7060a11e688e7c84ccfb034a84", 0x0}, 0x50) (async) setsockopt$inet_opts(r3, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) (async) setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000000)="a8fa46", 0x3) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @local, 0xffffffff, 0xff, 0x1, 0x8, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x9, 0x0, 0x5, 0x2bb, 0xd, 'wg2\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010101, @local, 0x9, 0xffffffff}}}, {{@arp={@private=0xa010102, @local, 0xff, 0x5c97c7c9f96710d4, 0x5, 0x4, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, {[0xff, 0xff, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x92a1, 0xb148, 0x7, 0x2, 0x4, 0x8, 'caif0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@link_local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="016b0f000a0cec9cef90d7ab87e70000000000fcdbdf324f00000008000300", @ANYRES32=r8, @ANYBLOB="38007a800c000300a0d4e01051d6ff6314000100cb437879261102799ec86372a23189a51400020009e03627fc5277779e45ed432a796e45"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r11, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fff, 0x33}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x2000c040) 190.364175ms ago: executing program 4 (id=1211): socket(0x1, 0xa, 0x2) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="95", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}], 0x2, 0x24049055) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xc4, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x248}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @local}, 0xc, 0x0, 0x0, 0x0, 0xd73, 0x0, 0x7, 0x100000001, 0x1}) 0s ago: executing program 1 (id=1212): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x1, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000083000000ba03010001"], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000001000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000180), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70b", 0xad}, {&(0x7f0000000440)}, {&(0x7f0000000280)}], 0x5}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000003010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000b40)={@val={0x0, 0xc}, @val={0x1, 0x0, 0x0, 0x0, 0x3d, 0x1}, @mpls={[], @ipv6=@dccp_packet={0x2, 0x6, "fdecbf", 0x17, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[@hopopts={0x5e, 0x0, '\x00', [@calipso={0x7, 0x0, {0x3, 0x0, 0x75, 0x9, [0x865, 0x6]}}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x3}]}, @routing={0x32, 0x0, 0xd47ae70c88239f9c, 0xe, 0x0, [@mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2]}, @hopopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x0, @rand_addr=' \x01\x00'}]}, @srh={0x1d, 0x0, 0x4, 0x0, 0xf7, 0x0, 0x6, [@mcast1, @empty]}], {{0x4e22, 0x4e20, 0x4000000000000327, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 'yn7', 0x4, "4c905f"}, "b5425a925c5a95ab9536d3dfa9d23e1376ff78efe0cf0f3e1e6233fad955b063b13d688624c5412ea4fd56402dc9910794cbb7fed4e8eda1"}}}}}, 0x4d) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x22, 0x5, 0x0) kernel console output (not intermixed with test programs): 68.103870][ T5976] erspan0: entered allmulticast mode [ 68.271050][ T5993] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 68.636614][ T6005] Cannot find add_set index 2 as target [ 68.701687][ T5839] Bluetooth: hci1: command tx timeout [ 68.775601][ T5839] Bluetooth: hci3: command tx timeout [ 68.775681][ T5851] Bluetooth: hci4: command tx timeout [ 68.781106][ T5839] Bluetooth: hci2: command tx timeout [ 68.787965][ T5845] Bluetooth: hci0: command tx timeout [ 69.160415][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 69.170783][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 70.618764][ T6026] veth0: entered promiscuous mode [ 70.624950][ T6026] veth0: entered allmulticast mode [ 70.654608][ T6028] Zero length message leads to an empty skb [ 70.879362][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 70.894409][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 70.932333][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 70.950285][ T6045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.020605][ T6055] veth1: entered promiscuous mode [ 71.063623][ T6055] veth1: entered allmulticast mode [ 71.175858][ T6045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.310404][ T6045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.324125][ T6068] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 71.359975][ T6070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.49'. [ 71.391140][ T6070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.49'. [ 71.472015][ T6045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.513280][ T6075] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 71.611902][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 71.637438][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 71.666793][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.673376][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.696978][ T6080] veth1_to_bridge: entered promiscuous mode [ 71.702953][ T6080] veth1_to_bridge: entered allmulticast mode [ 71.759093][ T6045] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.820741][ T6045] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.888265][ T6045] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.949379][ T6045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.079439][ T6092] syzkaller1: entered promiscuous mode [ 72.098775][ T6092] syzkaller1: entered allmulticast mode [ 72.543299][ T6114] netlink: 104 bytes leftover after parsing attributes in process `syz.0.64'. [ 73.106158][ T6136] netlink: 96 bytes leftover after parsing attributes in process `syz.0.71'. [ 73.321879][ T6138] syzkaller1: entered promiscuous mode [ 73.327721][ T6138] syzkaller1: entered allmulticast mode [ 73.420821][ T6151] netlink: 104 bytes leftover after parsing attributes in process `syz.3.73'. [ 73.934498][ T6192] sctp: [Deprecated]: syz.2.83 (pid 6192) Use of int in max_burst socket option. [ 73.934498][ T6192] Use struct sctp_assoc_value instead [ 74.076655][ T6200] netlink: 'syz.1.84': attribute type 2 has an invalid length. [ 74.097194][ T6201] netlink: 'syz.1.84': attribute type 2 has an invalid length. [ 74.133761][ T6200] netlink: 'syz.1.84': attribute type 9 has an invalid length. [ 74.141899][ T6201] netlink: 'syz.1.84': attribute type 9 has an invalid length. [ 74.193624][ T6203] unsupported nlmsg_type 40 [ 74.298072][ T6213] Cannot find add_set index 0 as target [ 74.501844][ T25] IPVS: starting estimator thread 0... [ 74.623678][ T6222] IPVS: using max 25 ests per chain, 60000 per kthread [ 74.644952][ T6228] netlink: 'syz.4.90': attribute type 2 has an invalid length. [ 74.917452][ T6244] IPVS: Error joining to the multicast group [ 75.317849][ T6254] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 75.731571][ T6263] ebt_among: src integrity fail: 100 [ 76.669835][ T6237] __nla_validate_parse: 11 callbacks suppressed [ 76.669858][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 76.685779][ T6237] netlink: 17 bytes leftover after parsing attributes in process `syz.0.93'. [ 76.697208][ T6254] veth0_vlan: entered allmulticast mode [ 76.933246][ T6267] FAULT_INJECTION: forcing a failure. [ 76.933246][ T6267] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.978531][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz.0.99 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 76.989110][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.999264][ T6267] Call Trace: [ 77.002574][ T6267] [ 77.005533][ T6267] dump_stack_lvl+0x241/0x360 [ 77.010274][ T6267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.015499][ T6267] ? __pfx__printk+0x10/0x10 [ 77.020126][ T6267] ? snprintf+0xda/0x120 [ 77.024403][ T6267] should_fail_ex+0x3b0/0x4e0 [ 77.029102][ T6267] _copy_to_user+0x31/0xb0 [ 77.033534][ T6267] simple_read_from_buffer+0xca/0x150 [ 77.038934][ T6267] proc_fail_nth_read+0x1e9/0x250 [ 77.043975][ T6267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.049528][ T6267] ? rw_verify_area+0x55e/0x6f0 [ 77.054407][ T6267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.059966][ T6267] vfs_read+0x1fc/0xb70 [ 77.064134][ T6267] ? __pfx___mutex_lock+0x10/0x10 [ 77.069167][ T6267] ? __pfx_vfs_read+0x10/0x10 [ 77.073847][ T6267] ? __fget_files+0x2a/0x410 [ 77.078446][ T6267] ? __fget_files+0x395/0x410 [ 77.083215][ T6267] ? __fget_files+0x2a/0x410 [ 77.087817][ T6267] ksys_read+0x18f/0x2b0 [ 77.092070][ T6267] ? __pfx_ksys_read+0x10/0x10 [ 77.096860][ T6267] ? do_syscall_64+0x100/0x230 [ 77.101692][ T6267] ? do_syscall_64+0xb6/0x230 [ 77.106385][ T6267] do_syscall_64+0xf3/0x230 [ 77.110896][ T6267] ? clear_bhb_loop+0x35/0x90 [ 77.115573][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.121485][ T6267] RIP: 0033:0x7fc3d578473c [ 77.125909][ T6267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.145522][ T6267] RSP: 002b:00007fc3d6583030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.153990][ T6267] RAX: ffffffffffffffda RBX: 00007fc3d5975fa0 RCX: 00007fc3d578473c [ 77.161975][ T6267] RDX: 000000000000000f RSI: 00007fc3d65830a0 RDI: 0000000000000005 [ 77.169955][ T6267] RBP: 00007fc3d6583090 R08: 0000000000000000 R09: 0000000000000000 [ 77.177931][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.185905][ T6267] R13: 0000000000000000 R14: 00007fc3d5975fa0 R15: 00007ffe13379ce8 [ 77.193930][ T6267] [ 77.606887][ T6292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.635504][ T6295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.923082][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.948825][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.110224][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.152485][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.014511][ T6336] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.089507][ T6338] netlink: 'syz.1.113': attribute type 7 has an invalid length. [ 79.151684][ T6338] netlink: 'syz.1.113': attribute type 8 has an invalid length. [ 79.234920][ T6338] netlink: 236 bytes leftover after parsing attributes in process `syz.1.113'. [ 80.239395][ T6353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 80.307278][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 80.369439][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 80.452472][ T6369] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 80.482192][ T6368] vlan2: entered promiscuous mode [ 80.654546][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 80.694243][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 80.926121][ T6399] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.125'. [ 80.959823][ T6399] netlink: zone id is out of range [ 80.986459][ T6399] netlink: zone id is out of range [ 81.010948][ T6399] netlink: get zone limit has 8 unknown bytes [ 81.171308][ T6406] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 81.192469][ T6406] bond1: entered promiscuous mode [ 81.202442][ T6406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.385033][ T6424] netlink: 48 bytes leftover after parsing attributes in process `syz.4.131'. [ 81.566470][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 81.912195][ T975] cfg80211: failed to load regulatory.db [ 82.139664][ T6456] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 82.179112][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.202950][ T6456] bond0: (slave team0): Enslaving as an active interface with an up link [ 82.286620][ T6456] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 82.321032][ T6456] netlink: 152 bytes leftover after parsing attributes in process `syz.1.145'. [ 82.558418][ T6474] Cannot find add_set index 0 as target [ 82.611742][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 82.718795][ T6482] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 82.790975][ T6484] netlink: 148 bytes leftover after parsing attributes in process `syz.4.150'. [ 82.801158][ T6484] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 82.925578][ T6495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.941734][ T6495] bond1: (slave bond2): making interface the new active one [ 83.002903][ T6495] bond1: (slave bond2): Enslaving as an active interface with an up link [ 83.080784][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 83.091097][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 83.145196][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 83.165967][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 83.221636][ T6507] openvswitch: netlink: Message has 16 unknown bytes. [ 83.497786][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 83.520279][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 83.626906][ T6523] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 83.657289][ T6528] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 83.954962][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 84.808381][ T6583] netlink: 'syz.1.175': attribute type 12 has an invalid length. [ 85.481474][ T6608] tipc: Started in network mode [ 85.487086][ T6608] tipc: Node identity e262b566a9d9, cluster identity 4711 [ 85.500852][ T6608] tipc: Enabled bearer , priority 0 [ 85.734665][ T6601] tipc: Disabling bearer [ 86.434344][ T6648] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 86.684558][ T6657] tipc: Enabling of bearer rejected, failed to enable media [ 86.984502][ T6673] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 87.138518][ T6679] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 87.515585][ T6696] __nla_validate_parse: 8 callbacks suppressed [ 87.515604][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 87.619545][ T6703] gtp0: entered promiscuous mode [ 87.649099][ T6703] gtp0: entered allmulticast mode [ 87.678388][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.211'. [ 87.874689][ T6705] dummy0: entered promiscuous mode [ 87.886910][ T6705] macvtap1: entered promiscuous mode [ 87.909095][ T6705] macvtap1: entered allmulticast mode [ 87.923425][ T6705] dummy0: entered allmulticast mode [ 87.933329][ T6705] dummy0: left allmulticast mode [ 87.941275][ T6705] dummy0: left promiscuous mode [ 88.027089][ T6724] warning: `syz.3.