last executing test programs: 6.135584826s ago: executing program 3 (id=1071): r0 = socket(0x15, 0x1, 0x100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="9371fa0fe1e2", 0x6}], 0x1}}], 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x57}], 0x5}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="14005a8010000380040007"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000002c0)=0x4000, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511a", 0x5}], 0x2}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x2, 0x2, 0x5, 0x4, 0x5, 0xd4, 0x1ff, {0x0, @in6={{0xa, 0x4e20, 0x66a, @private0, 0x1}}, 0x1, 0x6, 0x5, 0x5, 0x7}}, &(0x7f0000000680)=0xb0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000f8dbdf250a0000000c00990009000000020000001c00725f29e55bd2f82109586e800004000200040002000400f8ff0300010008000000000000000200000010006e800400020004000100040002008ec8614e1bb03467c4000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000fc000000000249492bb68c588144992e6317429520906fe6b4a500000000000000000000010000000300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000fbffffffffffffff00"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000004000000000000a"], 0xb8}}, 0x20004080) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="00b06d1bd223be013f43c2000000", @ANYRES16=r4, @ANYBLOB="00022abd7000ffdbdf251c00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000009000000"], 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000002c0), 0x0) 5.932218294s ago: executing program 3 (id=1074): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0xe) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x23cf}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xbfcf}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8e}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1fe0000000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x48080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r8 = accept(r0, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001180)=ANY=[@ANYRES32=r1, @ANYBLOB="080027bd7000fedbdf257fff00001400", @ANYRES64=r6, @ANYRES64=r7], 0xd0}, 0x1, 0x0, 0x0, 0x11}, 0x24004015) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 5.743372093s ago: executing program 3 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a0014260360", 0x26}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066ea6d07128"], 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r3, 0x4, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 5.721656112s ago: executing program 4 (id=1076): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaa2f6f57a2aaeaaabbbbbbbbbbbbec598bb0f21e752b104700001c0000002010ece25f4d01907800000000e00000"], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r9) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$netlink(0x10, 0x3, 0x0) 5.562588576s ago: executing program 3 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=[0x0], 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0xfff}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x80000001, @local, 0x5}, @in6={0xa, 0x4e22, 0x7eb, @loopback, 0x6}], 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x6) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000340)="7c4e28f7020caa453f9174927aab2405", 0x10}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000000000000000000d0a4700000000000002000006"], &(0x7f0000000f40)=""/4086, 0x44, 0xff6, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000001) 5.174290465s ago: executing program 3 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000004c0)=""/234, 0xea}], 0x1}, 0x80000000}], 0x1, 0x20, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf250300000014000200fc02000000000000000000000000000114000200ff02000000000000000000000000000114000300000000000000000000000000000000002000070073797374656d5f753a6f626a6563745f725a636572745f743a73300008000400e00000010500010000000000140006"], 0xa8}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f00000017c0)="d0", 0x1, 0x800, &(0x7f0000000940)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELOBJ={0xa4, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0x5a, 0x8, "388b76c4abb91dd6d6945df6b808d9c365f1babbbe1ad02a0b1c584af023a482fac50add091e010f30b81416d645f6f7de3d56002151e12dff64a5569934fd4056dd58bf86b3a5ef3f48c3a6474d1034b42e9828bfc8"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x100}}, 0x0) 4.960065219s ago: executing program 3 (id=1083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ec0)={0x24, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000012000000000000000000000106"], 0xffe) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x2e, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x400e000}, 0x4040050) r14 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r14, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r14, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet6(r14, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 3.845690816s ago: executing program 4 (id=1091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x80047453, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) 3.764960374s ago: executing program 2 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c3000200ff95dbda00"/34], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={0x1, @default, @rose={'rose', 0x0}, 0xb265, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa, 0x5, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={0x1b0, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004880}, 0x8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x4, 0x8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x50, 0x7800, 0xd, 0x49f7}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x38}}, 0x0) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000080)=0x63, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000101050000000000000000000300000108001a40ffffeaf708000840800000085c0001800c000280050001008800000006000340000100000c000280050001000600000006000340000000001400018008000100ffffffff080002007f00000106000340000100000c0002800500010000000000060003400004"], 0x80}, 0x1, 0x0, 0x0, 0x8814}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4", 0x55}], 0x1}, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000214010a000000040000000008004400", @ANYBLOB, @ANYRES32, @ANYBLOB="f5e4e534b92fd41a44fcad47f113e41d368c1121ab59c6170bbe03b61db1093ed8cee2753ef2b599e39c75182325f26e0152b7c3b39f339c6185b5bf76d9038ffa9fa37ff9b78ed84ca5c8b30870564280136ebaea143d3f943773f96b27d6653a583af87387d7830f2f2fcafc3a741034b67866e695c577c82caea1da1ea8715b1f5897b19a08db07ce866c519cdaf6df13333146c1c1"], 0x20}}, 0x10) 3.562647871s ago: executing program 4 (id=1093): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) (async) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r7, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000300)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='neigh_update\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000040)={'wg0\x00'}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000006100)={'ip_vti0\x00', &(0x7f0000006080)={'erspan0\x00', 0x0, 0xa0, 0x63897bfdb8769957, 0x5, 0x8, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @empty, @empty}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r10, 0x0, 0x401}, 0x18) 3.543070306s ago: executing program 2 (id=1094): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x491, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r11, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0xc2, 0x0, 0x0, 0x40, {[@mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x8, 0x0, 0x9}, @sack={0x5, 0x12, [0x40, 0x0, 0x0, 0x200]}, @exp_fastopen={0xfe, 0xd, 0xf989, "264cf10d18c78fda93"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@capable={0x1e, 0xc, 0x2, 0x8, 0x3e, 0x3}]}}}}}}}}, 0x0) 3.234764201s ago: executing program 4 (id=1096): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x60ff}}, {{0x0, 0x9, &(0x7f0000001800), 0x1}}], 0x2, 0x24004050) sendto$inet6(r1, 0x0, 0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) unshare(0x20000400) pipe(&(0x7f0000000000)) socket$kcm(0x29, 0x7, 0x0) socket(0x21, 0x2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$xdp(0x2c, 0x3, 0x0) unshare(0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x20000000000002ae, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000018000000000000005000000851000002e4605000000a6000000ba000000a70000000000ffff1700000000000000000000000000000095000000000000009500000000000000f912b173e7b01c3451472a53cf662eb5c2f803f87ff161d6b13544d81710bd9bb3804d8b41721392872b969e796d95cb0999a89df996a2fbb263df7db98e594af1ba53719be00a01"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x49, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x8, @any, 0xd}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) listen(r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) 3.172562842s ago: executing program 0 (id=1097): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b500000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.066169419s ago: executing program 0 (id=1098): socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="b1ca07059bc0d5e71fab62c265b8d6175ff078be6766e46de6a5b65e0c47b4f53235823858757d838c3accc909eec8", @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000008000300", @ANYBLOB="971185628bf9bc31938151bb7083e393870bc36b57021957196bf896a1622283094adc8d07a3acd912ac2487bce975b3c90c3f3624bdd283a4c2516e2a0c8d78ff46d34acd51a10bda8fd15a089a6f44117b19fd3d6ba4a89ee8ea4bc9c1bd6fdc007bdecfde65c3e243aed7c27f4d3e403abff325317bd976695a1abf5f54af688f4caa064cba7ddfdef83ed36d743364046b0918", @ANYBLOB="38002f800c0002000200aaaaaaaaaaaa20000380140003800600010002000000080002000200000008000100000000000800010006000000"], 0x54}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="073a8485e3f1ceddbf161b12"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r6 = socket(0x1, 0xa, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6(0xa, 0x3, 0x7) recvfrom(r7, 0x0, 0x0, 0x2, 0x0, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40010000) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x6}, 0x0, 0x6e6bb4}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x3501, 0x0, 0x0, 0x0, 0xca18}}, 0xe8) socket$inet6(0xa, 0x805, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d80)=ANY=[@ANYBLOB="380000003f000b000000000000000004030000000c00020007000000000000001800018014005600ff010000000000000000000000000001"], 0x38}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd6b030c1b43ca25796fa1a770427000fddbdf250c000000080039000800000008003b000000000005802a000000000005002f00010000000500005efa334f00010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 2.730462251s ago: executing program 0 (id=1101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaa2f6f57a2aaeaaabbbbbbbbbbbbec598bb0f21e752b104700001c0000002010ece25f4d01907800000000e00000"], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r9) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$netlink(0x10, 0x3, 0x0) 2.628239854s ago: executing program 1 (id=1102): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/7, 0x7}, {&(0x7f0000000a00)=""/18, 0x12}], 0x4, &(0x7f0000000a80)=""/98, 0x62}, 0x6}], 0x2, 0x0, 0x0) unshare(0x8000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 2.471146276s ago: executing program 1 (id=1103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x848000000015, 0x805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000004c40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="110000000000000000000000010000000200000000000000140000000000000000000000010000000900000000000000110000000000000000000000010000000a00000000000000", @ANYBLOB="ac"], 0xa8}}], 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'virt_wifi0\x00'}, 0x18) unshare(0x20400) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x401}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 2.26280315s ago: executing program 4 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x8000480) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe(&(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x1200}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}}, 0x0) 2.218170508s ago: executing program 1 (id=1105): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x0, 0x0}, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000001640)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xffffffffffffff18, 0x840, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xd}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x100000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x13}, 0x1c) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000440)={'hsr0\x00', 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791079000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x4e22, 0x5, 0xa, 0x0, 0x7faa819bbf10db15}, {0x0, 0x0, 0x0, 0x800000, 0x0, 0x5, 0x0, 0x6}, {0xfffffffffffffffd, 0x2, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x800, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x4, 0xfffffffc}}, 0xe8) sendmmsg(r11, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 2.14647413s ago: executing program 4 (id=1106): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000b95800000762a53e0c8544e4c9f5ac6bf700abd10000000040080000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000050000000800"/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000b95800000762a53e0c8544e4c9f5ac6bf700abd10000000040080000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000050000000800"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32, @ANYRES64=r1, @ANYRESHEX, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) (async) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0xffffd000) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0xffffd000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r7, 0x431, 0x70bd28, 0x100000, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xf3}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000002000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000a685a06341616d0046ebde9e608119216031e6f468a36c3564a6a7e216d204e91767fd1804409011f07ea410119651fdde445fb24c56041ba84001d5ba74bc746b30d7f752be9be7a8c4"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3) (async) socket$inet6(0xa, 0x2, 0x3) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="010029bd7001b205c92f381c0a080000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000008000000000000000ff02000000000000000000"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000008000000000000000ff02000000000000000000"], 0xb8}}, 0x0) 1.798464046s ago: executing program 2 (id=1107): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7d}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000000000080002"], 0x7c}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3, 0x0, &(0x7f0000004e00)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x20, 0x10, 0x80000000, 0x8, {{0x20, 0x4, 0x0, 0xf, 0x80, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @loopback, {[@end, @timestamp_addr={0x44, 0x44, 0xe9, 0x1, 0x5, [{@local, 0x6}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x73a}, {@private=0xa010102, 0x40}, {@loopback, 0x5}, {@local, 0xa}, {@multicast2, 0x10000}, {@loopback, 0x7fffffff}]}, @end, @end, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x8}, {@multicast2, 0xf8}, {@empty, 0xb}]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfcbff, {0x0, 0x0, 0x4, r9, 0x17860, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20050050}, 0x40440d4) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x2}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r10, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x20020}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="60393ffc001800001c0012800b0001006e6c00000c000280060010000040000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x9, 0x3, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x9, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000001fc0)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x2, 0x7, {{0x30, 0x4, 0x2, 0x7, 0xc0, 0x65, 0x0, 0xb, 0x2f, 0x0, @local, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0xd, "45492847066aef996bbd73"}, @noop, @timestamp_addr={0x44, 0x34, 0xc0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x10001}, {@loopback, 0xfffffe00}, {@local}, {@remote, 0xe}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xd04}]}, @noop, @generic={0x89, 0x8, "3f69d60e8661"}, @generic={0x82, 0x8, "7e2dedc68ff9"}, @timestamp_prespec={0x44, 0x54, 0x89, 0x3, 0x0, [{@multicast1, 0x4}, {@loopback, 0x2}, {@rand_addr=0x64010102, 0xc}, {@private=0xa010102, 0x80000000}, {@remote, 0x400}, {@private=0xa010102, 0x5}, {@multicast2, 0x3}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb37}, {@loopback, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x29, 0x45, 0x7, 0x559, 0x10, @empty, @mcast1, 0x80, 0x10, 0x59, 0x80000001}}) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="d2bf41d2f51c5aa5d6996c2c65017c4ea2f1b577c7f6089c40a72bb6b74b11c4e4d381b9c8d0d132dbd7b81013c985cd2f726bb2a85cba7024630254bd5e30f68e9d9c7363048df76e54982326bb6ca9ce28e6eb3d3c5f33685c11f06ef4b27ff7276e1f0a91848232fb43a7d6c54845b8001882e1065920106d54596bc155c5dafc57f1277b8aae4b0ba3f9c0e42e4595fbd270540d7ef15a4d253fb23be519b2ed46018250d3", 0xa7}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f00000000c0)="e8e69840dc", 0x5}, {&(0x7f00000003c0)="2f375baefc6cfb8c2c7a9c8b37cea8b132b6d6c3564e030994add3d9becf9ca905fae2d5863c15fb6ade7f716be381042990e7a55496d4071204c9871f0347bb4def27d382ed2fff53220fa2280acf6075bb28278505015a", 0x58}], 0x4, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @local}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4b, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x9, [{@broadcast, 0xf8fb}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8}, {@empty, 0x4}]}, @timestamp={0x44, 0x18, 0x96, 0x0, 0x1, [0x99c, 0x3, 0x9, 0x50000, 0xe]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101}}}], 0x140}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000780)="3e35ab4aca8ed53de323ae61b6f46b6d9d5741adf569166f7b77e163d3ff4e7303ce089f2454b20d93a31453699d2f835c175901136beee23aa25236dd1aebd3c246455291b2ef1c2e240f4c98fb10dc500f2c975b54945592636194e201efda549f644ea00c96f75b06806b9418acf664b5b70e8318267254950c9d872e62e216f55d9a0f818ad715bd964e609b8ea55760bf25afeeafd4fab6de106464c8e83209345d4673db4cdd3db20eb12d9f88bf624bd0b832a9115d1acf6a5b3b86257885651570d6549caea8f506", 0xcc}, {&(0x7f0000000880)="8842023c850dffcdedcc17d6c73fbe53198bbeba8a8a866fcc4fb885dab54346ad778bdda54b61e13a45187a5b03fe1db271f14829093224be1884c3d420bedf69053fa24772", 0x46}, {&(0x7f0000000900)="2c8485458146ebdc4c65acb30e1a34f9b1a10e324bfbba6f825f7b4e5e613566bd423c6d4a9c5c24055240702a2bb78eaa6feb3fe6c26cd2d6d0c9392500abe22e31cacf8962d550cb10fac800616498912eb03e", 0x54}], 0x3}}, {{&(0x7f0000000980)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="e4dc5f7d4561b958f08ca870eeef287dcfb3bc5e577ac216a789c7b950ce80c81346812187a982a064a3b80ef75967bd3fbf1cfdfdbffc60a1e7ff3c69882003bc61d1438298bdd2bc4935e0fb6ad8e573e0612413755f3630bc4e0da0e3801b764f", 0x62}, {&(0x7f0000000a40)="3df6bab266ed47787754722eb2903546336aefc1566a6a66fabf1dfb2956431ef4ed3cea2136ca0c44f8b867af5057ed5a45059485ec6b51a1d46a5c3a55e1bd269ef635ae3164a918ad9df2e978d152a571b02ef5273fa13242469efd983174e6aa2395691a2eb563445078e76e", 0x6e}], 0x2, &(0x7f0000001d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @broadcast, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @loopback}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x13, 0xbd, [@empty, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @generic={0x7, 0x5, "20acf9"}, @cipso={0x86, 0x11, 0x1, [{0x6, 0x3, 'b'}, {0x2, 0x8, "1190a9efdbd3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x7, [{@rand_addr=0x64010100, 0x2}, {@empty, 0x6}, {@multicast1, 0x1}, {@multicast2, 0x1b1}, {@remote, 0x4}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x74, 0x3, 0xe, [{@remote, 0x3}, {@multicast1, 0x6}, {@multicast2, 0x5}, {@multicast1, 0x8001}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0xb, [{@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0xb79d}, {@remote, 0x4bd57783}, {@remote, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3ff}, {@remote, 0x6}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x722}}], 0x170}}, {{&(0x7f0000000c00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000001ec0)="9152cc5265155a1b26c89de7e772defd26e8854de61e2f5624c23d4629e8c8acd22c111419e83304657ba89d98f2f40a4e1a3ecfdfe03bae92783427ebdc0f8e40b7a0aba679ffbaa9eb781072343247f4ed849cd8f8a970897ce1a95adf6d2a89967e1e8cd434a49973f87483e3029bd649eb66b5cddb4e22e72db95a862ab82174554971d93006d3aa9cbf956e5cbdae08137895013b3f22282d7cc235fe6a7a253d438ff2e9617765d2c0bdce6bda08a7cd434976e246cdf9de7d2085fe24fffc5fbf0e243f6e99e24c4a3d906cb476", 0xd1}], 0x1, &(0x7f0000002140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x90, 0x3, 0x8, [{@remote, 0x7}, {@rand_addr=0x64010102, 0x7}, {@local, 0xb}, {@local, 0xfffffffa}, {@multicast1}]}, @ssrr={0x89, 0x27, 0x78, [@empty, @local, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @private=0xa010100]}, @cipso={0x86, 0x2f, 0x0, [{0x7, 0x5, "43f964"}, {0x2, 0x2}, {0x5, 0x11, "552ba8b9ce2580a20a21e6924256c6"}, {0x7, 0xb, "e5534b4b0e8b11095d"}, {0x1, 0x6, "d044206e"}]}, @end, @generic={0x89, 0xc, "316cfb53713ff0a1377d"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @loopback, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @dev={0xac, 0x14, 0x14, 0x35}, @remote}}}], 0xf8}}], 0x4, 0x0) 1.073841098s ago: executing program 1 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x194, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d0300000000000000001300000024000980080002000000000093ff02000000000008000100000000000800020004000000bff2b443061f696c243fa29fd9a2f85b5089ff1dc1d7b8ddba6c732ccfcbcbbc54313c60afba85706da6822710ea40449b8b500214a1097792d8a31d146a06b3e27730c61481b03cd9b2c7bab4f11ece001a976980a5def5a013c2f5b615762b114902ef69af02d6cf32585e45488f1b43f0070519c2d19bd23ee525696f"], 0x38}}, 0x0) 892.908678ms ago: executing program 2 (id=1109): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007110f42330000000000095000000000000008c6536a45e8983c5d72644683d2f78a9c38a3e7430db58b4f53dc16ad66df006391aee2f7af3d9622aae21fe135c5776e8e0b1d48c25385cfd225f5c678683b1b19d88790ed9df2d9c70b69bcd6f8a0a81e8009a20e2c6349f92f88a77fc5d21f31896e9dd5132fdf1d202be9d09cd4a73ce3dc33a7323a90ae094fc3f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 731.169813ms ago: executing program 1 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x98}}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0xffffffffffffffff, 0x8, 0x10}, 0xc) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000000c0015000000000004000000dea6149caea377fca8fa9bb02a61d8ad91498cac0a3417f47980b671e0a3f810262e09fa73c62b96a7dc9349b9d272dd7657232a17ecf60362119f754289"], 0x48}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x0, 0xffffffffffffffc6, 0x0, 0x1000000, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) sendmsg$tipc(r5, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x7}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0x64, 0x32, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6a6}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x16, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x64}}, 0x0) 535.147761ms ago: executing program 2 (id=1111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x6) sendmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)='E', 0x1}], 0x1, 0x0, 0x0, 0x14008000}}], 0x1, 0x40000) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') 460.902521ms ago: executing program 1 (id=1112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xc8, r2, 0x6}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf", @ANYBLOB="04217f55a7b2a3"], 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf", @ANYBLOB="04217f55a7b2a3"], 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) 334.261952ms ago: executing program 0 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 254.596662ms ago: executing program 2 (id=1114): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000030000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x9}, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001240)=[{{&(0x7f00000000c0)={0x2, 0x4e28, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)='o', 0x1}], 0x1}}], 0x1, 0x200040c8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000008d00)={0x2, 'macvlan0\x00', 0x3}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000008d00)={0x2, 'macvlan0\x00', 0x3}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x10, 0x40, 0x3, 0xfffffff8, {{0x19, 0x4, 0x2, 0x6, 0x64, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x4c, 0x1, [{0x6, 0x4, "1802"}, {0x1, 0xa, "12f9c71351e9973e"}, {0x0, 0xf, "f9fdbe04cb51e728ceb6679758"}, {0x5, 0xc, "85a56a70b10c0c0f2bfb"}, {0x5, 0x8, "da0b021c4c2e"}, {0x0, 0x7, "2ea2b521b8"}, {0x0, 0x8, "4f223d4add58"}, {0x1, 0x6, "14ca34b0"}]}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x10, 0x40, 0x3, 0xfffffff8, {{0x19, 0x4, 0x2, 0x6, 0x64, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x4c, 0x1, [{0x6, 0x4, "1802"}, {0x1, 0xa, "12f9c71351e9973e"}, {0x0, 0xf, "f9fdbe04cb51e728ceb6679758"}, {0x5, 0xc, "85a56a70b10c0c0f2bfb"}, {0x5, 0x8, "da0b021c4c2e"}, {0x0, 0x7, "2ea2b521b8"}, {0x0, 0x8, "4f223d4add58"}, {0x1, 0x6, "14ca34b0"}]}, @end, @end]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x12, &(0x7f00000006c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184b0000feffffff0008000000000000183300000500000000000000000000008500000028000000"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x7, 0x1, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000007c0)=[{0x4, 0x1, 0x4, 0xa}], 0x10, 0x1, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xa9, &(0x7f00000003c0)=""/169, 0x40f00, 0x2, '\x00', r8, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x7f, 0x7}, 0x10, 0x0, r9, 0x1, &(0x7f00000008c0)=[r10], &(0x7f0000000900)=[{0x2, 0x2, 0x10, 0x2}], 0x10, 0x0, @void, @value}, 0x94) 193.464668ms ago: executing program 0 (id=1115): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xe}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe8, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa79}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x7fff, 0x5, 0x4, 0x80000000, 0x5, 0x5, 0x9, 0x3, 0x4, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x314}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9e6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x0, 0x6, 0x1f, 0x1, 0x80000000, 0x1]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4c3, 0xcab3, 0x9, 0x4, 0x8000, 0x8, 0x3]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x401d}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@private2, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x7, 0x40, 0x0, 0x3, {{0x3a, 0x4, 0x3, 0x7, 0xe8, 0x67, 0x0, 0x81, 0x2f, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x23, 0x3, 0x7, [{@multicast1, 0x401}]}, @timestamp_addr={0x44, 0x54, 0x56, 0x1, 0x5, [{@broadcast, 0x1000}, {@rand_addr=0x64010100, 0x5}, {@private=0xa010102, 0x7}, {@multicast2, 0x4}, {@private=0xa010102, 0x2}, {@multicast2, 0x5}, {@local, 0x5}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x8}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x28, 0x4d, 0x0, 0x7, [0x0, 0x0, 0x1, 0x1, 0x2, 0x7, 0xa1ca, 0x9, 0x3]}, @lsrr={0x83, 0x27, 0xdc, [@empty, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}, @ssrr={0x89, 0x23, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @local, @multicast1, @private=0xa010102, @private=0xa010102]}, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0x5a0, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_VALUE={0x1b, 0x4, "11d314222900d52c5f402f7207cdde95a7c9ac5a648e29"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb6\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xd1!u\xf5\'\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'T@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#}*\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "9ad5345a40efeb11c9949ac57703c10a9986e5144f586040bcba30b94c930474a474ece6ff0dbb09fb272622c006ac935323b9ee3c22b5a541109ef6d8e55bb64975cc5010833ff4d83555562e9829089d5acba8475036e05fe04c3c5025a52b82522d14f3d3c03371439012754c"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7920}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "bc447835220f0cc25837aff14db5f13f185fe32800e9871443ff1af0cb509574ca32384780d0bce4efc1773201ffda2c6609de0ebe566d58fa5977a38428cfc3676a9942d042df108b30bd8429ac53e9d68274d7e5f76cb278a3619f31becaf5b5eb461e9497e1c911540989236b438dca2f1ae8ee466c1df7ffaeb3692b77b326f73adbe0f78f6780e7fe0a1412d234b21796cb6a1e87793e3e4df33a14d25ea4439bbd739a3543ad718f5a2fd821cb83d043a6af892e2f0c44"}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "8dff9ad2125fd9b33c795650f6bf4850fe68ca9adc398301869f7a90f18c57eff6a7c6a6e57f4b128bafead157eadbcce099c54cc4b4cd6a237f200a4935189a6f17089983"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xee0}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "da993f8080edc5666a216c5d781b1201c53015da0a1ddb2563935588bb5585ec107878a0553285c305cffdb4068e47251b4be5ca3f2d6271a801b2f88d5078917a9c35e3b51fe569275e277f97c74b18cfc5c5b4c968ae68c5cf888ac1c4d7d7a93d498428c256032bba8978821768b21ed0e3f22214ac2c6d0e9383020d1be3b6ff968fbe9a07bef4405dc62fb6d54f911a9193359a5424749af79d9c17cd45edfca3b5c04d6b42e15bcc5056c545c8cbdb307ae4054840aca91d009b2121f57283fae733333bf44bcb773127598ba0f0cabca564a8d5e8974ffd267551d5c0bf3fc7afa3dc3196bf24f84c3661fbd243c2d7b4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "e9e4"}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4010080}, 0x34008080) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xe}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000140)) (async) close(r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe8, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa79}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x7fff, 0x5, 0x4, 0x80000000, 0x5, 0x5, 0x9, 0x3, 0x4, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x314}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9e6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x0, 0x6, 0x1f, 0x1, 0x80000000, 0x1]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4c3, 0xcab3, 0x9, 0x4, 0x8000, 0x8, 0x3]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x401d}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@private2}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x7, 0x40, 0x0, 0x3, {{0x3a, 0x4, 0x3, 0x7, 0xe8, 0x67, 0x0, 0x81, 0x2f, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x23, 0x3, 0x7, [{@multicast1, 0x401}]}, @timestamp_addr={0x44, 0x54, 0x56, 0x1, 0x5, [{@broadcast, 0x1000}, {@rand_addr=0x64010100, 0x5}, {@private=0xa010102, 0x7}, {@multicast2, 0x4}, {@private=0xa010102, 0x2}, {@multicast2, 0x5}, {@local, 0x5}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x8}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x28, 0x4d, 0x0, 0x7, [0x0, 0x0, 0x1, 0x1, 0x2, 0x7, 0xa1ca, 0x9, 0x3]}, @lsrr={0x83, 0x27, 0xdc, [@empty, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}, @ssrr={0x89, 0x23, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @local, @multicast1, @private=0xa010102, @private=0xa010102]}, @noop]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480), &(0x7f0000000500)=0x4) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0x5a0, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_VALUE={0x1b, 0x4, "11d314222900d52c5f402f7207cdde95a7c9ac5a648e29"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb6\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xd1!u\xf5\'\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'T@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#}*\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "9ad5345a40efeb11c9949ac57703c10a9986e5144f586040bcba30b94c930474a474ece6ff0dbb09fb272622c006ac935323b9ee3c22b5a541109ef6d8e55bb64975cc5010833ff4d83555562e9829089d5acba8475036e05fe04c3c5025a52b82522d14f3d3c03371439012754c"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7920}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "bc447835220f0cc25837aff14db5f13f185fe32800e9871443ff1af0cb509574ca32384780d0bce4efc1773201ffda2c6609de0ebe566d58fa5977a38428cfc3676a9942d042df108b30bd8429ac53e9d68274d7e5f76cb278a3619f31becaf5b5eb461e9497e1c911540989236b438dca2f1ae8ee466c1df7ffaeb3692b77b326f73adbe0f78f6780e7fe0a1412d234b21796cb6a1e87793e3e4df33a14d25ea4439bbd739a3543ad718f5a2fd821cb83d043a6af892e2f0c44"}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "8dff9ad2125fd9b33c795650f6bf4850fe68ca9adc398301869f7a90f18c57eff6a7c6a6e57f4b128bafead157eadbcce099c54cc4b4cd6a237f200a4935189a6f17089983"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xee0}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "da993f8080edc5666a216c5d781b1201c53015da0a1ddb2563935588bb5585ec107878a0553285c305cffdb4068e47251b4be5ca3f2d6271a801b2f88d5078917a9c35e3b51fe569275e277f97c74b18cfc5c5b4c968ae68c5cf888ac1c4d7d7a93d498428c256032bba8978821768b21ed0e3f22214ac2c6d0e9383020d1be3b6ff968fbe9a07bef4405dc62fb6d54f911a9193359a5424749af79d9c17cd45edfca3b5c04d6b42e15bcc5056c545c8cbdb307ae4054840aca91d009b2121f57283fae733333bf44bcb773127598ba0f0cabca564a8d5e8974ffd267551d5c0bf3fc7afa3dc3196bf24f84c3661fbd243c2d7b4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "e9e4"}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4010080}, 0x34008080) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) (async) 0s ago: executing program 0 (id=1116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}}, 0x800) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) kernel console output (not intermixed with test programs): estimator thread 0... [ 82.703116][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 82.758484][ T5944] IPVS: using max 19 ests per chain, 45600 per kthread [ 82.766647][ T5949] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 82.866562][ T5937] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 82.948580][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.015068][ T5937] Tq€!7: entered promiscuous mode [ 83.066706][ T5959] syz.3.4[5959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.066817][ T5959] syz.3.4[5959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.110003][ T5952] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.148260][ T5959] syz.3.4[5959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.166270][ T5954] bridge_slave_1: left allmulticast mode [ 83.203797][ T5954] bridge_slave_1: left promiscuous mode [ 83.249133][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.396062][ T5954] bridge_slave_0: left allmulticast mode [ 83.415010][ T5954] bridge_slave_0: left promiscuous mode [ 83.428298][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.837735][ T5992] Bluetooth: MGMT ver 1.23 [ 86.216390][ T5999] dccp_close: ABORT with 2140 bytes unread [ 86.408679][ T6020] xt_hashlimit: max too large, truncated to 1048576 [ 87.269940][ T6035] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 87.562274][ T5143] Bluetooth: hci4: command tx timeout [ 87.576119][ T58] cfg80211: failed to load regulatory.db [ 88.209238][ T6052] vxcan1: entered allmulticast mode [ 88.784110][ T6074] netlink: 116 bytes leftover after parsing attributes in process `syz.4.30'. [ 89.245562][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.267074][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.286786][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.295575][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.299917][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 89.368437][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 89.886257][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 89.908011][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 90.249470][ T6119] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.328364][ T6153] dvmrp8: entered allmulticast mode [ 91.374735][ T6154] dvmrp8: left allmulticast mode [ 91.622845][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 91.684790][ T6159] netlink: 'syz.0.42': attribute type 15 has an invalid length. [ 91.711848][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 91.925348][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 92.083444][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.091823][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.119549][ T6172] netlink: 'syz.3.46': attribute type 12 has an invalid length. [ 92.448594][ T6172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.520953][ T6172] netlink: zone id is out of range [ 92.592788][ T6186] netlink: 'syz.3.46': attribute type 2 has an invalid length. [ 92.724459][ T6186] Tq€!7: entered promiscuous mode [ 92.932011][ T6194] delete_channel: no stack [ 93.041751][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 93.051404][ T6172] netlink: set zone limit has 4 unknown bytes [ 94.116219][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 94.209476][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 94.274075][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 95.386480][ T6243] Illegal XDP return value 4294967294 on prog (id 42) dev N/A, expect packet loss! [ 95.651741][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 95.678016][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 95.805396][ T6254] ipt_rpfilter: unknown options [ 96.188688][ T6261] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 96.240598][ T6261] netlink: 228 bytes leftover after parsing attributes in process `syz.2.68'. [ 96.260554][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 96.477541][ T6265] team_slave_0: entered promiscuous mode [ 96.483582][ T6265] team_slave_1: entered promiscuous mode [ 97.095753][ T6265] macsec1: entered promiscuous mode [ 97.107886][ T6265] team0: entered promiscuous mode [ 97.113744][ T6265] macsec1: entered allmulticast mode [ 97.159003][ T6265] team0: entered allmulticast mode [ 97.184101][ T6265] team_slave_0: entered allmulticast mode [ 97.222121][ T6265] team_slave_1: entered allmulticast mode [ 97.263273][ T6265] team0: Device macsec1 is already an upper device of the team interface [ 97.325741][ T6265] team0: left allmulticast mode [ 97.330857][ T6265] team_slave_0: left allmulticast mode [ 97.336939][ T6265] team_slave_1: left allmulticast mode [ 97.370324][ T6265] team0: left promiscuous mode [ 97.392375][ T6265] team_slave_0: left promiscuous mode [ 97.398321][ T6265] team_slave_1: left promiscuous mode [ 97.550097][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 97.619047][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 97.638080][ T6288] tipc: Started