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.064837][ T6710] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 88.076087][ T6710] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 88.084414][ T6710] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.214'. [ 88.387009][ T6735] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 88.612055][ T6742] ªªªªª: renamed from bridge0 (while UP) [ 88.626099][ T6742] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 88.634663][ T6742] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 88.655216][ T6742] ªªªªª: entered promiscuous mode [ 88.660402][ T6742] ªªªªª: entered allmulticast mode [ 89.244363][ T6759] syzkaller1: entered promiscuous mode [ 89.261408][ T6759] syzkaller1: entered allmulticast mode [ 89.366063][ T6754] syzkaller1: entered promiscuous mode [ 89.371707][ T6754] syzkaller1: entered allmulticast mode [ 89.957656][ T6787] netlink: 'syz.3.237': attribute type 9 has an invalid length. [ 90.079819][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'. [ 90.188251][ T6798] netlink: 'syz.4.238': attribute type 7 has an invalid length. [ 90.206154][ T6798] netlink: 'syz.4.238': attribute type 8 has an invalid length. [ 90.226401][ T6798] netlink: 'syz.4.238': attribute type 7 has an invalid length. [ 90.248528][ T6798] netlink: 208184 bytes leftover after parsing attributes in process `syz.4.238'. [ 90.375107][ T6807] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 90.593151][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.246'. [ 90.621861][ T6818] tc_dump_action: action bad kind [ 91.071081][ T6831] netlink: 21 bytes leftover after parsing attributes in process `syz.1.251'. [ 91.496858][ T6826] syz.2.249 uses old SIOCAX25GETINFO [ 91.607758][ T6826] netlink: 536 bytes leftover after parsing attributes in process `syz.2.249'. [ 91.650752][ T6826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.249'. [ 92.264720][ T6921] IPv6: Can't replace route, no match found [ 92.433993][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 92.873036][ T6936] syzkaller0: entered promiscuous mode [ 92.894456][ T6936] syzkaller0: entered allmulticast mode [ 93.081596][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 94.741585][ T6943] syzkaller1: entered promiscuous mode [ 94.748168][ T6943] syzkaller1: entered allmulticast mode [ 94.760564][ T6926] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.827168][ T6983] syzkaller1: entered promiscuous mode [ 94.841157][ T6983] syzkaller1: entered allmulticast mode [ 95.087123][ T6991] netlink: 'syz.2.284': attribute type 1 has an invalid length. [ 95.121634][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.288'. [ 95.181892][ T7004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'. [ 95.376592][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 95.669597][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 95.806786][ T7020] bridge0: port 3(gretap0) entered blocking state [ 95.858948][ T7020] bridge0: port 3(gretap0) entered disabled state [ 95.888202][ T7020] gretap0: entered allmulticast mode [ 95.926238][ T7020] gretap0: entered promiscuous mode [ 95.940546][ T7020] bridge0: port 3(gretap0) entered blocking state [ 95.947550][ T7020] bridge0: port 3(gretap0) entered forwarding state [ 96.025845][ T7024] gretap0: left allmulticast mode [ 96.052620][ T7024] gretap0: left promiscuous mode [ 96.074185][ T7024] bridge0: port 3(gretap0) entered disabled state [ 96.152593][ T7037] FAULT_INJECTION: forcing a failure. [ 96.152593][ T7037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.173898][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.3.300 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 96.184591][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.194679][ T7037] Call Trace: [ 96.197984][ T7037] [ 96.200936][ T7037] dump_stack_lvl+0x241/0x360 [ 96.205631][ T7037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.210844][ T7037] ? __pfx__printk+0x10/0x10 [ 96.215439][ T7037] ? __pfx_lock_release+0x10/0x10 [ 96.220472][ T7037] should_fail_ex+0x3b0/0x4e0 [ 96.225182][ T7037] _copy_from_user+0x2f/0xc0 [ 96.229789][ T7037] copy_msghdr_from_user+0xae/0x680 [ 96.234996][ T7037] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.240801][ T7037] ? __fget_files+0x2a/0x410 [ 96.245395][ T7037] ? __fget_files+0x2a/0x410 [ 96.249988][ T7037] __sys_sendmmsg+0x32b/0x720 [ 96.254676][ T7037] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.259889][ T7037] ? __pfx_lock_release+0x10/0x10 [ 96.264922][ T7037] ? kstrtouint_from_user+0x128/0x190 [ 96.270308][ T7037] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 96.276204][ T7037] ? ksys_write+0x22a/0x2b0 [ 96.280705][ T7037] ? __pfx_lock_release+0x10/0x10 [ 96.285750][ T7037] ? vfs_write+0x730/0xd30 [ 96.290179][ T7037] ? __mutex_unlock_slowpath+0x21e/0x790 [ 96.295828][ T7037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.301812][ T7037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.308148][ T7037] ? do_syscall_64+0x100/0x230 [ 96.312927][ T7037] __x64_sys_sendmmsg+0xa0/0xb0 [ 96.317781][ T7037] do_syscall_64+0xf3/0x230 [ 96.322290][ T7037] ? clear_bhb_loop+0x35/0x90 [ 96.326970][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.332890][ T7037] RIP: 0033:0x7f7580985d29 [ 96.337320][ T7037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.356940][ T7037] RSP: 002b:00007f758179d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.365354][ T7037] RAX: ffffffffffffffda RBX: 00007f7580b75fa0 RCX: 00007f7580985d29 [ 96.373323][ T7037] RDX: 0000000000000002 RSI: 0000000020000380 RDI: 0000000000000003 [ 96.381291][ T7037] RBP: 00007f758179d090 R08: 0000000000000000 R09: 0000000000000000 [ 96.389266][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.397239][ T7037] R13: 0000000000000000 R14: 00007f7580b75fa0 R15: 00007ffc0d7fbff8 [ 96.405227][ T7037] [ 96.496417][ T7041] netlink: 'syz.0.302': attribute type 4 has an invalid length. [ 96.500086][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 96.549962][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 96.581562][ T7039] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 96.630587][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.301'. [ 96.732357][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 96.768463][ T5851] block nbd0: Receive control failed (result -107) [ 96.806276][ T7059] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 97.009235][ T7066] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 97.118985][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 97.550015][ T7076] veth2: entered allmulticast mode [ 98.092106][ T7120] __nla_validate_parse: 1 callbacks suppressed [ 98.092125][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 98.147705][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 98.193621][ T7120] netlink: 'syz.1.319': attribute type 6 has an invalid length. [ 98.213140][ T7115] syzkaller1: entered promiscuous mode [ 98.223335][ T7115] syzkaller1: entered allmulticast mode [ 98.463097][ T7109] netlink: 'syz.0.314': attribute type 5 has an invalid length. [ 98.839181][ T7144] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 98.997098][ T7152] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 99.022464][ T7153] netlink: 1 bytes leftover after parsing attributes in process `syz.1.325'. [ 99.024950][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 99.222434][ T7164] netlink: 'syz.2.329': attribute type 4 has an invalid length. [ 99.371095][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 99.389012][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.402874][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.422223][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.442010][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.823321][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.337'. [ 99.960329][ T7206] team0: Device gtp0 is of different type [ 100.100823][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 100.174175][ T7220] bridge0: entered promiscuous mode [ 100.179445][ T7220] bridge0: entered allmulticast mode [ 100.215156][ T7196] hsr0: entered promiscuous mode [ 100.330526][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 100.784379][ T7249] netlink: 'syz.1.346': attribute type 30 has an invalid length. [ 101.045738][ T5887] IPVS: starting estimator thread 0... [ 101.163584][ T7261] IPVS: using max 28 ests per chain, 67200 per kthread [ 101.247821][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.351'. [ 101.342935][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.352'. [ 102.620718][ T7294] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 103.020620][ T7327] nbd: must specify an index to disconnect [ 103.254461][ T5851] Bluetooth: hci4: command tx timeout [ 103.339270][ T7338] __nla_validate_parse: 3 callbacks suppressed [ 103.339289][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 103.397656][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 103.729247][ T7351] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 103.753686][ T7351] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.375'. [ 103.858893][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.376'. [ 105.512350][ T7427] syzkaller0: entered promiscuous mode [ 105.521074][ T7427] syzkaller0: entered allmulticast mode [ 105.740566][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 106.610576][ T7445] Illegal XDP return value 4294967274 on prog (id 154) dev N/A, expect packet loss! [ 107.310972][ T7457] syzkaller1: entered promiscuous mode [ 107.317561][ T7457] syzkaller1: entered allmulticast mode [ 107.497571][ T7465] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.397'. [ 107.516748][ T7460] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.397'. [ 108.016768][ T7491] netlink: 'syz.4.403': attribute type 4 has an invalid length. [ 108.036160][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 108.148549][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 108.215242][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 108.277909][ T5851] Bluetooth: hci4: link tx timeout [ 108.284764][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.386443][ T7497] syzkaller0: entered promiscuous mode [ 108.391971][ T7497] syzkaller0: entered allmulticast mode [ 110.003085][ T7515] openvswitch: netlink: IP tunnel dst address not specified [ 110.074826][ T7519] xt_l2tp: missing protocol rule (udp|l2tpip) [ 110.373800][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 110.659352][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.667738][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.717654][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'. [ 110.909256][ T7525] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 110.935868][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 110.947865][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 111.174957][ T7553] FAULT_INJECTION: forcing a failure. [ 111.174957][ T7553] name failslab, interval 1, probability 0, space 0, times 1 [ 111.206516][ T7553] CPU: 1 UID: 0 PID: 7553 Comm: syz.4.418 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 111.217181][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.227264][ T7553] Call Trace: [ 111.230559][ T7553] [ 111.233500][ T7553] dump_stack_lvl+0x241/0x360 [ 111.238201][ T7553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.243420][ T7553] ? __pfx__printk+0x10/0x10 [ 111.248028][ T7553] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 111.254020][ T7553] ? __pfx___might_resched+0x10/0x10 [ 111.259319][ T7553] should_fail_ex+0x3b0/0x4e0 [ 111.264009][ T7553] should_failslab+0xac/0x100 [ 111.268718][ T7553] kmem_cache_alloc_node_noprof+0x77/0x380 [ 111.274615][ T7553] ? __alloc_skb+0x1c3/0x440 [ 111.279210][ T7553] __alloc_skb+0x1c3/0x440 [ 111.283657][ T7553] ? __pfx___alloc_skb+0x10/0x10 [ 111.288605][ T7553] ? netlink_autobind+0xd6/0x2f0 [ 111.293553][ T7553] ? netlink_autobind+0x2b0/0x2f0 [ 111.298690][ T7553] netlink_sendmsg+0x638/0xcb0 [ 111.303497][ T7553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.308799][ T7553] ? aa_sock_msg_perm+0x91/0x160 [ 111.313745][ T7553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.319040][ T7553] __sock_sendmsg+0x221/0x270 [ 111.323718][ T7553] ____sys_sendmsg+0x52a/0x7e0 [ 111.328498][ T7553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.333784][ T7553] ? __fget_files+0x2a/0x410 [ 111.338387][ T7553] ? __fget_files+0x2a/0x410 [ 111.342985][ T7553] __sys_sendmsg+0x269/0x350 [ 111.347580][ T7553] ? __pfx_lock_release+0x10/0x10 [ 111.352617][ T7553] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.357743][ T7553] ? __pfx_vfs_write+0x10/0x10 [ 111.362527][ T7553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.368865][ T7553] ? do_syscall_64+0x100/0x230 [ 111.373677][ T7553] ? do_syscall_64+0xb6/0x230 [ 111.378360][ T7553] do_syscall_64+0xf3/0x230 [ 111.382864][ T7553] ? clear_bhb_loop+0x35/0x90 [ 111.387539][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.393437][ T7553] RIP: 0033:0x7f7105985d29 [ 111.397855][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.417582][ T7553] RSP: 002b:00007f7106845038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.426000][ T7553] RAX: ffffffffffffffda RBX: 00007f7105b75fa0 RCX: 00007f7105985d29 [ 111.433975][ T7553] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000010 [ 111.441946][ T7553] RBP: 00007f7106845090 R08: 0000000000000000 R09: 0000000000000000 [ 111.449911][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.457983][ T7553] R13: 0000000000000000 R14: 00007f7105b75fa0 R15: 00007fffcb9ce718 [ 111.465977][ T7553] [ 111.895693][ T7580] syzkaller0: entered promiscuous mode [ 111.913595][ T7580] syzkaller0: entered allmulticast mode [ 112.114301][ T7596] netlink: 14 bytes leftover after parsing attributes in process `syz.0.427'. [ 113.531446][ T7593] bridge1: entered promiscuous mode [ 113.536826][ T7593] bridge1: entered allmulticast mode [ 113.548484][ T7593] team0: Port device bridge1 added [ 113.891251][ T7621] FAULT_INJECTION: forcing a failure. [ 113.891251][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 113.923765][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.1.433 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 113.934423][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 113.944502][ T7621] Call Trace: [ 113.947803][ T7621] [ 113.950760][ T7621] dump_stack_lvl+0x241/0x360 [ 113.955476][ T7621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.960705][ T7621] ? __pfx__printk+0x10/0x10 [ 113.965324][ T7621] ? __kmalloc_noprof+0xb5/0x4c0 [ 113.970269][ T7621] ? __pfx___might_resched+0x10/0x10 [ 113.975555][ T7621] should_fail_ex+0x3b0/0x4e0 [ 113.980235][ T7621] should_failslab+0xac/0x100 [ 113.984915][ T7621] __kmalloc_noprof+0xdd/0x4c0 [ 113.989681][ T7621] ? kernfs_fop_write_iter+0x15a/0x500 [ 113.995166][ T7621] kernfs_fop_write_iter+0x15a/0x500 [ 114.000477][ T7621] vfs_write+0xaeb/0xd30 [ 114.004720][ T7621] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 114.010534][ T7621] ? __pfx_vfs_write+0x10/0x10 [ 114.015302][ T7621] ? __fget_files+0x2a/0x410 [ 114.019904][ T7621] ? __fget_files+0x2a/0x410 [ 114.024507][ T7621] ksys_write+0x18f/0x2b0 [ 114.028854][ T7621] ? __pfx_ksys_write+0x10/0x10 [ 114.033711][ T7621] ? do_syscall_64+0x100/0x230 [ 114.038481][ T7621] ? do_syscall_64+0xb6/0x230 [ 114.043167][ T7621] do_syscall_64+0xf3/0x230 [ 114.047703][ T7621] ? clear_bhb_loop+0x35/0x90 [ 114.052383][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.058282][ T7621] RIP: 0033:0x7fddbb385d29 [ 114.062699][ T7621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.082302][ T7621] RSP: 002b:00007fddbc1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.090717][ T7621] RAX: ffffffffffffffda RBX: 00007fddbb575fa0 RCX: 00007fddbb385d29 [ 114.098688][ T7621] RDX: 0000000000000005 RSI: 00000000200001c0 RDI: 0000000000000006 [ 114.106656][ T7621] RBP: 00007fddbc1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.114622][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.122610][ T7621] R13: 0000000000000000 R14: 00007fddbb575fa0 R15: 00007ffe5844c938 [ 114.130630][ T7621] [ 114.192459][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 114.206506][ T7625] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 114.339493][ T7637] netlink: 'syz.1.437': attribute type 5 has an invalid length. [ 114.882379][ T7635] xt_CT: No such helper "syz0" [ 114.938017][ T7667] syzkaller0: entered promiscuous mode [ 114.944293][ T7667] syzkaller0: entered allmulticast mode [ 114.965707][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 115.021365][ T7673] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 115.040349][ T7673] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 115.104150][ T7676] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 115.148557][ T7676] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 117.145338][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 117.181452][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 117.210736][ T7701] macvtap2: entered promiscuous mode [ 117.233792][ T7713] netlink: 'syz.4.451': attribute type 22 has an invalid length. [ 117.244023][ T7701] dummy0: entered promiscuous mode [ 117.256798][ T7701] macvtap2: entered allmulticast mode [ 117.273562][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 117.285940][ T7701] dummy0: entered allmulticast mode [ 117.340015][ T7715] syzkaller1: entered promiscuous mode [ 117.367623][ T7715] syzkaller1: entered allmulticast mode [ 117.390420][ T7715] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 117.558762][ T7732] tipc: Started in network mode [ 117.576041][ T7732] tipc: Node identity dea2f2c0f784, cluster identity 4711 [ 117.583359][ T7732] tipc: Enabled bearer , priority 0 [ 117.603186][ T7732] syzkaller0: entered promiscuous mode [ 117.613275][ T7732] syzkaller0: entered allmulticast mode [ 117.629298][ T7732] tipc: Resetting bearer [ 117.837006][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 118.005007][ T7710] delete_channel: no stack [ 118.141026][ T7752] netlink: zone id is out of range [ 118.163967][ T7752] netlink: zone id is out of range [ 118.169961][ T7752] netlink: zone id is out of range [ 118.177831][ T7752] netlink: zone id is out of range [ 118.183923][ T7752] netlink: zone id is out of range [ 118.190193][ T7752] netlink: zone id is out of range [ 118.197411][ T7752] netlink: zone id is out of range [ 118.207307][ T7752] netlink: zone id is out of range [ 118.215384][ T7752] netlink: zone id is out of range [ 118.266478][ T7756] netlink: 'syz.0.460': attribute type 4 has an invalid length. [ 118.472154][ T7729] tipc: Resetting bearer [ 118.476902][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 118.575891][ T7729] tipc: Disabling bearer [ 118.602739][ T7758] team_slave_0: entered promiscuous mode [ 118.608795][ T7758] team_slave_1: entered promiscuous mode [ 118.615236][ T7763] netlink: 32 bytes leftover after parsing attributes in process `syz.4.463'. [ 118.622340][ T7758] macvtap1: entered promiscuous mode [ 118.646724][ T7758] team0: entered promiscuous mode [ 118.653326][ T7758] macvtap1: entered allmulticast mode [ 118.658852][ T7763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.671918][ T7758] team0: entered allmulticast mode [ 118.686211][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 118.705065][ T7758] team_slave_0: entered allmulticast mode [ 118.729084][ T7758] team_slave_1: entered allmulticast mode [ 118.739004][ T7758] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.756397][ T7763] tipc: Started in network mode [ 118.761323][ T7763] tipc: Node identity 7, cluster identity 1 [ 118.774586][ T7771] FAULT_INJECTION: forcing a failure. [ 118.774586][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 118.787683][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.1.466 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 118.798296][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.808384][ T7771] Call Trace: [ 118.811664][ T7771] [ 118.814595][ T7771] dump_stack_lvl+0x241/0x360 [ 118.819290][ T7771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.824502][ T7771] ? __pfx__printk+0x10/0x10 [ 118.829114][ T7771] ? is_bpf_text_address+0x26/0x2a0 [ 118.834325][ T7771] should_fail_ex+0x3b0/0x4e0 [ 118.839009][ T7771] should_failslab+0xac/0x100 [ 118.843714][ T7771] ? dst_alloc+0x12b/0x190 [ 118.848130][ T7771] kmem_cache_alloc_noprof+0x70/0x380 [ 118.853512][ T7771] dst_alloc+0x12b/0x190 [ 118.857760][ T7771] ip_route_input_rcu+0x23ba/0x3890 [ 118.862972][ T7771] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 118.868528][ T7771] ? __pfx_lock_acquire+0x10/0x10 [ 118.873569][ T7771] ? ipt_do_table+0x157a/0x1860 [ 118.878435][ T7771] ? ip_route_input_noref+0xad/0x250 [ 118.883730][ T7771] ip_route_input_noref+0x167/0x250 [ 118.888934][ T7771] ? __pfx_ip_route_input_noref+0x10/0x10 [ 118.894669][ T7771] ip_rcv_finish_core+0x5b1/0x1b50 [ 118.899788][ T7771] ip_rcv_finish+0x14a/0x560 [ 118.904377][ T7771] ? NF_HOOK+0x392/0x450 [ 118.908616][ T7771] ? __pfx_ip_rcv_finish+0x10/0x10 [ 118.913752][ T7771] NF_HOOK+0x3a4/0x450 [ 118.917825][ T7771] ? NF_HOOK+0x9a/0x450 [ 118.921981][ T7771] ? __pfx_NF_HOOK+0x10/0x10 [ 118.926573][ T7771] ? ip_rcv_core+0x801/0xd10 [ 118.931162][ T7771] ? __pfx_ip_rcv_finish+0x10/0x10 [ 118.936285][ T7771] ? __pfx_ip_rcv+0x10/0x10 [ 118.940792][ T7771] __netif_receive_skb+0x2bf/0x650 [ 118.945917][ T7771] ? __pfx_lock_acquire+0x10/0x10 [ 118.950943][ T7771] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 118.957186][ T7771] ? __pfx___netif_receive_skb+0x10/0x10 [ 118.962829][ T7771] ? build_skb+0x52/0x2a0 [ 118.967164][ T7771] ? tun_get_user+0x2173/0x48a0 [ 118.972107][ T7771] ? tun_chr_write_iter+0x10d/0x1f0 [ 118.977570][ T7771] ? do_syscall_64+0xf3/0x230 [ 118.982252][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.988361][ T7771] ? tun_rx_batched+0x160/0x8f0 [ 118.993231][ T7771] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 118.998955][ T7771] ? read_tsc+0x9/0x20 [ 119.003024][ T7771] ? netif_receive_skb+0x131/0x890 [ 119.008139][ T7771] ? netif_receive_skb+0x131/0x890 [ 119.013255][ T7771] netif_receive_skb+0x1e8/0x890 [ 119.018211][ T7771] ? tun_rx_batched+0x160/0x8f0 [ 119.023079][ T7771] ? __pfx_netif_receive_skb+0x10/0x10 [ 119.028553][ T7771] ? tun_rx_batched+0x160/0x8f0 [ 119.033411][ T7771] tun_rx_batched+0x1b7/0x8f0 [ 119.038111][ T7771] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.044652][ T7771] ? __pfx_lock_acquire+0x10/0x10 [ 119.049868][ T7771] ? __pfx_tun_rx_batched+0x10/0x10 [ 119.055091][ T7771] tun_get_user+0x30cc/0x48a0 [ 119.059785][ T7771] ? tun_get_user+0x2bba/0x48a0 [ 119.064642][ T7771] ? tun_get_user+0x875/0x48a0 [ 119.069426][ T7771] ? __pfx_tun_get_user+0x10/0x10 [ 119.074482][ T7771] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.079942][ T7771] ? tun_get+0x1e/0x2f0 [ 119.084100][ T7771] ? __pfx_lock_release+0x10/0x10 [ 119.089137][ T7771] ? tun_get+0x1e/0x2f0 [ 119.093294][ T7771] ? tun_get+0x27d/0x2f0 [ 119.097540][ T7771] tun_chr_write_iter+0x10d/0x1f0 [ 119.102583][ T7771] vfs_write+0xaeb/0xd30 [ 119.106831][ T7771] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 119.112392][ T7771] ? __pfx_vfs_write+0x10/0x10 [ 119.117203][ T7771] ? __fget_files+0x2a/0x410 [ 119.121899][ T7771] ? __fget_files+0x2a/0x410 [ 119.126499][ T7771] ksys_write+0x18f/0x2b0 [ 119.130828][ T7771] ? __pfx_ksys_write+0x10/0x10 [ 119.135682][ T7771] ? do_syscall_64+0x100/0x230 [ 119.140483][ T7771] ? do_syscall_64+0xb6/0x230 [ 119.145172][ T7771] do_syscall_64+0xf3/0x230 [ 119.149679][ T7771] ? clear_bhb_loop+0x35/0x90 [ 119.154360][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.160259][ T7771] RIP: 0033:0x7fddbb3847df [ 119.164689][ T7771] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 119.184314][ T7771] RSP: 002b:00007fddbc1f7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 119.192752][ T7771] RAX: ffffffffffffffda RBX: 00007fddbb575fa0 RCX: 00007fddbb3847df [ 119.200729][ T7771] RDX: 00000000000000b2 RSI: 0000000020000200 RDI: 00000000000000c8 [ 119.208726][ T7771] RBP: 00007fddbc1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.216712][ T7771] R10: 00000000000000b2 R11: 0000000000000293 R12: 0000000000000001 [ 119.224687][ T7771] R13: 0000000000000001 R14: 00007fddbb575fa0 R15: 00007ffe5844c938 [ 119.232676][ T7771] [ 119.253825][ T7763] tipc: Node number set to 7 [ 119.448753][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.465'. [ 119.485499][ T7767] netlink: 4144 bytes leftover after parsing attributes in process `syz.3.464'. [ 119.502891][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 119.647065][ T7784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.816586][ T7792] vlan2: entered promiscuous mode [ 119.837779][ T7794] delete_channel: no stack [ 120.531370][ T7829] ax25_connect(): syz.3.481 uses autobind, please contact jreuter@yaina.de [ 120.659030][ T7835] syzkaller1: entered promiscuous mode [ 120.666800][ T7835] syzkaller1: entered allmulticast mode [ 121.016744][ T7842] lo speed is unknown, defaulting to 1000 [ 121.034703][ T7846] bridge1: entered promiscuous mode [ 121.039977][ T7846] bridge1: entered allmulticast mode [ 121.052558][ T7846] team0: Port device bridge1 added [ 121.059244][ T7842] lo speed is unknown, defaulting to 1000 [ 121.062310][ T7846] netlink: 'syz.4.488': attribute type 10 has an invalid length. [ 121.088821][ T7842] lo speed is unknown, defaulting to 1000 [ 121.091371][ T7846] bridge0: port 3(ip6gretap0) entered blocking state [ 121.102012][ T7846] bridge0: port 3(ip6gretap0) entered disabled state [ 121.109536][ T7846] ip6gretap0: entered allmulticast mode [ 121.116173][ T7842] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.117008][ T7846] ip6gretap0: entered promiscuous mode [ 121.158808][ T7842] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.219960][ T7842] lo speed is unknown, defaulting to 1000 [ 121.229655][ T7851] netlink: 'syz.0.490': attribute type 3 has an invalid length. [ 121.242111][ T7842] lo speed is unknown, defaulting to 1000 [ 121.251279][ T7842] lo speed is unknown, defaulting to 1000 [ 121.267206][ T7842] lo speed is unknown, defaulting to 1000 [ 121.275462][ T7842] lo speed is unknown, defaulting to 1000 [ 121.511937][ T7863] syzkaller1: entered promiscuous mode [ 121.534671][ T7863] syzkaller1: entered allmulticast mode [ 121.579756][ T7865] FAULT_INJECTION: forcing a failure. [ 121.579756][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 121.596551][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.0.496 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 121.607342][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.617443][ T7865] Call Trace: [ 121.620761][ T7865] [ 121.623718][ T7865] dump_stack_lvl+0x241/0x360 [ 121.628449][ T7865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.633869][ T7865] ? __pfx__printk+0x10/0x10 [ 121.638510][ T7865] should_fail_ex+0x3b0/0x4e0 [ 121.643222][ T7865] should_failslab+0xac/0x100 [ 121.647947][ T7865] __kmalloc_cache_noprof+0x70/0x390 [ 121.653301][ T7865] ? __hw_addr_add_ex+0x1a8/0x610 [ 121.658376][ T7865] __hw_addr_add_ex+0x1a8/0x610 [ 121.663278][ T7865] dev_addr_init+0x143/0x230 [ 121.667912][ T7865] ? __pfx_dev_addr_init+0x10/0x10 [ 121.673069][ T7865] ? read_word_at_a_time+0xe/0x20 [ 121.678139][ T7865] alloc_netdev_mqs+0x2ae/0x1080 [ 121.683114][ T7865] ? __pfx_macvtap_setup+0x10/0x10 [ 121.688356][ T7865] ? __pfx_snprintf+0x10/0x10 [ 121.693079][ T7865] rtnl_create_link+0x2f9/0xc20 [ 121.698012][ T7865] rtnl_newlink_create+0x210/0xa40 [ 121.703165][ T7865] ? __pfx___mutex_lock+0x10/0x10 [ 121.708496][ T7865] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 121.714181][ T7865] ? ns_capable+0x8a/0xf0 [ 121.718558][ T7865] rtnl_newlink+0x1c7e/0x2210 [ 121.723307][ T7865] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.728372][ T7865] ? __netlink_deliver_tap+0x56b/0x7f0 [ 121.733885][ T7865] ? __pfx_validate_chain+0x10/0x10 [ 121.739143][ T7865] ? __sock_sendmsg+0x221/0x270 [ 121.744044][ T7865] ? ____sys_sendmsg+0x52a/0x7e0 [ 121.749028][ T7865] ? __sys_sendmsg+0x269/0x350 [ 121.754103][ T7865] ? do_syscall_64+0xf3/0x230 [ 121.758831][ T7865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.764973][ T7865] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.771184][ T7865] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.777583][ T7865] ? mark_lock+0x9a/0x360 [ 121.781983][ T7865] ? __lock_acquire+0x1397/0x2100 [ 121.787107][ T7865] ? __pfx_lock_release+0x10/0x10 [ 121.792218][ T7865] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.797299][ T7865] rtnetlink_rcv_msg+0x791/0xcf0 [ 121.802280][ T7865] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 121.807476][ T7865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.812961][ T7865] ? ref_tracker_free+0x643/0x7e0 [ 121.818035][ T7865] netlink_rcv_skb+0x1e3/0x430 [ 121.822817][ T7865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.828303][ T7865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.833633][ T7865] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.838876][ T7865] netlink_unicast+0x7f6/0x990 [ 121.843781][ T7865] ? __pfx_netlink_unicast+0x10/0x10 [ 121.849097][ T7865] ? __virt_addr_valid+0x45f/0x530 [ 121.854245][ T7865] ? __phys_addr_symbol+0x2f/0x70 [ 121.859303][ T7865] ? __check_object_size+0x47a/0x730 [ 121.864627][ T7865] netlink_sendmsg+0x8e4/0xcb0 [ 121.869440][ T7865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.874763][ T7865] ? aa_sock_msg_perm+0x91/0x160 [ 121.879740][ T7865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.885409][ T7865] __sock_sendmsg+0x221/0x270 [ 121.890119][ T7865] ____sys_sendmsg+0x52a/0x7e0 [ 121.894934][ T7865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.900247][ T7865] ? __fget_files+0x2a/0x410 [ 121.904878][ T7865] ? __fget_files+0x2a/0x410 [ 121.909511][ T7865] __sys_sendmsg+0x269/0x350 [ 121.914136][ T7865] ? __pfx_lock_release+0x10/0x10 [ 121.919196][ T7865] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.924352][ T7865] ? __pfx_vfs_write+0x10/0x10 [ 121.929183][ T7865] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.935540][ T7865] ? do_syscall_64+0x100/0x230 [ 121.940347][ T7865] ? do_syscall_64+0xb6/0x230 [ 121.945061][ T7865] do_syscall_64+0xf3/0x230 [ 121.949593][ T7865] ? clear_bhb_loop+0x35/0x90 [ 121.954299][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.960221][ T7865] RIP: 0033:0x7fc3d5785d29 [ 121.964657][ T7865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.984307][ T7865] RSP: 002b:00007fc3d6583038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.992760][ T7865] RAX: ffffffffffffffda RBX: 00007fc3d5975fa0 RCX: 00007fc3d5785d29 [ 122.000764][ T7865] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000010 [ 122.008767][ T7865] RBP: 00007fc3d6583090 R08: 0000000000000000 R09: 0000000000000000 [ 122.017056][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.025064][ T7865] R13: 0000000000000000 R14: 00007fc3d5975fa0 R15: 00007ffe13379ce8 [ 122.033088][ T7865] [ 122.082634][ T7878] lo speed is unknown, defaulting to 1000 [ 122.546492][ T7897] ip6gretap1: entered promiscuous mode [ 122.552452][ T7897] ip6gretap1: entered allmulticast mode [ 122.662127][ T7905] __nla_validate_parse: 7 callbacks suppressed [ 122.662670][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'. [ 122.691153][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'. [ 122.863730][ T7918] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 122.922210][ T7918] team0: Device veth1_macvtap failed to register rx_handler [ 122.976266][ T7921] xt_TCPMSS: Only works on TCP SYN packets [ 123.074772][ T7918] syz.1.511 (7918) used greatest stack depth: 17584 bytes left [ 123.204457][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 123.213351][ T7935] FAULT_INJECTION: forcing a failure. [ 123.213351][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 123.230132][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 123.260814][ T7937] nbd: nbd0 already in use [ 123.269780][ T7935] CPU: 0 UID: 0 PID: 7935 Comm: syz.1.515 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 