in network mode [ 97.643043][ T6288] tipc: Node identity 0e000000040000006e, cluster identity 8 [ 97.763888][ T6297] tipc: Started in network mode [ 97.769109][ T6297] tipc: Node identity 4ec7433aca6a, cluster identity 4711 [ 97.793539][ T6297] tipc: Enabled bearer , priority 0 [ 97.836826][ T6299] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.845944][ T6304] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.862708][ T6297] syzkaller0: entered promiscuous mode [ 97.869918][ T6297] syzkaller0: entered allmulticast mode [ 97.909037][ T6298] geneve2: entered promiscuous mode [ 97.919472][ T6298] geneve2: entered allmulticast mode [ 97.979663][ T6308] vlan2: entered promiscuous mode [ 97.995184][ T6308] vlan2: entered allmulticast mode [ 98.095390][ T6297] tipc: Resetting bearer [ 98.250666][ T6316] sctp: failed to load transform for md5: -2 [ 98.355256][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 98.372679][ T6328] vlan2: entered allmulticast mode [ 98.388698][ T6328] ip6gretap0: entered allmulticast mode [ 98.403934][ T6328] ip6gretap0: left allmulticast mode [ 98.839569][ T5921] tipc: Node number set to 2225947450 [ 99.246491][ T6296] tipc: Resetting bearer [ 99.276267][ T6296] tipc: Disabling bearer [ 100.184912][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 100.937378][ T6415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 100.972253][ T6417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 101.033206][ T6421] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 101.083359][ T6421] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 101.137295][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 101.341591][ T6430] ax25_connect(): syz.1.98 uses autobind, please contact jreuter@yaina.de [ 101.712691][ T6445] netdevsim netdevsim1: Direct firmware load for . [ 101.712691][ T6445] failed with error -2 [ 101.741005][ T6445] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 101.741005][ T6445] [ 102.378482][ T6462] bond0: (slave bond_slave_0): Releasing backup interface [ 102.413762][ T6462] bond0: (slave bond_slave_1): Releasing backup interface [ 102.451676][ T6462] team0: Port device team_slave_0 removed [ 102.464729][ T6462] team0: Port device team_slave_1 removed [ 102.507398][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.528111][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.565189][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.597735][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.670284][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 102.756032][ T6470] Zero length message leads to an empty skb [ 103.271814][ T6495] syz_tun: refused to change device tx_queue_len [ 103.296763][ T6495] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 103.427698][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.116'. [ 103.851830][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 104.221233][ T6528] ipvlan2: entered promiscuous mode [ 104.268095][ T6528] IPVS: length: 118 != 24 [ 104.642716][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 104.751213][ T6561] syz.1.129 uses old SIOCAX25GETINFO [ 105.309007][ T6572] veth1_macvtap: left promiscuous mode [ 105.594280][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 105.634334][ C1] vcan0: j1939_session_tx_dat: 0xffff888022316000: queue data error: -100 [ 105.712380][ T5143] Bluetooth: hci4: command tx timeout [ 106.164872][ T6598] netlink: 332 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.663953][ T6609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.143'. [ 106.700049][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.846993][ T6628] netlink: 136 bytes leftover after parsing attributes in process `syz.2.148'. [ 106.889635][ T6628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 106.901330][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 106.993505][ T6596] lo speed is unknown, defaulting to 1000 [ 107.015074][ T6596] lo speed is unknown, defaulting to 1000 [ 107.048590][ T6596] lo speed is unknown, defaulting to 1000 [ 107.075809][ T6596] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.126671][ T6596] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 107.155804][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.150'. [ 107.233215][ T6596] lo speed is unknown, defaulting to 1000 [ 107.253308][ T6596] lo speed is unknown, defaulting to 1000 [ 107.284525][ T6596] lo speed is unknown, defaulting to 1000 [ 107.349124][ T6596] lo speed is unknown, defaulting to 1000 [ 107.356039][ T6596] lo speed is unknown, defaulting to 1000 [ 107.389275][ T6596] lo speed is unknown, defaulting to 1000 [ 108.066937][ T6662] Cannot find map_set index 0 as target [ 108.074450][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 108.494114][ T6680] netlink: 1152 bytes leftover after parsing attributes in process `syz.0.163'. [ 108.512355][ T6683] netlink: 52 bytes leftover after parsing attributes in process `syz.4.164'. [ 108.515375][ T6680] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 108.526353][ T6683] nbd: must specify at least one socket [ 108.543746][ T6680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.551287][ T6683] tipc: Started in network mode [ 108.569796][ T6683] tipc: Node identity 7f000001, cluster identity 4711 [ 108.577736][ T6683] tipc: Enabled bearer , priority 10 [ 109.108957][ T6707] ebt_among: dst integrity fail: 200 [ 109.271231][ T6714] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 109.281781][ T6714] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 109.643206][ T6730] lo speed is unknown, defaulting to 1000 [ 109.689576][ T58] tipc: Node number set to 2130706433 [ 110.161453][ T6756] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.184016][ T6756] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.214873][ T6756] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.257903][ T6756] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.991176][ T6791] dvmrp0: entered allmulticast mode [ 111.040443][ T6794] __nla_validate_parse: 7 callbacks suppressed [ 111.040467][ T6794] netlink: 256 bytes leftover after parsing attributes in process `syz.0.186'. [ 111.110742][ T6792] pimreg: entered allmulticast mode [ 111.141459][ T6797] pimreg: entered allmulticast mode [ 111.160795][ T6797] pimreg: left allmulticast mode [ 111.476900][ T6821] netlink: 1 bytes leftover after parsing attributes in process `syz.3.192'. [ 112.040784][ T6846] netlink: 'syz.4.202': attribute type 178 has an invalid length. [ 112.337229][ T6855] sctp: [Deprecated]: syz.0.207 (pid 6855) Use of int in max_burst socket option. [ 112.337229][ T6855] Use struct sctp_assoc_value instead [ 112.382756][ T6857] bridge0: entered promiscuous mode [ 112.396964][ T6857] bridge0: entered allmulticast mode [ 112.403305][ T6855] x_tables: duplicate underflow at hook 2 [ 112.423224][ T6857] team0: Port device bridge0 added [ 112.480059][ T6858] netlink: 'syz.3.206': attribute type 10 has an invalid length. [ 112.561570][ T6858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 112.626599][ T6857] bridge0: port 1(ip6gretap0) entered blocking state [ 112.647618][ T6857] bridge0: port 1(ip6gretap0) entered disabled state [ 112.658895][ T6857] ip6gretap0: entered allmulticast mode [ 112.720992][ T6857] ip6gretap0: entered promiscuous mode [ 112.773728][ T6857] bridge0: port 1(ip6gretap0) entered blocking state [ 112.780967][ T6857] bridge0: port 1(ip6gretap0) entered listening state [ 112.817475][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'. [ 112.889501][ T6836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.219882][ T6880] lo speed is unknown, defaulting to 1000 [ 113.236897][ T6881] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 113.559279][ T6894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 113.865359][ T6899] lo speed is unknown, defaulting to 1000 [ 113.973833][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.221'. [ 114.033071][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 114.041829][ T6907] bond1: entered promiscuous mode [ 114.047139][ T6907] bond1: entered allmulticast mode [ 114.052839][ T6907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.183928][ T6916] netlink: zone id is out of range [ 114.216062][ T6916] netlink: zone id is out of range [ 114.233094][ T6916] netlink: zone id is out of range [ 114.241794][ T6920] netlink: 'syz.4.225': attribute type 2 has an invalid length. [ 114.257180][ T6916] netlink: zone id is out of range [ 114.267447][ T6916] netlink: zone id is out of range [ 114.307918][ T6916] netlink: zone id is out of range [ 114.313359][ T6916] netlink: zone id is out of range [ 114.330429][ T6916] netlink: zone id is out of range [ 114.342810][ T6916] netlink: zone id is out of range [ 114.349247][ T6916] netlink: zone id is out of range [ 114.677760][ T6933] team0 (unregistering): Port device team_slave_0 removed [ 114.691419][ T6933] team0 (unregistering): Port device team_slave_1 removed [ 114.734560][ T6940] dvmrp0: entered allmulticast mode [ 115.154594][ T6952] netlink: 'syz.1.232': attribute type 2 has an invalid length. [ 115.189746][ T6953] No such timeout policy "syz0" [ 115.197633][ T6956] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.235'. [ 115.225303][ T6957] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 115.352068][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 115.366671][ T6957] bond1: entered promiscuous mode [ 115.372663][ T6957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.946310][ T6979] syz.4.239: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 115.965433][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.4.239 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 115.968669][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 115.976082][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.976110][ T6979] Call Trace: [ 115.976121][ T6979] [ 115.976133][ T6979] dump_stack_lvl+0x241/0x360 [ 116.005944][ T6979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.011209][ T6979] ? __pfx__printk+0x10/0x10 [ 116.015855][ T6979] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 116.022332][ T6979] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 116.028896][ T6979] warn_alloc+0x278/0x410 [ 116.033321][ T6979] ? __pfx_warn_alloc+0x10/0x10 [ 116.038230][ T6979] ? __do_replace+0xcc/0xc40 [ 116.042865][ T6979] ? __get_vm_area_node+0x1c8/0x2d0 [ 116.048109][ T6979] ? __get_vm_area_node+0x25c/0x2d0 [ 116.053370][ T6979] __vmalloc_node_range_noprof+0x62f/0x1380 [ 116.059309][ T6979] ? mark_lock+0x9a/0x360 [ 116.063690][ T6979] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.070040][ T6979] ? __do_replace+0xcc/0xc40 [ 116.074647][ T6979] vzalloc_noprof+0x79/0x90 [ 116.079185][ T6979] ? __do_replace+0xcc/0xc40 [ 116.083788][ T6979] __do_replace+0xcc/0xc40 [ 116.088242][ T6979] ? __might_fault+0xaa/0x120 [ 116.093040][ T6979] ? __pfx_translate_table+0x10/0x10 [ 116.098345][ T6979] ? __pfx___do_replace+0x10/0x10 [ 116.103382][ T6979] ? __might_fault+0xaa/0x120 [ 116.108082][ T6979] ? __might_fault+0xc6/0x120 [ 116.112794][ T6979] ? _copy_from_user+0x99/0xc0 [ 116.117581][ T6979] ? copy_from_sockptr_offset+0x6b/0xb0 [ 116.123150][ T6979] do_arpt_set_ctl+0x10de/0x1650 [ 116.128114][ T6979] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 116.133425][ T6979] ? __pfx___mutex_trylock_common+0x10/0x10 [ 116.139347][ T6979] ? nf_setsockopt+0x240/0x2c0 [ 116.144227][ T6979] ? __pfx_lock_release+0x10/0x10 [ 116.149442][ T6979] ? rcu_is_watching+0x15/0xb0 [ 116.154239][ T6979] ? __mutex_unlock_slowpath+0x21e/0x790 [ 116.159927][ T6979] ? __pfx___mutex_lock+0x10/0x10 [ 116.164967][ T6979] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.170962][ T6979] ? aa_sk_perm+0x96d/0xab0 [ 116.175494][ T6979] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.180368][ T6979] nf_setsockopt+0x295/0x2c0 [ 116.184981][ T6979] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 116.190886][ T6979] do_sock_setsockopt+0x3af/0x720 [ 116.195938][ T6979] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 116.201506][ T6979] ? __fget_files+0x395/0x410 [ 116.206201][ T6979] ? __fget_files+0x2a/0x410 [ 116.210814][ T6979] __x64_sys_setsockopt+0x1ee/0x280 [ 116.216035][ T6979] do_syscall_64+0xf3/0x230 [ 116.220565][ T6979] ? clear_bhb_loop+0x35/0x90 [ 116.225266][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.231192][ T6979] RIP: 0033:0x7fb2d7985d29 [ 116.235713][ T6979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.255525][ T6979] RSP: 002b:00007fb2d872a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.263958][ T6979] RAX: ffffffffffffffda RBX: 00007fb2d7b76080 RCX: 00007fb2d7985d29 [ 116.272001][ T6979] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.279985][ T6979] RBP: 00007fb2d7a01b08 R08: 0000000000000068 R09: 0000000000000000 [ 116.287965][ T6979] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 116.296037][ T6979] R13: 0000000000000001 R14: 00007fb2d7b76080 R15: 00007fff7628a8a8 [ 116.304033][ T6979] [ 116.351372][ T6993] bond2: entered promiscuous mode [ 116.363861][ T6979] Mem-Info: [ 116.372308][ T6993] bond2: entered allmulticast mode [ 116.377710][ T6979] active_anon:4532 inactive_anon:0 isolated_anon:0 [ 116.377710][ T6979] active_file:1450 inactive_file:38263 isolated_file:0 [ 116.377710][ T6979] unevictable:768 dirty:232 writeback:0 [ 116.377710][ T6979] slab_reclaimable:10015 slab_unreclaimable:98046 [ 116.377710][ T6979] mapped:28746 shmem:1438 pagetables:770 [ 116.377710][ T6979] sec_pagetables:0 bounce:0 [ 116.377710][ T6979] kernel_misc_reclaimable:0 [ 116.377710][ T6979] free:1334408 free_pcp:393 free_cma:0 [ 116.425372][ T6993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.435696][ T6979] Node 0 active_anon:18128kB inactive_anon:0kB active_file:5800kB inactive_file:152980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114984kB dirty:928kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11140kB pagetables:2980kB sec_pagetables:0kB all_unreclaimable? no [ 116.495767][ T6979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 116.554271][ T7008] bridge0: port 2(vlan2) entered blocking state [ 116.561167][ T7008] bridge0: port 2(vlan2) entered disabled state [ 116.567545][ T6979] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.595291][ T7008] vlan2: entered allmulticast mode [ 116.603884][ T7008] gretap0: entered allmulticast mode [ 116.612526][ T7008] vlan2: entered promiscuous mode [ 116.617621][ T7008] gretap0: entered promiscuous mode [ 116.623111][ T6979] lowmem_reserve[]: 0 2465 2466 0 0 [ 116.628505][ T6979] Node 0 DMA32 free:1412584kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18092kB inactive_anon:0kB active_file:5800kB inactive_file:152148kB unevictable:1536kB writepending:928kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:1040kB local_pcp:100kB free_cma:0kB [ 116.643684][ T7008] bridge0: port 2(vlan2) entered blocking state [ 116.660673][ T6979] lowmem_reserve[]: 0 0 0 0 0 [ 116.666430][ T7008] bridge0: port 2(vlan2) entered listening state [ 116.670923][ T6979] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 116.721346][ T6979] lowmem_reserve[]: 0 0 0 0 0 [ 116.731885][ T6979] Node 1 Normal free:3910368kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 116.789360][ T6979] lowmem_reserve[]: 0 0 0 0 0 [ 116.799566][ T6979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.852192][ T6979] Node 0 DMA32: 0*4kB 97*8kB (ME) 113*16kB (ME) 74*32kB (ME) 887*64kB (UME) 164*128kB (UME) 47*256kB (UM) 17*512kB (UME) 9*1024kB (UME) 6*2048kB (ME) 314*4096kB (UM) = 1411096kB [ 116.884456][ T6979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 116.905052][ T6979] Node 1 Normal: 238*4kB (UE) 49*8kB (UME) 36*16kB (UME) 215*32kB (UME) 88*64kB (UME) 31*128kB (UME) 15*256kB (UM) 8*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910368kB [ 116.927208][ T6979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.939373][ T6979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.967025][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 116.978319][ T6979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.990549][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 117.000461][ T6979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.010687][ T6979] 41151 total pagecache pages [ 117.015544][ T6979] 0 pages in swap cache [ 117.019886][ T6979] Free swap = 124996kB [ 117.024339][ T6979] Total swap = 124996kB [ 117.030199][ T6979] 2097051 pages RAM [ 117.034465][ T6979] 0 pages HighMem/MovableOnly [ 117.039469][ T6979] 427013 pages reserved [ 117.073992][ T6979] 0 pages cma reserved [ 117.106456][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 117.135803][ T7025] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 117.219462][ T7028] netlink: 72 bytes leftover after parsing attributes in process `syz.1.252'. [ 117.231940][ T7029] tipc: MTU too low for tipc bearer [ 117.504340][ T7040] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 117.551755][ T7038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.257'. [ 117.570381][ T7032] xt_CT: No such helper "snmp" [ 117.646324][ T7047] vlan2: entered promiscuous mode [ 117.675230][ T7047] batadv0: entered promiscuous mode [ 117.686617][ T7047] batadv0: left promiscuous mode [ 117.722160][ T5889] IPVS: starting estimator thread 0... [ 117.821068][ T7052] IPVS: using max 21 ests per chain, 50400 per kthread [ 117.948498][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.260'. [ 117.959002][ T7055] bond3: entered promiscuous mode [ 117.968966][ T7055] bond3: entered allmulticast mode [ 117.988589][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 118.000958][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.260'. [ 118.025778][ T7055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.367759][ T7065] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 118.476010][ T7072] x_tables: duplicate underflow at hook 3 [ 118.735729][ T7077] syzkaller0: entered allmulticast mode [ 118.846258][ T7077] syzkaller0 (unregistering): left allmulticast mode [ 118.900321][ T7084] vlan2: entered promiscuous mode [ 118.906006][ T7084] vlan2: entered allmulticast mode [ 119.594433][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 119.636872][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 119.688672][ T7111] netlink: 'syz.3.275': attribute type 30 has an invalid length. [ 119.886024][ T58] hid-generic 0005:7FFF:0008.0001: unknown main item tag 0x0 [ 119.935935][ T58] hid-generic 0005:7FFF:0008.0001: unknown main item tag 0x0 [ 119.961905][ T7129] netlink: 'syz.3.279': attribute type 30 has an invalid length. [ 120.020791][ T58] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 120.031735][ C0] net_ratelimit: 11 callbacks suppressed [ 120.031770][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 120.138631][ T7135] Bluetooth: MGMT ver 1.23 [ 120.405890][ T7145] sctp: [Deprecated]: syz.2.284 (pid 7145) Use of int in max_burst socket option. [ 120.405890][ T7145] Use struct sctp_assoc_value instead [ 120.516296][ T7150] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 120.632765][ T7152] veth1_macvtap: left promiscuous mode [ 121.067934][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.473616][ T7186] lo speed is unknown, defaulting to 1000 [ 121.587603][ T7189] sctp: [Deprecated]: syz.0.296 (pid 7189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.587603][ T7189] Use struct sctp_sack_info instead [ 122.068905][ T7210] __nla_validate_parse: 7 callbacks suppressed [ 122.068928][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 122.104667][ T7210] netlink: 'syz.4.300': attribute type 22 has an invalid length. [ 122.112845][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.155135][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 122.219365][ T7208] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 122.409758][ T7225] sctp: [Deprecated]: syz.4.303 (pid 7225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.409758][ T7225] Use struct sctp_sack_info instead [ 122.727531][ T7238] lo speed is unknown, defaulting to 1000 [ 123.147932][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.222555][ T7254] syz_tun: entered allmulticast mode [ 123.242063][ T7253] syz_tun: left allmulticast mode [ 123.671486][ T7268] netlink: 332 bytes leftover after parsing attributes in process `syz.0.310'. [ 123.706940][ T7268] netlink: 104 bytes leftover after parsing attributes in process `syz.0.310'. [ 123.729765][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'. [ 123.880650][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.313'. [ 123.918617][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.313'. [ 123.944023][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.313'. [ 124.021237][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.313'. [ 124.053019][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.313'. [ 124.189485][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 124.316467][ T7300] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.517457][ T7315] lo speed is unknown, defaulting to 1000 [ 124.629135][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078bd4c00: rx timeout, send abort [ 124.639478][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078bd7400: rx timeout, send abort [ 124.648236][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078bd4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.664046][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078bd7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.861032][ T7327] lo speed is unknown, defaulting to 1000 [ 125.228017][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 125.271466][ T7336] syzkaller0: entered promiscuous mode [ 125.277016][ T7336] syzkaller0: entered allmulticast mode [ 125.465391][ T7321] siw: device registration error -23 [ 126.267945][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 127.310732][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 127.732290][ T7359] lo speed is unknown, defaulting to 1000 [ 127.743674][ T7352] syz.0.328 (7352) used greatest stack depth: 16656 bytes left [ 128.029072][ C1] bridge0: port 1(ip6gretap0) entered learning state [ 128.348021][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 128.496652][ T7403] __nla_validate_parse: 64 callbacks suppressed [ 128.496679][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 128.584468][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 128.620084][ T7404] lo speed is unknown, defaulting to 1000 [ 128.842945][ T7411] atomic_op ffff888028d7f198 conn xmit_atomic 0000000000000000 [ 128.854312][ T7411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.342'. [ 128.943652][ T7414] netlink: 1 bytes leftover after parsing attributes in process `syz.3.343'. [ 129.388074][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.695698][ T7425] sctp: [Deprecated]: syz.0.346 (pid 7425) Use of int in max_burst socket option. [ 129.695698][ T7425] Use struct sctp_assoc_value instead [ 130.175581][ T7433] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.349'. [ 130.198048][ T7433] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 130.349881][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.350'. [ 130.428929][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.792130][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 130.803564][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 130.825783][ T7458] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 130.876686][ T7467] xt_bpf: check failed: parse error [ 131.081656][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 131.163469][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 131.467931][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.494023][ T7497] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 131.508538][ T7493] bond4: entered promiscuous mode [ 131.513672][ T7493] bond4: entered allmulticast mode [ 131.522516][ T7493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.546881][ T5143] block nbd0: Receive control failed (result -107) [ 131.821675][ T7512] netlink: 'syz.3.370': attribute type 21 has an invalid length. [ 131.838026][ T7512] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 131.845808][ T7512] netlink: 'syz.3.370': attribute type 5 has an invalid length. [ 131.867893][ C1] bridge0: port 2(vlan2) entered learning state [ 132.042282][ T7518] lo speed is unknown, defaulting to 1000 [ 132.136606][ T7524] veth1_to_team: entered promiscuous mode [ 132.198924][ T7526] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 132.210726][ T7519] can: request_module (can-proto-0) failed. [ 132.508065][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 132.596675][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.764309][ T7544] lo speed is unknown, defaulting to 1000 [ 132.866803][ T7538] lo speed is unknown, defaulting to 1000 [ 132.995163][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.035434][ T7557] bond2: entered promiscuous mode [ 133.050708][ T7557] bond2: entered allmulticast mode [ 133.063453][ T7557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.151192][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.154703][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.158035][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.454670][ T7545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.547943][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 133.676374][ T7574] __nla_validate_parse: 10 callbacks suppressed [ 133.676397][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.384'. [ 133.812609][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 134.039834][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.194476][ T7593] lo speed is unknown, defaulting to 1000 [ 134.275938][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 134.376409][ T7604] vlan2: entered promiscuous mode [ 134.405013][ T7604] macvtap0: entered promiscuous mode [ 134.514280][ T7606] lo speed is unknown, defaulting to 1000 [ 134.899393][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 134.901294][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 134.976750][ T7626] xt_CT: No such helper "snmp" [ 135.005516][ T7639] bond5: entered promiscuous mode [ 135.016204][ T7639] bond5: entered allmulticast mode [ 135.022004][ T7639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.067624][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 135.118490][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'. [ 135.613381][ T7658] lo speed is unknown, defaulting to 1000 [ 135.627984][ C0] net_ratelimit: 2 callbacks suppressed [ 135.628007][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.646693][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.119510][ T7684] netlink: 'syz.0.408': attribute type 11 has an invalid length. [ 136.120656][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.203819][ T7684] netlink: 228 bytes leftover after parsing attributes in process `syz.0.408'. [ 136.518084][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.524295][ T5143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 136.619824][ T7717] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 136.645291][ T7717] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 136.667952][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.839233][ T7722] bond3: entered promiscuous mode [ 136.844686][ T7722] bond3: entered allmulticast mode [ 136.850588][ T7722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.862236][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 137.025832][ T7730] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 137.045823][ T7730] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 137.177945][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.485772][ T7747] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 137.514983][ T7747] syzkaller0: entered promiscuous mode [ 137.525204][ T7747] syzkaller0: entered allmulticast mode [ 137.549113][ T7758] syz.2.423[7758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.549223][ T7758] syz.2.423[7758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.629337][ T7758] syz.2.423[7758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.708156][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.196808][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.464126][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 138.669425][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.748000][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.913138][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.996893][ T7780] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 140.195775][ T7788] xt_l2tp: unknown flags: 10 [ 140.308818][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 140.473189][ T5143] Bluetooth: hci4: link tx timeout [ 140.478664][ T5143] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.496828][ T5846] Bluetooth: hci4: link tx timeout [ 140.503084][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.517887][ T5846] Bluetooth: hci4: link tx timeout [ 140.523217][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.547526][ T5846] Bluetooth: hci4: link tx timeout [ 140.553012][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.566421][ T5846] Bluetooth: hci4: link tx timeout [ 140.572197][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.620256][ T5846] Bluetooth: hci4: link tx timeout [ 140.625631][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.633932][ T5846] Bluetooth: hci4: link tx timeout [ 140.640166][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.692555][ T7809] lo speed is unknown, defaulting to 1000 [ 140.722885][ T7811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.440'. [ 140.732477][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 140.748187][ T7811] netlink: 'syz.2.440': attribute type 32 has an invalid length. [ 140.828165][ C1] net_ratelimit: 4 callbacks suppressed [ 140.828188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.828902][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.852321][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.316346][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.513176][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 141.590089][ T7830] bond4: entered promiscuous mode [ 141.602713][ T7830] bond4: entered allmulticast mode [ 141.608427][ T7830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.617418][ T7821] lo speed is unknown, defaulting to 1000 [ 141.740919][ T7835] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 141.753834][ T7835] macsec1: entered promiscuous mode [ 141.788742][ T7835] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 141.867915][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.896341][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 142.358147][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.518226][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 142.539724][ T7852] lo speed is unknown, defaulting to 1000 [ 143.041675][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.459'. [ 143.141775][ T7875] netlink: 'syz.3.459': attribute type 4 has an invalid length. [ 143.175489][ T7875] netlink: 17 bytes leftover after parsing attributes in process `syz.3.459'. [ 143.345640][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 143.357454][ T7884] netlink: 'syz.1.460': attribute type 13 has an invalid length. [ 143.365843][ T7884] netlink: 'syz.1.460': attribute type 58 has an invalid length. [ 143.366442][ T7882] bond1: entered promiscuous mode [ 143.374376][ T7884] netlink: 152 bytes leftover after parsing attributes in process `syz.1.460'. [ 143.389430][ C1] bridge0: port 1(ip6gretap0) entered forwarding state [ 143.389489][ C1] bridge0: topology change detected, propagating [ 143.413782][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.424446][ T7882] bond1: entered allmulticast mode [ 143.430299][ T7882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.633439][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.645771][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.655333][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.677007][ T7888] netlink: 'syz.0.462': attribute type 16 has an invalid length. [ 143.692636][ T7888] netlink: 330 bytes leftover after parsing attributes in process `syz.0.462'. [ 145.564361][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 145.573358][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 146.551844][ T5921] net_ratelimit: 11 callbacks suppressed [ 146.551866][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.597938][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 146.661944][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 146.674694][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.493'. [ 146.720048][ T8026] gretap1: entered promiscuous mode [ 146.731481][ T8026] gretap1: entered allmulticast mode [ 146.908262][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.237873][ C1] bridge0: port 2(vlan2) entered forwarding state [ 147.244448][ C1] bridge0: topology change detected, propagating [ 147.340972][ T8060] trusted_key: syz.4.504 sent an empty control message without MSG_MORE. [ 147.444583][ T8063] bond6: entered promiscuous mode [ 147.449995][ T8063] bond6: entered allmulticast mode [ 147.455958][ T8063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.474468][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 147.635619][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.874496][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.895177][ T8071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.904045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.120853][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 148.273391][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'. [ 148.494945][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 148.668191][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.866443][ T8108] netlink: 44 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.954879][ T8110] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 149.738012][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.840964][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.845044][ T8141] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 149.948295][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.214573][ T8155] lo speed is unknown, defaulting to 1000 [ 150.267205][ T8161] bridge0: entered allmulticast mode [ 150.278918][ T8161] bridge_slave_1: left allmulticast mode [ 150.291078][ T8161] bridge_slave_1: left promiscuous mode [ 150.297492][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.321117][ T8161] bridge_slave_0: left allmulticast mode [ 150.326865][ T8161] bridge_slave_0: left promiscuous mode [ 150.339388][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.370882][ T8170] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 150.382981][ T8170] netlink: 'syz.4.537': attribute type 2 has an invalid length. [ 150.424043][ T8161] bridge0 (unregistering): left allmulticast mode [ 150.538474][ T8153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.630104][ T8172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.697027][ T8153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.863375][ T8153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.958838][ T8178] lo speed is unknown, defaulting to 1000 [ 151.081764][ T8153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.357640][ T8153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.375903][ T8153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.392263][ T8153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.408368][ T8153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.504998][ T8185] __nla_validate_parse: 5 callbacks suppressed [ 151.505021][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 151.543936][ T8178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.540'. [ 151.549011][ T8185] netlink: 'syz.1.542': attribute type 12 has an invalid length. [ 151.574479][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 151.659906][ T8189] SET target dimension over the limit! [ 151.792987][ T51] net_ratelimit: 3 callbacks suppressed [ 151.793009][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.879602][ T8193] lo speed is unknown, defaulting to 1000 [ 151.971850][ T8203] sctp: [Deprecated]: syz.0.546 (pid 8203) Use of int in maxseg socket option. [ 151.971850][ T8203] Use struct sctp_assoc_value instead [ 152.013389][ T8203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.022462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.560306][ T8220] xt_cgroup: invalid path, errno=-2 [ 152.616484][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.649616][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.669837][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 152.694481][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.713556][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.750004][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.782834][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.841838][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.918667][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.557'. [ 153.464074][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 153.483573][ T29] audit: type=1107 audit(1737539161.258:2): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%Å¿;/ÖüyL÷kä»e2×koU‹h.