123.280433][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 123.290525][ T7935] Call Trace: [ 123.293840][ T7935] [ 123.296825][ T7935] dump_stack_lvl+0x241/0x360 [ 123.301555][ T7935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.306799][ T7935] ? __pfx__printk+0x10/0x10 [ 123.311437][ T7935] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 123.316849][ T7935] ? __pfx___might_resched+0x10/0x10 [ 123.322195][ T7935] should_fail_ex+0x3b0/0x4e0 [ 123.326924][ T7935] should_failslab+0xac/0x100 [ 123.331644][ T7935] __kmalloc_node_noprof+0xe1/0x4d0 [ 123.336886][ T7935] ? __kvmalloc_node_noprof+0x72/0x190 [ 123.342389][ T7935] ? __asan_memset+0x23/0x50 [ 123.347020][ T7935] __kvmalloc_node_noprof+0x72/0x190 [ 123.352344][ T7935] alloc_netdev_mqs+0x8d4/0x1080 [ 123.357335][ T7935] rtnl_create_link+0x2f9/0xc20 [ 123.362244][ T7935] rtnl_newlink_create+0x210/0xa40 [ 123.367406][ T7935] ? __pfx___mutex_lock+0x10/0x10 [ 123.372472][ T7935] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 123.378154][ T7935] ? ns_capable+0x8a/0xf0 [ 123.382543][ T7935] rtnl_newlink+0x1c7e/0x2210 [ 123.387285][ T7935] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.392346][ T7935] ? __netlink_deliver_tap+0x56b/0x7f0 [ 123.397846][ T7935] ? __pfx_validate_chain+0x10/0x10 [ 123.403085][ T7935] ? __sock_sendmsg+0x221/0x270 [ 123.407975][ T7935] ? ____sys_sendmsg+0x52a/0x7e0 [ 123.412952][ T7935] ? __sys_sendmsg+0x269/0x350 [ 123.417841][ T7935] ? do_syscall_64+0xf3/0x230 [ 123.422558][ T7935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.428700][ T7935] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.434730][ T7935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.441119][ T7935] ? mark_lock+0x9a/0x360 [ 123.445501][ T7935] ? __lock_acquire+0x1397/0x2100 [ 123.450597][ T7935] ? __pfx_lock_release+0x10/0x10 [ 123.455673][ T7935] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.460736][ T7935] rtnetlink_rcv_msg+0x791/0xcf0 [ 123.465715][ T7935] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 123.470882][ T7935] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.476392][ T7935] ? ref_tracker_free+0x643/0x7e0 [ 123.481466][ T7935] netlink_rcv_skb+0x1e3/0x430 [ 123.486272][ T7935] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.491803][ T7935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.497164][ T7935] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.502406][ T7935] netlink_unicast+0x7f6/0x990 [ 123.507213][ T7935] ? __pfx_netlink_unicast+0x10/0x10 [ 123.512538][ T7935] ? __virt_addr_valid+0x45f/0x530 [ 123.517777][ T7935] ? __phys_addr_symbol+0x2f/0x70 [ 123.522844][ T7935] ? __check_object_size+0x47a/0x730 [ 123.528182][ T7935] netlink_sendmsg+0x8e4/0xcb0 [ 123.533008][ T7935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.538353][ T7935] ? aa_sock_msg_perm+0x91/0x160 [ 123.543339][ T7935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.548667][ T7935] __sock_sendmsg+0x221/0x270 [ 123.553474][ T7935] ____sys_sendmsg+0x52a/0x7e0 [ 123.558283][ T7935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.563610][ T7935] ? __fget_files+0x2a/0x410 [ 123.568237][ T7935] ? __fget_files+0x2a/0x410 [ 123.572883][ T7935] __sys_sendmsg+0x269/0x350 [ 123.577499][ T7935] ? __pfx_lock_release+0x10/0x10 [ 123.582534][ T7935] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.587662][ T7935] ? __pfx_vfs_write+0x10/0x10 [ 123.592452][ T7935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.598784][ T7935] ? do_syscall_64+0x100/0x230 [ 123.603569][ T7935] ? do_syscall_64+0xb6/0x230 [ 123.608253][ T7935] do_syscall_64+0xf3/0x230 [ 123.612761][ T7935] ? clear_bhb_loop+0x35/0x90 [ 123.617441][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.623361][ T7935] RIP: 0033:0x7fddbb385d29 [ 123.627780][ T7935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.647394][ T7935] RSP: 002b:00007fddbc1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.655819][ T7935] RAX: ffffffffffffffda RBX: 00007fddbb575fa0 RCX: 00007fddbb385d29 [ 123.663798][ T7935] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000010 [ 123.671772][ T7935] RBP: 00007fddbc1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.679746][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.687725][ T7935] R13: 0000000000000000 R14: 00007fddbb575fa0 R15: 00007ffe5844c938 [ 123.695716][ T7935] [ 123.728966][ T7949] tipc: Failed to obtain node identity [ 123.767017][ T7949] tipc: Enabling of bearer rejected, failed to enable media [ 123.958117][ T7964] net_ratelimit: 13 callbacks suppressed [ 123.958136][ T7964] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 124.039989][ T7970] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 124.434483][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 124.448485][ T7995] FAULT_INJECTION: forcing a failure. [ 124.448485][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 124.464546][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.0.532 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 124.475192][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.485283][ T7995] Call Trace: [ 124.488588][ T7995] [ 124.491563][ T7995] dump_stack_lvl+0x241/0x360 [ 124.496459][ T7995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.501703][ T7995] ? __pfx__printk+0x10/0x10 [ 124.506330][ T7995] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 124.511738][ T7995] ? __pfx___might_resched+0x10/0x10 [ 124.517076][ T7995] should_fail_ex+0x3b0/0x4e0 [ 124.521818][ T7995] should_failslab+0xac/0x100 [ 124.526530][ T7995] __kmalloc_node_noprof+0xe1/0x4d0 [ 124.531743][ T7995] ? __kvmalloc_node_noprof+0x72/0x190 [ 124.537211][ T7995] __kvmalloc_node_noprof+0x72/0x190 [ 124.542500][ T7995] alloc_netdev_mqs+0xa72/0x1080 [ 124.547453][ T7995] rtnl_create_link+0x2f9/0xc20 [ 124.552309][ T7995] rtnl_newlink_create+0x210/0xa40 [ 124.557423][ T7995] ? __pfx___mutex_lock+0x10/0x10 [ 124.562553][ T7995] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 124.568198][ T7995] ? ns_capable+0x8a/0xf0 [ 124.572541][ T7995] rtnl_newlink+0x1c7e/0x2210 [ 124.577242][ T7995] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.582275][ T7995] ? __netlink_deliver_tap+0x56b/0x7f0 [ 124.587741][ T7995] ? __pfx_validate_chain+0x10/0x10 [ 124.592943][ T7995] ? __sock_sendmsg+0x221/0x270 [ 124.597797][ T7995] ? ____sys_sendmsg+0x52a/0x7e0 [ 124.602759][ T7995] ? __sys_sendmsg+0x269/0x350 [ 124.607539][ T7995] ? do_syscall_64+0xf3/0x230 [ 124.612245][ T7995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.618513][ T7995] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.624503][ T7995] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.630844][ T7995] ? mark_lock+0x9a/0x360 [ 124.635182][ T7995] ? __lock_acquire+0x1397/0x2100 [ 124.640235][ T7995] ? __pfx_lock_release+0x10/0x10 [ 124.645296][ T7995] ? __pfx_rtnl_newlink+0x10/0x10 [ 124.650338][ T7995] rtnetlink_rcv_msg+0x791/0xcf0 [ 124.655322][ T7995] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 124.660464][ T7995] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.666051][ T7995] ? ref_tracker_free+0x643/0x7e0 [ 124.671138][ T7995] netlink_rcv_skb+0x1e3/0x430 [ 124.675939][ T7995] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.681418][ T7995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.686746][ T7995] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.691983][ T7995] netlink_unicast+0x7f6/0x990 [ 124.696772][ T7995] ? __pfx_netlink_unicast+0x10/0x10 [ 124.702058][ T7995] ? __virt_addr_valid+0x45f/0x530 [ 124.707178][ T7995] ? __phys_addr_symbol+0x2f/0x70 [ 124.712209][ T7995] ? __check_object_size+0x47a/0x730 [ 124.717507][ T7995] netlink_sendmsg+0x8e4/0xcb0 [ 124.722292][ T7995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.727586][ T7995] ? aa_sock_msg_perm+0x91/0x160 [ 124.732540][ T7995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.737833][ T7995] __sock_sendmsg+0x221/0x270 [ 124.742524][ T7995] ____sys_sendmsg+0x52a/0x7e0 [ 124.747312][ T7995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.752602][ T7995] ? __fget_files+0x2a/0x410 [ 124.757201][ T7995] ? __fget_files+0x2a/0x410 [ 124.761803][ T7995] __sys_sendmsg+0x269/0x350 [ 124.766397][ T7995] ? __pfx_lock_release+0x10/0x10 [ 124.771442][ T7995] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.776582][ T7995] ? __pfx_vfs_write+0x10/0x10 [ 124.781377][ T7995] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.787711][ T7995] ? do_syscall_64+0x100/0x230 [ 124.792496][ T7995] ? do_syscall_64+0xb6/0x230 [ 124.797186][ T7995] do_syscall_64+0xf3/0x230 [ 124.801701][ T7995] ? clear_bhb_loop+0x35/0x90 [ 124.806394][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.812300][ T7995] RIP: 0033:0x7fc3d5785d29 [ 124.816745][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.836355][ T7995] RSP: 002b:00007fc3d6583038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.844778][ T7995] RAX: ffffffffffffffda RBX: 00007fc3d5975fa0 RCX: 00007fc3d5785d29 [ 124.852756][ T7995] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000010 [ 124.860747][ T7995] RBP: 00007fc3d6583090 R08: 0000000000000000 R09: 0000000000000000 [ 124.868730][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.876766][ T7995] R13: 0000000000000000 R14: 00007fc3d5975fa0 R15: 00007ffe13379ce8 [ 124.884781][ T7995] [ 124.975016][ T8002] netlink: 168 bytes leftover after parsing attributes in process `syz.2.534'. [ 125.013348][ T8007] FAULT_INJECTION: forcing a failure. [ 125.013348][ T8007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.053393][ T8007] CPU: 1 UID: 0 PID: 8007 Comm: syz.4.536 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 125.064054][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.074139][ T8007] Call Trace: [ 125.077447][ T8007] [ 125.080396][ T8007] dump_stack_lvl+0x241/0x360 [ 125.085109][ T8007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.090343][ T8007] ? __pfx__printk+0x10/0x10 [ 125.094968][ T8007] ? __pfx_lock_release+0x10/0x10 [ 125.100108][ T8007] should_fail_ex+0x3b0/0x4e0 [ 125.104815][ T8007] _copy_from_user+0x2f/0xc0 [ 125.109432][ T8007] ____sys_sendmsg+0x2ef/0x7e0 [ 125.114230][ T8007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.119537][ T8007] ? __fget_files+0x2a/0x410 [ 125.124162][ T8007] ? __fget_files+0x2a/0x410 [ 125.128788][ T8007] __sys_sendmmsg+0x36a/0x720 [ 125.133505][ T8007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.138774][ T8007] ? __pfx_lock_release+0x10/0x10 [ 125.143827][ T8007] ? kstrtouint_from_user+0x128/0x190 [ 125.149248][ T8007] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 125.155178][ T8007] ? ksys_write+0x22a/0x2b0 [ 125.159704][ T8007] ? __pfx_lock_release+0x10/0x10 [ 125.164765][ T8007] ? vfs_write+0x730/0xd30 [ 125.169208][ T8007] ? __mutex_unlock_slowpath+0x21e/0x790 [ 125.174890][ T8007] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.180906][ T8007] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.187274][ T8007] ? do_syscall_64+0x100/0x230 [ 125.192084][ T8007] __x64_sys_sendmmsg+0xa0/0xb0 [ 125.196983][ T8007] do_syscall_64+0xf3/0x230 [ 125.201526][ T8007] ? clear_bhb_loop+0x35/0x90 [ 125.206237][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.212171][ T8007] RIP: 0033:0x7f7105985d29 [ 125.216626][ T8007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.237212][ T8007] RSP: 002b:00007f7106845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.245666][ T8007] RAX: ffffffffffffffda RBX: 00007f7105b75fa0 RCX: 00007f7105985d29 [ 125.253705][ T8007] RDX: 0000000000000002 RSI: 0000000020000380 RDI: 0000000000000003 [ 125.261712][ T8007] RBP: 00007f7106845090 R08: 0000000000000000 R09: 0000000000000000 [ 125.269719][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.278246][ T8007] R13: 0000000000000000 R14: 00007f7105b75fa0 R15: 00007fffcb9ce718 [ 125.286268][ T8007] [ 125.415856][ T8020] syzkaller1: entered promiscuous mode [ 125.435978][ T8020] syzkaller1: entered allmulticast mode [ 125.941535][ T8050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.545'. [ 126.101636][ T8059] netlink: 44 bytes leftover after parsing attributes in process `syz.1.548'. [ 126.124272][ T8063] FAULT_INJECTION: forcing a failure. [ 126.124272][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 126.148927][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.4.551 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 126.159576][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 126.169662][ T8063] Call Trace: [ 126.172971][ T8063] [ 126.175929][ T8063] dump_stack_lvl+0x241/0x360 [ 126.180647][ T8063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.185888][ T8063] ? __pfx__printk+0x10/0x10 [ 126.190517][ T8063] ? __kmalloc_cache_noprof+0x48/0x390 [ 126.196012][ T8063] ? __pfx___might_resched+0x10/0x10 [ 126.201334][ T8063] ? stack_trace_save+0x118/0x1d0 [ 126.206396][ T8063] should_fail_ex+0x3b0/0x4e0 [ 126.211111][ T8063] should_failslab+0xac/0x100 [ 126.215846][ T8063] __kmalloc_cache_noprof+0x70/0x390 [ 126.221173][ T8063] ? __scm_send+0x5d3/0x1410 [ 126.225807][ T8063] ? find_get_pid+0x1e/0x280 [ 126.230441][ T8063] __scm_send+0x5d3/0x1410 [ 126.234918][ T8063] unix_stream_sendmsg+0x179/0x10e0 [ 126.240165][ T8063] ? aa_sk_perm+0x96d/0xab0 [ 126.244717][ T8063] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 126.250917][ T8063] ? aa_sock_msg_perm+0x91/0x160 [ 126.255900][ T8063] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 126.261596][ T8063] __sock_sendmsg+0x221/0x270 [ 126.266312][ T8063] ____sys_sendmsg+0x52a/0x7e0 [ 126.271166][ T8063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.276493][ T8063] ? __fget_files+0x2a/0x410 [ 126.281302][ T8063] ? __fget_files+0x2a/0x410 [ 126.286029][ T8063] __sys_sendmmsg+0x36a/0x720 [ 126.290773][ T8063] ? __pfx___sys_sendmmsg+0x10/0x10 [ 126.296024][ T8063] ? __pfx_lock_release+0x10/0x10 [ 126.301092][ T8063] ? kstrtouint_from_user+0x128/0x190 [ 126.306564][ T8063] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 126.312503][ T8063] ? ksys_write+0x22a/0x2b0 [ 126.317039][ T8063] ? __pfx_lock_release+0x10/0x10 [ 126.322454][ T8063] ? vfs_write+0x730/0xd30 [ 126.326913][ T8063] ? __mutex_unlock_slowpath+0x21e/0x790 [ 126.332610][ T8063] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 126.338648][ T8063] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.345027][ T8063] ? do_syscall_64+0x100/0x230 [ 126.349841][ T8063] __x64_sys_sendmmsg+0xa0/0xb0 [ 126.354744][ T8063] do_syscall_64+0xf3/0x230 [ 126.359293][ T8063] ? clear_bhb_loop+0x35/0x90 [ 126.364000][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.369930][ T8063] RIP: 0033:0x7f7105985d29 [ 126.374369][ T8063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.393993][ T8063] RSP: 002b:00007f7106845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.402412][ T8063] RAX: ffffffffffffffda RBX: 00007f7105b75fa0 RCX: 00007f7105985d29 [ 126.410387][ T8063] RDX: 0000000000000002 RSI: 0000000020000380 RDI: 0000000000000003 [ 126.418365][ T8063] RBP: 00007f7106845090 R08: 0000000000000000 R09: 0000000000000000 [ 126.426345][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.434321][ T8063] R13: 0000000000000000 R14: 00007f7105b75fa0 R15: 00007fffcb9ce718 [ 126.442307][ T8063] [ 126.718614][ T8082] atomic_op ffff888079d98998 conn xmit_atomic 0000000000000000 [ 126.797704][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 126.958343][ T8090] lo speed is unknown, defaulting to 1000 [ 127.318856][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 