*dñ†¡)ƒÈQä$þŠÚÍ”*m~ñaï&gäô"$f_Af{è€ „«ZÓæ¹/×C©k¥«S¥Á°D' [ 153.543503][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'. [ 153.579373][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 153.612747][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'. [ 153.644794][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'. [ 153.745591][ T8277] @ÿ: renamed from bond_slave_0 (while UP) [ 153.940764][ T8293] ip6tnl1: entered promiscuous mode [ 153.946049][ T8293] ip6tnl1: entered allmulticast mode [ 154.601072][ T8331] FAULT_INJECTION: forcing a failure. [ 154.601072][ T8331] name failslab, interval 1, probability 0, space 0, times 1 [ 154.646539][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.4.576 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 154.657233][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.667342][ T8331] Call Trace: [ 154.670663][ T8331] [ 154.673625][ T8331] dump_stack_lvl+0x241/0x360 [ 154.678367][ T8331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.683625][ T8331] ? __pfx__printk+0x10/0x10 [ 154.688281][ T8331] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 154.694324][ T8331] ? __pfx___might_resched+0x10/0x10 [ 154.699658][ T8331] ? tcp_established_options+0x3c1/0x800 [ 154.705440][ T8331] should_fail_ex+0x3b0/0x4e0 [ 154.710185][ T8331] should_failslab+0xac/0x100 [ 154.714924][ T8331] kmem_cache_alloc_node_noprof+0x77/0x380 [ 154.720793][ T8331] ? __alloc_skb+0x1c3/0x440 [ 154.725443][ T8331] ? tcp_current_mss+0x29b/0x4d0 [ 154.730444][ T8331] __alloc_skb+0x1c3/0x440 [ 154.734916][ T8331] ? __pfx___alloc_skb+0x10/0x10 [ 154.739956][ T8331] tcp_stream_alloc_skb+0x3d/0x310 [ 154.745170][ T8331] tcp_sendmsg_locked+0xedb/0x5330 [ 154.750349][ T8331] ? mark_lock+0x9a/0x360 [ 154.754733][ T8331] ? __lock_acquire+0x1397/0x2100 [ 154.759840][ T8331] ? mark_lock+0x9a/0x360 [ 154.764231][ T8331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.770616][ T8331] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 154.776230][ T8331] ? tcp_sendmsg+0x22/0x50 [ 154.780690][ T8331] ? do_raw_spin_unlock+0x13c/0x8b0 [ 154.785953][ T8331] tcp_sendmsg+0x30/0x50 [ 154.790269][ T8331] __sock_sendmsg+0x1a6/0x270 [ 154.795015][ T8331] __sys_sendto+0x363/0x4c0 [ 154.799586][ T8331] ? __pfx___sys_sendto+0x10/0x10 [ 154.804671][ T8331] ? __mutex_unlock_slowpath+0x21e/0x790 [ 154.810381][ T8331] ? __fget_files+0x2a/0x410 [ 154.815037][ T8331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 154.821086][ T8331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.827481][ T8331] __x64_sys_sendto+0xde/0x100 [ 154.832320][ T8331] do_syscall_64+0xf3/0x230 [ 154.836882][ T8331] ? clear_bhb_loop+0x35/0x90 [ 154.841621][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.847665][ T8331] RIP: 0033:0x7fb2d7985d29 [ 154.852127][ T8331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.872005][ T8331] RSP: 002b:00007fb2d874b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 154.880527][ T8331] RAX: ffffffffffffffda RBX: 00007fb2d7b75fa0 RCX: 00007fb2d7985d29 [ 154.888644][ T8331] RDX: ffffffffffffff94 RSI: 0000000020000000 RDI: 0000000000000003 [ 154.896666][ T8331] RBP: 00007fb2d874b090 R08: 0000000000000000 R09: 0000000000000000 [ 154.904691][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.912715][ T8331] R13: 0000000000000000 R14: 00007fb2d7b75fa0 R15: 00007fff7628a8a8 [ 154.920801][ T8331] [ 155.616351][ T8358] gretap0: left allmulticast mode [ 155.638531][ T8358] gretap0: left promiscuous mode [ 155.668146][ T8358] bridge0: port 2(vlan2) entered disabled state [ 155.991239][ T8358] bridge0: port 1(ip6gretap0) entered disabled state [ 156.372792][ T8358] veth1_to_team: left promiscuous mode [ 156.884231][ T8358] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.915939][ T8358] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.936915][ T8358] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.957449][ T8358] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.071110][ T911] net_ratelimit: 51 callbacks suppressed [ 157.071132][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.096981][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.114064][ T8358] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.129116][ T8358] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.138510][ T8358] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.147619][ T8358] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.157853][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.171575][ T8358] bridge0: left promiscuous mode [ 157.184807][ T8358] bridge0: left allmulticast mode [ 157.230437][ T8397] Â: renamed from pim6reg1 [ 157.392966][ T8413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.420619][ T8413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.448361][ T8413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.470904][ T8416] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 157.481290][ T8413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.495568][ T8413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.508897][ T8416] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.527338][ T8416] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.543004][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.630466][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.648783][ T8424] __nla_validate_parse: 2 callbacks suppressed [ 157.648806][ T8424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.595'. [ 157.845931][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 157.894363][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 158.354199][ T8455] netlink: 'syz.1.603': attribute type 11 has an invalid length. [ 158.493076][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 158.926620][ T8468] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 159.081424][ T8468] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 159.301698][ T8474] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 159.327945][ T8474] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 159.367402][ T8474] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 159.572530][ T8478] netlink: 104 bytes leftover after parsing attributes in process `syz.2.607'. [ 159.786629][ T8493] lo speed is unknown, defaulting to 1000 [ 159.868163][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 160.069605][ T8502] syzkaller1: entered promiscuous mode [ 160.108401][ T8502] syzkaller1: entered allmulticast mode [ 160.206586][ T8517] netlink: 84 bytes leftover after parsing attributes in process `syz.1.616'. [ 160.669774][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.724656][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.773651][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.822023][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.854797][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.872165][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 160.877346][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.926780][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 160.927026][ T8547] lo speed is unknown, defaulting to 1000 [ 160.944821][ T8540] netlink: 'syz.1.620': attribute type 4 has an invalid length. [ 161.069617][ T8546] vlan2: entered promiscuous mode [ 161.077980][ T8546] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 161.352968][ T8558] veth1_virt_wifi: entered promiscuous mode [ 161.374606][ T8564] netlink: 80 bytes leftover after parsing attributes in process `syz.0.627'. [ 161.508026][ T8556] rose1: entered allmulticast mode [ 161.520613][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 161.533728][ T8556] netlink: 'syz.1.624': attribute type 11 has an invalid length. [ 161.830034][ T8578] x_tables: duplicate underflow at hook 1 [ 161.907181][ T8584] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 161.926269][ T8584] vlan0: entered allmulticast mode [ 162.138341][ T8588] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 162.150107][ T8588] macvlan2: entered allmulticast mode [ 162.158823][ T8588] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 162.302154][ T51] net_ratelimit: 10 callbacks suppressed [ 162.302174][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.465106][ T8604] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 162.632659][ T8612] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 163.024374][ T8629] openvswitch: netlink: Tunnel attr 52 out of range max 16 [ 163.138802][ T8633] __nla_validate_parse: 5 callbacks suppressed [ 163.138825][ T8633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.651'. [ 163.228284][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.317021][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.372319][ T8638] lo speed is unknown, defaulting to 1000 [ 163.427326][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 163.503859][ T8648] netlink: 196 bytes leftover after parsing attributes in process `syz.2.657'. [ 163.513930][ T8648] netlink: 196 bytes leftover after parsing attributes in process `syz.2.657'. [ 163.523354][ T8648] netlink: 19 bytes leftover after parsing attributes in process `syz.2.657'. [ 163.533542][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 164.134115][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.141435][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.149142][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.156262][ T8673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.174317][ T8673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.361685][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.441189][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.463702][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.485462][ T8684] netlink: 44 bytes leftover after parsing attributes in process `syz.1.668'. [ 164.496964][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.514733][ T8684] netlink: 43 bytes leftover after parsing attributes in process `syz.1.668'. [ 164.525275][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.550161][ T8684] netlink: 'syz.1.668': attribute type 5 has an invalid length. [ 164.566820][ T8684] netlink: 43 bytes leftover after parsing attributes in process `syz.1.668'. [ 164.594621][ T8688] netlink: 44 bytes leftover after parsing attributes in process `syz.1.668'. [ 164.609520][ T8688] netlink: 'syz.1.668': attribute type 5 has an invalid length. [ 165.119590][ T8722] dummy0: entered promiscuous mode [ 165.149666][ T8722] dummy0: left promiscuous mode [ 165.670143][ T8742] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 165.840952][ T8753] lo speed is unknown, defaulting to 1000 [ 166.244278][ T8763] hsr0: entered promiscuous mode [ 166.447610][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.455276][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.482245][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 166.495503][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 166.503901][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 166.512764][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 166.528686][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 166.538180][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 166.546985][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 166.555329][ T8773] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 167.036251][ T8768] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.057007][ T8768] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.072703][ T8768] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.085510][ T8768] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.113711][ T8768] macvtap0: left promiscuous mode [ 167.472158][ T5889] net_ratelimit: 18 callbacks suppressed [ 167.472183][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.122664][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.139476][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.158943][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.178372][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.216678][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.238713][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.247065][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.258282][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.288402][ T8810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.836975][ T8838] __nla_validate_parse: 10 callbacks suppressed [ 168.836998][ T8838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.713'. [ 169.123172][ T8846] netlink: 211456 bytes leftover after parsing attributes in process `syz.1.717'. [ 169.460434][ T8855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 169.711827][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 169.753203][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 170.053783][ T8883] validate_nla: 58 callbacks suppressed [ 170.053807][ T8883] netlink: 'syz.3.727': attribute type 11 has an invalid length. [ 170.076603][ T8879] xt_CT: No such helper "pptp" [ 170.104306][ T8886] tipc: Started in network mode [ 170.117604][ T8886] tipc: Node identity 0000000a000000005f2e002d0000004, cluster identity 4711 [ 170.478952][ T8908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.733'. [ 170.569692][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.733'. [ 170.656159][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 170.686713][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 170.831519][ T8919] netlink: 'syz.4.733': attribute type 4 has an invalid length. [ 170.920564][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 170.971187][ T8910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.982579][ T8910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.994325][ T8910] bond0 (unregistering): (slave team0): Releasing backup interface [ 171.006196][ T8910] bond0 (unregistering): Released all slaves [ 171.055795][ T5885] lo speed is unknown, defaulting to 1000 [ 171.793711][ T8965] lo speed is unknown, defaulting to 1000 [ 171.855100][ T8970] xt_TCPMSS: Only works on TCP SYN packets [ 172.109554][ T8988] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 172.149084][ T8979] lo speed is unknown, defaulting to 1000 [ 172.678264][ T5889] net_ratelimit: 21 callbacks suppressed [ 172.678286][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.001104][ T9016] pim6reg1: entered promiscuous mode [ 173.006995][ T9016] pim6reg1: entered allmulticast mode [ 173.225835][ T9022] ip6tnl1: entered allmulticast mode [ 173.294156][ T9026] team0: Device gtp0 is of different type [ 173.411444][ T9040] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 173.456127][ T9040] bond1: entered promiscuous mode [ 173.463331][ T9040] bond1: entered allmulticast mode [ 173.503877][ T9044] batadv1: entered allmulticast mode [ 173.578617][ T9044] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.628979][ T9044] bond1: (slave batadv1): making interface the new active one [ 173.656916][ T9044] batadv1: entered promiscuous mode [ 173.669034][ T9044] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 173.694900][ T9056] netlink: 'syz.1.773': attribute type 12 has an invalid length. [ 173.716655][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.755696][ T9057] syzkaller1: entered promiscuous mode [ 173.768058][ T9057] syzkaller1: entered allmulticast mode [ 173.854847][ T9059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.875617][ T5143] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 173.883333][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.891781][ T9057] __nla_validate_parse: 15 callbacks suppressed [ 173.891802][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 174.389920][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 174.442728][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 174.447138][ T9090] ip6gre1: entered allmulticast mode [ 174.502896][ T9084] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 174.768370][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.804881][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 174.959377][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 175.038316][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 175.095667][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 175.133234][ T9124] netlink: 'syz.1.793': attribute type 14 has an invalid length. [ 175.388516][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.396703][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.672553][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 175.738756][ T9156] lo speed is unknown, defaulting to 1000 [ 175.796959][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.848039][ T9163] netlink: 'syz.4.805': attribute type 30 has an invalid length. [ 175.893051][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.805'. [ 175.906385][ T9163] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 175.913958][ T9163] syzkaller0: linktype set to 65534 [ 175.966201][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 176.003307][ T9167] team_slave_0: entered promiscuous mode [ 176.009178][ T9167] team_slave_1: entered promiscuous mode [ 176.018663][ T9167] macvtap1: entered promiscuous mode [ 176.024249][ T9167] team0: entered promiscuous mode [ 176.039795][ T9167] macvtap1: entered allmulticast mode [ 176.045911][ T9167] team0: entered allmulticast mode [ 176.051716][ T9167] team_slave_0: entered allmulticast mode [ 176.057985][ T9167] team_slave_1: entered allmulticast mode [ 176.065390][ T9167] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 176.831377][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.035706][ T9208] syz.2.814: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.075934][ T9208] CPU: 0 UID: 0 PID: 9208 Comm: syz.2.814 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 177.086610][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.096713][ T9208] Call Trace: [ 177.100039][ T9208] [ 177.103096][ T9208] dump_stack_lvl+0x241/0x360 [ 177.107922][ T9208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.113178][ T9208] ? __pfx__printk+0x10/0x10 [ 177.117830][ T9208] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 177.124312][ T9208] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 177.130884][ T9208] warn_alloc+0x278/0x410 [ 177.135269][ T9208] ? __pfx_warn_alloc+0x10/0x10 [ 177.140177][ T9208] ? xskq_create+0xb6/0x170 [ 177.144728][ T9208] ? __get_vm_area_node+0x1c8/0x2d0 [ 177.149979][ T9208] ? __get_vm_area_node+0x25c/0x2d0 [ 177.155239][ T9208] __vmalloc_node_range_noprof+0x62f/0x1380 [ 177.161211][ T9208] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.167602][ T9208] ? __kasan_kmalloc+0x98/0xb0 [ 177.172511][ T9208] vmalloc_user_noprof+0x74/0x80 [ 177.177630][ T9208] ? xskq_create+0xb6/0x170 [ 177.182183][ T9208] xskq_create+0xb6/0x170 [ 177.186546][ T9208] xsk_init_queue+0xa1/0x100 [ 177.191161][ T9208] xsk_setsockopt+0x598/0x950 [ 177.195859][ T9208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.201082][ T9208] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.205967][ T9208] ? __pfx_lock_acquire+0x10/0x10 [ 177.211009][ T9208] ? aa_sock_opt_perm+0x79/0x120 [ 177.215965][ T9208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.221191][ T9208] do_sock_setsockopt+0x3af/0x720 [ 177.226239][ T9208] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 177.231808][ T9208] ? __fget_files+0x395/0x410 [ 177.236502][ T9208] ? __fget_files+0x2a/0x410 [ 177.241125][ T9208] __x64_sys_setsockopt+0x1ee/0x280 [ 177.246350][ T9208] do_syscall_64+0xf3/0x230 [ 177.250878][ T9208] ? clear_bhb_loop+0x35/0x90 [ 177.255572][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.261504][ T9208] RIP: 0033:0x7f3f28f85d29 [ 177.265934][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.285650][ T9208] RSP: 002b:00007f3f29cdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.294112][ T9208] RAX: ffffffffffffffda RBX: 00007f3f29176080 RCX: 00007f3f28f85d29 [ 177.302206][ T9208] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 177.310189][ T9208] RBP: 00007f3f29001b08 R08: 0000000000000004 R09: 0000000000000000 [ 177.318174][ T9208] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 177.326177][ T9208] R13: 0000000000000000 R14: 00007f3f29176080 R15: 00007ffc91ec7038 [ 177.334206][ T9208] [ 177.388682][ T9208] Mem-Info: [ 177.395331][ T9208] active_anon:4793 inactive_anon:0 isolated_anon:0 [ 177.395331][ T9208] active_file:1486 inactive_file:38294 isolated_file:0 [ 177.395331][ T9208] unevictable:768 dirty:166 writeback:0 [ 177.395331][ T9208] slab_reclaimable:10401 slab_unreclaimable:100250 [ 177.395331][ T9208] mapped:31658 shmem:1443 pagetables:724 [ 177.395331][ T9208] sec_pagetables:0 bounce:0 [ 177.395331][ T9208] kernel_misc_reclaimable:0 [ 177.395331][ T9208] free:1336701 free_pcp:3210 free_cma:0 [ 177.467513][ T9208] Node 0 active_anon:19472kB inactive_anon:0kB active_file:5944kB inactive_file:153104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126632kB dirty:664kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11752kB pagetables:2896kB sec_pagetables:0kB all_unreclaimable? no [ 177.545380][ T9208] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 177.585190][ T9208] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.625563][ T9208] lowmem_reserve[]: 0 2465 2466 0 0 [ 177.631560][ T9208] Node 0 DMA32 free:1427772kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:15936kB inactive_anon:0kB active_file:5944kB inactive_file:152272kB unevictable:1536kB writepending:664kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:9632kB local_pcp:4440kB free_cma:0kB [ 177.667335][ T9208] lowmem_reserve[]: 0 0 0 0 0 [ 177.672270][ T9208] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 177.706926][ T9208] lowmem_reserve[]: 0 0 0 0 0 [ 177.711989][ T9208] Node 1 Normal free:3910580kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.754855][ T9208] lowmem_reserve[]: 0 0 0 0 0 [ 177.761221][ T9208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.780045][ T9208] Node 0 DMA32: 723*4kB (UM) 132*8kB (U) 61*16kB (ME) 193*32kB (UME) 659*64kB (UME) 298*128kB (UME) 92*256kB (UME) 17*512kB (UM) 9*1024kB (UM) 4*2048kB (UME) 314*4096kB (UM) = 1427228kB [ 177.803457][ T9208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 177.820476][ T9208] Node 1 Normal: 235*4kB (UE) 49*8kB (UME) 36*16kB (UME) 214*32kB (UME) 90*64kB (UME) 30*128kB (UME) 14*256kB (UM) 9*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910580kB [ 177.842301][ T9208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.852061][ T9208] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.861706][ T9208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.871498][ T9208] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.881800][ T9208] 41223 total pagecache pages [ 177.886528][ T9208] 0 pages in swap cache [ 177.888008][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.890838][ T9208] Free swap = 124996kB [ 177.903460][ T9208] Total swap = 124996kB [ 177.907670][ T9208] 2097051 pages RAM [ 177.911720][ T9208] 0 pages HighMem/MovableOnly [ 177.916648][ T9208] 427013 pages reserved [ 177.920905][ T9208] 0 pages cma reserved [ 178.191576][ T9248] netlink: 'syz.3.825': attribute type 4 has an invalid length. [ 178.212487][ T9248] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 178.365704][ T9254] lo speed is unknown, defaulting to 1000 [ 178.437302][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.626513][ T9268] netlink: 'syz.1.829': attribute type 8 has an invalid length. [ 178.924711][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.928808][ T9279] __nla_validate_parse: 4 callbacks suppressed [ 178.928835][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 178.988075][ T9282] netlink: zone id is out of range [ 178.993505][ T9282] netlink: zone id is out of range [ 179.024311][ T9282] netlink: zone id is out of range [ 179.034624][ T9279] lo speed is unknown, defaulting to 1000 [ 179.049571][ T9282] netlink: zone id is out of range [ 179.079367][ T9282] netlink: zone id is out of range [ 179.081232][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.093137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.352716][ T9301] netlink: 'syz.1.838': attribute type 13 has an invalid length. [ 179.391597][ T9301] macvtap0: entered promiscuous mode [ 179.427359][ T9301] macvtap0: refused to change device tx_queue_len [ 179.580660][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 180.029004][ T9332] gretap0: entered allmulticast mode [ 180.045228][ T9332] gretap0: entered promiscuous mode [ 180.103962][ T9332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.117613][ T9332] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.384764][ T9316] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 180.400930][ T9346] netlink: 'syz.3.846': attribute type 4 has an invalid length. [ 180.625083][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 180.655652][ T9360] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 180.714401][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.726985][ T9357] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.771429][ T9363] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 181.303234][ T9393] lo speed is unknown, defaulting to 1000 [ 181.377454][ T9397] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 181.535885][ T9404] netlink: 168 bytes leftover after parsing attributes in process `syz.1.857'. [ 181.884662][ T9417] netlink: 64 bytes leftover after parsing attributes in process `syz.4.860'. [ 181.899352][ T9420] x_tables: duplicate underflow at hook 1 [ 182.021825][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 182.061203][ T9422] lo speed is unknown, defaulting to 1000 [ 182.273554][ T9432] FAULT_INJECTION: forcing a failure. [ 182.273554][ T9432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 182.290701][ T9432] CPU: 0 UID: 0 PID: 9432 Comm: syz.4.863 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 182.301359][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 182.311437][ T9432] Call Trace: [ 182.314813][ T9432] [ 182.317759][ T9432] dump_stack_lvl+0x241/0x360 [ 182.322474][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.327698][ T9432] ? __pfx__printk+0x10/0x10 [ 182.332310][ T9432] ? __pfx_lock_release+0x10/0x10 [ 182.337358][ T9432] should_fail_ex+0x3b0/0x4e0 [ 182.342067][ T9432] _copy_from_user+0x2f/0xc0 [ 182.346680][ T9432] copy_msghdr_from_user+0xae/0x680 [ 182.351894][ T9432] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 182.357721][ T9432] ? __fget_files+0x2a/0x410 [ 182.362336][ T9432] ? __fget_files+0x2a/0x410 [ 182.366950][ T9432] __sys_sendmsg+0x209/0x350 [ 182.371557][ T9432] ? __pfx_lock_release+0x10/0x10 [ 182.376606][ T9432] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.381759][ T9432] ? __pfx_vfs_write+0x10/0x10 [ 182.386554][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.392911][ T9432] ? do_syscall_64+0x100/0x230 [ 182.397696][ T9432] ? do_syscall_64+0xb6/0x230 [ 182.402396][ T9432] do_syscall_64+0xf3/0x230 [ 182.406914][ T9432] ? clear_bhb_loop+0x35/0x90 [ 182.411615][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.417520][ T9432] RIP: 0033:0x7fb2d7985d29 [ 182.422063][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.441849][ T9432] RSP: 002b:00007fb2d874b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.450279][ T9432] RAX: ffffffffffffffda RBX: 00007fb2d7b75fa0 RCX: 00007fb2d7985d29 [ 182.458350][ T9432] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 182.466427][ T9432] RBP: 00007fb2d874b090 R08: 0000000000000000 R09: 0000000000000000 [ 182.474416][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.482505][ T9432] R13: 0000000000000000 R14: 00007fb2d7b75fa0 R15: 00007fff7628a8a8 [ 182.490506][ T9432] [ 182.599313][ T9437] netlink: 'syz.3.865': attribute type 5 has an invalid length. [ 182.717496][ T9437] : entered promiscuous mode [ 182.750590][ T9438] netlink: 'syz.0.866': attribute type 12 has an invalid length. [ 182.783693][ T9438] netlink: 'syz.0.866': attribute type 29 has an invalid length. [ 182.820375][ T9438] netlink: 148 bytes leftover after parsing attributes in process `syz.0.866'. [ 182.875008][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 182.928539][ T9444] sctp: [Deprecated]: syz.1.869 (pid 9444) Use of int in maxseg socket option. [ 182.928539][ T9444] Use struct sctp_assoc_value instead [ 182.979283][ T9446] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.986762][ T9448] sctp: [Deprecated]: syz.1.869 (pid 9448) Use of int in maxseg socket option. [ 182.986762][ T9448] Use struct sctp_assoc_value instead [ 183.085948][ T911] net_ratelimit: 35 callbacks suppressed [ 183.085966][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.428244][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.873'. [ 183.468473][ T5143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 183.775924][ T9476] FAULT_INJECTION: forcing a failure. [ 183.775924][ T9476] name failslab, interval 1, probability 0, space 0, times 0 [ 183.794958][ T9476] CPU: 1 UID: 0 PID: 9476 Comm: syz.0.877 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 183.805629][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 183.815751][ T9476] Call Trace: [ 183.819072][ T9476] [ 183.822044][ T9476] dump_stack_lvl+0x241/0x360 [ 183.826795][ T9476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.832033][ T9476] ? __pfx__printk+0x10/0x10 [ 183.836679][ T9476] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 183.842731][ T9476] ? __pfx___might_resched+0x10/0x10 [ 183.848062][ T9476] should_fail_ex+0x3b0/0x4e0 [ 183.852797][ T9476] should_failslab+0xac/0x100 [ 183.857525][ T9476] kmem_cache_alloc_node_noprof+0x77/0x380 [ 183.863560][ T9476] ? __alloc_skb+0x1c3/0x440 [ 183.868209][ T9476] __alloc_skb+0x1c3/0x440 [ 183.872686][ T9476] ? __pfx___alloc_skb+0x10/0x10 [ 183.877792][ T9476] ? netlink_autobind+0xd6/0x2f0 [ 183.882797][ T9476] ? netlink_autobind+0x2b0/0x2f0 [ 183.887973][ T9476] netlink_sendmsg+0x638/0xcb0 [ 183.892815][ T9476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.898162][ T9476] ? aa_sock_msg_perm+0x91/0x160 [ 183.903158][ T9476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.908529][ T9476] __sock_sendmsg+0x221/0x270 [ 183.913262][ T9476] ____sys_sendmsg+0x52a/0x7e0 [ 183.918087][ T9476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.923436][ T9476] ? __fget_files+0x2a/0x410 [ 183.928135][ T9476] ? __fget_files+0x2a/0x410 [ 183.932797][ T9476] __sys_sendmsg+0x269/0x350 [ 183.937468][ T9476] ? __pfx_lock_release+0x10/0x10 [ 183.942548][ T9476] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.947724][ T9476] ? __pfx_vfs_write+0x10/0x10 [ 183.952649][ T9476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.959027][ T9476] ? do_syscall_64+0x100/0x230 [ 183.963862][ T9476] ? do_syscall_64+0xb6/0x230 [ 183.968597][ T9476] do_syscall_64+0xf3/0x230 [ 183.973157][ T9476] ? clear_bhb_loop+0x35/0x90 [ 183.977902][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.983851][ T9476] RIP: 0033:0x7f385df85d29 [ 183.988312][ T9476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.008409][ T9476] RSP: 002b:00007f385ddf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.016875][ T9476] RAX: ffffffffffffffda RBX: 00007f385e175fa0 RCX: 00007f385df85d29 [ 184.024902][ T9476] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 184.032998][ T9476] RBP: 00007f385ddf9090 R08: 0000000000000000 R09: 0000000000000000 [ 184.041005][ T9476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.049025][ T9476] R13: 0000000000000000 R14: 00007f385e175fa0 R15: 00007ffe3bc0a728 [ 184.057046][ T9476] [ 184.116839][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.328065][ T9495] netlink: 'syz.3.883': attribute type 8 has an invalid length. [ 184.359536][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 184.360468][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 184.514954][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.586740][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 184.762644][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 184.784988][ T9523] lo speed is unknown, defaulting to 1000 [ 184.848489][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.894'. [ 185.130640][ T9539] lo speed is unknown, defaulting to 1000 [ 185.166846][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.234688][ T9543] syzkaller1: entered promiscuous mode [ 185.259992][ T9543] syzkaller1: entered allmulticast mode [ 185.552721][ T9559] xt_TCPMSS: Only works on TCP SYN packets [ 185.718532][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 186.196775][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.214295][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.554413][ T9591] netlink: 76 bytes leftover after parsing attributes in process `syz.3.909'. [ 186.570283][ T9591] nbd: illegal input index 16744192 [ 186.625355][ T9593] FAULT_INJECTION: forcing a failure. [ 186.625355][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.639237][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.1.911 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 186.649892][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.660074][ T9593] Call Trace: [ 186.663378][ T9593] [ 186.666338][ T9593] dump_stack_lvl+0x241/0x360 [ 186.671080][ T9593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.676339][ T9593] ? __pfx__printk+0x10/0x10 [ 186.680981][ T9593] ? __pfx_lock_release+0x10/0x10 [ 186.686036][ T9593] should_fail_ex+0x3b0/0x4e0 [ 186.690749][ T9593] _copy_from_iter+0x1e9/0x1c20 [ 186.695626][ T9593] ? __virt_addr_valid+0x183/0x530 [ 186.700856][ T9593] ? __alloc_skb+0x28f/0x440 [ 186.705465][ T9593] ? __pfx__copy_from_iter+0x10/0x10 [ 186.710775][ T9593] ? __virt_addr_valid+0x183/0x530 [ 186.715912][ T9593] ? __virt_addr_valid+0x183/0x530 [ 186.721050][ T9593] ? __virt_addr_valid+0x45f/0x530 [ 186.726184][ T9593] ? __phys_addr_symbol+0x2f/0x70 [ 186.731227][ T9593] ? __check_object_size+0x47a/0x730 [ 186.736994][ T9593] netlink_sendmsg+0x73d/0xcb0 [ 186.741826][ T9593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.747146][ T9593] ? aa_sock_msg_perm+0x91/0x160 [ 186.752108][ T9593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.757499][ T9593] __sock_sendmsg+0x221/0x270 [ 186.762201][ T9593] ____sys_sendmsg+0x52a/0x7e0 [ 186.767090][ T9593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.772411][ T9593] ? __fget_files+0x2a/0x410 [ 186.777026][ T9593] ? __fget_files+0x2a/0x410 [ 186.781645][ T9593] __sys_sendmsg+0x269/0x350 [ 186.786277][ T9593] ? __pfx_lock_release+0x10/0x10 [ 186.791333][ T9593] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.796498][ T9593] ? __pfx_vfs_write+0x10/0x10 [ 186.801329][ T9593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.807695][ T9593] ? do_syscall_64+0x100/0x230 [ 186.812530][ T9593] ? do_syscall_64+0xb6/0x230 [ 186.817235][ T9593] do_syscall_64+0xf3/0x230 [ 186.821770][ T9593] ? clear_bhb_loop+0x35/0x90 [ 186.826471][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.832389][ T9593] RIP: 0033:0x7f5fb3385d29 [ 186.836823][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.856452][ T9593] RSP: 002b:00007f5fb420f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.864893][ T9593] RAX: ffffffffffffffda RBX: 00007f5fb3575fa0 RCX: 00007f5fb3385d29 [ 186.872881][ T9593] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 186.880886][ T9593] RBP: 00007f5fb420f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.888871][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.896860][ T9593] R13: 0000000000000000 R14: 00007f5fb3575fa0 R15: 00007ffe2768b928 [ 186.904865][ T9593] [ 187.052574][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 187.052859][ T9597] dccp_invalid_packet: P.Data Offset(4) too small [ 187.082714][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 187.092539][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'. [ 187.164098][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 187.208421][ T9606] openvswitch: netlink: Message has 2 unknown bytes. [ 187.240602][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.548775][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.572883][ T9626] FAULT_INJECTION: forcing a failure. [ 187.572883][ T9626] name failslab, interval 1, probability 0, space 0, times 0 [ 187.587267][ T9626] CPU: 0 UID: 0 PID: 9626 Comm: syz.0.922 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 187.597926][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 187.608121][ T9626] Call Trace: [ 187.611451][ T9626] [ 187.614436][ T9626] dump_stack_lvl+0x241/0x360 [ 187.619189][ T9626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.624450][ T9626] ? __pfx__printk+0x10/0x10 [ 187.629116][ T9626] should_fail_ex+0x3b0/0x4e0 [ 187.633950][ T9626] should_failslab+0xac/0x100 [ 187.638679][ T9626] ? skb_clone+0x20c/0x390 [ 187.643152][ T9626] kmem_cache_alloc_noprof+0x70/0x380 [ 187.648593][ T9626] skb_clone+0x20c/0x390 [ 187.652993][ T9626] __netlink_deliver_tap+0x3cc/0x7f0 [ 187.658349][ T9626] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.663607][ T9626] netlink_deliver_tap+0x19d/0x1b0 [ 187.668781][ T9626] netlink_unicast+0x7c4/0x990 [ 187.673609][ T9626] ? __pfx_netlink_unicast+0x10/0x10 [ 187.679005][ T9626] ? __virt_addr_valid+0x45f/0x530 [ 187.684175][ T9626] ? __phys_addr_symbol+0x2f/0x70 [ 187.689264][ T9626] ? __check_object_size+0x47a/0x730 [ 187.694644][ T9626] netlink_sendmsg+0x8e4/0xcb0 [ 187.699501][ T9626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.704827][ T9626] ? aa_sock_msg_perm+0x91/0x160 [ 187.709795][ T9626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.715126][ T9626] __sock_sendmsg+0x221/0x270 [ 187.719844][ T9626] ____sys_sendmsg+0x52a/0x7e0 [ 187.724667][ T9626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.729973][ T9626] ? __fget_files+0x2a/0x410 [ 187.734621][ T9626] ? __fget_files+0x2a/0x410 [ 187.739250][ T9626] __sys_sendmsg+0x269/0x350 [ 187.743954][ T9626] ? __pfx_lock_release+0x10/0x10 [ 187.749004][ T9626] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.754235][ T9626] ? __pfx_vfs_write+0x10/0x10 [ 187.759053][ T9626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.765428][ T9626] ? do_syscall_64+0x100/0x230 [ 187.770256][ T9626] ? do_syscall_64+0xb6/0x230 [ 187.774983][ T9626] do_syscall_64+0xf3/0x230 [ 187.779512][ T9626] ? clear_bhb_loop+0x35/0x90 [ 187.784216][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.790137][ T9626] RIP: 0033:0x7f385df85d29 [ 187.794574][ T9626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.814198][ T9626] RSP: 002b:00007f385ddf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.822643][ T9626] RAX: ffffffffffffffda RBX: 00007f385e175fa0 RCX: 00007f385df85d29 [ 187.830632][ T9626] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 187.838617][ T9626] RBP: 00007f385ddf9090 R08: 0000000000000000 R09: 0000000000000000 [ 187.846601][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.854583][ T9626] R13: 0000000000000000 R14: 00007f385e175fa0 R15: 00007ffe3bc0a728 [ 187.862638][ T9626] [ 187.879003][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 187.971020][ T9633] lo speed is unknown, defaulting to 1000 [ 188.288544][ T9644] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 188.290540][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.736207][ T9653] block nbd0: NBD_DISCONNECT [ 188.746690][ T9653] block nbd0: Send disconnect failed -32 [ 188.763310][ T9653] block nbd0: shutting down sockets [ 188.894550][ T9662] FAULT_INJECTION: forcing a failure. [ 188.894550][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 188.933205][ T9662] CPU: 1 UID: 0 PID: 9662 Comm: syz.1.934 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 188.943886][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 188.954074][ T9662] Call Trace: [ 188.957393][ T9662] [ 188.960367][ T9662] dump_stack_lvl+0x241/0x360 [ 188.965117][ T9662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.970381][ T9662] ? __pfx__printk+0x10/0x10 [ 188.975033][ T9662] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 188.981064][ T9662] ? __pfx___might_resched+0x10/0x10 [ 188.986393][ T9662] should_fail_ex+0x3b0/0x4e0 [ 188.991115][ T9662] should_failslab+0xac/0x100 [ 188.995910][ T9662] kmem_cache_alloc_node_noprof+0x77/0x380 [ 189.002120][ T9662] ? __alloc_skb+0x1c3/0x440 [ 189.006763][ T9662] __alloc_skb+0x1c3/0x440 [ 189.011234][ T9662] ? __pfx___alloc_skb+0x10/0x10 [ 189.016222][ T9662] ? netlink_ack_tlv_len+0x6e/0x200 [ 189.021561][ T9662] netlink_ack+0x145/0xa50 [ 189.026118][ T9662] ? __sock_sendmsg+0x221/0x270 [ 189.031020][ T9662] ? ____sys_sendmsg+0x52a/0x7e0 [ 189.036110][ T9662] netlink_rcv_skb+0x262/0x430 [ 189.040924][ T9662] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 189.046532][ T9662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.051888][ T9662] ? apparmor_capable+0x13b/0x1b0 [ 189.056969][ T9662] ? bpf_lsm_capable+0x9/0x10 [ 189.061720][ T9662] ? security_capable+0x7e/0x2d0 [ 189.066717][ T9662] nfnetlink_rcv+0x297/0x2ab0 [ 189.071457][ T9662] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 189.077239][ T9662] ? __dev_queue_xmit+0x2f4/0x3f50 [ 189.082401][ T9662] ? __dev_queue_xmit+0x1775/0x3f50 [ 189.087685][ T9662] ? kasan_save_track+0x51/0x80 [ 189.092581][ T9662] ? ____sys_sendmsg+0x52a/0x7e0 [ 189.097547][ T9662] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.102687][ T9662] ? __dev_queue_xmit+0x2f4/0x3f50 [ 189.107827][ T9662] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.113330][ T9662] ? ref_tracker_free+0x643/0x7e0 [ 189.118377][ T9662] ? __asan_memcpy+0x40/0x70 [ 189.122978][ T9662] ? __pfx_ref_tracker_free+0x10/0x10 [ 189.128384][ T9662] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.133605][ T9662] ? skb_clone+0x240/0x390 [ 189.138063][ T9662] ? __pfx_lock_release+0x10/0x10 [ 189.143106][ T9662] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 189.148715][ T9662] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.153941][ T9662] netlink_unicast+0x7f6/0x990 [ 189.158731][ T9662] ? __pfx_netlink_unicast+0x10/0x10 [ 189.164029][ T9662] ? __virt_addr_valid+0x45f/0x530 [ 189.169222][ T9662] ? __phys_addr_symbol+0x2f/0x70 [ 189.174263][ T9662] ? __check_object_size+0x47a/0x730 [ 189.179571][ T9662] netlink_sendmsg+0x8e4/0xcb0 [ 189.184371][ T9662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.189688][ T9662] ? aa_sock_msg_perm+0x91/0x160 [ 189.194648][ T9662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.199953][ T9662] __sock_sendmsg+0x221/0x270 [ 189.204681][ T9662] ____sys_sendmsg+0x52a/0x7e0 [ 189.209470][ T9662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.214771][ T9662] ? __fget_files+0x2a/0x410 [ 189.219383][ T9662] ? __fget_files+0x2a/0x410 [ 189.224174][ T9662] __sys_sendmsg+0x269/0x350 [ 189.228786][ T9662] ? __pfx_lock_release+0x10/0x10 [ 189.233829][ T9662] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.238981][ T9662] ? __pfx_vfs_write+0x10/0x10 [ 189.243785][ T9662] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.250136][ T9662] ? do_syscall_64+0x100/0x230 [ 189.254920][ T9662] ? do_syscall_64+0xb6/0x230 [ 189.259621][ T9662] do_syscall_64+0xf3/0x230 [ 189.264172][ T9662] ? clear_bhb_loop+0x35/0x90 [ 189.268955][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.274873][ T9662] RIP: 0033:0x7f5fb3385d29 [ 189.279301][ T9662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.298927][ T9662] RSP: 002b:00007f5fb420f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.307365][ T9662] RAX: ffffffffffffffda RBX: 00007f5fb3575fa0 RCX: 00007f5fb3385d29 [ 189.315446][ T9662] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 189.323440][ T9662] RBP: 00007f5fb420f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.331433][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.339415][ T9662] R13: 0000000000000000 R14: 00007f5fb3575fa0 R15: 00007ffe2768b928 [ 189.347411][ T9662] [ 189.377464][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.401589][ T9668] sit0: entered promiscuous mode [ 189.411862][ T9668] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 189.478205][ T9668] __nla_validate_parse: 5 callbacks suppressed [ 189.478242][ T9668] netlink: 1 bytes leftover after parsing attributes in process `syz.3.937'. [ 189.568904][ T9676] pimreg: left allmulticast mode [ 189.622947][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.650612][ T9679] vlan4: entered promiscuous mode [ 189.661321][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.683473][ T9679] vlan4: entered allmulticast mode [ 189.700503][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.715742][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.725876][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.794695][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.805669][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.830296][ T9678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.943047][ T911] IPVS: starting estimator thread 0... [ 190.038318][ T9692] IPVS: using max 18 ests per chain, 43200 per kthread [ 190.504630][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 190.529630][ T9725] lo speed is unknown, defaulting to 1000 [ 190.749333][ T9731] xt_hashlimit: max too large, truncated to 1048576 [ 191.508616][ T9756] FAULT_INJECTION: forcing a failure. [ 191.508616][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 191.537884][ T9756] CPU: 1 UID: 0 PID: 9756 Comm: syz.0.964 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 191.548562][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.558662][ T9756] Call Trace: [ 191.562005][ T9756] [ 191.564982][ T9756] dump_stack_lvl+0x241/0x360 [ 191.569720][ T9756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.574993][ T9756] ? __pfx__printk+0x10/0x10 [ 191.579617][ T9756] ? ref_tracker_alloc+0x332/0x490 [ 191.584749][ T9756] should_fail_ex+0x3b0/0x4e0 [ 191.589444][ T9756] should_failslab+0xac/0x100 [ 191.594234][ T9756] ? skb_clone+0x20c/0x390 [ 191.598672][ T9756] kmem_cache_alloc_noprof+0x70/0x380 [ 191.604078][ T9756] skb_clone+0x20c/0x390 [ 191.608362][ T9756] __netlink_deliver_tap+0x3cc/0x7f0 [ 191.613678][ T9756] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.618897][ T9756] netlink_deliver_tap+0x19d/0x1b0 [ 191.624038][ T9756] netlink_sendskb+0x68/0x140 [ 191.628736][ T9756] netlink_unicast+0x39d/0x990 [ 191.633608][ T9756] ? __pfx_netlink_unicast+0x10/0x10 [ 191.638949][ T9756] netlink_rcv_skb+0x262/0x430 [ 191.643734][ T9756] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.649230][ T9756] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.654542][ T9756] ? apparmor_capable+0x13b/0x1b0 [ 191.659677][ T9756] ? bpf_lsm_capable+0x9/0x10 [ 191.664469][ T9756] ? security_capable+0x7e/0x2d0 [ 191.669433][ T9756] nfnetlink_rcv+0x297/0x2ab0 [ 191.674139][ T9756] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 191.679889][ T9756] ? __dev_queue_xmit+0x2f4/0x3f50 [ 191.685019][ T9756] ? __dev_queue_xmit+0x1775/0x3f50 [ 191.690236][ T9756] ? kasan_save_track+0x51/0x80 [ 191.695109][ T9756] ? ____sys_sendmsg+0x52a/0x7e0 [ 191.700069][ T9756] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.705220][ T9756] ? __dev_queue_xmit+0x2f4/0x3f50 [ 191.710445][ T9756] ? __pfx___dev_queue_xmit+0x10/0x10 [ 191.715860][ T9756] ? ref_tracker_free+0x643/0x7e0 [ 191.720908][ T9756] ? __asan_memcpy+0x40/0x70 [ 191.725515][ T9756] ? __pfx_ref_tracker_free+0x10/0x10 [ 191.730939][ T9756] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.736172][ T9756] ? skb_clone+0x240/0x390 [ 191.740617][ T9756] ? __pfx_lock_release+0x10/0x10 [ 191.745658][ T9756] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 191.751234][ T9756] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.756453][ T9756] netlink_unicast+0x7f6/0x990 [ 191.761263][ T9756] ? __pfx_netlink_unicast+0x10/0x10 [ 191.766564][ T9756] ? __virt_addr_valid+0x45f/0x530 [ 191.771694][ T9756] ? __phys_addr_symbol+0x2f/0x70 [ 191.776736][ T9756] ? __check_object_size+0x47a/0x730 [ 191.782072][ T9756] netlink_sendmsg+0x8e4/0xcb0 [ 191.786869][ T9756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.792202][ T9756] ? aa_sock_msg_perm+0x91/0x160 [ 191.797192][ T9756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.802512][ T9756] __sock_sendmsg+0x221/0x270 [ 191.807223][ T9756] ____sys_sendmsg+0x52a/0x7e0 [ 191.812034][ T9756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.817339][ T9756] ? __fget_files+0x2a/0x410 [ 191.821953][ T9756] ? __fget_files+0x2a/0x410 [ 191.826571][ T9756] __sys_sendmsg+0x269/0x350 [ 191.831183][ T9756] ? __pfx_lock_release+0x10/0x10 [ 191.836229][ T9756] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.841376][ T9756] ? __pfx_vfs_write+0x10/0x10 [ 191.846175][ T9756] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.852519][ T9756] ? do_syscall_64+0x100/0x230 [ 191.857309][ T9756] ? do_syscall_64+0xb6/0x230 [ 191.862016][ T9756] do_syscall_64+0xf3/0x230 [ 191.866540][ T9756] ? clear_bhb_loop+0x35/0x90 [ 191.871239][ T9756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.877161][ T9756] RIP: 0033:0x7f385df85d29 [ 191.881591][ T9756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.901304][ T9756] RSP: 002b:00007f385ddf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.909742][ T9756] RAX: ffffffffffffffda RBX: 00007f385e175fa0 RCX: 00007f385df85d29 [ 191.917735][ T9756] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 191.925742][ T9756] RBP: 00007f385ddf9090 R08: 0000000000000000 R09: 0000000000000000 [ 191.933737][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.941725][ T9756] R13: 0000000000000000 R14: 00007f385e175fa0 R15: 00007ffe3bc0a728 [ 191.949732][ T9756] [ 192.439558][ T9762] vlan5: entered promiscuous mode [ 192.448886][ T9762] bond0: (slave vlan5): Error -34 calling dev_set_mtu [ 192.728242][ T9778] xt_l2tp: v2 doesn't support IP mode [ 193.002721][ T9793] FAULT_INJECTION: forcing a failure. [ 193.002721][ T9793] name failslab, interval 1, probability 0, space 0, times 0 [ 193.015900][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.1.978 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 193.026666][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 193.036774][ T9793] Call Trace: [ 193.040099][ T9793] [ 193.043085][ T9793] dump_stack_lvl+0x241/0x360 [ 193.047913][ T9793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.053187][ T9793] ? __pfx__printk+0x10/0x10 [ 193.057848][ T9793] ? ref_tracker_alloc+0x332/0x490 [ 193.063116][ T9793] should_fail_ex+0x3b0/0x4e0 [ 193.068028][ T9793] should_failslab+0xac/0x100 [ 193.072851][ T9793] ? skb_clone+0x20c/0x390 [ 193.077329][ T9793] kmem_cache_alloc_noprof+0x70/0x380 [ 193.082733][ T9793] skb_clone+0x20c/0x390 [ 193.087013][ T9793] __netlink_deliver_tap+0x3cc/0x7f0 [ 193.092327][ T9793] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.097559][ T9793] netlink_deliver_tap+0x19d/0x1b0 [ 193.102692][ T9793] netlink_sendskb+0x68/0x140 [ 193.107388][ T9793] netlink_unicast+0x39d/0x990 [ 193.112177][ T9793] ? __pfx_netlink_unicast+0x10/0x10 [ 193.117569][ T9793] netlink_rcv_skb+0x262/0x430 [ 193.122403][ T9793] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 193.127899][ T9793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.133236][ T9793] ? apparmor_capable+0x13b/0x1b0 [ 193.138291][ T9793] ? bpf_lsm_capable+0x9/0x10 [ 193.143016][ T9793] ? security_capable+0x7e/0x2d0 [ 193.148103][ T9793] nfnetlink_rcv+0x297/0x2ab0 [ 193.152894][ T9793] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 193.158655][ T9793] ? __dev_queue_xmit+0x2f4/0x3f50 [ 193.163810][ T9793] ? __dev_queue_xmit+0x1775/0x3f50 [ 193.169029][ T9793] ? kasan_save_track+0x51/0x80 [ 193.173903][ T9793] ? ____sys_sendmsg+0x52a/0x7e0 [ 193.178889][ T9793] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 193.184053][ T9793] ? __dev_queue_xmit+0x2f4/0x3f50 [ 193.189193][ T9793] ? __pfx___dev_queue_xmit+0x10/0x10 [ 193.194760][ T9793] ? ref_tracker_free+0x643/0x7e0 [ 193.199805][ T9793] ? __asan_memcpy+0x40/0x70 [ 193.204496][ T9793] ? __pfx_ref_tracker_free+0x10/0x10 [ 193.209911][ T9793] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.215141][ T9793] ? skb_clone+0x240/0x390 [ 193.219591][ T9793] ? __pfx_lock_release+0x10/0x10 [ 193.224633][ T9793] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 193.230121][ T9793] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.235373][ T9793] netlink_unicast+0x7f6/0x990 [ 193.240250][ T9793] ? __pfx_netlink_unicast+0x10/0x10 [ 193.245552][ T9793] ? __virt_addr_valid+0x45f/0x530 [ 193.250688][ T9793] ? __phys_addr_symbol+0x2f/0x70 [ 193.255756][ T9793] ? __check_object_size+0x47a/0x730 [ 193.261066][ T9793] netlink_sendmsg+0x8e4/0xcb0 [ 193.265862][ T9793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.271178][ T9793] ? aa_sock_msg_perm+0x91/0x160 [ 193.276229][ T9793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.281534][ T9793] __sock_sendmsg+0x221/0x270 [ 193.286232][ T9793] ____sys_sendmsg+0x52a/0x7e0 [ 193.291026][ T9793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.296414][ T9793] ? __fget_files+0x2a/0x410 [ 193.301026][ T9793] ? __fget_files+0x2a/0x410 [ 193.305644][ T9793] __sys_sendmsg+0x269/0x350 [ 193.310256][ T9793] ? __pfx_lock_release+0x10/0x10 [ 193.315311][ T9793] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.320546][ T9793] ? __pfx_vfs_write+0x10/0x10 [ 193.325352][ T9793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.331703][ T9793] ? do_syscall_64+0x100/0x230 [ 193.336486][ T9793] ? do_syscall_64+0xb6/0x230 [ 193.341189][ T9793] do_syscall_64+0xf3/0x230 [ 193.345743][ T9793] ? clear_bhb_loop+0x35/0x90 [ 193.350445][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.356357][ T9793] RIP: 0033:0x7f5fb3385d29 [ 193.360958][ T9793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.380605][ T9793] RSP: 002b:00007f5fb420f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.389037][ T9793] RAX: ffffffffffffffda RBX: 00007f5fb3575fa0 RCX: 00007f5fb3385d29 [ 193.397023][ T9793] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 193.405090][ T9793] RBP: 00007f5fb420f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.413092][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.421075][ T9793] R13: 0000000000000000 R14: 00007f5fb3575fa0 R15: 00007ffe2768b928 [ 193.429163][ T9793] [ 193.534766][ T9795] tun0: tun_chr_ioctl cmd 1074025677 [ 193.548275][ T9795] tun0: linktype set to 270 [ 193.561294][ T5889] net_ratelimit: 23 callbacks suppressed [ 193.561316][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.628967][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.756144][ T9809] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 193.772883][ T9809] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.780243][ T9809] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.851439][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.984'. [ 193.890121][ T9804] team0 (unregistering): left allmulticast mode [ 193.896447][ T9804] team_slave_0: left allmulticast mode [ 193.902210][ T9804] team_slave_1: left allmulticast mode [ 193.907710][ T9804] team0 (unregistering): left promiscuous mode [ 193.917229][ T9804] team_slave_0: left promiscuous mode [ 193.923105][ T9804] team_slave_1: left promiscuous mode [ 194.007251][ T9804] team0 (unregistering): Port device team_slave_0 removed [ 194.042727][ T9804] team0 (unregistering): Port device team_slave_1 removed [ 194.072127][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 194.103537][ T9817] lo speed is unknown, defaulting to 1000 [ 194.379082][ T9837] FAULT_INJECTION: forcing a failure. [ 194.379082][ T9837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.443622][ T9837] CPU: 1 UID: 0 PID: 9837 Comm: syz.2.989 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 194.454302][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 194.464497][ T9837] Call Trace: [ 194.467827][ T9837] [ 194.470799][ T9837] dump_stack_lvl+0x241/0x360 [ 194.475552][ T9837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.480812][ T9837] ? __pfx__printk+0x10/0x10 [ 194.485459][ T9837] ? __pfx_lock_release+0x10/0x10 [ 194.490554][ T9837] ? __lock_acquire+0x1397/0x2100 [ 194.495616][ T9837] should_fail_ex+0x3b0/0x4e0 [ 194.500321][ T9837] _copy_from_user+0x2f/0xc0 [ 194.504941][ T9837] kstrtouint_from_user+0xc6/0x190 [ 194.510082][ T9837] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 194.516099][ T9837] ? __pfx_lock_acquire+0x10/0x10 [ 194.521159][ T9837] proc_fail_nth_write+0xaa/0x2d0 [ 194.526211][ T9837] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 194.532133][ T9837] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.537796][ T9837] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.543461][ T9837] vfs_write+0x2a3/0xd30 [ 194.547724][ T9837] ? __pfx_vfs_write+0x10/0x10 [ 194.552513][ T9837] ? __fget_files+0x2a/0x410 [ 194.557142][ T9837] ? __fget_files+0x395/0x410 [ 194.561874][ T9837] ? __fget_files+0x2a/0x410 [ 194.566488][ T9837] ksys_write+0x18f/0x2b0 [ 194.570840][ T9837] ? __pfx_ksys_write+0x10/0x10 [ 194.575711][ T9837] ? do_syscall_64+0x100/0x230 [ 194.580587][ T9837] ? do_syscall_64+0xb6/0x230 [ 194.585296][ T9837] do_syscall_64+0xf3/0x230 [ 194.589826][ T9837] ? clear_bhb_loop+0x35/0x90 [ 194.594558][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.600479][ T9837] RIP: 0033:0x7f3f28f847df [ 194.604928][ T9837] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 194.624591][ T9837] RSP: 002b:00007f3f29cfe030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 194.633084][ T9837] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f28f847df [ 194.641074][ T9837] RDX: 0000000000000001 RSI: 00007f3f29cfe0a0 RDI: 0000000000000004 [ 194.649062][ T9837] RBP: 00007f3f29cfe090 R08: 0000000000000000 R09: 0000000000000000 [ 194.657046][ T9837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 194.665030][ T9837] R13: 0000000000000000 R14: 00007f3f29175fa0 R15: 00007ffc91ec7038 [ 194.673029][ T9837] [ 194.705147][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.711634][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.715241][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.905531][ T9847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.454383][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 195.586132][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.789283][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.820768][ T9871] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 195.872172][ T9877] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 195.885165][ T9871] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 196.080370][ T9890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.429104][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.657334][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.668296][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.669147][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.691564][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.700686][ T9915] netlink: 548 bytes leftover after parsing attributes in process `syz.4.1015'. [ 196.722036][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.740527][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.755879][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 