127.518250][ T8116] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 127.627757][ T8120] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 127.817544][ T8128] __nla_validate_parse: 4 callbacks suppressed [ 127.817561][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.569'. [ 127.897436][ T8127] syzkaller0: entered promiscuous mode [ 127.903878][ T8127] syzkaller0: entered allmulticast mode [ 128.123152][ T8135] raw_sendmsg: syz.2.570 forgot to set AF_INET. Fix it! [ 128.257081][ T8145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.258615][ T8146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.279893][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 128.323354][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 128.344482][ T8147] netlink: 'syz.4.573': attribute type 10 has an invalid length. [ 128.352634][ T8145] netlink: 'syz.4.573': attribute type 10 has an invalid length. [ 129.808804][ T8138] netlink: 'syz.3.572': attribute type 3 has an invalid length. [ 130.022526][ T8164] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.053394][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 130.092776][ T8164] netlink: 25 bytes leftover after parsing attributes in process `syz.1.576'. [ 130.107224][ T8163] FAULT_INJECTION: forcing a failure. [ 130.107224][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 130.136119][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.0.578 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 130.146767][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 130.156847][ T8163] Call Trace: [ 130.160151][ T8163] [ 130.163108][ T8163] dump_stack_lvl+0x241/0x360 [ 130.167829][ T8163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.173066][ T8163] ? __pfx__printk+0x10/0x10 [ 130.177708][ T8163] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 130.183117][ T8163] ? __pfx___might_resched+0x10/0x10 [ 130.188437][ T8163] should_fail_ex+0x3b0/0x4e0 [ 130.193157][ T8163] should_failslab+0xac/0x100 [ 130.197878][ T8163] __kmalloc_node_noprof+0xe1/0x4d0 [ 130.201848][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 130.203095][ T8163] ? __kvmalloc_node_noprof+0x72/0x190 [ 130.217333][ T8163] __kvmalloc_node_noprof+0x72/0x190 [ 130.223009][ T8163] alloc_netdev_mqs+0xc0f/0x1080 [ 130.227992][ T8163] rtnl_create_link+0x2f9/0xc20 [ 130.232891][ T8163] rtnl_newlink_create+0x210/0xa40 [ 130.238043][ T8163] ? __pfx___mutex_lock+0x10/0x10 [ 130.243109][ T8163] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 130.248773][ T8163] ? ns_capable+0x8a/0xf0 [ 130.253134][ T8163] rtnl_newlink+0x1c7e/0x2210 [ 130.257866][ T8163] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.262918][ T8163] ? __netlink_deliver_tap+0x56b/0x7f0 [ 130.268406][ T8163] ? __pfx_validate_chain+0x10/0x10 [ 130.273634][ T8163] ? __sock_sendmsg+0x221/0x270 [ 130.278509][ T8163] ? ____sys_sendmsg+0x52a/0x7e0 [ 130.283481][ T8163] ? __sys_sendmsg+0x269/0x350 [ 130.288277][ T8163] ? do_syscall_64+0xf3/0x230 [ 130.292979][ T8163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.299096][ T8163] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 130.305118][ T8163] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.311494][ T8163] ? mark_lock+0x9a/0x360 [ 130.315866][ T8163] ? __lock_acquire+0x1397/0x2100 [ 130.320955][ T8163] ? __pfx_lock_release+0x10/0x10 [ 130.326028][ T8163] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.331087][ T8163] rtnetlink_rcv_msg+0x791/0xcf0 [ 130.336059][ T8163] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 130.341215][ T8163] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.346723][ T8163] ? ref_tracker_free+0x643/0x7e0 [ 130.351792][ T8163] netlink_rcv_skb+0x1e3/0x430 [ 130.356598][ T8163] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.362107][ T8163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.367455][ T8163] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.372694][ T8163] netlink_unicast+0x7f6/0x990 [ 130.377512][ T8163] ? __pfx_netlink_unicast+0x10/0x10 [ 130.382836][ T8163] ? __virt_addr_valid+0x45f/0x530 [ 130.388011][ T8163] ? __phys_addr_symbol+0x2f/0x70 [ 130.393106][ T8163] ? __check_object_size+0x47a/0x730 [ 130.398448][ T8163] netlink_sendmsg+0x8e4/0xcb0 [ 130.403269][ T8163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.408601][ T8163] ? aa_sock_msg_perm+0x91/0x160 [ 130.413606][ T8163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.418940][ T8163] __sock_sendmsg+0x221/0x270 [ 130.423668][ T8163] ____sys_sendmsg+0x52a/0x7e0 [ 130.428485][ T8163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.433817][ T8163] ? __fget_files+0x2a/0x410 [ 130.438474][ T8163] ? __fget_files+0x2a/0x410 [ 130.443098][ T8163] __sys_sendmsg+0x269/0x350 [ 130.447702][ T8163] ? __pfx_lock_release+0x10/0x10 [ 130.452733][ T8163] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.457861][ T8163] ? __pfx_vfs_write+0x10/0x10 [ 130.462739][ T8163] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.469075][ T8163] ? do_syscall_64+0x100/0x230 [ 130.473853][ T8163] ? do_syscall_64+0xb6/0x230 [ 130.478535][ T8163] do_syscall_64+0xf3/0x230 [ 130.483044][ T8163] ? clear_bhb_loop+0x35/0x90 [ 130.487720][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.493619][ T8163] RIP: 0033:0x7fc3d5785d29 [ 130.498039][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.517735][ T8163] RSP: 002b:00007fc3d6583038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.526157][ T8163] RAX: ffffffffffffffda RBX: 00007fc3d5975fa0 RCX: 00007fc3d5785d29 [ 130.534138][ T8163] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000010 [ 130.542123][ T8163] RBP: 00007fc3d6583090 R08: 0000000000000000 R09: 0000000000000000 [ 130.550133][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.558106][ T8163] R13: 0000000000000000 R14: 00007fc3d5975fa0 R15: 00007ffe13379ce8 [ 130.566100][ T8163] [ 130.629546][ T8171] team_slave_0: entered promiscuous mode [ 130.635350][ T8171] team_slave_1: entered promiscuous mode [ 130.653736][ T8171] macvtap1: entered promiscuous mode [ 130.671862][ T8171] team0: entered promiscuous mode [ 130.679990][ T8171] macvtap1: entered allmulticast mode [ 130.713758][ T8171] team0: entered allmulticast mode [ 130.732001][ T8171] team_slave_0: entered allmulticast mode [ 130.748963][ T8171] team_slave_1: entered allmulticast mode [ 130.759402][ T8171] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.782356][ T8175] team0: left allmulticast mode [ 130.788586][ T8175] team_slave_0: left allmulticast mode [ 130.800040][ T8175] team_slave_1: left allmulticast mode [ 130.806170][ T8175] team0: left promiscuous mode [ 130.817322][ T8175] team_slave_0: left promiscuous mode [ 130.823112][ T8175] team_slave_1: left promiscuous mode [ 131.083646][ T8205] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 131.208402][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 131.759723][ T8223] FAULT_INJECTION: forcing a failure. [ 131.759723][ T8223] name failslab, interval 1, probability 0, space 0, times 0 [ 131.772956][ T8223] CPU: 0 UID: 0 PID: 8223 Comm: syz.4.590 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 131.783589][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 131.793760][ T8223] Call Trace: [ 131.797060][ T8223] [ 131.799999][ T8223] dump_stack_lvl+0x241/0x360 [ 131.804691][ T8223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.809917][ T8223] ? __pfx__printk+0x10/0x10 [ 131.814528][ T8223] ? __kmalloc_noprof+0xb5/0x4c0 [ 131.819491][ T8223] ? __pfx___might_resched+0x10/0x10 [ 131.824799][ T8223] should_fail_ex+0x3b0/0x4e0 [ 131.829511][ T8223] should_failslab+0xac/0x100 [ 131.834220][ T8223] __kmalloc_noprof+0xdd/0x4c0 [ 131.839007][ T8223] ? sock_kmalloc+0xd7/0x160 [ 131.843613][ T8223] sock_kmalloc+0xd7/0x160 [ 131.848054][ T8223] ____sys_sendmsg+0x216/0x7e0 [ 131.852833][ T8223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.858152][ T8223] ? __fget_files+0x2a/0x410 [ 131.862749][ T8223] ? __sys_sendmmsg+0x392/0x720 [ 131.867603][ T8223] ? __might_fault+0xaa/0x120 [ 131.872282][ T8223] __sys_sendmmsg+0x36a/0x720 [ 131.876969][ T8223] ? __pfx___sys_sendmmsg+0x10/0x10 [ 131.882176][ T8223] ? __pfx_lock_release+0x10/0x10 [ 131.887229][ T8223] ? kstrtouint_from_user+0x128/0x190 [ 131.892620][ T8223] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 131.898516][ T8223] ? ksys_write+0x22a/0x2b0 [ 131.903020][ T8223] ? __pfx_lock_release+0x10/0x10 [ 131.908051][ T8223] ? vfs_write+0x730/0xd30 [ 131.912472][ T8223] ? __mutex_unlock_slowpath+0x21e/0x790 [ 131.918127][ T8223] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 131.924115][ T8223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.930451][ T8223] ? do_syscall_64+0x100/0x230 [ 131.935247][ T8223] __x64_sys_sendmmsg+0xa0/0xb0 [ 131.940109][ T8223] do_syscall_64+0xf3/0x230 [ 131.944623][ T8223] ? clear_bhb_loop+0x35/0x90 [ 131.949484][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.955383][ T8223] RIP: 0033:0x7f7105985d29 [ 131.959796][ T8223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.979405][ T8223] RSP: 002b:00007f7106845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.987826][ T8223] RAX: ffffffffffffffda RBX: 00007f7105b75fa0 RCX: 00007f7105985d29 [ 131.995796][ T8223] RDX: 0000000000000002 RSI: 0000000020000380 RDI: 0000000000000003 [ 132.003768][ T8223] RBP: 00007f7106845090 R08: 0000000000000000 R09: 0000000000000000 [ 132.011737][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.019703][ T8223] R13: 0000000000000000 R14: 00007f7105b75fa0 R15: 00007fffcb9ce718 [ 132.027683][ T8223] [ 132.164754][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 133.101115][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.274372][ T8215] syzkaller0: entered promiscuous mode [ 133.279908][ T8215] syzkaller0: entered allmulticast mode [ 133.309170][ T8225] macvtap1: entered promiscuous mode [ 133.323657][ T8225] team0: entered promiscuous mode [ 133.328747][ T8225] team_slave_0: entered promiscuous mode [ 133.357833][ T8225] team_slave_1: entered promiscuous mode [ 133.364361][ T8225] macvtap1: entered allmulticast mode [ 133.369781][ T8225] team0: entered allmulticast mode [ 133.381558][ T8225] team_slave_0: entered allmulticast mode [ 133.397777][ T8225] team_slave_1: entered allmulticast mode [ 133.405579][ T8225] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 133.612219][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 133.791424][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 133.807765][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.597'. [ 135.427279][ T8266] FAULT_INJECTION: forcing a failure. [ 135.427279][ T8266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.449740][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.1.601 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 135.453216][ T8268] netlink: 'syz.0.602': attribute type 7 has an invalid length. [ 135.460360][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 135.460375][ T8266] Call Trace: [ 135.460383][ T8266] [ 135.460392][ T8266] dump_stack_lvl+0x241/0x360 [ 135.460422][ T8266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.460445][ T8266] ? __pfx__printk+0x10/0x10 [ 135.460470][ T8266] ? __pfx_lock_release+0x10/0x10 [ 135.460498][ T8266] should_fail_ex+0x3b0/0x4e0 [ 135.460522][ T8266] _copy_from_user+0x2f/0xc0 [ 135.460547][ T8266] ____sys_sendmsg+0x2ef/0x7e0 [ 135.460578][ T8266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.460599][ T8266] ? __fget_files+0x2a/0x410 [ 135.460626][ T8266] ? __sys_sendmmsg+0x392/0x720 [ 135.503765][ T8268] netlink: 'syz.0.602': attribute type 3 has an invalid length. [ 135.504015][ T8266] ? __might_fault+0xaa/0x120 [ 135.508681][ T8268] netlink: 204 bytes leftover after parsing attributes in process `syz.0.602'. [ 135.513262][ T8266] __sys_sendmmsg+0x36a/0x720 [ 135.558784][ T8266] ? __pfx___sys_sendmmsg+0x10/0x10 [ 135.564121][ T8266] ? __pfx_lock_release+0x10/0x10 [ 135.569175][ T8266] ? kstrtouint_from_user+0x128/0x190 [ 135.574603][ T8266] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 135.580531][ T8266] ? ksys_write+0x22a/0x2b0 [ 135.585059][ T8266] ? __pfx_lock_release+0x10/0x10 [ 135.590122][ T8266] ? vfs_write+0x730/0xd30 [ 135.594567][ T8266] ? __mutex_unlock_slowpath+0x21e/0x790 [ 135.600256][ T8266] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.606277][ T8266] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.612649][ T8266] ? do_syscall_64+0x100/0x230 [ 135.617457][ T8266] __x64_sys_sendmmsg+0xa0/0xb0 [ 135.622339][ T8266] do_syscall_64+0xf3/0x230 [ 135.626878][ T8266] ? clear_bhb_loop+0x35/0x90 [ 135.631572][ T8266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.637468][ T8266] RIP: 0033:0x7fddbb385d29 [ 135.641876][ T8266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.661493][ T8266] RSP: 002b:00007fddbc1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 135.663014][ T8279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.669921][ T8266] RAX: ffffffffffffffda RBX: 00007fddbb575fa0 RCX: 00007fddbb385d29 [ 135.669944][ T8266] RDX: 0000000000000002 RSI: 0000000020000380 RDI: 0000000000000003 [ 135.669956][ T8266] RBP: 00007fddbc1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.669967][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.669984][ T8266] R13: 0000000000000000 R14: 00007fddbb575fa0 R15: 00007ffe5844c938 [ 135.670011][ T8266] [ 135.807359][ T8282] vlan2: entered allmulticast mode [ 136.020055][ T8289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'. [ 136.178330][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.612'. [ 136.218666][ T8306] hsr0: entered promiscuous mode [ 136.307700][ T8306] hsr0: left promiscuous mode [ 136.369595][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 136.406588][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.612'. [ 136.484060][ T8322] FAULT_INJECTION: forcing a failure. [ 136.484060][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 136.506511][ T8322] CPU: 1 UID: 0 PID: 8322 Comm: syz.1.619 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 136.517151][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.527212][ T8322] Call Trace: [ 136.530493][ T8322] [ 136.533423][ T8322] dump_stack_lvl+0x241/0x360 [ 136.538548][ T8322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.543838][ T8322] ? __pfx__printk+0x10/0x10 [ 136.548431][ T8322] ? __kmalloc_cache_noprof+0x48/0x390 [ 136.553902][ T8322] ? __pfx___might_resched+0x10/0x10 [ 136.559195][ T8322] ? stack_trace_save+0x118/0x1d0 [ 136.564219][ T8322] should_fail_ex+0x3b0/0x4e0 [ 136.568903][ T8322] should_failslab+0xac/0x100 [ 136.573587][ T8322] __kmalloc_cache_noprof+0x70/0x390 [ 136.578878][ T8322] ? __scm_send+0x5d3/0x1410 [ 136.583476][ T8322] __scm_send+0x5d3/0x1410 [ 136.587917][ T8322] unix_stream_sendmsg+0x179/0x10e0 [ 136.593131][ T8322] ? aa_sk_perm+0x96d/0xab0 [ 136.597669][ T8322] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 136.603350][ T8322] ? aa_sock_msg_perm+0x91/0x160 [ 136.608302][ T8322] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 136.613939][ T8322] __sock_sendmsg+0x221/0x270 [ 136.618618][ T8322] ____sys_sendmsg+0x52a/0x7e0 [ 136.623388][ T8322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.628674][ T8322] ? __fget_files+0x2a/0x410 [ 136.633268][ T8322] ? __sys_sendmmsg+0x392/0x720 [ 136.638128][ T8322] ? __might_fault+0xaa/0x120 [ 136.642812][ T8322] __sys_sendmmsg+0x36a/0x720 [ 136.647505][ T8322] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.652716][ T8322] ? __pfx_lock_release+0x10/0x10 [ 136.657750][ T8322] ? kstrtouint_from_user+0x128/0x190 [ 136.663144][ T8322] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 136.669061][ T8322] ? ksys_write+0x22a/0x2b0 [ 136.673571][ T8322] ? __pfx_lock_release+0x10/0x10 [ 136.678598][ T8322] ? vfs_write+0x730/0xd30 [ 136.683018][ T8322] ? __mutex_unlock_slowpath+0x21e/0x790 [ 136.688671][ T8322] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.694649][ T8322] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.700981][ T8322] ? do_syscall_64+0x100/0x230 [ 136.705750][ T8322] __x64_sys_sendmmsg+0xa0/0xb0 [ 136.710606][ T8322] do_syscall_64+0xf3/0x230 [ 136.715118][ T8322] ? clear_bhb_loop+0x35/0x90 [ 136.719795][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.725692][ T8322] RIP: 0033:0x7fddbb385d29 [ 136.730107][ T8322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.749710][ T8322] RSP: 002b:00007fddbc1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.758139][ T8322] RAX: ffffffffffffffda RBX: 00007fddbb575fa0 RCX: 00007fddbb385d29 [ 136.766116][ T8322] RDX: 0000000000000002 RSI: 0000000020000380 RDI: 0000000000000003 [ 136.774088][ T8322] RBP: 00007fddbc1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.782062][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.790046][ T8322] R13: 0000000000000000 R14: 00007fddbb575fa0 R15: 00007ffe5844c938 [ 136.798032][ T8322] [ 136.898593][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 137.029563][ T8315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.043372][ T8315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.054850][ T8315] bond0 (unregistering): Released all slaves [ 137.086623][ T8325] macvtap2: entered promiscuous mode [ 137.092074][ T8325] macvtap2: entered allmulticast mode [ 137.108879][ T8325] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 137.174586][ T8330] vlan2: entered allmulticast mode [ 137.272318][ T8332] syzkaller1: entered promiscuous mode [ 137.281553][ T8332] syzkaller1: entered allmulticast mode [ 137.393259][ T8334] syzkaller1: entered promiscuous mode [ 137.399211][ T8334] syzkaller1: entered allmulticast mode [ 137.438444][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 137.689181][ T8355] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 137.694504][ T8352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.720188][ T8355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.748272][ T8357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.760538][ T8357] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 137.825114][ T8357] bond2: (slave vcan1): Error -95 calling set_mac_address [ 137.890749][ T8362] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 137.915061][ T8362] bond2: (slave vcan1): Error -95 calling set_mac_address [ 137.938137][ T8352] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 137.972687][ T8352] bond2: (slave ipip0): Error -95 calling set_mac_address [ 138.020951][ T8386] tipc: Enabling of bearer rejected, failed to enable media [ 138.167455][ T8377] syzkaller0: entered promiscuous mode [ 138.173129][ T8377] syzkaller0: entered allmulticast mode [ 138.181589][ T8378] tipc: Started in network mode [ 138.194892][ T8378] tipc: Node identity d25eb1a76648, cluster identity 4711 [ 138.205252][ T8378] tipc: Enabled bearer , priority 0 [ 138.219617][ T8385] syzkaller0: entered promiscuous mode [ 138.233047][ T8385] syzkaller0: entered allmulticast mode [ 139.339495][ T5918] tipc: Node number set to 3021386151 [ 139.963010][ T8386] syzkaller0: entered promiscuous mode [ 139.968757][ T8386] syzkaller0: entered allmulticast mode [ 139.981754][ T8378] tipc: Resetting bearer [ 139.998261][ T8392] macvtap3: entered promiscuous mode [ 140.008008][ T8392] bond0: entered promiscuous mode [ 140.013209][ T8392] bond_slave_0: entered promiscuous mode [ 140.019471][ T8392] bond_slave_1: entered promiscuous mode [ 140.027952][ T8392] macvtap3: entered allmulticast mode [ 140.043588][ T8392] bond0: entered allmulticast mode [ 140.048769][ T8392] bond_slave_0: entered allmulticast mode [ 140.060366][ T8392] bond_slave_1: entered allmulticast mode [ 140.075672][ T8392] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 140.099618][ T8397] bond0: left allmulticast mode [ 140.106700][ T8397] bond_slave_0: left allmulticast mode [ 140.112430][ T8397] bond_slave_1: left allmulticast mode [ 140.120063][ T8397] bond0: left promiscuous mode [ 140.126125][ T8397] bond_slave_0: left promiscuous mode [ 140.132497][ T8397] bond_slave_1: left promiscuous mode [ 140.164864][ T8376] tipc: Resetting bearer [ 140.210614][ T8376] tipc: Disabling bearer [ 140.284014][ T8407] syzkaller1: entered promiscuous mode [ 140.307408][ T8407] syzkaller1: entered allmulticast mode [ 140.521902][ T8424] __nla_validate_parse: 2 callbacks suppressed [ 140.521921][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 140.577232][ T8424] macvtap3: entered promiscuous mode [ 140.593316][ T8424] bond0: entered promiscuous mode [ 140.626254][ T8424] bond_slave_0: entered promiscuous mode [ 140.638861][ T8424] bond_slave_1: entered promiscuous mode [ 140.652144][ T8424] team0: entered promiscuous mode [ 140.655376][ T8432] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 140.661965][ T8424] team_slave_0: entered promiscuous mode [ 140.678328][ T8424] team_slave_1: entered promiscuous mode [ 140.688034][ T8424] macvtap3: entered allmulticast mode [ 140.695262][ T8424] bond0: entered allmulticast mode [ 140.722523][ T8424] bond_slave_0: entered allmulticast mode [ 140.787621][ T8424] bond_slave_1: entered allmulticast mode [ 140.813621][ T8424] team0: entered allmulticast mode [ 140.819386][ T8424] team_slave_0: entered allmulticast mode [ 140.839141][ T8424] team_slave_1: entered allmulticast mode [ 140.854276][ T8424] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 140.962230][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 141.102983][ T8442] tipc: Enabled bearer , priority 0 [ 141.137750][ T8442] syzkaller0: entered promiscuous mode [ 141.149376][ T8442] syzkaller0: entered allmulticast mode [ 141.469889][ T8447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.492618][ T8447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.511194][ T8447] bond0 (unregistering): Released all slaves [ 141.532939][ T8453] tipc: Resetting bearer [ 141.553142][ T8441] tipc: Resetting bearer [ 141.609888][ T8441] tipc: Disabling bearer [ 141.757892][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 141.783553][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 141.872147][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 142.008814][ T8482] netlink: 'syz.0.664': attribute type 30 has an invalid length. [ 142.015510][ T8484] netlink: 'syz.3.665': attribute type 4 has an invalid length. [ 142.044418][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 142.060627][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 142.092142][ T5889] lo speed is unknown, defaulting to 1000 [ 142.101771][ T8479] dummy0: entered promiscuous mode [ 142.110756][ T8479] macvtap2: entered promiscuous mode [ 142.125489][ T8479] macvtap2: entered allmulticast mode [ 142.131129][ T8479] dummy0: entered allmulticast mode [ 142.154023][ T8491] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.168436][ T8494] dummy0: left allmulticast mode [ 142.177164][ T8491] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.189680][ T8494] dummy0: left promiscuous mode [ 142.226947][ T8498] netlink: 2 bytes leftover after parsing attributes in process `syz.0.664'. [ 142.502868][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 142.520090][ T8508] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 142.529331][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.670'. [ 142.543991][ T8505] netpci0: tun_chr_ioctl cmd 1074025672 [ 142.552075][ T8505] netpci0: ignored: set checksum disabled [ 142.880662][ T8528] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 142.986114][ T8528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.023736][ T8528] bond0: (slave bond3): making interface the new active one [ 143.031541][ T8528] bond0: (slave bond3): Enslaving as an active interface with an up link [ 143.048429][ T8534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.083078][ T8535] macvtap2: entered promiscuous mode [ 143.104923][ T8535] dummy0: entered promiscuous mode [ 143.110267][ T8535] macvtap2: entered allmulticast mode [ 143.152673][ T8535] dummy0: entered allmulticast mode [ 143.187289][ T8538] dummy0: left allmulticast mode [ 143.194711][ T8538] dummy0: left promiscuous mode [ 143.248396][ T8544] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 143.348378][ T8544] veth0_vlan: entered allmulticast mode [ 143.386320][ T8544] veth0_vlan: left promiscuous mode [ 143.393101][ T8544] veth0_vlan: entered promiscuous mode [ 143.418088][ T8549] lo speed is unknown, defaulting to 1000 [ 143.536301][ T8561] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 143.685912][ T8571] netlink: 'syz.1.691': attribute type 2 has an invalid length. [ 143.694149][ T8571] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 144.189898][ T8586] tipc: Enabled bearer , priority 0 [ 144.199759][ T8586] syzkaller0: entered promiscuous mode [ 144.207187][ T8586] syzkaller0: entered allmulticast mode [ 144.221884][ T8586] tipc: Resetting bearer [ 144.284006][ T8585] tipc: Resetting bearer [ 144.419792][ T8585] tipc: Disabling bearer [ 144.580181][ T8593] bond2: entered promiscuous mode [ 144.624140][ T8593] bond2: entered allmulticast mode [ 144.630776][ T8593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.731869][ T8602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.013088][ T8609] bridge_slave_1: left allmulticast mode [ 145.033521][ T8609] bridge_slave_1: left promiscuous mode [ 145.039309][ T8609] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 145.070360][ T8609] bridge_slave_0: left allmulticast mode [ 145.103398][ T8609] bridge_slave_0: left promiscuous mode [ 145.138839][ T8609] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 145.204157][ T8616] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 145.260981][ T8616] hsr0: entered promiscuous mode [ 145.463910][ T8626] tipc: Enabled bearer , priority 0 [ 145.484148][ T8626] syzkaller0: entered promiscuous mode [ 145.489781][ T8626] syzkaller0: entered allmulticast mode [ 145.533901][ T8626] tipc: Resetting bearer [ 145.573921][ T8624] tipc: Resetting bearer [ 145.608272][ T8633] Cannot find add_set index 0 as target [ 145.648980][ T8624] tipc: Disabling bearer [ 146.177023][ T8648] syzkaller0: entered promiscuous mode [ 146.195794][ T8648] syzkaller0: entered allmulticast mode [ 146.788448][ T8665] Bluetooth: MGMT ver 1.23 [ 149.640669][ T8668] __nla_validate_parse: 17 callbacks suppressed [ 149.640691][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.726'. [ 149.844795][ T8676] netlink: 188 bytes leftover after parsing attributes in process `syz.2.729'. [ 149.905092][ T8672] lo speed is unknown, defaulting to 1000 [ 150.398378][ T8689] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 150.552063][ T8692] syzkaller1: entered promiscuous mode [ 150.569811][ T8692] syzkaller1: entered allmulticast mode [ 150.962434][ T8716] netlink: 'syz.3.747': attribute type 2 has an invalid length. [ 150.985479][ T8716] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 151.117531][ T8720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 151.273946][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 151.283215][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 151.411707][ T8730] bond4: entered promiscuous mode [ 151.417330][ T8730] bond4: entered allmulticast mode [ 151.423196][ T8730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.475707][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 151.660918][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 151.770345][ T8748] openvswitch: netlink: Multiple metadata blocks provided [ 152.250770][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 152.636106][ T8794] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 152.656244][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.416514][ T8784] syzkaller1: entered promiscuous mode [ 153.422046][ T8784] syzkaller1: entered allmulticast mode [ 153.548212][ T8794] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.564339][ T8802] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 153.759493][ T8826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.775127][ T8826] IPv6: NLM_F_CREATE should be set when creating new route [ 153.782409][ T8826] IPv6: NLM_F_CREATE should be set when creating new route [ 154.238031][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 154.486285][ T8861] dccp_invalid_packet: P.Data Offset(127) too large [ 154.519453][ T8857] netlink: 'syz.2.766': attribute type 4 has an invalid length. [ 154.543993][ T8857] netlink: 17 bytes leftover after parsing attributes in process `syz.2.766'. [ 154.604971][ T8868] syzkaller1: entered promiscuous mode [ 154.621357][ T8868] syzkaller1: entered allmulticast mode [ 154.671116][ T8857] lo speed is unknown, defaulting to 1000 [ 154.956463][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.769'. [ 154.976985][ T8873] netlink: 64 bytes leftover after parsing attributes in process `syz.4.769'. [ 154.993742][ T8873] tipc: Invalid UDP bearer configuration [ 154.993784][ T8873] tipc: Enabling of bearer rejected, failed to enable media [ 155.479424][ T8886] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 155.518059][ T8877] tipc: Enabled bearer , priority 0 [ 155.575813][ T8886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.593073][ T8877] syzkaller0: entered promiscuous mode [ 155.598872][ T8877] syzkaller0: entered allmulticast mode [ 155.609076][ T8876] tipc: Resetting bearer [ 155.628859][ T8876] tipc: Disabling bearer [ 156.132272][ T8896] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 156.162492][ T8896] netlink: 224 bytes leftover after parsing attributes in process `syz.1.774'. [ 156.239929][ T8898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.776'. [ 156.331670][ T8898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.776'. [ 156.997154][ T8915] xt_connbytes: Forcing CT accounting to be enabled [ 157.026183][ T8915] --map-set only usable from mangle table [ 157.432039][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 157.530156][ T8935] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 157.592700][ T8935] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 157.602226][ T8938] netlink: 'syz.2.790': attribute type 12 has an invalid length. [ 157.614436][ T8939] netlink: 'syz.2.790': attribute type 12 has an invalid length. [ 157.645196][ T8942] vlan2: entered promiscuous mode [ 157.658808][ T8942] bond5: (slave vlan2): Opening slave failed [ 157.726568][ T8944] tipc: Invalid UDP bearer configuration [ 157.726610][ T8944] tipc: Enabling of bearer rejected, failed to enable media [ 158.600254][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 158.676424][ T8960] macvtap3: entered promiscuous mode [ 158.684289][ T8960] macvtap3: entered allmulticast mode [ 158.702834][ T8960] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 159.104826][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'. [ 159.113987][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 159.128603][ T8974] netlink: 136 bytes leftover after parsing attributes in process `syz.0.801'. [ 159.140256][ T8974] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 160.154271][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'. [ 160.218947][ T9009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.812'. [ 160.535940][ T9025] tipc: Enabled bearer , priority 0 [ 160.547748][ T9024] tipc: Disabling bearer [ 160.702454][ T9040] pim6reg1: entered promiscuous mode [ 160.710962][ T9040] pim6reg1: entered allmulticast mode [ 160.731636][ T9040] netlink: 304 bytes leftover after parsing attributes in process `syz.4.823'. [ 160.751378][ T9040] openvswitch: netlink: Unknown key attributes 20 [ 160.776058][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'. [ 160.788267][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'. [ 160.801410][ T9042] lo speed is unknown, defaulting to 1000 [ 161.132268][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 161.378429][ T9065] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 161.734524][ T9076] vlan2: entered promiscuous mode [ 161.789444][ T9082] lo speed is unknown, defaulting to 1000 [ 162.040533][ T9090] netlink: 104 bytes leftover after parsing attributes in process `syz.2.840'. [ 162.821080][ T9118] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 164.098946][ T9118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.272703][ T9128] bond4: (slave ip6gretap2): making interface the new active one [ 164.287554][ T9128] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 164.673794][ T9141] netlink: 'syz.3.851': attribute type 4 has an invalid length. [ 164.946478][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'. [ 165.005093][ T9149] lo speed is unknown, defaulting to 1000 [ 165.045561][ T9152] netlink: 'syz.0.855': attribute type 4 has an invalid length. [ 165.243599][ T9159] Bluetooth: MGMT ver 1.23 [ 165.380521][ T9149] lo speed is unknown, defaulting to 1000 [ 165.476306][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 165.501465][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 166.050175][ T9181] netlink: zone id is out of range [ 166.086880][ T9181] netlink: zone id is out of range [ 166.097001][ T9181] netlink: zone id is out of range [ 166.119188][ T9185] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.140040][ T9181] netlink: zone id is out of range [ 166.195168][ T9181] netlink: zone id is out of range [ 166.249898][ T9181] netlink: zone id is out of range [ 166.337351][ T9181] netlink: zone id is out of range [ 166.352826][ T9181] netlink: zone id is out of range [ 166.380108][ T9181] netlink: zone id is out of range [ 166.398257][ T9181] netlink: zone id is out of range [ 167.026689][ T9201] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 167.048788][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.050287][ T9201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.864'. [ 167.164430][ T9203] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 167.271385][ T9206] netlink: 'syz.1.869': attribute type 7 has an invalid length. [ 167.299309][ T9206] netlink: 208184 bytes leftover after parsing attributes in process `syz.1.869'. [ 167.348030][ T9213] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 167.358773][ T9203] IPVS: stopping master sync thread 9213 ... [ 167.371866][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.869'. [ 167.391981][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.658110][ T9231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.874'. [ 167.724137][ T9233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.875'. [ 167.798761][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 167.807914][ T9234] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 168.048615][ T9238] netlink: 96 bytes leftover after parsing attributes in process `syz.2.877'. [ 168.307774][ T9252] netlink: 'syz.1.882': attribute type 11 has an invalid length. [ 168.568144][ T9262] syzkaller0: entered promiscuous mode [ 168.573877][ T9262] syzkaller0: entered allmulticast mode [ 170.243479][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 170.626413][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 170.797218][ T9307] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.901426][ T9307] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.939125][ T9311] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 170.982055][ T9311] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 171.012987][ T9307] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.092926][ T9307] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.280183][ T9334] gretap1: entered promiscuous mode [ 171.297688][ T9307] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.315023][ T9307] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.331852][ T9307] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.350834][ T9307] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.367911][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 171.485625][ T9344] netlink: 'syz.0.912': attribute type 4 has an invalid length. [ 171.494176][ T9344] netlink: 'syz.0.912': attribute type 4 has an invalid length. [ 172.071232][ T9357] netlink: 56 bytes leftover after parsing attributes in process `syz.3.916'. [ 172.167006][ T9359] syzkaller0: entered promiscuous mode [ 172.172671][ T9359] syzkaller0: entered allmulticast mode [ 172.215266][ T9362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.919'. [ 172.470454][ T9367] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 172.557886][ T9370] xt_TCPMSS: Only works on TCP SYN packets [ 172.818483][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 172.841765][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 174.423147][ T9367] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 174.439732][ T9370] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 174.458525][ T9370] bridge0: entered allmulticast mode [ 174.469426][ T9373] bond0: entered promiscuous mode [ 174.478380][ T9373] bond_slave_0: entered promiscuous mode [ 174.484899][ T9373] bond_slave_1: entered promiscuous mode [ 174.490715][ T9373] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 174.500002][ T9373] ip6gretap0: entered promiscuous mode [ 174.721752][ T9388] lo speed is unknown, defaulting to 1000 [ 175.112439][ T9414] syzkaller1: entered promiscuous mode [ 175.126856][ T9414] syzkaller1: entered allmulticast mode [ 175.597478][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 175.899466][ T9441] netlink: 'syz.3.939': attribute type 2 has an invalid length. [ 175.908178][ T9441] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 175.916243][ T9441] netlink: 224 bytes leftover after parsing attributes in process `syz.3.939'. [ 175.939858][ T9442] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.948654][ T9442] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.957488][ T9442] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.965784][ T9442] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.235078][ T9452] syzkaller1: entered promiscuous mode [ 176.252931][ T9452] syzkaller1: entered allmulticast mode [ 176.279111][ T9461] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 176.284940][ T9463] net_ratelimit: 338 callbacks suppressed [ 176.284962][ T9463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.400103][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 176.462615][ T9472] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 176.546304][ T9475] x_tables: duplicate underflow at hook 3 [ 176.743631][ T9482] syzkaller0: entered promiscuous mode [ 176.749385][ T9482] syzkaller0: entered allmulticast mode [ 176.798192][ T9490] lo speed is unknown, defaulting to 1000 [ 176.844506][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'. [ 176.935437][ T9497] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 176.943669][ T9497] netlink: 224 bytes leftover after parsing attributes in process `syz.3.959'. [ 178.873577][ T9499] veth0_vlan: entered allmulticast mode [ 178.885915][ T9506] netlink: 71 bytes leftover after parsing attributes in process `syz.4.963'. [ 179.218518][ T9538] netlink: 'syz.0.971': attribute type 4 has an invalid length. [ 179.227711][ T9532] lo speed is unknown, defaulting to 1000 [ 179.308315][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 179.574629][ T9556] netlink: 92 bytes leftover after parsing attributes in process `syz.0.975'. [ 179.943276][ T9569] syzkaller1: entered promiscuous mode [ 179.959777][ T9569] syzkaller1: entered allmulticast mode [ 180.232035][ T9582] pim6reg: entered allmulticast mode [ 180.701618][ T9613] lo speed is unknown, defaulting to 1000 [ 180.772453][ T9618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.825181][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 180.838796][ T9621] ipvlan2: entered promiscuous mode [ 180.845456][ T9621] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 181.164869][ T9634] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 181.200889][ T9634] batman_adv: batadv0: Adding interface: team0 [ 181.213629][ T9634] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.271674][ T9638] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 181.273553][ T9634] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 181.303381][ T9638] netlink: 2 bytes leftover after parsing attributes in process `syz.4.997'. [ 181.319891][ T9636] lo speed is unknown, defaulting to 1000 [ 181.329514][ T9638] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.329741][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029bff800: rx timeout, send abort [ 181.336932][ T9638] batman_adv: batadv0: Interface activated: team0 [ 181.353486][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029bff800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 181.400776][ T9638] batman_adv: batadv0: Interface deactivated: team0 [ 181.458145][ T9638] batman_adv: batadv0: Removing interface: team0 [ 181.525061][ T9638] bridge0: port 4(team0) entered blocking state [ 181.532231][ T9638] bridge0: port 4(team0) entered disabled state [ 181.886216][ T9656] lo speed is unknown, defaulting to 1000 [ 182.040147][ T9663] bridge0: port 3(gretap0) entered blocking state [ 182.069213][ T9663] bridge0: port 3(gretap0) entered disabled state [ 182.103914][ T9663] gretap0: entered allmulticast mode [ 182.118741][ T9663] gretap0: entered promiscuous mode [ 182.146077][ T9663] bridge0: port 3(gretap0) entered blocking state [ 182.152786][ T9663] bridge0: port 3(gretap0) entered forwarding state [ 182.264597][ T9673] netlink: 'syz.3.1007': attribute type 39 has an invalid length. [ 182.479179][ T9679] netlink: zone id is out of range [ 182.491546][ T9681] lo speed is unknown, defaulting to 1000 [ 182.495411][ T9679] netlink: zone id is out of range [ 182.564565][ T9679] netlink: zone id is out of range [ 182.600904][ T9679] netlink: zone id is out of range [ 182.632145][ T9679] netlink: zone id is out of range [ 182.658636][ T9679] netlink: zone id is out of range [ 182.664267][ T9679] netlink: zone id is out of range [ 182.670162][ T9679] netlink: zone id is out of range [ 182.676333][ T9679] netlink: zone id is out of range [ 182.681667][ T9679] netlink: zone id is out of range [ 182.698128][ T9686] syzkaller1: entered promiscuous mode [ 182.703858][ T9686] syzkaller1: entered allmulticast mode [ 182.776417][ T9688] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 182.972744][ T9667] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 183.112448][ T9691] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.909642][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1019'. [ 184.140638][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'. [ 184.210782][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'. [ 184.243559][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1019'. [ 184.373054][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'. [ 184.433839][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'. [ 184.675593][ T9746] lo speed is unknown, defaulting to 1000 [ 185.111838][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'. [ 185.122515][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 185.241391][ T9756] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.304465][ T9767] netlink: 'syz.1.1033': attribute type 7 has an invalid length. [ 185.480829][ T9769] lo speed is unknown, defaulting to 1000 [ 185.634363][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1035'. [ 185.943815][ T9772] sctp: [Deprecated]: syz.4.1035 (pid 9772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.943815][ T9772] Use struct sctp_sack_info instead [ 186.378162][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 186.384308][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 186.390358][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 186.574451][ T9785] netlink: 'syz.1.1037': attribute type 7 has an invalid length. [ 186.602803][ T9785] netlink: 'syz.1.1037': attribute type 3 has an invalid length. [ 186.620957][ T9785] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1037'. [ 186.916023][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 186.966145][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 187.268896][ T9789] lo speed is unknown, defaulting to 1000 [ 187.274834][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 187.305120][ T9783] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1038'. [ 189.484172][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'. [ 190.528238][ T9850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1056'. [ 190.738954][ T9862] syzkaller1: entered promiscuous mode [ 190.767937][ T9862] syzkaller1: entered allmulticast mode [ 190.882754][ T9868] netlink: 'syz.1.1060': attribute type 9 has an invalid length. [ 191.257852][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 191.288837][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 191.299381][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 191.721411][ T9905] syzkaller1: entered promiscuous mode [ 191.727302][ T9905] syzkaller1: entered allmulticast mode [ 191.747850][ T9911] veth1_macvtap: left promiscuous mode [ 191.990804][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 192.067347][ T9924] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1078'. [ 192.108623][ T9924] batadv1: entered promiscuous mode [ 192.123875][ T9924] batadv1: entered allmulticast mode [ 192.193099][ T9928] lo speed is unknown, defaulting to 1000 [ 192.222680][ T9931] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1083'. [ 192.407163][ T9942] geneve0: entered promiscuous mode [ 192.438459][ T9942] geneve0: left promiscuous mode [ 192.488514][ T9944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.495896][ T9944] IPv6: NLM_F_CREATE should be set when creating new route [ 192.503296][ T9944] IPv6: NLM_F_CREATE should be set when creating new route [ 192.535675][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 192.549969][ T9944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'. [ 192.670534][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 192.700800][ T9952] netlink: 'syz.3.1089': attribute type 16 has an invalid length. [ 192.722621][ T9952] netlink: 'syz.3.1089': attribute type 3 has an invalid length. [ 192.740353][ T9952] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.1089'. [ 192.755986][ T9958] net_ratelimit: 12 callbacks suppressed [ 192.756006][ T9958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.931264][ T9963] syzkaller1: entered promiscuous mode [ 192.954021][ T9963] syzkaller1: entered allmulticast mode [ 193.186217][ T9975] bridge_slave_0: default FDB implementation only supports local addresses [ 193.565804][ T9992] nbd: socks must be embedded in a SOCK_ITEM attr [ 193.689215][ T9998] trusted_key: syz.4.1105 sent an empty control message without MSG_MORE. [ 193.941309][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 194.020950][T10016] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 194.035054][T10017] syzkaller1: entered promiscuous mode [ 194.039611][T10016] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1107'. [ 194.046143][T10017] syzkaller1: entered allmulticast mode [ 194.092489][T10025] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1112'. [ 194.128480][T10025] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 194.144395][T10025] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 194.231048][T10016] bond0: (slave team0): Releasing backup interface [ 194.253337][T10016] team0: left allmulticast mode [ 194.280385][T10016] team_slave_0: left allmulticast mode [ 194.302288][T10016] team_slave_1: left allmulticast mode [ 194.342944][T10016] bridge0: port 4(team0) entered blocking state [ 194.352843][T10016] bridge0: port 4(team0) entered disabled state [ 194.364061][T10016] team0: entered allmulticast mode [ 194.369330][T10016] team_slave_0: entered allmulticast mode [ 194.379991][T10016] team_slave_1: entered allmulticast mode [ 194.430130][T10025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.467742][T10030] bond3: (slave gretap1): making interface the new active one [ 194.478093][T10030] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 194.547566][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.956420][T10050] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 195.045946][T10058] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000 [ 195.290941][T10064] lo speed is unknown, defaulting to 1000 [ 195.685065][T10066] netlink: 'syz.1.1122': attribute type 4 has an invalid length. [ 195.921983][T10076] syzkaller1: entered promiscuous mode [ 195.941524][T10076] syzkaller1: entered allmulticast mode [ 196.181189][T10086] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.190139][T10086] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.199049][T10086] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.208197][T10086] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.306068][T10089] xt_CT: No such helper "pptp" [ 196.422062][T10094] lo speed is unknown, defaulting to 1000 [ 196.440042][T10096] ip6gretap0: left allmulticast mode [ 196.448735][T10096] ip6gretap0: left promiscuous mode [ 196.456139][T10096] bridge0: port 3(ip6gretap0) entered disabled state [ 196.469103][T10096] bridge_slave_1: left allmulticast mode [ 196.476717][T10096] bridge_slave_1: left promiscuous mode [ 196.483329][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.484855][T10101] netlink: zone id is out of range [ 196.498888][T10101] netlink: zone id is out of range [ 196.505688][T10101] netlink: zone id is out of range [ 196.511378][T10101] netlink: zone id is out of range [ 196.517508][T10101] netlink: zone id is out of range [ 196.522742][T10101] netlink: zone id is out of range [ 196.529639][T10096] bridge_slave_0: left allmulticast mode [ 196.535526][T10096] bridge_slave_0: left promiscuous mode [ 196.541298][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.550393][T10101] netlink: zone id is out of range [ 196.556697][T10101] netlink: zone id is out of range [ 196.561988][T10101] netlink: zone id is out of range [ 196.693176][T10098] Â: renamed from pim6reg1 [ 197.028621][T10124] lo speed is unknown, defaulting to 1000 [ 197.191926][T10131] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 197.276792][T10131] team0: Device veth0_macvtap failed to register rx_handler [ 197.351802][T10137] syzkaller1: entered promiscuous mode [ 197.403371][T10137] syzkaller1: entered allmulticast mode [ 197.500174][T10124] __nla_validate_parse: 6 callbacks suppressed [ 197.500195][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'. [ 197.528862][T10124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'. [ 197.544169][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1137'. [ 197.880191][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1146'. [ 197.903269][T10149] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1146'. [ 198.284847][T10165] syzkaller0: entered promiscuous mode [ 198.291125][T10165] syzkaller0: entered allmulticast mode [ 198.776408][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1155'. [ 198.801671][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 199.137724][T10197] can: request_module (can-proto-0) failed. [ 199.221127][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 199.244703][T10199] netlink: 'syz.3.1156': attribute type 10 has an invalid length. [ 200.377960][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 200.638073][T10192] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.656249][T10192] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.666047][T10192] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.675345][T10192] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.690938][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.698574][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.733958][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.741135][T10199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.750404][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.757606][T10199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.803060][T10199] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 201.020724][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.084446][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.094634][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.107056][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.117301][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.128873][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.184145][T10229] batadv_slave_0: entered promiscuous mode [ 201.217079][T10229] macsec1: entered allmulticast mode [ 201.264404][T10229] batadv_slave_0: entered allmulticast mode [ 201.709469][T10233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.742500][T10233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.990711][T10233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.010287][T10233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.060299][T10253] syzkaller1: entered promiscuous mode [ 202.076956][T10253] syzkaller1: entered allmulticast mode [ 202.097058][T10267] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1172'. [ 202.097057][T10268] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1172'. [ 202.161048][T10233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.176783][T10273] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 202.186647][T10233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.205959][T10268] batadv2: entered promiscuous mode [ 202.211235][T10268] batadv2: entered allmulticast mode [ 202.226492][T10267] batadv2: entered promiscuous mode [ 202.231890][T10267] batadv2: entered allmulticast mode [ 202.425751][T10233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.468218][T10233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.504149][T10283] bridge0: port 1(gretap0) entered blocking state [ 202.511209][T10283] bridge0: port 1(gretap0) entered disabled state [ 202.529696][T10283] gretap0: entered allmulticast mode [ 202.540999][T10283] gretap0: entered promiscuous mode [ 202.555752][T10290] gretap0: left allmulticast mode [ 202.561435][T10290] gretap0: left promiscuous mode [ 202.570781][T10290] bridge0: port 1(gretap0) entered disabled state [ 202.604516][T10288] tipc: Enabled bearer , priority 0 [ 202.655690][T10233] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.664842][T10233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.683275][T10233] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.691643][T10233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.712736][T10233] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.721582][T10233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.746600][T10233] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.768729][T10233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.792674][ T5847] Bluetooth: hci4: link tx timeout [ 202.798123][ T5847] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 203.195946][T10311] syzkaller1: entered promiscuous mode [ 203.201485][T10311] syzkaller1: entered allmulticast mode [ 203.319959][T10324] tipc: Enabled bearer , priority 0 [ 203.594504][T10334] lo speed is unknown, defaulting to 1000 [ 203.783248][T10330] tipc: Disabling bearer [ 204.003943][T10348] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 204.011728][T10348] __nla_validate_parse: 2 callbacks suppressed [ 204.011743][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 204.427650][T10366] syzkaller1: entered promiscuous mode [ 204.448135][T10366] syzkaller1: entered allmulticast mode [ 204.564537][T10374] netlink: 'syz.3.1204': attribute type 15 has an invalid length. [ 204.854339][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 204.944250][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.125795][ T6246] ------------[ cut here ]------------ [ 205.131303][ T6246] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 205.131391][ T6246] WARNING: CPU: 0 PID: 6246 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 205.146933][ T6246] Modules linked in: [ 205.150865][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 205.162092][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 205.172264][ T6246] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 205.177689][ T6246] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 205.197645][ T6246] RSP: 0018:ffffc900035d7920 EFLAGS: 00010246 [ 205.203813][ T6246] RAX: cc54f40e914b0b00 RBX: ffff888021ba4cb0 RCX: ffff888012050000 [ 205.211815][ T6246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.219898][ T6246] RBP: ffffc900035d7ab0 R08: ffffffff81602ac2 R09: 1ffff110170c519a [ 205.228010][ T6246] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000000000 [ 205.236136][ T6246] R13: 0000000000000000 R14: 1ffff920006baf38 R15: dffffc0000000000 [ 205.244356][ T6246] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 205.253328][ T6246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.260302][ T6246] CR2: 00000000200a2000 CR3: 0000000058eae000 CR4: 00000000003526f0 [ 205.268361][ T6246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.276424][ T6246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.284493][ T6246] Call Trace: [ 205.287794][ T6246] [ 205.290747][ T6246] ? __warn+0x165/0x4d0 [ 205.295026][ T6246] ? __mutex_lock+0xdac/0xee0 [ 205.299741][ T6246] ? report_bug+0x2b3/0x500 [ 205.304340][ T6246] ? __mutex_lock+0xdac/0xee0 [ 205.309047][ T6246] ? handle_bug+0x60/0x90 [ 205.313497][ T6246] ? exc_invalid_op+0x1a/0x50 [ 205.318221][ T6246] ? asm_exc_invalid_op+0x1a/0x20 [ 205.323290][ T6246] ? __warn_printk+0x292/0x360 [ 205.328262][ T6246] ? __mutex_lock+0xdac/0xee0 [ 205.332987][ T6246] ? free_netdev+0x2d9/0x610 [ 205.337900][ T6246] ? __pfx___mutex_lock+0x10/0x10 [ 205.343352][ T6246] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 205.348792][ T6246] ? dev_addr_check+0x6f/0x240 [ 205.354117][ T6246] ? dev_addr_flush+0x192/0x210 [ 205.359459][ T6246] free_netdev+0x2d9/0x610 [ 205.364335][ T6246] netdev_run_todo+0xf21/0x10d0 [ 205.369421][ T6246] ? __pfx_netdev_run_todo+0x10/0x10 [ 205.375313][ T6246] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 205.381626][ T6246] ? down_write+0x18c/0x220 [ 205.386280][ T6246] ? __pfx_down_write+0x10/0x10 [ 205.391173][ T6246] bnep_session+0x2e3c/0x3030 [ 205.395982][ T6246] ? __pfx_bnep_session+0x10/0x10 [ 205.401043][ T6246] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 205.407582][ T6246] ? __pfx_woken_wake_function+0x10/0x10 [ 205.413356][ T6246] ? __kthread_parkme+0x169/0x1d0 [ 205.418607][ T6246] ? __pfx_bnep_session+0x10/0x10 [ 205.423747][ T6246] kthread+0x2f0/0x390 [ 205.427849][ T6246] ? __pfx_bnep_session+0x10/0x10 [ 205.432913][ T6246] ? __pfx_kthread+0x10/0x10 [ 205.437646][ T6246] ret_from_fork+0x4b/0x80 [ 205.442101][ T6246] ? __pfx_kthread+0x10/0x10 [ 205.446826][ T6246] ret_from_fork_asm+0x1a/0x30 [ 205.451629][ T6246] [ 205.454768][ T6246] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.462071][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 205.473032][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 205.483104][ T6246] Call Trace: [ 205.486391][ T6246] [ 205.489325][ T6246] dump_stack_lvl+0x241/0x360 [ 205.494029][ T6246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.499233][ T6246] ? __pfx__printk+0x10/0x10 [ 205.503826][ T6246] ? _printk+0xd5/0x120 [ 205.507982][ T6246] ? __init_begin+0x41000/0x41000 [ 205.513010][ T6246] ? vscnprintf+0x5d/0x90 [ 205.517346][ T6246] panic+0x349/0x880 [ 205.521518][ T6246] ? __warn+0x174/0x4d0 [ 205.525714][ T6246] ? __pfx_panic+0x10/0x10 [ 205.530142][ T6246] ? ret_from_fork_asm+0x1a/0x30 [ 205.535081][ T6246] __warn+0x344/0x4d0 [ 205.539062][ T6246] ? __mutex_lock+0xdac/0xee0 [ 205.543828][ T6246] report_bug+0x2b3/0x500 [ 205.548158][ T6246] ? __mutex_lock+0xdac/0xee0 [ 205.552836][ T6246] handle_bug+0x60/0x90 [ 205.556993][ T6246] exc_invalid_op+0x1a/0x50 [ 205.561498][ T6246] asm_exc_invalid_op+0x1a/0x20 [ 205.566443][ T6246] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 205.571729][ T6246] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 205.591340][ T6246] RSP: 0018:ffffc900035d7920 EFLAGS: 00010246 [ 205.597409][ T6246] RAX: cc54f40e914b0b00 RBX: ffff888021ba4cb0 RCX: ffff888012050000 [ 205.605378][ T6246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.613347][ T6246] RBP: ffffc900035d7ab0 R08: ffffffff81602ac2 R09: 1ffff110170c519a [ 205.621317][ T6246] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000000000 [ 205.629285][ T6246] R13: 0000000000000000 R14: 1ffff920006baf38 R15: dffffc0000000000 [ 205.637266][ T6246] ? __warn_printk+0x292/0x360 [ 205.642072][ T6246] ? free_netdev+0x2d9/0x610 [ 205.646664][ T6246] ? __pfx___mutex_lock+0x10/0x10 [ 205.651705][ T6246] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 205.656996][ T6246] ? dev_addr_check+0x6f/0x240 [ 205.661832][ T6246] ? dev_addr_flush+0x192/0x210 [ 205.666683][ T6246] free_netdev+0x2d9/0x610 [ 205.671111][ T6246] netdev_run_todo+0xf21/0x10d0 [ 205.675965][ T6246] ? __pfx_netdev_run_todo+0x10/0x10 [ 205.681278][ T6246] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 205.687517][ T6246] ? down_write+0x18c/0x220 [ 205.692027][ T6246] ? __pfx_down_write+0x10/0x10 [ 205.696883][ T6246] bnep_session+0x2e3c/0x3030 [ 205.701568][ T6246] ? __pfx_bnep_session+0x10/0x10 [ 205.706589][ T6246] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 205.712928][ T6246] ? __pfx_woken_wake_function+0x10/0x10 [ 205.718565][ T6246] ? __kthread_parkme+0x169/0x1d0 [ 205.723598][ T6246] ? __pfx_bnep_session+0x10/0x10 [ 205.728626][ T6246] kthread+0x2f0/0x390 [ 205.732702][ T6246] ? __pfx_bnep_session+0x10/0x10 [ 205.737724][ T6246] ? __pfx_kthread+0x10/0x10 [ 205.742315][ T6246] ret_from_fork+0x4b/0x80 [ 205.746729][ T6246] ? __pfx_kthread+0x10/0x10 [ 205.751321][ T6246] ret_from_fork_asm+0x1a/0x30 [ 205.756083][ T6246] [ 205.759366][ T6246] Kernel Offset: disabled [ 205.763697][ T6246] Rebooting in 86400 seconds..