196.755897][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 196.755943][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 196.773584][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.816259][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.830527][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.860989][ T9913] netlink: 'syz.4.1015': attribute type 29 has an invalid length. [ 196.896532][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 196.960188][ T9921] lo speed is unknown, defaulting to 1000 [ 197.431590][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1020'. [ 197.465403][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1020'. [ 197.869402][ T9950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1023'. [ 198.144421][ T9957] lo speed is unknown, defaulting to 1000 [ 198.748241][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1032'. [ 198.917031][ T51] net_ratelimit: 3 callbacks suppressed [ 198.917056][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.008186][ T9982] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1033'. [ 199.028915][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1035'. [ 199.056768][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1035'. [ 199.339083][T10006] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 199.708284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.721375][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.806531][T10032] lo speed is unknown, defaulting to 1000 [ 199.958141][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.246482][T10045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.273726][T10045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.297572][T10045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.311114][T10045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.320657][T10045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.372334][T10040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.649916][T10055] __nla_validate_parse: 7 callbacks suppressed [ 200.649943][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1057'. [ 200.704657][T10055] hsr0: entered promiscuous mode [ 200.755828][T10055] hsr_slave_0: left promiscuous mode [ 200.787634][T10055] hsr_slave_1: left promiscuous mode [ 200.839263][T10065] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.894542][T10055] hsr0 (unregistering): left promiscuous mode [ 200.976312][T10070] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.653608][T10101] validate_nla: 86 callbacks suppressed [ 201.653630][T10101] netlink: 'syz.3.1071': attribute type 7 has an invalid length. [ 201.676101][T10101] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1071'. [ 202.255454][T10113] tipc: Enabled bearer , priority 0 [ 202.287462][T10112] tipc: Disabling bearer [ 202.392223][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 202.431681][T10118] lo speed is unknown, defaulting to 1000 [ 202.589222][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'. [ 202.622190][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 203.114475][T10135] xt_l2tp: missing protocol rule (udp|l2tpip) [ 203.488856][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.504136][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.513640][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.540708][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.549611][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.557508][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.595565][T10144] lo speed is unknown, defaulting to 1000 [ 203.615354][T10149] netlink: 'syz.1.1087': attribute type 298 has an invalid length. [ 203.986464][T10144] chnl_net:caif_netlink_parms(): no params data found [ 204.015816][T10167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'. [ 204.119802][ T911] net_ratelimit: 5 callbacks suppressed [ 204.119826][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.184622][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.192884][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.198442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.201155][T10144] bridge_slave_0: entered allmulticast mode [ 204.208662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.218000][T10144] bridge_slave_0: entered promiscuous mode [ 204.299808][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.308835][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.316321][T10144] bridge_slave_1: entered allmulticast mode [ 204.329161][T10144] bridge_slave_1: entered promiscuous mode [ 204.537337][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.559592][T10182] tipc: Started in network mode [ 204.564868][T10182] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 204.580573][T10182] tipc: Enabling of bearer rejected, failed to enable media [ 204.602561][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.743331][T10144] team0: Port device team_slave_0 added [ 204.758549][T10144] team0: Port device team_slave_1 added [ 204.775401][T10193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.805871][T10193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.826910][T10190] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 204.828152][T10193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.842975][T10193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.927179][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.939761][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.979880][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.012234][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.036501][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.076659][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.148688][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.212618][T10144] hsr_slave_0: entered promiscuous mode [ 205.226853][T10144] hsr_slave_1: entered promiscuous mode [ 205.235298][T10144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.243523][T10144] Cannot create hsr debugfs directory [ 205.257703][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 205.315082][T10205] lo speed is unknown, defaulting to 1000 [ 205.341575][T10208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.350271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.378508][T10207] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 205.628210][ T5143] Bluetooth: hci0: command tx timeout [ 206.208170][T10224] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 206.238272][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 206.369114][T10144] bond0: (slave netdevsim0): Releasing backup interface [ 206.657041][T10144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.681935][T10144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.709534][T10144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.741524][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'. [ 206.758712][T10144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.887621][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.906013][T10144] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.920886][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.928093][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.951741][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.958932][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.436734][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.533106][T10144] veth0_vlan: entered promiscuous mode [ 207.553359][T10144] veth1_vlan: entered promiscuous mode [ 207.566811][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 207.620063][T10144] veth0_macvtap: entered promiscuous mode [ 207.629412][T10144] veth1_macvtap: entered promiscuous mode [ 207.656040][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.659134][T10257] IPVS: stopping backup sync thread 8988 ... [ 207.666952][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.688138][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.707037][T10257] [ 207.707854][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.709406][T10257] ====================================================== [ 207.709418][T10257] WARNING: possible circular locking dependency detected [ 207.719448][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.726296][T10257] 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 Not tainted [ 207.747808][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.750814][T10257] ------------------------------------------------------ [ 207.750825][T10257] syz.2.1114/10257 is trying to acquire lock: [ 207.768962][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.773713][T10257] ffffffff8fcb4e08 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x81/0x280 [ 207.789906][T10257] [ 207.789906][T10257] but task is already holding lock: [ 207.797292][T10257] ffff88805a5a5b28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 207.801140][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.807428][T10257] [ 207.807428][T10257] which lock already depends on the new lock. [ 207.807428][T10257] [ 207.807439][T10257] [ 207.807439][T10257] the existing dependency chain (in reverse order) is: [ 207.827816][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.828247][T10257] [ 207.828247][T10257] -> #2 ( [ 207.837256][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.847037][T10257] &smc->clcsock_release_lock){+.+.}-{4:4}: [ 207.847063][T10257] lock_acquire+0x1ed/0x550 [ 207.847091][T10257] __mutex_lock+0x1ac/0xee0 [ 207.847112][T10257] smc_switch_to_fallback+0x35/0xd90 [ 207.847134][T10257] smc_sendmsg+0x11f/0x530 [ 207.847154][T10257] __sock_sendmsg+0x221/0x270 [ 207.847174][T10257] __sys_sendto+0x363/0x4c0 [ 207.847196][T10257] __x64_sys_sendto+0xde/0x100 [ 207.847220][T10257] do_syscall_64+0xf3/0x230 [ 207.877834][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.878879][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.885311][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.889597][T10257] [ 207.889597][T10257] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 207.889634][T10257] lock_acquire+0x1ed/0x550 [ 207.889661][T10257] lock_sock_nested+0x48/0x100 [ 207.889681][T10257] do_ip_setsockopt+0x1a2d/0x3cd0 [ 207.889713][T10257] ip_setsockopt+0x63/0x100 [ 207.889732][T10257] do_sock_setsockopt+0x3af/0x720 [ 207.889758][T10257] __x64_sys_setsockopt+0x1ee/0x280 [ 207.897832][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.899952][T10257] do_syscall_64+0xf3/0x230 [ 207.906267][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.910234][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.910267][T10257] [ 207.910267][T10257] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 207.910301][T10257] validate_chain+0x18ef/0x5920 [ 207.910329][T10257] __lock_acquire+0x1397/0x2100 [ 207.910352][T10257] lock_acquire+0x1ed/0x550 [ 207.910383][T10257] __mutex_lock+0x1ac/0xee0 [ 207.955572][T10144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.960584][T10257] ip_mc_drop_socket+0x81/0x280 [ 207.960621][T10257] inet_release+0x96/0x200 [ 207.960654][T10257] sock_release+0x82/0x150 [ 207.960671][T10257] stop_sync_thread+0x4e6/0x5e0 [ 207.960693][T10257] do_ip_vs_set_ctl+0x47b/0x13d0 [ 207.960719][T10257] nf_setsockopt+0x295/0x2c0 [ 207.960747][T10257] smc_setsockopt+0x275/0xe50 [ 207.966087][T10144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.971302][T10257] do_sock_setsockopt+0x3af/0x720 [ 207.971337][T10257] __x64_sys_setsockopt+0x1ee/0x280 [ 207.971363][T10257] do_syscall_64+0xf3/0x230 [ 207.971385][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.971412][T10257] [ 207.971412][T10257] other info that might help us debug this: [ 207.971412][T10257] [ 207.986407][T10144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.987001][T10257] Chain exists of: [ 207.987001][T10257] rtnl_mutex [ 207.998022][T10144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.999203][T10257] --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 207.999203][T10257] [ 208.154045][T10257] Possible unsafe locking scenario: [ 208.154045][T10257] [ 208.161537][T10257] CPU0 CPU1 [ 208.166930][T10257] ---- ---- [ 208.172315][T10257] lock(&smc->clcsock_release_lock); [ 208.177895][T10257] lock(sk_lock-AF_INET); [ 208.184858][T10257] lock(&smc->clcsock_release_lock); [ 208.192793][T10257] lock(rtnl_mutex); [ 208.196808][T10257] [ 208.196808][T10257] *** DEADLOCK *** [ 208.196808][T10257] [ 208.204974][T10257] 1 lock held by syz.2.1114/10257: [ 208.210110][T10257] #0: ffff88805a5a5b28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 208.220705][T10257] [ 208.220705][T10257] stack backtrace: [ 208.226620][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.2.1114 Not tainted 6.13.0-rc7-syzkaller-01603-gb1754a69e7be #0 [ 208.237416][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 208.247502][T10257] Call Trace: [ 208.250814][T10257] [ 208.253770][T10257] dump_stack_lvl+0x241/0x360 [ 208.258496][T10257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.263738][T10257] ? __pfx__printk+0x10/0x10 [ 208.268371][T10257] print_circular_bug+0x13a/0x1b0 [ 208.273471][T10257] check_noncircular+0x36a/0x4a0 [ 208.278452][T10257] ? __pfx_check_noncircular+0x10/0x10 [ 208.283950][T10257] ? lockdep_lock+0x123/0x2b0 [ 208.288671][T10257] validate_chain+0x18ef/0x5920 [ 208.293578][T10257] ? __pfx_validate_chain+0x10/0x10 [ 208.298837][T10257] ? mark_lock+0x9a/0x360 [ 208.303207][T10257] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 208.309229][T10257] ? do_raw_spin_unlock+0x13c/0x8b0 [ 208.314464][T10257] ? lockdep_hardirqs_on+0x99/0x150 [ 208.319707][T10257] ? mark_lock+0x9a/0x360 [ 208.324087][T10257] __lock_acquire+0x1397/0x2100 [ 208.328984][T10257] lock_acquire+0x1ed/0x550 [ 208.333580][T10257] ? ip_mc_drop_socket+0x81/0x280 [ 208.338743][T10257] ? __pfx_lock_acquire+0x10/0x10 [ 208.343895][T10257] ? __pfx___might_resched+0x10/0x10 [ 208.349217][T10257] ? mark_lock+0x9a/0x360 [ 208.353607][T10257] __mutex_lock+0x1ac/0xee0 [ 208.358148][T10257] ? ip_mc_drop_socket+0x81/0x280 [ 208.363214][T10257] ? stop_sync_thread+0x49b/0x5e0 [ 208.368377][T10257] ? __pfx_lock_release+0x10/0x10 [ 208.373447][T10257] ? ip_mc_drop_socket+0x81/0x280 [ 208.378521][T10257] ? __pfx___mutex_lock+0x10/0x10 [ 208.383584][T10257] ? try_to_wake_up+0x9c3/0x1470 [ 208.388576][T10257] ? __mutex_unlock_slowpath+0x21e/0x790 [ 208.394256][T10257] ? __pfx_try_to_wake_up+0x10/0x10 [ 208.399505][T10257] ? __pfx_wait_for_completion+0x10/0x10 [ 208.405183][T10257] ip_mc_drop_socket+0x81/0x280 [ 208.410168][T10257] inet_release+0x96/0x200 [ 208.414637][T10257] sock_release+0x82/0x150 [ 208.419088][T10257] stop_sync_thread+0x4e6/0x5e0 [ 208.423998][T10257] do_ip_vs_set_ctl+0x47b/0x13d0 [ 208.428986][T10257] ? __pfx___mutex_trylock_common+0x10/0x10 [ 208.434929][T10257] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 208.440366][T10257] ? __mutex_lock+0x37f/0xee0 [ 208.445090][T10257] ? __mutex_unlock_slowpath+0x21e/0x790 [ 208.450766][T10257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.456787][T10257] ? smc_setsockopt+0x1c3/0xe50 [ 208.461690][T10257] ? __pfx___mutex_lock+0x10/0x10 [ 208.466846][T10257] nf_setsockopt+0x295/0x2c0 [ 208.471509][T10257] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 208.477547][T10257] smc_setsockopt+0x275/0xe50 [ 208.482359][T10257] ? __pfx_smc_setsockopt+0x10/0x10 [ 208.487608][T10257] ? aa_sock_opt_perm+0x79/0x120 [ 208.492587][T10257] ? __pfx_smc_setsockopt+0x10/0x10 [ 208.497841][T10257] do_sock_setsockopt+0x3af/0x720 [ 208.502932][T10257] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 208.508516][T10257] ? __fget_files+0x395/0x410 [ 208.513213][T10257] ? __fget_files+0x2a/0x410 [ 208.517828][T10257] __x64_sys_setsockopt+0x1ee/0x280 [ 208.523073][T10257] do_syscall_64+0xf3/0x230 [ 208.527610][T10257] ? clear_bhb_loop+0x35/0x90 [ 208.532301][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.538236][T10257] RIP: 0033:0x7f3f28f85d29 [ 208.542658][T10257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.562298][T10257] RSP: 002b:00007f3f29cdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.571116][T10257] RAX: ffffffffffffffda RBX: 00007f3f29176080 RCX: 00007f3f28f85d29 [ 208.579121][T10257] RDX: 000000000000048c RSI: 0000000000000000 RDI: 000000000000000e [ 208.587136][T10257] RBP: 00007f3f29001b08 R08: 0000000000000018 R09: 0000000000000000 [ 208.595123][T10257] R10: 0000000020008d00 R11: 0000000000000246 R12: 0000000000000000 [ 208.603113][T10257] R13: 0000000000000000 R14: 00007f3f29176080 R15: 00007ffc91ec7038 [ 208.611193][T10257] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 208.627910][ T5143] Bluetooth: hci0: command tx timeout [ 209.638383][ T51] net_ratelimit: 8 callbacks suppressed [ 209.638402][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.362939][ T7302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.681014][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.908120][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.941884][ T7302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.002433][ T7302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.052265][ T7302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.107280][ T7302] bridge_slave_1: left allmulticast mode [ 211.113163][ T7302] bridge_slave_1: left promiscuous mode [ 211.119101][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.127495][ T7302] bridge_slave_0: left allmulticast mode [ 211.133394][ T7302] bridge_slave_0: left promiscuous mode [ 211.139199][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.236710][ T7302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.248317][ T7302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.258148][ T7302] bond0 (unregistering): Released all slaves [ 211.331824][ T7302] hsr_slave_0: left promiscuous mode [ 211.337671][ T7302] hsr_slave_1: left promiscuous mode [ 211.343560][ T7302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.351556][ T7302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.359580][ T7302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.367204][ T7302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.376529][ T7302] veth1_macvtap: left promiscuous mode [ 211.382068][ T7302] veth0_macvtap: left promiscuous mode [ 211.387591][ T7302] veth1_vlan: left promiscuous mode [ 211.393067][ T7302] veth0_vlan: left promiscuous mode [ 211.545896][ T7302] team0 (unregistering): Port device team_slave_1 removed [ 211.574941][ T7302] team0 (unregistering): Port device team_slave_0 removed [ 211.710346][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.748973][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.908010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.792507][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.948158][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.428302][ T7296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.830193][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.070008][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.080093][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.088574][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.098391][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.106861][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.873041][ T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.910939][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog