last executing test programs: 2.520950793s ago: executing program 4 (id=1589): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x3f, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xffffffffffffff78}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 2.489651146s ago: executing program 0 (id=1590): socket$alg(0x26, 0x5, 0x0) unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r4, 0x6a98047402e98331, 0x0, 0x80000, {0x15}}, 0x14}}, 0x4880) pipe(0x0) socket(0x21, 0x2, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=@newtaction={0x4c, 0x30, 0x25, 0x0, 0x0, {}, [{0x38, 0x1, [@m_pedit={0x34, 0x1, 0x0, 0x0, {{0xa}, {0x8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 2.215883002s ago: executing program 4 (id=1594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100005ab32ef4000000020820000000c8090000000006001500020000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0xc8ff}, 0x0) 2.148581854s ago: executing program 0 (id=1595): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x50) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xc000000, 0x3, 0x2, 0x4, 0x8, 0x2, 0x39]}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4, 0x400, 0xffffffff, 'pptp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) 1.994942738s ago: executing program 3 (id=1596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x24000000}}, 0x94}}, 0x0) 1.972156413s ago: executing program 3 (id=1597): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.858483541s ago: executing program 0 (id=1598): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{}, &(0x7f0000000c00), &(0x7f0000000c40)='%pK \x00'}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaabb83297e3baa10aaaaaa0088a80000890600000800450000140000000000a0f081b2138036009078e0000002"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000003000000000000000000000000346384bdf875329771000000000000008adabf4027845c4e9d30f9c5486e3c752b4589d98be1fcb1516049927e808bfacf4e48e6aaaa42a84562df1bdb365f8c55de7c687c9432ea44cfdbf00d0c1df2c35fcd33ad1aa4180000000000000000"], 0x50) 1.85719625s ago: executing program 4 (id=1599): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x800, 0x3ff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000008880000081000000080600000000060000000180c2000000aaaaaaaaaabbd33c522e5d0e9e14581e76fdeb749d8c3f193d50fb78069b1432544bab25b1cc18dcd8f0e88980804adc38472d8598edca9d7e6fbb5fc91b20af1613bdcad17e4be297ba08bac63674765348cb5c70d8b8f7179694df18a4"], 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300031200000000000000000000000400090088000000e3d36433c4920893924540ac18fabaf0c70000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000002fc0000000005000500000000000a"], 0x90}, 0x1, 0x7}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x288001, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45310, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.787913859s ago: executing program 3 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5000000}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x84}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00'], 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) 1.734007387s ago: executing program 3 (id=1601): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40003, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[{0x10, 0x84}, {0x10, 0x102, 0x6}], 0x20}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff0200"/50, @ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x15}, 0xa) listen(r4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x44014) 1.647625849s ago: executing program 2 (id=1602): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x26c, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x258, 0x1, [@m_skbmod={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x154, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x125, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x20000000, 0x3, 0x7}, @local, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffffff, 0xffffffffffffffff, 0x9, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x26c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a83", 0x9}, {0x0}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa001100000000000000000000000100"], 0x30}, 0x0) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xa, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000540)="1009805703544637e6a8dd5884ceb0720fbf0821b7fd92419a1ae9177859cb27cc2f9e68527dc0f54a7fe2b0797e5aecc6f585fd45198e998dafbfc9ff68b0212346ecf7f9392bed3600d3e5303adc5a3f9ed6de074669c52842aaf744f759255dc80420ac47a208c0ad71444df2c4a323e05b9d960b4653f53286ad704a62203f6e94aa2eddbfbed129ae0f0a19f1d8df61509e1728f5abeced93af00593ca51e66153bb99fddb04e2d2d5cfedd3c6bf08c4b1d5a387f27b07b78d746e5", &(0x7f0000000880)=""/163}, 0x20) (async) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/178, 0xb2}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.499972038s ago: executing program 2 (id=1603): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x31, 0x1, 0x0, @void, @value}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c0000000001"], 0xa0}}, 0x0) 1.427290658s ago: executing program 2 (id=1604): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000300)=""/145, 0x91}, {&(0x7f0000000240)=""/173, 0xad}], 0x3}, 0x10020) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x410, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'geneve1\x00', 'ipvlan1\x00', {}, {0xff}, 0x3c, 0x6, 0x4, 0x25}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3ff, 'system_u:object_r:sulogin_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x240, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x1}}, @common=@rt={{0x138}, {0xb6f, [0x5, 0x1], 0x0, 0x4, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote, @mcast1, @mcast1, @mcast1, @remote, @mcast1, @remote, @local], 0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6}, {0x4, 0x2, 0x4}, {0x2, 0x6}, 0x401, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="680000001300070127bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000003503010008001300", @ANYRES32=0x0, @ANYBLOB="08001e00020000001400"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x44044000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@random="12dbf30caead", @local, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x3, 0x1}}, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x15, 0x3, 0x0, 0x0, "99c83977911e4b44b98531cd1478215882a99f652ee620003fc273dea570eae02f39a4048e5a107b9f4f2b90cbdf25e20d9ddf4dbd4206b2ddc8b27f0fadea88"}}}}, 0x0) 1.214059673s ago: executing program 2 (id=1606): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x600, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.169746458s ago: executing program 1 (id=1607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{}, "0e2df4794091d3e5", "9b059be922ca7e0f488a7f0556ecedbe", "544b1f21", "a90ef38a5840f670"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000080), 0x4) 1.064518616s ago: executing program 4 (id=1608): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x12, 0x0, &(0x7f0000001a00)="000000000000000022385ba988a88dc286dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000000000000e000000040003"], 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e00)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x3}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_int(r5, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r12) socket$inet6_udplite(0xa, 0x2, 0x88) 1.061661013s ago: executing program 2 (id=1609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd090032000300300045006000000001002f0081e903000000f63b00fff50000007d01ff02000000000000000000000000000199"], 0xfdef) 1.003825532s ago: executing program 1 (id=1610): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x0, 0x0, 0x2], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="80fd"], 0x9) syz_emit_ethernet(0x111, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x20, r2, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x5}, 0x0) 915.806558ms ago: executing program 0 (id=1611): syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}, @rr={0x7, 0x3, 0x98}]}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x3, 0x2, 0xffffffff, 0x0, 0xa, 0x3, 0x100000000}, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002840)={[0x81]}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x0) 915.63381ms ago: executing program 1 (id=1612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000020000000030000008000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x22000040}, 0x20004000) 795.800288ms ago: executing program 2 (id=1613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8000000000000c, &(0x7f00000001c0)='u', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pipe(&(0x7f0000000380)) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)="e1", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000640)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="49f43072cc5706c45fc77c51c88a8df26abe22bb3b83d6419f41bcd82221818985d6a7530eba9f943095ddb8a2c868049144e38df78cf2b4a4bdb18cb9cb9e521de4039296a8a8280208c700174f1aebb4c4eeb02de91916a82f29", 0x5b}, {&(0x7f0000000280)="ec", 0x1}, {&(0x7f0000000000)="4cb6418e60450a53a9ae9fd9dfd0b4aa5685d07d982f2d782137f696c7ef727afe", 0x21}, {&(0x7f00000000c0)="d842c428b70662d44432cf36f3180eae23dd06008721d898ecc3043c2e3badbf9b384d2dea7d35be2e5594289a4800db24e33233bfdaea84ffffffffffffffff058115f0077caeb6dd6c1abd14fe5aa93e1a", 0x52}, {&(0x7f0000000580)="46db3dffbfd525b7540c71ada06e7f8c7b9472ff0376c138a112bd027303ead7b38f91c0c024d920ccd04f25991cd1c81b191d65d33759d273ebf7ed107334ea67637ff3b4c16dc6bcddbf628c14337edeba2edc183bba2ed7e98acbb8fdce94941a3a05ec415941cd4d2b4ee3b39c1980d6544b1654448623695ec470cf0d31313c7eddc0c6dd96f69c03912d5fa03eae9ef4f09225446d1d0829807b041020cb2da277fa56b120cbc319c5b068ae9e825bf823095c79858bbf637449f643ae563b20a8358f440472fe81349ab2e2df224d38", 0xd3}, {&(0x7f0000000680)="9401553ddb7c6d802a5d8c1860e6954fb88197bf6b014b93f48558bacf6b078247ae0107896b9549355f45dac37d7ce53add049fb1198ab9c0b667dff0073757cb1567a0d05c1ad1bf1208b897196a28fa7ad9f4ef0db815d41f167c7445ace7e464625bea95ae8ade98d5ee0a60c9334af9f6036beea20f18307e30d8f6841a7bd9d9bfba30865e5b93133b50a7e3c6ed7823f3a87b1c020afa7cab9f1d82f365b122ad253d04e096a6ca03d8cc3129c7f43912f91ab640addf6515d14683132a8ca6586fb734dc90da", 0xca}, {&(0x7f0000000780)="4988a4de9f43bdcd46241dc113ae6c8093a626a92f95805ae2664f415a4d63eade2079b1fcf110bc279b8f6f21b496a34e35c4775aacb6e1abfa92e8a2895f3262ff748b01c8121a9adff9945ddb6bd28ec3ae8a72af6fa8f5cc0491c319ecd40a70f4c3a1f0ce55b5ba79fcd278c6b018c993397f6427080fdefa88cde8991c6ee4f71ea8", 0x85}], 0x7) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) 747.653642ms ago: executing program 0 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000000c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 720.881733ms ago: executing program 1 (id=1615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0xa00, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) 700.162295ms ago: executing program 3 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000300)=""/145, 0x91}, {&(0x7f0000000240)=""/173, 0xad}], 0x3}, 0x10020) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@security={'security\x00', 0xe, 0x4, 0x5c8, 0xffffffff, 0x410, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'geneve1\x00', 'ipvlan1\x00', {}, {0xff}, 0x3c, 0x6, 0x4, 0x25}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3ff, 'system_u:object_r:sulogin_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x240, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x1}}, @common=@rt={{0x138}, {0xb6f, [0x5, 0x1], 0x0, 0x4, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote, @mcast1, @mcast1, @mcast1, @remote, @mcast1, @remote, @local], 0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6}, {0x4, 0x2, 0x4}, {0x2, 0x6}, 0x401, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="680000001300070127bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000003503010008001300", @ANYRES32=0x0, @ANYBLOB="08001e00020000001400"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x44044000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@random="12dbf30caead", @local, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x3, 0x1}}, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x15, 0x3, 0x0, 0x0, "99c83977911e4b44b98531cd1478215882a99f652ee620003fc273dea570eae02f39a4048e5a107b9f4f2b90cbdf25e20d9ddf4dbd4206b2ddc8b27f0fadea88"}}}}, 0x0) 575.756079ms ago: executing program 0 (id=1617): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) shutdown(r4, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba80000012", 0x2d}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 575.098539ms ago: executing program 1 (id=1618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x400080c5}, 0x4000000) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xfd}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x10}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x808) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x20008090) socketpair(0x2c, 0x2, 0x3, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0xa, 0xd, 0x41, @loopback, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x180, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x7f, 0x4, 0x1, @mcast1, @loopback, 0x20, 0x20, 0x80000001, 0x5}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x2b, 0x6, 0x1, 0x8, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x10, 0x900}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe4, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4044894}, 0x1) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r9, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0xbcfb5d5d3b84cc13, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000b40)=0xca3, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000bc0)={'gretap0\x00', r5, 0x1, 0x10, 0x9, 0x3, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x67, 0x0, 0xe, 0x29, 0x0, @local, @loopback, {[@ssrr={0x89, 0xb, 0x36, [@loopback, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6_vti0\x00', r6, 0x2f, 0x1, 0x7, 0xf, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x40, 0x2, 0xa}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r10, &(0x7f0000000e80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x124, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x11}, 0x20000080) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ec0), 0x40001, 0x0) ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000f40)={0x3, &(0x7f0000000f00)=[{0x8, 0x6a, 0x6, 0x6}, {0x4, 0x0, 0xbd, 0x8001}, {0xfdc0, 0x8, 0x40, 0x4}]}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000001480)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000000fc0)={0x478, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e73dbe7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bde2df9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc770}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x808608d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ad0d7ac}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c15fd8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29b3233c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2de0ae4b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71dfeed8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ed52379}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39daf2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d116145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf33}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf134}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4319de06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40a4}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x661bb598}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd353}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa68f36d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11b3ef0c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e3958b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb472}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75c298c1}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x425bd5e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa93ca1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4abc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a6b275}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75fbfa32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd90d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544a2e44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d2944d5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb252254}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8728}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20f3080a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe06e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d818f14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x742b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245b201d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22b4a195}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x276b0928}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a7e06f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66e7a235}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x178, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78e434fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ec275c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x95e2a20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59120bba}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c5377c2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x196d883}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74f6522e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed543a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54ce9c37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55fe3de3}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x161770d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6176150c}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51ff1963}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cd55343}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3623089c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aa5ac71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a892b8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x103d5d92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x229660c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38eba75a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7422946f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bbfb52e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1885c2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62d6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62006b0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x440693ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2793783c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x432cb56a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c740097}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x478}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x114, 0x2f, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0x9}, @generic="bfba8395a941d488c7dd9097d11d1d535035eda8cf8de6db7521d08928db3f6d49bb7467ead5f7dc4bc4b46457cf33bb83dc9055f2443d8340c766691c3c0b1373394a00ce9cbb3148127207ffb0ef66a301", @generic="adca899d49f81cbd23e63b1a9469b1791973b42cb7e62fb2b43fe970093deedb83d95785196a22557e3c01dd35fa977ddaf395704057502b9173505acaacd4d7e291ade9ab56fc1be4bb74d1b0d2e15b2b7941589f2fa06c026120259fc35c4ac24f877d5715f867ea395eea80bb6edf70d598c0fe5fad1726d27dedaf1c5badbd9826b6872c0e5a1242f62fdbdc73531ec0b8bab9449c7d", @typed={0x8, 0xa2, 0x0, 0x0, @ipv4=@loopback}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000000) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000016c0)=0x4, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000004) syz_genetlink_get_family_id$wireguard(&(0x7f0000001800), 0xffffffffffffffff) 521.058639ms ago: executing program 3 (id=1619): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "0700001d00", "4617a9f6040839230fb7fead776dd8dc", "eedb0872", "a44a883fca4400"}, 0x28) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x300, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0) connect$x25(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 449.43399ms ago: executing program 1 (id=1620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000062001c000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000006000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x24000844) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f00000008c0)=0x8, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000206010800e3ff0000000000050f00000500050002000000050001000700000005000400000000000900020073797a31000000000d000300686173683a6e657400000000"], 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0xa8, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000000000000}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xfc}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069119500000000001800000000000000000000000000000095"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$isdn(0x22, 0x2, 0x26) close(0x3) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, 0x0, &(0x7f0000000000)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x20, r9, 0x20, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7e, 0x1}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc091}, 0x20004000) 95.53508ms ago: executing program 4 (id=1621): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{}, &(0x7f0000000c00), &(0x7f0000000c40)='%pK \x00'}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaabb83297e3baa10aaaaaa0088a80000890600000800450000140000000000a0f081b2138036009078e0000002"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000003000000000000000000000000346384bdf875329771000000000000008adabf4027845c4e9d30f9c5486e3c752b4589d98be1fcb1516049927e808bfacf4e48e6aaaa42a84562df1bdb365f8c55de7c687c9432ea44cfdbf00d0c1df2c35fcd33ad1aa4180000000000000000"], 0x50) 0s ago: executing program 4 (id=1622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x5, 0x9, 0xa5, 0x2, 0x2, 0x8, 0x200, {0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc15f}}, 0x2, 0x5, 0xae08, 0xf80, 0x5}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @remote}}}, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/54, 0x36}], 0x1, &(0x7f0000000300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x40000161) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000840)={&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="9f762cd5c29140d7e8b5ada3e72181ca0eb7db09556cea2296d66451bf67b0866e114b4cefe0317021b4024ec94ea5d149", 0x31}, {&(0x7f0000000440)="a8be75e887b1f46cd6f9f2b0218cfac11345d78c3a0e2682111fb39268086dbece0f11a1b7bd7944f5e332b362778a9b327a88de6cbfd38f9e74d1bfa21e190e75230d465b53a4c580710ec76eec16ceabf633dafcbb6608d7233d0a867ee46968582e064c9c010743facc8f07fbecb613f8e9b6cadbce18c6ee808d333427e524d455936aa23bdabaab475531a90be098ce97d581f9585892c5c4fc23d4d8a6dab40cbecf67e6467cbdc9fdd2ca6651c2d040088f17", 0xb6}], 0x2, &(0x7f0000000580)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xb, 0x89, [@broadcast, @loopback]}, @ssrr={0x89, 0xf, 0xff, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0x5, "9db4e7"}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x91, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xc, "efbfa6bca5429efb426b"}, @end, @timestamp_addr={0x44, 0x3c, 0xc0, 0x1, 0x1, [{@local, 0x8}, {@broadcast, 0x6}, {@multicast1, 0x29000}, {@private=0xa010101, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@empty, 0x400}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x20000000}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xde, [@local]}, @lsrr={0x83, 0x17, 0xe8, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback]}, @end, @rr={0x7, 0x7, 0x84, [@loopback]}, @ssrr={0x89, 0x17, 0x96, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x25e8}, {@private=0xa010101, 0x2c4e}, {@private=0xa010100, 0x439}, {@private=0xa010101, 0x3}]}, @lsrr={0x83, 0x2b, 0x21, [@empty, @rand_addr=0x64010101, @multicast2, @empty, @loopback, @multicast1, @remote, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x16}]}, @rr={0x7, 0x27, 0x10, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @private=0xa010102, @empty, @private=0xa010102]}]}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xaa, 0x1, 0x9, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xfe3}]}, @timestamp_addr={0x44, 0x4c, 0xb9, 0x1, 0x2, [{@private=0xa010100, 0x595b}, {@empty, 0xcc}, {@loopback}, {@remote, 0x2}, {@remote, 0x1ff}, {@loopback, 0x800}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}, {@remote, 0x75}, {@private=0xa010101}]}, @timestamp={0x44, 0x14, 0x5c, 0x0, 0x2, [0x6, 0x8, 0x2, 0xfffffff4]}, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x5, [{@broadcast, 0x5}, {@rand_addr=0x64010100, 0xd3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}]}, @generic={0x44, 0x11, "7234ef8d6fd7176b6f360110889eb2"}, @ssrr={0x89, 0x7, 0xf8, [@broadcast]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @rr={0x7, 0xb, 0x1e, [@local, @broadcast]}, @generic={0x94, 0xd, "3f44a44f13a4522c43e46b"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x2b8}, 0x800) socket$isdn_base(0x22, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r11) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x24, &(0x7f0000000900)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7d629f1d48907589}}, @alu={0x4, 0x0, 0x6, 0x3, 0xa, 0x40, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], &(0x7f0000000a40)='GPL\x00', 0x7, 0xbe, &(0x7f0000000a80)=""/190, 0x41000, 0x8, '\x00', r12, 0x0, r9, 0x8, &(0x7f0000000b40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xd, 0x1, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[r7, r10, r7, r9, r11], 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f00000008c0)='btrfs_transaction_commit\x00', r13, 0x0, 0xe90}, 0x18) sendto(r11, &(0x7f0000000d00)="9c638a11fa0d8227713951e81a01ac7ced662be906abc1dcad328ab2ee35f9419e098bd27ee0b287e3514542e303f618a3f458b20fba0291cd23a421ae1b5489b548629d3d1e1f0ed80697c6e562f63b6e51357662e8cf242af8026cd01cef77e7a5cbd7b58d141bcbafd8f04485c5c843ff4a6f90e2aa93297743134d3d04914f2e21715b072e47a40b415e07a35382fa", 0x91, 0x20040000, &(0x7f0000000dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x3, 0x2, 0x0, 0x1, {0xa, 0x4e24, 0x28e2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x80) listen(r0, 0xffffffff) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000e40)={r3, 0x7, 0x7, 0x4}, &(0x7f0000000e80)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r11) socket$inet6_sctp(0xa, 0xa, 0x84) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000f00)={r3, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x5, 0xffffffff, 0x6, 0x8, 0x80000000}, &(0x7f0000000fc0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001040)={r4, 0x10, &(0x7f0000001000)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000001080)=0x10) getsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f00000010c0)=""/69, &(0x7f0000001140)=0x45) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001180)) r14 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r14, &(0x7f0000003540)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000011c0)=""/58, 0x3a}, {&(0x7f0000001200)=""/176, 0xb0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/177, 0xb1}, {&(0x7f0000002380)=""/153, 0x99}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/87, 0x57}], 0x7}, 0x10041) getsockname$unix(0xffffffffffffffff, &(0x7f0000003580), &(0x7f0000003600)=0x6e) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000003640)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000003780)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/54, 0x36, 0x1, &(0x7f00000036c0)=""/136, 0x88}, &(0x7f00000037c0)=0x40) kernel console output (not intermixed with test programs): /0x410 [ 152.141821][ T8637] ? __fget_files+0x2a/0x410 [ 152.146698][ T8637] __sys_sendmsg+0x269/0x350 [ 152.151409][ T8637] ? __pfx_lock_release+0x10/0x10 [ 152.156787][ T8637] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.162083][ T8637] ? __pfx_vfs_write+0x10/0x10 [ 152.167824][ T8637] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.174159][ T8637] ? do_syscall_64+0x100/0x230 [ 152.178930][ T8637] ? do_syscall_64+0xb6/0x230 [ 152.183988][ T8637] do_syscall_64+0xf3/0x230 [ 152.188769][ T8637] ? clear_bhb_loop+0x35/0x90 [ 152.195039][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.202110][ T8637] RIP: 0033:0x7f39c8b85d29 [ 152.206921][ T8637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.226531][ T8637] RSP: 002b:00007f39c9a3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.234951][ T8637] RAX: ffffffffffffffda RBX: 00007f39c8d75fa0 RCX: 00007f39c8b85d29 [ 152.242927][ T8637] RDX: 0000000000004000 RSI: 0000000020000000 RDI: 0000000000000003 [ 152.250992][ T8637] RBP: 00007f39c9a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 152.258966][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.266947][ T8637] R13: 0000000000000000 R14: 00007f39c8d75fa0 R15: 00007ffea137a2e8 [ 152.275457][ T8637] [ 152.368672][ T8637] netlink: 'syz.4.872': attribute type 3 has an invalid length. [ 152.455113][ T8642] pim6reg1: entered promiscuous mode [ 152.460809][ T8642] pim6reg1: entered allmulticast mode [ 152.564179][ T8604] erspan0 speed is unknown, defaulting to 1000 [ 152.598913][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 152.627099][ T8650] sit0: entered promiscuous mode [ 152.651263][ T8605] __nla_validate_parse: 2 callbacks suppressed [ 152.651285][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 152.668069][ T8650] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 152.678815][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 152.709728][ T8650] netlink: 1 bytes leftover after parsing attributes in process `syz.0.875'. [ 153.181217][ T8671] erspan0 speed is unknown, defaulting to 1000 [ 153.599675][ T8690] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 153.675677][ T8704] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 153.685050][ T8704] Bluetooth: MGMT ver 1.23 [ 153.834072][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'. [ 154.104901][ T8709] erspan0 speed is unknown, defaulting to 1000 [ 154.649006][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 154.700061][ T8677] erspan0 speed is unknown, defaulting to 1000 [ 154.886294][ T8743] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 154.906691][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.895'. [ 154.943263][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'. [ 155.068700][ T8736] erspan0 speed is unknown, defaulting to 1000 [ 155.224164][ T8749] vlan3: entered promiscuous mode [ 155.241936][ T8749] team0: entered promiscuous mode [ 155.257609][ T8749] team_slave_0: entered promiscuous mode [ 155.277472][ T8749] team_slave_1: entered promiscuous mode [ 155.299583][ T8749] team0: left promiscuous mode [ 155.316341][ T8749] team_slave_0: left promiscuous mode [ 155.336182][ T8749] team_slave_1: left promiscuous mode [ 155.921732][ T8767] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 156.252279][ T8781] ipt_rpfilter: unknown options [ 156.516308][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 156.831102][ T8793] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 156.861141][ T8795] SET target dimension over the limit! [ 156.896897][ T8802] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 156.905246][ T8802] netlink: 2 bytes leftover after parsing attributes in process `syz.1.914'. [ 157.054761][ T8811] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.914'. [ 157.215250][ T8824] xt_l2tp: missing protocol rule (udp|l2tpip) [ 157.303125][ T8831] sctp: [Deprecated]: syz.4.920 (pid 8831) Use of int in max_burst socket option deprecated. [ 157.303125][ T8831] Use struct sctp_assoc_value instead [ 157.364352][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.921'. [ 157.590609][ T8841] xt_TCPMSS: Only works on TCP SYN packets [ 157.613832][ T8841] erspan0 speed is unknown, defaulting to 1000 [ 157.636168][ T8839] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 157.728967][ T8839] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 157.833652][ T8839] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 157.944232][ T8839] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 158.133978][ T8853] tipc: Started in network mode [ 158.159482][ T8853] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 158.193894][ T8853] tipc: Enabled bearer , priority 18 [ 158.271458][ T8839] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 158.291937][ T8839] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 158.356694][ T8839] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 158.464648][ T8839] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 158.556032][ T8877] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 158.688985][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'. [ 158.806035][ T8889] dccp_invalid_packet: P.Data Offset(0) too small [ 159.019447][ T8892] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 159.027236][ T8892] netlink: 2 bytes leftover after parsing attributes in process `syz.2.934'. [ 159.096338][ T5912] hid-generic 0005:7FFF:0008.0003: unknown main item tag 0x0 [ 159.113682][ T5912] hid-generic 0005:7FFF:0008.0003: unknown main item tag 0x0 [ 159.134242][ T5912] hid-generic 0005:7FFF:0008.0003: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 159.175887][ T8900] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.934'. [ 159.308814][ T5912] tipc: Node number set to 10005162 [ 159.316901][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 159.325465][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 159.390414][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 159.407517][ T8904] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 159.408898][ T8908] ieee802154 phy1 wpan1: encryption failed: -90 [ 159.441828][ T8904] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 159.456852][ T8904] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.477169][ T8909] raw_sendmsg: syz.0.940 forgot to set AF_INET. Fix it! [ 159.611506][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'. [ 159.657548][ T8915] erspan0 speed is unknown, defaulting to 1000 [ 159.822281][ T8918] bond0: entered allmulticast mode [ 159.868428][ T8922] netlink: 88 bytes leftover after parsing attributes in process `syz.1.945'. [ 159.910598][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 159.928658][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 160.408430][ T8935] vlan3: entered promiscuous mode [ 160.428645][ T8935] team0: entered promiscuous mode [ 160.449626][ T8915] netlink: 'syz.4.942': attribute type 10 has an invalid length. [ 160.454274][ T8935] team_slave_0: entered promiscuous mode [ 160.473991][ T8935] team_slave_1: entered promiscuous mode [ 160.490710][ T8938] FAULT_INJECTION: forcing a failure. [ 160.490710][ T8938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.516777][ T8935] team0: left promiscuous mode [ 160.523498][ T8935] team_slave_0: left promiscuous mode [ 160.531874][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.3.952 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 160.543286][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.553380][ T8938] Call Trace: [ 160.556684][ T8938] [ 160.559651][ T8938] dump_stack_lvl+0x241/0x360 [ 160.564394][ T8938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.569696][ T8938] ? __pfx__printk+0x10/0x10 [ 160.576516][ T8938] ? __pfx_lock_release+0x10/0x10 [ 160.581597][ T8938] ? __lock_acquire+0x1397/0x2100 [ 160.586665][ T8938] should_fail_ex+0x3b0/0x4e0 [ 160.591394][ T8938] _copy_from_user+0x2f/0xc0 [ 160.596034][ T8938] kstrtouint_from_user+0xc6/0x190 [ 160.601194][ T8938] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 160.606927][ T8938] ? __pfx_lock_acquire+0x10/0x10 [ 160.611965][ T8938] proc_fail_nth_write+0xaa/0x2d0 [ 160.616991][ T8938] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 160.622893][ T8938] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.628531][ T8938] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.634194][ T8938] vfs_write+0x2a3/0xd30 [ 160.638462][ T8938] ? __pfx_vfs_write+0x10/0x10 [ 160.643252][ T8938] ? __fget_files+0x2a/0x410 [ 160.647877][ T8938] ? __fget_files+0x395/0x410 [ 160.652652][ T8938] ? __fget_files+0x2a/0x410 [ 160.658164][ T8938] ksys_write+0x18f/0x2b0 [ 160.662513][ T8938] ? __pfx_ksys_write+0x10/0x10 [ 160.667368][ T8938] ? do_syscall_64+0x100/0x230 [ 160.673175][ T8938] ? do_syscall_64+0xb6/0x230 [ 160.679190][ T8938] do_syscall_64+0xf3/0x230 [ 160.684077][ T8938] ? clear_bhb_loop+0x35/0x90 [ 160.689037][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.695314][ T8938] RIP: 0033:0x7fb5fdd847df [ 160.701158][ T8938] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 160.724188][ T8938] RSP: 002b:00007fb5fbbf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 160.732801][ T8938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb5fdd847df [ 160.740867][ T8938] RDX: 0000000000000001 RSI: 00007fb5fbbf60a0 RDI: 0000000000000004 [ 160.748836][ T8938] RBP: 00007fb5fbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.756881][ T8938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 160.764875][ T8938] R13: 0000000000000000 R14: 00007fb5fdf75fa0 R15: 00007fffaf45df58 [ 160.772866][ T8938] [ 160.777119][ T8935] team_slave_1: left promiscuous mode [ 161.125096][ T8950] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 161.158901][ T8950] team0: entered promiscuous mode [ 161.167730][ T8950] team_slave_0: entered promiscuous mode [ 161.180722][ T8950] team_slave_1: entered promiscuous mode [ 161.191955][ T8950] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.205576][ T8950] batman_adv: batadv0: Interface activated: team0 [ 161.212383][ T8950] batman_adv: batadv0: Interface deactivated: team0 [ 161.228784][ T8950] batman_adv: batadv0: Removing interface: team0 [ 161.270542][ T8957] xt_bpf: check failed: parse error [ 161.584944][ T8973] FAULT_INJECTION: forcing a failure. [ 161.584944][ T8973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.592516][ T8970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.609098][ T8973] CPU: 0 UID: 0 PID: 8973 Comm: syz.3.964 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 161.622166][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.633084][ T8973] Call Trace: [ 161.636401][ T8973] [ 161.639368][ T8973] dump_stack_lvl+0x241/0x360 [ 161.644108][ T8973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.649372][ T8973] ? __pfx__printk+0x10/0x10 [ 161.654103][ T8973] ? __pfx_lock_release+0x10/0x10 [ 161.659892][ T8973] should_fail_ex+0x3b0/0x4e0 [ 161.664597][ T8973] _copy_from_iter+0x1e9/0x1c20 [ 161.669458][ T8973] ? __virt_addr_valid+0x183/0x530 [ 161.674577][ T8973] ? __alloc_skb+0x28f/0x440 [ 161.679200][ T8973] ? __pfx__copy_from_iter+0x10/0x10 [ 161.684509][ T8973] ? __virt_addr_valid+0x183/0x530 [ 161.689620][ T8973] ? __virt_addr_valid+0x183/0x530 [ 161.694735][ T8973] ? __virt_addr_valid+0x45f/0x530 [ 161.699847][ T8973] ? __phys_addr_symbol+0x2f/0x70 [ 161.704873][ T8973] ? __check_object_size+0x47a/0x730 [ 161.710166][ T8973] netlink_sendmsg+0x73d/0xcb0 [ 161.714952][ T8973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.720430][ T8973] ? aa_sock_msg_perm+0x91/0x160 [ 161.725379][ T8973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.730676][ T8973] __sock_sendmsg+0x221/0x270 [ 161.735590][ T8973] ____sys_sendmsg+0x52a/0x7e0 [ 161.740415][ T8973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.745796][ T8973] ? __fget_files+0x2a/0x410 [ 161.750477][ T8973] ? __fget_files+0x2a/0x410 [ 161.755093][ T8973] __sys_sendmsg+0x269/0x350 [ 161.759987][ T8973] ? __pfx_lock_release+0x10/0x10 [ 161.765116][ T8973] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.770329][ T8973] ? __pfx_vfs_write+0x10/0x10 [ 161.775607][ T8973] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.783021][ T8973] ? do_syscall_64+0x100/0x230 [ 161.788442][ T8973] ? do_syscall_64+0xb6/0x230 [ 161.794879][ T8973] do_syscall_64+0xf3/0x230 [ 161.799411][ T8973] ? clear_bhb_loop+0x35/0x90 [ 161.804120][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.810115][ T8973] RIP: 0033:0x7fb5fdd85d29 [ 161.814531][ T8973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.834236][ T8973] RSP: 002b:00007fb5fbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.842744][ T8973] RAX: ffffffffffffffda RBX: 00007fb5fdf75fa0 RCX: 00007fb5fdd85d29 [ 161.850714][ T8973] RDX: 00000000040c0080 RSI: 00000000200002c0 RDI: 0000000000000003 [ 161.858797][ T8973] RBP: 00007fb5fbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.867068][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.875042][ T8973] R13: 0000000000000000 R14: 00007fb5fdf75fa0 R15: 00007fffaf45df58 [ 161.883048][ T8973] [ 161.943640][ T8977] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 162.065694][ T8970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.128248][ T8979] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 162.193121][ T8979] netpci0: left promiscuous mode [ 162.208760][ T8979] batman_adv: batadv0: Adding interface: netpci0 [ 162.230269][ T8979] batman_adv: batadv0: The MTU of interface netpci0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.270747][ T8979] batman_adv: batadv0: Not using interface netpci0 (retrying later): interface not active [ 162.365610][ T8970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.415569][ T8987] erspan0 speed is unknown, defaulting to 1000 [ 162.574204][ T8970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.742970][ T8970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.767409][ T8970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.811968][ T8970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.897503][ T8970] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.445422][ T9016] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 163.511170][ T9016] bond1: (slave gretap2): making interface the new active one [ 163.521953][ T9016] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 163.893393][ T9028] netlink: 'syz.2.982': attribute type 10 has an invalid length. [ 163.919474][ T9028] team0: left promiscuous mode [ 163.928764][ T9028] team_slave_0: left promiscuous mode [ 163.939080][ T9028] team_slave_1: left promiscuous mode [ 164.473617][ T9042] __nla_validate_parse: 8 callbacks suppressed [ 164.473636][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 164.523537][ T9044] syzkaller0: entered promiscuous mode [ 164.532203][ T9044] syzkaller0: entered allmulticast mode [ 164.544670][ T9042] syzkaller1: entered promiscuous mode [ 164.550845][ T9042] syzkaller1: entered allmulticast mode [ 165.382831][ T9054] netlink: 104 bytes leftover after parsing attributes in process `syz.3.991'. [ 166.137898][ T8993] syz.0.970: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/ [ 166.144027][ T9052] delete_channel: no stack [ 166.148080][ T8993] ,mems_allowed=0-1 [ 166.171194][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz.0.970 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 166.182085][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 166.193535][ T8993] Call Trace: [ 166.196813][ T8993] [ 166.199751][ T8993] dump_stack_lvl+0x241/0x360 [ 166.204454][ T8993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.209667][ T8993] ? __pfx__printk+0x10/0x10 [ 166.214291][ T8993] ? __rcu_read_unlock+0xa1/0x110 [ 166.219330][ T8993] warn_alloc+0x278/0x410 [ 166.223686][ T8993] ? __pfx_warn_alloc+0x10/0x10 [ 166.228545][ T8993] ? translate_table+0x174/0x2260 [ 166.233586][ T8993] ? __get_vm_area_node+0x1c8/0x2d0 [ 166.238795][ T8993] ? __get_vm_area_node+0x25c/0x2d0 [ 166.244013][ T8993] __vmalloc_node_range_noprof+0x62f/0x1380 [ 166.249911][ T8993] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 166.255658][ T8993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.261984][ T8993] ? rcu_is_watching+0x15/0xb0 [ 166.266744][ T8993] ? trace_kmalloc+0x1f/0xd0 [ 166.271347][ T8993] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 166.276825][ T8993] ? __kvmalloc_node_noprof+0x72/0x190 [ 166.282287][ T8993] __kvmalloc_node_noprof+0x142/0x190 [ 166.287690][ T8993] ? translate_table+0x174/0x2260 [ 166.293231][ T8993] translate_table+0x174/0x2260 [ 166.298200][ T8993] ? __pfx_translate_table+0x10/0x10 [ 166.304121][ T8993] ? __might_fault+0xaa/0x120 [ 166.308816][ T8993] ? __pfx_lock_release+0x10/0x10 [ 166.313863][ T8993] ? __virt_addr_valid+0x183/0x530 [ 166.319023][ T8993] ? __might_fault+0xaa/0x120 [ 166.323743][ T8993] ? __might_fault+0xc6/0x120 [ 166.328495][ T8993] ? _copy_from_user+0x99/0xc0 [ 166.333299][ T8993] ? copy_from_sockptr_offset+0x6b/0xb0 [ 166.339072][ T8993] do_ipt_set_ctl+0xe3d/0x1250 [ 166.343904][ T8993] ? __pfx___mutex_trylock_common+0x10/0x10 [ 166.349897][ T8993] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 166.355133][ T8993] ? __pfx_lock_release+0x10/0x10 [ 166.360165][ T8993] ? rcu_is_watching+0x15/0xb0 [ 166.364985][ T8993] ? trace_contention_end+0x3c/0x120 [ 166.370289][ T8993] ? __mutex_unlock_slowpath+0x21e/0x790 [ 166.375944][ T8993] ? __pfx___mutex_lock+0x10/0x10 [ 166.380971][ T8993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.386948][ T8993] ? aa_sk_perm+0x96d/0xab0 [ 166.391472][ T8993] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.396360][ T8993] nf_setsockopt+0x295/0x2c0 [ 166.401301][ T8993] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 166.407379][ T8993] do_sock_setsockopt+0x3af/0x720 [ 166.412417][ T8993] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 166.418256][ T8993] ? __fget_files+0x395/0x410 [ 166.424431][ T8993] ? __fget_files+0x2a/0x410 [ 166.429246][ T8993] __x64_sys_setsockopt+0x1ee/0x280 [ 166.434480][ T8993] do_syscall_64+0xf3/0x230 [ 166.439009][ T8993] ? clear_bhb_loop+0x35/0x90 [ 166.443725][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.449880][ T8993] RIP: 0033:0x7f990c985d29 [ 166.454743][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.475655][ T8993] RSP: 002b:00007f990d851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.484073][ T8993] RAX: ffffffffffffffda RBX: 00007f990cb75fa0 RCX: 00007f990c985d29 [ 166.492056][ T8993] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 166.502599][ T8993] RBP: 00007f990ca01b08 R08: 0000000000000538 R09: 0000000000000000 [ 166.511830][ T8993] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 [ 166.519921][ T8993] R13: 0000000000000000 R14: 00007f990cb75fa0 R15: 00007ffd5d5c01a8 [ 166.527936][ T8993] [ 166.534084][ T8993] Mem-Info: [ 166.537271][ T8993] active_anon:8052 inactive_anon:0 isolated_anon:0 [ 166.537271][ T8993] active_file:1663 inactive_file:38290 isolated_file:0 [ 166.537271][ T8993] unevictable:768 dirty:213 writeback:0 [ 166.537271][ T8993] slab_reclaimable:10526 slab_unreclaimable:102953 [ 166.537271][ T8993] mapped:30158 shmem:1431 pagetables:853 [ 166.537271][ T8993] sec_pagetables:0 bounce:0 [ 166.537271][ T8993] kernel_misc_reclaimable:0 [ 166.537271][ T8993] free:1317407 free_pcp:1091 free_cma:0 [ 166.582518][ T8993] Node 0 active_anon:32208kB inactive_anon:0kB active_file:6652kB inactive_file:153088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120632kB dirty:852kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:3412kB sec_pagetables:0kB all_unreclaimable? no [ 166.614936][ T8993] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 166.645846][ T8993] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.673606][ T8993] lowmem_reserve[]: 0 2465 2466 0 0 [ 166.679243][ T8993] Node 0 DMA32 free:1350824kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:32172kB inactive_anon:0kB active_file:6652kB inactive_file:152248kB unevictable:1536kB writepending:852kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:4728kB local_pcp:420kB free_cma:0kB [ 166.712736][ T8993] lowmem_reserve[]: 0 0 0 0 0 [ 166.719010][ T8993] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.747643][ T8993] lowmem_reserve[]: 0 0 0 0 0 [ 166.755314][ T8993] Node 1 Normal free:3903648kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.784974][ T8993] lowmem_reserve[]: 0 0 0 0 0 [ 166.789844][ T8993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.803183][ T8993] Node 0 DMA32: 120*4kB (UME) 124*8kB (UME) 69*16kB (ME) 59*32kB (UME) 28*64kB (ME) 118*128kB (UME) 80*256kB (UME) 42*512kB (UME) 29*1024kB (UM) 26*2048kB (UME) 294*4096kB (UM) = 1350512kB [ 166.822147][ T8993] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.833918][ T8993] Node 1 Normal: 212*4kB (UE) 60*8kB (UME) 51*16kB (UME) 218*32kB (UME) 104*64kB (UME) 36*128kB (UME) 15*256kB (UM) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3903648kB [ 166.853107][ T8993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.863232][ T8993] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.872676][ T8993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.882458][ T8993] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.892410][ T8993] 41384 total pagecache pages [ 166.897331][ T8993] 0 pages in swap cache [ 166.902062][ T8993] Free swap = 124996kB [ 166.906664][ T8993] Total swap = 124996kB [ 166.911073][ T8993] 2097051 pages RAM [ 166.914898][ T8993] 0 pages HighMem/MovableOnly [ 166.920694][ T8993] 427013 pages reserved [ 166.925082][ T8993] 0 pages cma reserved [ 168.333008][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 168.366083][ T9069] ksmbd: Unknown IPC event: 4, ignore. [ 168.401384][ T9070] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 168.425857][ T9070] netlink: 2 bytes leftover after parsing attributes in process `syz.4.996'. [ 168.440492][ T9070] team0: left allmulticast mode [ 168.441104][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.445437][ T9070] team_slave_0: left allmulticast mode [ 168.445460][ T9070] team_slave_1: left allmulticast mode [ 168.445638][ T9070] bridge0: port 3(team0) entered disabled state [ 168.478523][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.488336][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.550552][ T9073] batadv1: entered promiscuous mode [ 168.563828][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 168.587851][ T9075] netlink: ct family unspecified [ 168.603861][ T9075] openvswitch: netlink: Actions may not be safe on all matching packets [ 168.727684][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 168.744000][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 168.768303][ T9086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1002'. [ 168.793799][ T9081] erspan0 speed is unknown, defaulting to 1000 [ 169.172887][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.237249][ T9095] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 169.262581][ T9100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 169.272010][ T9095] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1005'. [ 169.287918][ T9095] team0: entered promiscuous mode [ 169.294617][ T9095] team_slave_0: entered promiscuous mode [ 169.304441][ T9095] team_slave_1: entered promiscuous mode [ 169.317913][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.337180][ T9101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.376113][ T9101] netlink: 'syz.4.1007': attribute type 10 has an invalid length. [ 169.483764][ T9095] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1005'. [ 169.614460][ T9114] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1010'. [ 169.640277][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1010'. [ 169.652667][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1010'. [ 169.720122][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.737246][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.747959][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.762504][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 170.211903][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.456389][ T9133] netlink: 'syz.0.1013': attribute type 12 has an invalid length. [ 170.475038][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 170.504194][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1016'. [ 170.531888][ T9137] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1017'. [ 170.558296][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1018'. [ 170.644244][ T9143] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 170.852707][ T9154] hsr0: left promiscuous mode [ 171.598090][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 171.756280][ T9182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.770404][ T9182] bond1: entered promiscuous mode [ 171.788180][ T9182] bond0: (slave bond1): Enslaving as an active interface with an up link [ 171.833838][ T9198] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 171.880500][ T9195] syzkaller0: entered promiscuous mode [ 172.032792][ T9201] erspan0 speed is unknown, defaulting to 1000 [ 172.434370][ T9213] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 172.443248][ T9213] team0: left promiscuous mode [ 172.448381][ T9213] team_slave_0: left promiscuous mode [ 172.454935][ T9213] team_slave_1: left promiscuous mode [ 172.468169][ T9213] batman_adv: batadv0: Adding interface: team0 [ 172.476413][ T9213] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.527748][ T9213] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 172.644223][ T9216] netlink: 'syz.3.1044': attribute type 10 has an invalid length. [ 173.432729][ T5882] hid-generic 0005:7FFF:0008.0004: unknown main item tag 0x0 [ 173.442653][ T5882] hid-generic 0005:7FFF:0008.0004: unknown main item tag 0x0 [ 173.458323][ T5882] hid-generic 0005:7FFF:0008.0004: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 173.572364][ T9239] net_ratelimit: 2069 callbacks suppressed [ 173.572379][ T9239] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 173.588392][ T9239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.767938][ T9248] erspan0 speed is unknown, defaulting to 1000 [ 174.022669][ T9257] erspan0 speed is unknown, defaulting to 1000 [ 174.072473][ T9228] delete_channel: no stack [ 174.268191][ T9266] ipt_rpfilter: unknown options [ 174.316917][ T9268] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 174.360247][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.378182][ T9268] team0: left promiscuous mode [ 174.401519][ T9268] team_slave_0: left promiscuous mode [ 174.408397][ T9268] team_slave_1: left promiscuous mode [ 174.442053][ T9268] batman_adv: batadv0: Adding interface: team0 [ 174.448290][ T9268] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.484010][ T9268] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 174.678086][ T9280] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 174.772686][ T9280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.836697][ T9282] bond2: (slave gretap2): making interface the new active one [ 174.849603][ T9282] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 174.910470][ T9278] erspan0 speed is unknown, defaulting to 1000 [ 174.937817][ T9287] FAULT_INJECTION: forcing a failure. [ 174.937817][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 174.999090][ T9287] CPU: 1 UID: 0 PID: 9287 Comm: syz.2.1067 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 175.010008][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 175.020097][ T9287] Call Trace: [ 175.023849][ T9287] [ 175.027246][ T9287] dump_stack_lvl+0x241/0x360 [ 175.032058][ T9287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.038001][ T9287] ? __pfx__printk+0x10/0x10 [ 175.042646][ T9287] should_fail_ex+0x3b0/0x4e0 [ 175.047559][ T9287] should_failslab+0xac/0x100 [ 175.052626][ T9287] ? skb_clone+0x20c/0x390 [ 175.057260][ T9287] kmem_cache_alloc_noprof+0x70/0x380 [ 175.062681][ T9287] skb_clone+0x20c/0x390 [ 175.066969][ T9287] __netlink_deliver_tap+0x3cc/0x7f0 [ 175.072322][ T9287] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.077584][ T9287] netlink_deliver_tap+0x19d/0x1b0 [ 175.082737][ T9287] netlink_unicast+0x7c4/0x990 [ 175.087560][ T9287] ? __pfx_netlink_unicast+0x10/0x10 [ 175.092878][ T9287] ? __virt_addr_valid+0x45f/0x530 [ 175.098122][ T9287] ? __phys_addr_symbol+0x2f/0x70 [ 175.103292][ T9287] ? __check_object_size+0x47a/0x730 [ 175.108627][ T9287] netlink_sendmsg+0x8e4/0xcb0 [ 175.109370][ T9290] __nla_validate_parse: 5 callbacks suppressed [ 175.109386][ T9290] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1068'. [ 175.114102][ T9287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.114142][ T9287] ? aa_sock_msg_perm+0x91/0x160 [ 175.114168][ T9287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.144896][ T9287] __sock_sendmsg+0x221/0x270 [ 175.149612][ T9287] ____sys_sendmsg+0x52a/0x7e0 [ 175.154448][ T9287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.159769][ T9287] ? __fget_files+0x2a/0x410 [ 175.164929][ T9287] ? __fget_files+0x2a/0x410 [ 175.169567][ T9287] __sys_sendmsg+0x269/0x350 [ 175.174314][ T9287] ? __pfx_lock_release+0x10/0x10 [ 175.179431][ T9287] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.184604][ T9287] ? __pfx_vfs_write+0x10/0x10 [ 175.189439][ T9287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.195917][ T9287] ? do_syscall_64+0x100/0x230 [ 175.200827][ T9287] ? do_syscall_64+0xb6/0x230 [ 175.205551][ T9287] do_syscall_64+0xf3/0x230 [ 175.210098][ T9287] ? clear_bhb_loop+0x35/0x90 [ 175.215167][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.221893][ T9287] RIP: 0033:0x7f9da0b85d29 [ 175.228735][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.250994][ T9287] RSP: 002b:00007f9da1a0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.259456][ T9287] RAX: ffffffffffffffda RBX: 00007f9da0d75fa0 RCX: 00007f9da0b85d29 [ 175.267473][ T9287] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 175.275494][ T9287] RBP: 00007f9da1a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 175.283510][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.291528][ T9287] R13: 0000000000000000 R14: 00007f9da0d75fa0 R15: 00007ffc2a5105c8 [ 175.299548][ T9287] [ 175.399785][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.480676][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.491194][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.519086][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.630744][ T9301] team0: Device gtp0 is of different type [ 175.911830][ T5832] hid-generic 0005:7FFF:0008.0005: unknown main item tag 0x0 [ 175.943336][ T5832] hid-generic 0005:7FFF:0008.0005: unknown main item tag 0x0 [ 175.983604][ T5832] hid-generic 0005:7FFF:0008.0005: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 176.040915][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.049911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.089255][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.239970][ T9321] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1080'. [ 176.256194][ T9316] netlink: 'syz.4.1079': attribute type 10 has an invalid length. [ 176.264639][ T9316] team0: left promiscuous mode [ 176.269570][ T9316] team_slave_0: left promiscuous mode [ 176.275213][ T9316] team_slave_1: left promiscuous mode [ 176.303173][ T9316] batman_adv: batadv0: Adding interface: team0 [ 176.310668][ T9316] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.342389][ T9316] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 176.692443][ T9337] tun0: tun_chr_ioctl cmd 1074025675 [ 176.744343][ T9337] tun0: persist enabled [ 176.760874][ T9337] tun0: tun_chr_ioctl cmd 1074025675 [ 176.766228][ T9337] tun0: persist enabled [ 176.778432][ T9337] tipc: Enabled bearer , priority 0 [ 176.835402][ T9337] syzkaller0: entered promiscuous mode [ 176.852183][ T9337] syzkaller0: entered allmulticast mode [ 176.865075][ T9337] tipc: Resetting bearer [ 176.883981][ T9342] vlan3: entered promiscuous mode [ 176.893857][ T9342] vlan3: entered allmulticast mode [ 176.915337][ T9342] bond0: entered allmulticast mode [ 176.923257][ T9342] bond_slave_0: entered allmulticast mode [ 176.930389][ T9342] bond_slave_1: entered allmulticast mode [ 176.936513][ T9342] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 176.957347][ T9342] bond0: left allmulticast mode [ 176.962800][ T9342] bond_slave_0: left allmulticast mode [ 176.968499][ T9342] bond_slave_1: left allmulticast mode [ 176.976137][ T9342] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 177.058262][ T9334] tipc: Resetting bearer [ 177.173586][ T9347] Cannot find add_set index 0 as target [ 177.571090][ T9359] FAULT_INJECTION: forcing a failure. [ 177.571090][ T9359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.591563][ T9359] CPU: 0 UID: 0 PID: 9359 Comm: syz.2.1094 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 177.602400][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.612492][ T9359] Call Trace: [ 177.615808][ T9359] [ 177.618769][ T9359] dump_stack_lvl+0x241/0x360 [ 177.623502][ T9359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.628750][ T9359] ? __pfx__printk+0x10/0x10 [ 177.633573][ T9359] ? __pfx_lock_release+0x10/0x10 [ 177.638830][ T9359] should_fail_ex+0x3b0/0x4e0 [ 177.643824][ T9359] _copy_from_user+0x2f/0xc0 [ 177.648811][ T9359] copy_msghdr_from_user+0xae/0x680 [ 177.654122][ T9359] ? __pfx___might_resched+0x10/0x10 [ 177.659500][ T9359] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.665654][ T9359] ? __fget_files+0x2a/0x410 [ 177.670805][ T9359] ? __sys_sendmmsg+0x392/0x720 [ 177.675762][ T9359] ? __might_fault+0xaa/0x120 [ 177.680540][ T9359] __sys_sendmmsg+0x32b/0x720 [ 177.685335][ T9359] ? __pfx___sys_sendmmsg+0x10/0x10 [ 177.690664][ T9359] ? __pfx_lock_release+0x10/0x10 [ 177.695800][ T9359] ? kstrtouint_from_user+0x128/0x190 [ 177.701300][ T9359] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 177.707223][ T9359] ? ksys_write+0x22a/0x2b0 [ 177.711829][ T9359] ? __pfx_lock_release+0x10/0x10 [ 177.716892][ T9359] ? vfs_write+0x730/0xd30 [ 177.721335][ T9359] ? __mutex_unlock_slowpath+0x21e/0x790 [ 177.726996][ T9359] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.733083][ T9359] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.739452][ T9359] ? do_syscall_64+0x100/0x230 [ 177.744339][ T9359] __x64_sys_sendmmsg+0xa0/0xb0 [ 177.749313][ T9359] do_syscall_64+0xf3/0x230 [ 177.753827][ T9359] ? clear_bhb_loop+0x35/0x90 [ 177.758510][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.764412][ T9359] RIP: 0033:0x7f9da0b85d29 [ 177.768826][ T9359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.788464][ T9359] RSP: 002b:00007f9da1a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 177.796888][ T9359] RAX: ffffffffffffffda RBX: 00007f9da0d75fa0 RCX: 00007f9da0b85d29 [ 177.804895][ T9359] RDX: 0000000004000190 RSI: 0000000020000180 RDI: 0000000000000003 [ 177.812877][ T9359] RBP: 00007f9da1a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 177.820853][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.828922][ T9359] R13: 0000000000000000 R14: 00007f9da0d75fa0 R15: 00007ffc2a5105c8 [ 177.836904][ T9359] [ 178.242252][ T9371] xt_l2tp: missing protocol rule (udp|l2tpip) [ 178.613425][ T975] net_ratelimit: 1038 callbacks suppressed [ 178.613455][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.571737][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.843257][ T9334] tipc: Disabling bearer [ 179.857511][ T9361] erspan0 speed is unknown, defaulting to 1000 [ 180.227866][ T9385] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 180.233931][ T9392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.245859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.375730][ T9397] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1104'. [ 180.485018][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1107'. [ 180.603170][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.826740][ T9404] erspan0 speed is unknown, defaulting to 1000 [ 181.077138][ T9409] erspan0 speed is unknown, defaulting to 1000 [ 181.226699][ T9417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1112'. [ 181.243671][ T8434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.252690][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.264807][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1112'. [ 181.278772][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.551415][ T9427] FAULT_INJECTION: forcing a failure. [ 181.551415][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 181.565213][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.4.1117 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 181.575938][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 181.586024][ T9427] Call Trace: [ 181.589311][ T9427] [ 181.592341][ T9427] dump_stack_lvl+0x241/0x360 [ 181.597253][ T9427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.602824][ T9427] ? __pfx__printk+0x10/0x10 [ 181.607596][ T9427] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 181.613609][ T9427] ? __pfx___might_resched+0x10/0x10 [ 181.618917][ T9427] should_fail_ex+0x3b0/0x4e0 [ 181.623888][ T9427] should_failslab+0xac/0x100 [ 181.628590][ T9427] kmem_cache_alloc_node_noprof+0x77/0x380 [ 181.634422][ T9427] ? __alloc_skb+0x1c3/0x440 [ 181.639018][ T9427] __alloc_skb+0x1c3/0x440 [ 181.643441][ T9427] ? __pfx___alloc_skb+0x10/0x10 [ 181.648381][ T9427] ? netlink_ack_tlv_len+0x6e/0x200 [ 181.653591][ T9427] netlink_ack+0x145/0xa50 [ 181.658094][ T9427] ? __sock_sendmsg+0x221/0x270 [ 181.662971][ T9427] ? ____sys_sendmsg+0x52a/0x7e0 [ 181.667937][ T9427] netlink_rcv_skb+0x262/0x430 [ 181.672756][ T9427] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 181.678272][ T9427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.683593][ T9427] ? apparmor_capable+0x13b/0x1b0 [ 181.688632][ T9427] ? bpf_lsm_capable+0x9/0x10 [ 181.693320][ T9427] ? security_capable+0x7e/0x2d0 [ 181.698269][ T9427] nfnetlink_rcv+0x297/0x2ab0 [ 181.702995][ T9427] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 181.709493][ T9427] ? __dev_queue_xmit+0x2f4/0x3f50 [ 181.715407][ T9427] ? __dev_queue_xmit+0x1775/0x3f50 [ 181.720811][ T9427] ? kasan_save_track+0x51/0x80 [ 181.726750][ T9427] ? ____sys_sendmsg+0x52a/0x7e0 [ 181.731984][ T9427] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 181.737153][ T9427] ? __dev_queue_xmit+0x2f4/0x3f50 [ 181.742381][ T9427] ? __pfx___dev_queue_xmit+0x10/0x10 [ 181.747966][ T9427] ? ref_tracker_free+0x643/0x7e0 [ 181.753020][ T9427] ? __asan_memcpy+0x40/0x70 [ 181.757611][ T9427] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.763011][ T9427] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.768385][ T9427] ? skb_clone+0x240/0x390 [ 181.772806][ T9427] ? __pfx_lock_release+0x10/0x10 [ 181.777834][ T9427] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 181.783317][ T9427] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.788524][ T9427] netlink_unicast+0x7f6/0x990 [ 181.793321][ T9427] ? __pfx_netlink_unicast+0x10/0x10 [ 181.798617][ T9427] ? __virt_addr_valid+0x45f/0x530 [ 181.803728][ T9427] ? __phys_addr_symbol+0x2f/0x70 [ 181.808753][ T9427] ? __check_object_size+0x47a/0x730 [ 181.814045][ T9427] netlink_sendmsg+0x8e4/0xcb0 [ 181.818961][ T9427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.824307][ T9427] ? aa_sock_msg_perm+0x91/0x160 [ 181.829293][ T9427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.835020][ T9427] __sock_sendmsg+0x221/0x270 [ 181.842177][ T9427] ____sys_sendmsg+0x52a/0x7e0 [ 181.847077][ T9427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.853173][ T9427] ? __fget_files+0x2a/0x410 [ 181.857944][ T9427] ? __fget_files+0x2a/0x410 [ 181.862843][ T9427] __sys_sendmsg+0x269/0x350 [ 181.867572][ T9427] ? __pfx_lock_release+0x10/0x10 [ 181.872870][ T9427] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.878027][ T9427] ? __pfx_vfs_write+0x10/0x10 [ 181.883301][ T9427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.890289][ T9427] ? do_syscall_64+0x100/0x230 [ 181.896324][ T9427] ? do_syscall_64+0xb6/0x230 [ 181.901909][ T9427] do_syscall_64+0xf3/0x230 [ 181.906448][ T9427] ? clear_bhb_loop+0x35/0x90 [ 181.911134][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.917127][ T9427] RIP: 0033:0x7f39c8b85d29 [ 181.921559][ T9427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.941329][ T9427] RSP: 002b:00007f39c9a3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.951146][ T9427] RAX: ffffffffffffffda RBX: 00007f39c8d75fa0 RCX: 00007f39c8b85d29 [ 181.959381][ T9427] RDX: 00000000040c0080 RSI: 00000000200002c0 RDI: 0000000000000003 [ 181.967808][ T9427] RBP: 00007f39c9a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 181.975803][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.983887][ T9427] R13: 0000000000000000 R14: 00007f39c8d75fa0 R15: 00007ffea137a2e8 [ 181.992259][ T9427] [ 182.007985][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.139543][ T9429] vlan3: entered promiscuous mode [ 182.321706][ T9431] netlink: 'syz.1.1121': attribute type 10 has an invalid length. [ 182.440487][ T9443] FAULT_INJECTION: forcing a failure. [ 182.440487][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 182.440919][ T9441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.460479][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.3.1124 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 182.472500][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 182.482762][ T9443] Call Trace: [ 182.486061][ T9443] [ 182.488992][ T9443] dump_stack_lvl+0x241/0x360 [ 182.493696][ T9443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.498922][ T9443] ? __pfx__printk+0x10/0x10 [ 182.503565][ T9443] ? __kmalloc_cache_noprof+0x48/0x390 [ 182.509575][ T9443] ? __pfx___might_resched+0x10/0x10 [ 182.515064][ T9443] should_fail_ex+0x3b0/0x4e0 [ 182.519961][ T9443] should_failslab+0xac/0x100 [ 182.525022][ T9443] __kmalloc_cache_noprof+0x70/0x390 [ 182.531389][ T9443] ? vlan_vid_add+0x147/0x760 [ 182.536181][ T9443] vlan_vid_add+0x147/0x760 [ 182.541046][ T9443] register_vlan_dev+0x9f/0x810 [ 182.545914][ T9443] ? vlan_changelink+0x4c8/0x570 [ 182.551459][ T9443] ? vlan_check_real_dev+0x10c/0x320 [ 182.557138][ T9443] vlan_newlink+0x476/0x5c0 [ 182.561686][ T9443] ? __pfx_vlan_newlink+0x10/0x10 [ 182.566822][ T9443] rtnl_newlink_create+0x2ee/0xa40 [ 182.572150][ T9443] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 182.577793][ T9443] ? ns_capable+0x8a/0xf0 [ 182.582246][ T9443] rtnl_newlink+0x1c7e/0x2210 [ 182.586976][ T9443] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.592113][ T9443] ? __pfx_validate_chain+0x10/0x10 [ 182.597345][ T9443] ? validate_chain+0x11e/0x5920 [ 182.602409][ T9443] ? __pfx_lock_acquire+0x10/0x10 [ 182.607455][ T9443] ? __pfx_lock_release+0x10/0x10 [ 182.612493][ T9443] ? __pfx_validate_chain+0x10/0x10 [ 182.617699][ T9443] ? mark_lock+0x9a/0x360 [ 182.622041][ T9443] ? __lock_acquire+0x1397/0x2100 [ 182.627100][ T9443] ? __pfx_lock_release+0x10/0x10 [ 182.632138][ T9443] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.637185][ T9443] rtnetlink_rcv_msg+0x791/0xcf0 [ 182.642133][ T9443] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 182.647251][ T9443] ? __lock_acquire+0x1397/0x2100 [ 182.652292][ T9443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.657766][ T9443] netlink_rcv_skb+0x1e3/0x430 [ 182.662533][ T9443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.667998][ T9443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.673308][ T9443] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.678510][ T9443] netlink_unicast+0x7f6/0x990 [ 182.683287][ T9443] ? __pfx_netlink_unicast+0x10/0x10 [ 182.688577][ T9443] ? __virt_addr_valid+0x45f/0x530 [ 182.693695][ T9443] ? __phys_addr_symbol+0x2f/0x70 [ 182.698721][ T9443] ? __check_object_size+0x47a/0x730 [ 182.704014][ T9443] netlink_sendmsg+0x8e4/0xcb0 [ 182.708967][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.714296][ T9443] ? aa_sock_msg_perm+0x91/0x160 [ 182.719276][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.724674][ T9443] __sock_sendmsg+0x221/0x270 [ 182.729452][ T9443] ____sys_sendmsg+0x52a/0x7e0 [ 182.734400][ T9443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.739696][ T9443] ? __fget_files+0x2a/0x410 [ 182.744293][ T9443] ? __fget_files+0x2a/0x410 [ 182.748891][ T9443] __sys_sendmsg+0x269/0x350 [ 182.753489][ T9443] ? __pfx_lock_release+0x10/0x10 [ 182.758518][ T9443] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.763645][ T9443] ? __pfx_vfs_write+0x10/0x10 [ 182.768427][ T9443] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.774763][ T9443] ? do_syscall_64+0x100/0x230 [ 182.779551][ T9443] ? do_syscall_64+0xb6/0x230 [ 182.784754][ T9443] do_syscall_64+0xf3/0x230 [ 182.789269][ T9443] ? clear_bhb_loop+0x35/0x90 [ 182.793950][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.799869][ T9443] RIP: 0033:0x7fb5fdd85d29 [ 182.804324][ T9443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.824396][ T9443] RSP: 002b:00007fb5fbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.832820][ T9443] RAX: ffffffffffffffda RBX: 00007fb5fdf75fa0 RCX: 00007fb5fdd85d29 [ 182.840793][ T9443] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 182.848790][ T9443] RBP: 00007fb5fbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.856859][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.865446][ T9443] R13: 0000000000000000 R14: 00007fb5fdf75fa0 R15: 00007fffaf45df58 [ 182.874158][ T9443] [ 182.986849][ T9446] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1121'. [ 183.113692][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 183.172725][ T9455] tipc: Resetting bearer [ 183.264282][ T9455] tipc: Disabling bearer [ 183.345065][ T9453] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 183.508662][ T9463] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1127'. [ 183.625449][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 183.887503][ T9479] erspan0 speed is unknown, defaulting to 1000 [ 183.895244][ T9481] ipt_rpfilter: unknown options [ 184.119839][ T57] net_ratelimit: 2 callbacks suppressed [ 184.119859][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.269211][ T9490] erspan0 speed is unknown, defaulting to 1000 [ 184.359367][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.419613][ T9488] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 184.448585][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.489831][ T9498] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 184.551046][ T9498] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 184.580178][ T9503] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1139'. [ 184.587082][ T9504] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 184.609639][ T9501] Cannot find add_set index 32768 as target [ 184.616994][ T9498] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 184.670784][ T9507] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.1143'. [ 184.715253][ T9507] netlink: zone id is out of range [ 184.733783][ T9504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.787736][ T9507] netlink: zone id is out of range [ 184.834599][ T9507] netlink: zone id is out of range [ 184.852468][ T9507] netlink: zone id is out of range [ 184.863900][ T9507] netlink: zone id is out of range [ 184.871607][ T9507] netlink: zone id is out of range [ 184.900079][ T9507] netlink: zone id is out of range [ 184.929289][ T9500] erspan0 speed is unknown, defaulting to 1000 [ 185.192917][ T9514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 185.549048][ T9531] sctp: [Deprecated]: syz.4.1151 (pid 9531) Use of int in max_burst socket option deprecated. [ 185.549048][ T9531] Use struct sctp_assoc_value instead [ 185.565387][ T9530] sctp: [Deprecated]: syz.4.1151 (pid 9530) Use of int in max_burst socket option deprecated. [ 185.565387][ T9530] Use struct sctp_assoc_value instead [ 185.937952][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1155'. [ 186.123302][ T9543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.246733][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.254292][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.329238][ T9548] netlink: 'syz.3.1157': attribute type 10 has an invalid length. [ 186.484456][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.512197][ T9555] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1157'. [ 186.529340][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.624825][ T9547] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.634169][ T9547] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.645155][ T9547] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.654501][ T9547] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.722612][ T9547] ipvlan2: left promiscuous mode [ 186.792564][ T9543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.820459][ T9554] vlan3: entered promiscuous mode [ 186.826372][ T9554] vlan3: entered allmulticast mode [ 186.839212][ T9554] bond0: entered allmulticast mode [ 186.849465][ T9554] bond_slave_0: entered allmulticast mode [ 186.855585][ T9554] bond_slave_1: entered allmulticast mode [ 186.879017][ T9554] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 186.891551][ T9554] bond0: left allmulticast mode [ 186.897147][ T9554] bond_slave_0: left allmulticast mode [ 186.906220][ T9554] bond_slave_1: left allmulticast mode [ 186.917023][ T9554] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 186.972067][ T9543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.162512][ T9543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.347071][ T9543] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.367691][ T9543] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.384111][ T9576] netlink: 'syz.1.1166': attribute type 9 has an invalid length. [ 187.387458][ T9543] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.408239][ T9543] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.511269][ T9579] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1169'. [ 187.591371][ T9584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.613516][ T9584] netlink: 'syz.0.1171': attribute type 10 has an invalid length. [ 187.676723][ T9584] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.709968][ T9589] xt_l2tp: missing protocol rule (udp|l2tpip) [ 187.725655][ T9584] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.798877][ T9584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.844842][ T9584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.081811][ T9595] netlink: 'syz.3.1174': attribute type 10 has an invalid length. [ 188.205323][ T9599] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1174'. [ 188.436412][ T9602] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1176'. [ 188.717602][ T9612] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 188.727432][ T9612] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1179'. [ 188.770346][ T9612] veth0_vlan: entered allmulticast mode [ 188.781045][ T9612] veth0_vlan: left promiscuous mode [ 188.788413][ T9612] veth0_vlan: entered promiscuous mode [ 188.987621][ T9620] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.276382][ T9638] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1187'. [ 189.320269][ T57] net_ratelimit: 39 callbacks suppressed [ 189.320290][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.561475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.676550][ T9648] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 189.814337][ T9656] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1193'. [ 189.846152][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.854599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.962352][ T9662] xt_l2tp: missing protocol rule (udp|l2tpip) [ 190.126504][ T9666] netlink: 'syz.2.1199': attribute type 10 has an invalid length. [ 190.140718][ T9666] team0: left promiscuous mode [ 190.145838][ T9666] team_slave_0: left promiscuous mode [ 190.157364][ T9666] team_slave_1: left promiscuous mode [ 190.241212][ T9675] vlan2: entered promiscuous mode [ 190.246326][ T9675] netpci0: entered promiscuous mode [ 190.256408][ T9675] netpci0: left promiscuous mode [ 190.358965][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.448151][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 190.462850][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.491277][ T9679] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 190.499072][ T9679] macvlan3: entered allmulticast mode [ 190.505626][ T9679] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 190.515988][ T9679] bridge2: port 1(macvlan3) entered blocking state [ 190.529251][ T9679] bridge2: port 1(macvlan3) entered disabled state [ 190.544922][ T9679] macvlan3: entered promiscuous mode [ 190.614565][ T9682] vlan2: entered allmulticast mode [ 190.621728][ T9682] bond0: entered allmulticast mode [ 190.627071][ T9682] bond_slave_0: entered allmulticast mode [ 190.637536][ T9682] bond_slave_1: entered allmulticast mode [ 190.651772][ T9682] bond0: left allmulticast mode [ 190.657883][ T9682] bond_slave_0: left allmulticast mode [ 190.666082][ T9682] bond_slave_1: left allmulticast mode [ 190.828130][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 191.058373][ T9584] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.095320][ T9584] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.113796][ T9584] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.129533][ T9584] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.186334][ T9698] erspan0 speed is unknown, defaulting to 1000 [ 191.292471][ T9700] netlink: 'syz.4.1215': attribute type 10 has an invalid length. [ 191.399513][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.418252][ T9716] __nla_validate_parse: 1 callbacks suppressed [ 191.418273][ T9716] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1215'. [ 191.458091][ T9715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1217'. [ 191.647279][ T9725] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1219'. [ 191.656595][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 191.656697][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 191.656730][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 191.736281][ T9724] erspan0 speed is unknown, defaulting to 1000 [ 191.877621][ T9728] netlink: 'syz.1.1221': attribute type 10 has an invalid length. [ 192.260086][ T9732] xt_cgroup: invalid path, errno=-2 [ 192.380017][ T9720] delete_channel: no stack [ 192.439138][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.805274][ T9749] tipc: Started in network mode [ 192.816319][ T9749] tipc: Node identity 080211000001, cluster identity 4711 [ 192.849180][ T9749] tipc: Enabled bearer , priority 0 [ 192.861223][ T9749] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 192.869124][ T9749] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 192.878165][ T9749] tipc: Resetting bearer [ 193.070622][ T9763] syz.4.1236: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 193.124107][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: syz.4.1236 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 193.134849][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 193.145115][ T9763] Call Trace: [ 193.148419][ T9763] [ 193.151382][ T9763] dump_stack_lvl+0x241/0x360 [ 193.156107][ T9763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.158967][ T9769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1239'. [ 193.161323][ T9763] ? __pfx__printk+0x10/0x10 [ 193.175721][ T9763] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 193.182177][ T9763] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 193.188694][ T9763] warn_alloc+0x278/0x410 [ 193.193028][ T9763] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 193.199117][ T9763] ? __pfx_warn_alloc+0x10/0x10 [ 193.204001][ T9763] ? kasan_save_track+0x3f/0x80 [ 193.208864][ T9763] ? __kasan_kmalloc+0x98/0xb0 [ 193.213640][ T9763] ? xsk_setsockopt+0x598/0x950 [ 193.218492][ T9763] ? do_sock_setsockopt+0x3af/0x720 [ 193.223705][ T9763] ? __x64_sys_setsockopt+0x1ee/0x280 [ 193.229089][ T9763] ? do_syscall_64+0xf3/0x230 [ 193.233797][ T9763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.239903][ T9763] __vmalloc_node_range_noprof+0x126/0x1380 [ 193.245827][ T9763] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.252158][ T9763] ? __kasan_kmalloc+0x98/0xb0 [ 193.256944][ T9763] vmalloc_user_noprof+0x74/0x80 [ 193.261894][ T9763] ? xskq_create+0xb6/0x170 [ 193.266460][ T9763] xskq_create+0xb6/0x170 [ 193.270821][ T9763] xsk_init_queue+0xa1/0x100 [ 193.275482][ T9763] xsk_setsockopt+0x598/0x950 [ 193.280260][ T9763] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.285459][ T9763] ? __pfx_aa_sk_perm+0x10/0x10 [ 193.290324][ T9763] ? __pfx_lock_acquire+0x10/0x10 [ 193.295355][ T9763] ? aa_sock_opt_perm+0x79/0x120 [ 193.300301][ T9763] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.305502][ T9763] do_sock_setsockopt+0x3af/0x720 [ 193.310538][ T9763] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 193.316128][ T9763] ? __fget_files+0x395/0x410 [ 193.321648][ T9763] ? __fget_files+0x2a/0x410 [ 193.326558][ T9763] __x64_sys_setsockopt+0x1ee/0x280 [ 193.331787][ T9763] do_syscall_64+0xf3/0x230 [ 193.336340][ T9763] ? clear_bhb_loop+0x35/0x90 [ 193.342555][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.351271][ T9763] RIP: 0033:0x7f39c8b85d29 [ 193.356272][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.378256][ T9763] RSP: 002b:00007f39c9a3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.387647][ T9763] RAX: ffffffffffffffda RBX: 00007f39c8d75fa0 RCX: 00007f39c8b85d29 [ 193.395836][ T9763] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 193.404362][ T9763] RBP: 00007f39c8c01b08 R08: 0000000000000004 R09: 0000000000000000 [ 193.413137][ T9763] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 193.421285][ T9763] R13: 0000000000000000 R14: 00007f39c8d75fa0 R15: 00007ffea137a2e8 [ 193.429381][ T9763] [ 193.439905][ T9763] Mem-Info: [ 193.444099][ T9763] active_anon:8041 inactive_anon:0 isolated_anon:0 [ 193.444099][ T9763] active_file:1663 inactive_file:38301 isolated_file:0 [ 193.444099][ T9763] unevictable:768 dirty:264 writeback:25 [ 193.444099][ T9763] slab_reclaimable:10737 slab_unreclaimable:101003 [ 193.444099][ T9763] mapped:29095 shmem:1471 pagetables:843 [ 193.444099][ T9763] sec_pagetables:0 bounce:0 [ 193.444099][ T9763] kernel_misc_reclaimable:0 [ 193.444099][ T9763] free:1335305 free_pcp:634 free_cma:0 [ 193.490283][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.513467][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.528897][ T9763] Node 0 active_anon:32164kB inactive_anon:0kB active_file:6652kB inactive_file:153132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116408kB dirty:968kB writeback:172kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11600kB pagetables:3396kB sec_pagetables:0kB all_unreclaimable? no [ 193.551018][ T9776] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1240'. [ 193.580084][ T9763] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 193.611091][ T9763] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.641992][ T9763] lowmem_reserve[]: 0 2465 2466 0 0 [ 193.647716][ T9763] Node 0 DMA32 free:1422988kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:32228kB inactive_anon:0kB active_file:6652kB inactive_file:152292kB unevictable:1536kB writepending:1040kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:2336kB local_pcp:980kB free_cma:0kB [ 193.683371][ T9763] lowmem_reserve[]: 0 0 0 0 0 [ 193.693076][ T9763] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.722381][ T9763] lowmem_reserve[]: 0 0 0 0 0 [ 193.727480][ T9763] Node 1 Normal free:3903656kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.782699][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'. [ 193.801304][ T9763] lowmem_reserve[]: 0 0 0 0 0 [ 193.806113][ T9763] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.814906][ T9780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1242'. [ 193.825023][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'. [ 193.843957][ T9763] Node 0 DMA32: 856*4kB (UM) 440*8kB (UME) 197*16kB (UME) 500*32kB (UME) 590*64kB (UME) 194*128kB (UME) 69*256kB (UM) 35*512kB (UME) 29*1024kB (UME) 23*2048kB (UM) 299*4096kB (UM) = 1425776kB [ 193.863692][ T5882] tipc: Node number set to 134418688 [ 193.888498][ T9782] xt_l2tp: missing protocol rule (udp|l2tpip) [ 193.910341][ T9763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 193.938731][ T9763] Node 1 Normal: 214*4kB (UE) 60*8kB (UME) 51*16kB (UME) 218*32kB (UME) 104*64kB (UME) 36*128kB (UME) 15*256kB (UM) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3903656kB [ 193.984078][ T9763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.993677][ T9789] xt_l2tp: missing protocol rule (udp|l2tpip) [ 194.006540][ T9763] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.024607][ T9763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.035126][ T9763] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.080623][ T9763] 41413 total pagecache pages [ 194.085543][ T9763] 0 pages in swap cache [ 194.129080][ T9763] Free swap = 124996kB [ 194.141530][ T9763] Total swap = 124996kB [ 194.156774][ T9792] erspan0 speed is unknown, defaulting to 1000 [ 194.163169][ T9763] 2097051 pages RAM [ 194.167019][ T9763] 0 pages HighMem/MovableOnly [ 194.183833][ T9763] 427013 pages reserved [ 194.198284][ T9763] 0 pages cma reserved [ 194.330715][ T9799] SET target dimension over the limit! [ 194.372751][ T9801] vlan3: entered promiscuous mode [ 194.392289][ T9801] vlan3: entered allmulticast mode [ 194.519143][ T5832] net_ratelimit: 4 callbacks suppressed [ 194.519164][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.571279][ T9808] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1251'. [ 194.606994][ T9779] delete_channel: no stack [ 194.622217][ T9808] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 194.683334][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.686795][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.698322][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.876203][ T9823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1255'. [ 195.216648][ T9792] netlink: 'syz.2.1245': attribute type 4 has an invalid length. [ 195.565899][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.837801][ T9848] macvlan4: entered promiscuous mode [ 195.847330][ T9848] batadv0: entered promiscuous mode [ 195.856997][ T9848] macvlan4: entered allmulticast mode [ 195.867603][ T9848] batadv0: entered allmulticast mode [ 195.878072][ T9848] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 195.904323][ T9848] batadv0: left allmulticast mode [ 195.912615][ T9848] batadv0: left promiscuous mode [ 195.997813][ T9854] erspan0 speed is unknown, defaulting to 1000 [ 196.424848][ T9872] __nla_validate_parse: 9 callbacks suppressed [ 196.424868][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1275'. [ 196.442017][ T9839] delete_channel: no stack [ 196.553074][ T9877] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 196.606203][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.881564][ T9891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.890208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.907819][ T9891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.917378][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.941632][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.109553][ T9900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1288'. [ 197.144417][ T9905] FAULT_INJECTION: forcing a failure. [ 197.144417][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 197.158916][ T9905] CPU: 0 UID: 0 PID: 9905 Comm: syz.2.1287 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 197.171073][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 197.182063][ T9905] Call Trace: [ 197.185386][ T9905] [ 197.188838][ T9905] dump_stack_lvl+0x241/0x360 [ 197.193553][ T9905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.198758][ T9905] ? __pfx__printk+0x10/0x10 [ 197.203356][ T9905] ? __kmalloc_cache_noprof+0x48/0x390 [ 197.208841][ T9905] ? __pfx___might_resched+0x10/0x10 [ 197.214160][ T9905] should_fail_ex+0x3b0/0x4e0 [ 197.218880][ T9905] should_failslab+0xac/0x100 [ 197.223608][ T9905] __kmalloc_cache_noprof+0x70/0x390 [ 197.228911][ T9905] ? vlan_vid_add+0x31c/0x760 [ 197.233612][ T9905] vlan_vid_add+0x31c/0x760 [ 197.238144][ T9905] register_vlan_dev+0x9f/0x810 [ 197.243041][ T9905] ? vlan_changelink+0x4c8/0x570 [ 197.248011][ T9905] ? vlan_check_real_dev+0x10c/0x320 [ 197.253642][ T9905] vlan_newlink+0x476/0x5c0 [ 197.258162][ T9905] ? __pfx_vlan_newlink+0x10/0x10 [ 197.263301][ T9905] rtnl_newlink_create+0x2ee/0xa40 [ 197.268449][ T9905] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 197.274120][ T9905] ? ns_capable+0x8a/0xf0 [ 197.278476][ T9905] rtnl_newlink+0x1c7e/0x2210 [ 197.283184][ T9905] ? __pfx_rtnl_newlink+0x10/0x10 [ 197.288219][ T9905] ? __netlink_deliver_tap+0x56b/0x7f0 [ 197.293710][ T9905] ? __pfx_validate_chain+0x10/0x10 [ 197.298938][ T9905] ? __pfx_validate_chain+0x10/0x10 [ 197.304148][ T9905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.310287][ T9905] ? __pfx___schedule+0x10/0x10 [ 197.315343][ T9905] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.321361][ T9905] ? preempt_schedule+0xe1/0xf0 [ 197.326231][ T9905] ? preempt_schedule_common+0x84/0xd0 [ 197.331723][ T9905] ? mark_lock+0x9a/0x360 [ 197.336086][ T9905] ? __lock_acquire+0x1397/0x2100 [ 197.341170][ T9905] ? __pfx_lock_release+0x10/0x10 [ 197.346243][ T9905] ? __pfx_rtnl_newlink+0x10/0x10 [ 197.351305][ T9905] rtnetlink_rcv_msg+0x791/0xcf0 [ 197.356252][ T9905] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 197.361373][ T9905] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 197.367963][ T9905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.373617][ T9905] netlink_rcv_skb+0x1e3/0x430 [ 197.378390][ T9905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.383956][ T9905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.389258][ T9905] ? __rcu_read_unlock+0xa1/0x110 [ 197.394295][ T9905] netlink_unicast+0x7f6/0x990 [ 197.399083][ T9905] ? __pfx_netlink_unicast+0x10/0x10 [ 197.404472][ T9905] ? __virt_addr_valid+0x45f/0x530 [ 197.409585][ T9905] ? __phys_addr_symbol+0x2f/0x70 [ 197.414607][ T9905] ? __check_object_size+0x47a/0x730 [ 197.420626][ T9905] netlink_sendmsg+0x8e4/0xcb0 [ 197.426059][ T9905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.431454][ T9905] ? aa_sock_msg_perm+0x91/0x160 [ 197.436401][ T9905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.441686][ T9905] __sock_sendmsg+0x221/0x270 [ 197.446365][ T9905] ____sys_sendmsg+0x52a/0x7e0 [ 197.451136][ T9905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.456448][ T9905] ? __fget_files+0x2a/0x410 [ 197.461052][ T9905] ? __fget_files+0x2a/0x410 [ 197.465691][ T9905] __sys_sendmsg+0x269/0x350 [ 197.470303][ T9905] ? __pfx_lock_release+0x10/0x10 [ 197.475334][ T9905] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.480464][ T9905] ? __pfx_vfs_write+0x10/0x10 [ 197.485250][ T9905] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.491579][ T9905] ? do_syscall_64+0x100/0x230 [ 197.496440][ T9905] ? do_syscall_64+0xb6/0x230 [ 197.501134][ T9905] do_syscall_64+0xf3/0x230 [ 197.505672][ T9905] ? clear_bhb_loop+0x35/0x90 [ 197.510349][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.516249][ T9905] RIP: 0033:0x7f9da0b85d29 [ 197.521627][ T9905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.541788][ T9905] RSP: 002b:00007f9da1a0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.550571][ T9905] RAX: ffffffffffffffda RBX: 00007f9da0d75fa0 RCX: 00007f9da0b85d29 [ 197.558652][ T9905] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 197.566751][ T9905] RBP: 00007f9da1a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 197.574725][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.582770][ T9905] R13: 0000000000000000 R14: 00007f9da0d75fa0 R15: 00007ffc2a5105c8 [ 197.590867][ T9905] [ 197.622052][ T9902] netlink: 'syz.1.1286': attribute type 11 has an invalid length. [ 197.796546][ T9915] netlink: 'syz.3.1291': attribute type 9 has an invalid length. [ 197.820112][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 197.853268][ T9915] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 197.938323][ T9899] delete_channel: no stack [ 197.953073][ T9917] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 197.972019][ T9917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1292'. [ 197.991227][ T9917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'. [ 198.018078][ T9917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1292'. [ 198.032407][ T9917] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1292'. [ 198.456712][ T9948] team0: Device gtp0 is of different type [ 198.676119][ T9958] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1307'. [ 198.711094][ T9959] erspan0 speed is unknown, defaulting to 1000 [ 198.838276][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 198.847320][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 198.881819][ T9964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1310'. [ 199.091719][ T9970] hsr0: left promiscuous mode [ 199.123155][ T9970] hsr0: entered promiscuous mode [ 199.128270][ T9970] vlan2: entered promiscuous mode [ 199.417559][ T9981] xt_bpf: check failed: parse error [ 199.459594][ T9983] netlink: 'syz.1.1316': attribute type 30 has an invalid length. [ 199.670615][ T9989] FAULT_INJECTION: forcing a failure. [ 199.670615][ T9989] name failslab, interval 1, probability 0, space 0, times 0 [ 199.719176][ T5832] net_ratelimit: 8 callbacks suppressed [ 199.719196][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.729132][ T9989] CPU: 0 UID: 0 PID: 9989 Comm: syz.1.1320 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 199.744311][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 199.746932][ T9991] netlink: 'syz.4.1321': attribute type 3 has an invalid length. [ 199.754546][ T9989] Call Trace: [ 199.754563][ T9989] [ 199.754572][ T9989] dump_stack_lvl+0x241/0x360 [ 199.754604][ T9989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.754628][ T9989] ? __pfx__printk+0x10/0x10 [ 199.783604][ T9989] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 199.790318][ T9989] ? __pfx___might_resched+0x10/0x10 [ 199.795644][ T9989] should_fail_ex+0x3b0/0x4e0 [ 199.800367][ T9989] should_failslab+0xac/0x100 [ 199.805095][ T9989] kmem_cache_alloc_node_noprof+0x77/0x380 [ 199.810951][ T9989] ? __alloc_skb+0x1c3/0x440 [ 199.815842][ T9989] __alloc_skb+0x1c3/0x440 [ 199.820299][ T9989] ? __pfx_lock_release+0x10/0x10 [ 199.825362][ T9989] ? __pfx___alloc_skb+0x10/0x10 [ 199.830788][ T9989] ? notifier_call_chain+0x3cc/0x3f0 [ 199.836118][ T9989] ? __pfx_fib4_rule_nlmsg_payload+0x10/0x10 [ 199.842136][ T9989] notify_rule_change+0xb1/0x210 [ 199.847130][ T9989] fib_nl_newrule+0x1ad4/0x1d30 [ 199.852048][ T9989] ? __pfx_fib_nl_newrule+0x10/0x10 [ 199.857295][ T9989] ? rcu_is_watching+0x15/0xb0 [ 199.862096][ T9989] ? trace_contention_end+0x3c/0x120 [ 199.867411][ T9989] ? __mutex_lock+0x37f/0xee0 [ 199.872151][ T9989] ? __pfx_fib_nl_newrule+0x10/0x10 [ 199.877383][ T9989] rtnetlink_rcv_msg+0x73f/0xcf0 [ 199.882353][ T9989] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 199.887506][ T9989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.893005][ T9989] ? ref_tracker_free+0x643/0x7e0 [ 199.898070][ T9989] netlink_rcv_skb+0x1e3/0x430 [ 199.902864][ T9989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.908362][ T9989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.913704][ T9989] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.918971][ T9989] netlink_unicast+0x7f6/0x990 [ 199.923780][ T9989] ? __pfx_netlink_unicast+0x10/0x10 [ 199.929103][ T9989] ? __virt_addr_valid+0x45f/0x530 [ 199.934239][ T9989] ? __phys_addr_symbol+0x2f/0x70 [ 199.939268][ T9989] ? __check_object_size+0x47a/0x730 [ 199.944555][ T9989] netlink_sendmsg+0x8e4/0xcb0 [ 199.949333][ T9989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.954621][ T9989] ? aa_sock_msg_perm+0x91/0x160 [ 199.959559][ T9989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.964849][ T9989] __sock_sendmsg+0x221/0x270 [ 199.969527][ T9989] ____sys_sendmsg+0x52a/0x7e0 [ 199.974327][ T9989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.979641][ T9989] ? __fget_files+0x2a/0x410 [ 199.984271][ T9989] ? __fget_files+0x2a/0x410 [ 199.988910][ T9989] __sys_sendmsg+0x269/0x350 [ 199.993535][ T9989] ? __pfx_lock_release+0x10/0x10 [ 199.998568][ T9989] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.003694][ T9989] ? __pfx_vfs_write+0x10/0x10 [ 200.008473][ T9989] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.014806][ T9989] ? do_syscall_64+0x100/0x230 [ 200.019593][ T9989] ? do_syscall_64+0xb6/0x230 [ 200.024287][ T9989] do_syscall_64+0xf3/0x230 [ 200.028800][ T9989] ? clear_bhb_loop+0x35/0x90 [ 200.033497][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.039406][ T9989] RIP: 0033:0x7f419b985d29 [ 200.043823][ T9989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.064471][ T9989] RSP: 002b:00007f419c860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.073270][ T9989] RAX: ffffffffffffffda RBX: 00007f419bb75fa0 RCX: 00007f419b985d29 [ 200.081355][ T9989] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 200.090592][ T9989] RBP: 00007f419c860090 R08: 0000000000000000 R09: 0000000000000000 [ 200.098673][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.106659][ T9989] R13: 0000000000000000 R14: 00007f419bb75fa0 R15: 00007ffec3531bc8 [ 200.114641][ T9989] [ 200.271206][T10001] netlink: 'syz.3.1322': attribute type 10 has an invalid length. [ 200.411616][T10007] FAULT_INJECTION: forcing a failure. [ 200.411616][T10007] name failslab, interval 1, probability 0, space 0, times 0 [ 200.486394][T10007] CPU: 1 UID: 0 PID: 10007 Comm: syz.0.1327 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 200.497227][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 200.507304][T10007] Call Trace: [ 200.510611][T10007] [ 200.513543][T10007] dump_stack_lvl+0x241/0x360 [ 200.518228][T10007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.523437][T10007] ? __pfx__printk+0x10/0x10 [ 200.528037][T10007] ? __kmalloc_cache_noprof+0x48/0x390 [ 200.533504][T10007] ? __pfx___might_resched+0x10/0x10 [ 200.538790][T10007] ? trace_contention_end+0x3c/0x120 [ 200.544082][T10007] should_fail_ex+0x3b0/0x4e0 [ 200.548767][T10007] should_failslab+0xac/0x100 [ 200.553468][T10007] __kmalloc_cache_noprof+0x70/0x390 [ 200.558761][T10007] ? tcf_chain_create+0xb2/0x310 [ 200.563885][T10007] tcf_chain_create+0xb2/0x310 [ 200.568690][T10007] __tcf_chain_get+0x117/0x3c0 [ 200.573466][T10007] tc_new_tfilter+0x9f4/0x1af0 [ 200.578259][T10007] ? __pfx_tc_new_tfilter+0x10/0x10 [ 200.583470][T10007] ? rcu_read_unlock+0x87/0xa0 [ 200.588346][T10007] ? __dev_queue_xmit+0x1775/0x3f50 [ 200.593671][T10007] ? __pfx_tc_new_tfilter+0x10/0x10 [ 200.598909][T10007] rtnetlink_rcv_msg+0x791/0xcf0 [ 200.603880][T10007] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 200.609062][T10007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.614538][T10007] ? ref_tracker_free+0x643/0x7e0 [ 200.619925][T10007] netlink_rcv_skb+0x1e3/0x430 [ 200.624698][T10007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.630178][T10007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.635569][T10007] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.640963][T10007] netlink_unicast+0x7f6/0x990 [ 200.645769][T10007] ? __pfx_netlink_unicast+0x10/0x10 [ 200.651061][T10007] ? __virt_addr_valid+0x45f/0x530 [ 200.656182][T10007] ? __phys_addr_symbol+0x2f/0x70 [ 200.661207][T10007] ? __check_object_size+0x47a/0x730 [ 200.666497][T10007] netlink_sendmsg+0x8e4/0xcb0 [ 200.671449][T10007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.676752][T10007] ? aa_sock_msg_perm+0x91/0x160 [ 200.681695][T10007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.686979][T10007] __sock_sendmsg+0x221/0x270 [ 200.691659][T10007] ____sys_sendmsg+0x52a/0x7e0 [ 200.696443][T10007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.701721][T10007] ? __fget_files+0x2a/0x410 [ 200.706319][T10007] ? __sys_sendmmsg+0x392/0x720 [ 200.711172][T10007] ? __might_fault+0xaa/0x120 [ 200.715848][T10007] __sys_sendmmsg+0x36a/0x720 [ 200.720627][T10007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 200.725853][T10007] ? __pfx_lock_release+0x10/0x10 [ 200.730879][T10007] ? kstrtouint_from_user+0x128/0x190 [ 200.736271][T10007] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 200.742263][T10007] ? ksys_write+0x22a/0x2b0 [ 200.746796][T10007] ? __pfx_lock_release+0x10/0x10 [ 200.751840][T10007] ? vfs_write+0x730/0xd30 [ 200.756313][T10007] ? __mutex_unlock_slowpath+0x21e/0x790 [ 200.762534][T10007] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.768621][T10007] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.775259][T10007] ? do_syscall_64+0x100/0x230 [ 200.780052][T10007] __x64_sys_sendmmsg+0xa0/0xb0 [ 200.784923][T10007] do_syscall_64+0xf3/0x230 [ 200.789432][T10007] ? clear_bhb_loop+0x35/0x90 [ 200.794110][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.800006][T10007] RIP: 0033:0x7f990c985d29 [ 200.804418][T10007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.824023][T10007] RSP: 002b:00007f990d851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.832531][T10007] RAX: ffffffffffffffda RBX: 00007f990cb75fa0 RCX: 00007f990c985d29 [ 200.840505][T10007] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 200.848473][T10007] RBP: 00007f990d851090 R08: 0000000000000000 R09: 0000000000000000 [ 200.856438][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.864516][T10007] R13: 0000000000000000 R14: 00007f990cb75fa0 R15: 00007ffd5d5c01a8 [ 200.872534][T10007] [ 200.882883][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.894334][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.990963][T10009] netlink: 'syz.2.1329': attribute type 1 has an invalid length. [ 201.430739][T10031] delete_channel: no stack [ 201.455946][T10030] erspan0 speed is unknown, defaulting to 1000 [ 201.514461][T10039] __nla_validate_parse: 7 callbacks suppressed [ 201.514483][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 201.542703][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1341'. [ 201.959326][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.128107][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 202.296489][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 202.347825][T10074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1353'. [ 202.406713][T10077] erspan0 speed is unknown, defaulting to 1000 [ 202.526304][T10081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.536346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.553945][T10081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.570281][T10078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.586873][T10078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.715331][T10090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.755552][T10091] netlink: 'syz.4.1359': attribute type 9 has an invalid length. [ 202.939189][T10095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1362'. [ 203.002639][T10097] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1363'. [ 203.041225][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 203.576443][T10111] vlan3: entered promiscuous mode [ 203.694788][T10115] xt_l2tp: missing protocol rule (udp|l2tpip) [ 203.792491][T10096] delete_channel: no stack [ 203.867491][T10119] erspan0 speed is unknown, defaulting to 1000 [ 204.019470][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 204.039171][T10128] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 204.078934][T10128] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1375'. [ 204.152731][T10131] netlink: 'syz.4.1377': attribute type 10 has an invalid length. [ 204.544792][T10144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.870571][T10172] xt_cgroup: invalid path, errno=-2 [ 204.921385][ T5832] net_ratelimit: 17 callbacks suppressed [ 204.921405][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.927625][T10170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.947778][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.997260][T10178] syz.0.1393: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 205.023200][T10175] erspan0 speed is unknown, defaulting to 1000 [ 205.038505][T10178] CPU: 0 UID: 0 PID: 10178 Comm: syz.0.1393 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 205.049341][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 205.060145][T10178] Call Trace: [ 205.063449][T10178] [ 205.066397][T10178] dump_stack_lvl+0x241/0x360 [ 205.071124][T10178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.076366][T10178] ? __pfx__printk+0x10/0x10 [ 205.079372][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.080976][T10178] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 205.095512][T10178] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 205.102064][T10178] warn_alloc+0x278/0x410 [ 205.106886][T10178] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 205.113010][T10178] ? __pfx_warn_alloc+0x10/0x10 [ 205.117904][T10178] ? kasan_save_track+0x3f/0x80 [ 205.122976][T10178] ? __kasan_kmalloc+0x98/0xb0 [ 205.127785][T10178] ? xsk_setsockopt+0x4ea/0x950 [ 205.132676][T10178] ? do_sock_setsockopt+0x3af/0x720 [ 205.137914][T10178] ? __x64_sys_setsockopt+0x1ee/0x280 [ 205.143328][T10178] ? do_syscall_64+0xf3/0x230 [ 205.148041][T10178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.154154][T10178] __vmalloc_node_range_noprof+0x126/0x1380 [ 205.160110][T10178] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.166485][T10178] ? __kasan_kmalloc+0x98/0xb0 [ 205.171289][T10178] vmalloc_user_noprof+0x74/0x80 [ 205.176271][T10178] ? xskq_create+0xb6/0x170 [ 205.180810][T10178] xskq_create+0xb6/0x170 [ 205.185199][T10178] xsk_init_queue+0xa1/0x100 [ 205.189856][T10178] xsk_setsockopt+0x4ea/0x950 [ 205.196063][T10178] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.201382][T10178] ? __pfx_aa_sk_perm+0x10/0x10 [ 205.206278][T10178] ? aa_sock_opt_perm+0x79/0x120 [ 205.211350][T10178] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.217014][T10178] do_sock_setsockopt+0x3af/0x720 [ 205.222262][T10178] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 205.227951][T10178] ? __fget_files+0x395/0x410 [ 205.232667][T10178] ? __fget_files+0x2a/0x410 [ 205.237307][T10178] __x64_sys_setsockopt+0x1ee/0x280 [ 205.242962][T10178] do_syscall_64+0xf3/0x230 [ 205.247557][T10178] ? clear_bhb_loop+0x35/0x90 [ 205.252235][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.259268][T10178] RIP: 0033:0x7f990c985d29 [ 205.263703][T10178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.283429][T10178] RSP: 002b:00007f990d830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.291862][T10178] RAX: ffffffffffffffda RBX: 00007f990cb76080 RCX: 00007f990c985d29 [ 205.299840][T10178] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 205.307811][T10178] RBP: 00007f990ca01b08 R08: 0000000000000004 R09: 0000000000000000 [ 205.316223][T10178] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.324310][T10178] R13: 0000000000000000 R14: 00007f990cb76080 R15: 00007ffd5d5c01a8 [ 205.333014][T10178] [ 205.400722][T10178] Mem-Info: [ 205.404679][T10178] active_anon:9519 inactive_anon:0 isolated_anon:0 [ 205.404679][T10178] active_file:1663 inactive_file:38307 isolated_file:0 [ 205.404679][T10178] unevictable:768 dirty:320 writeback:0 [ 205.404679][T10178] slab_reclaimable:10986 slab_unreclaimable:102446 [ 205.404679][T10178] mapped:33696 shmem:2935 pagetables:857 [ 205.404679][T10178] sec_pagetables:0 bounce:0 [ 205.404679][T10178] kernel_misc_reclaimable:0 [ 205.404679][T10178] free:1330271 free_pcp:1690 free_cma:0 [ 205.475177][T10178] Node 0 active_anon:38776kB inactive_anon:0kB active_file:6652kB inactive_file:153156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135484kB dirty:1280kB writeback:0kB shmem:10804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:3428kB sec_pagetables:0kB all_unreclaimable? no [ 205.481936][T10170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.564334][T10178] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 205.604985][T10178] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.659692][T10178] lowmem_reserve[]: 0 2465 2466 0 0 [ 205.689127][T10178] Node 0 DMA32 free:1401292kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:42140kB inactive_anon:0kB active_file:6652kB inactive_file:152316kB unevictable:1536kB writepending:1280kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:3540kB local_pcp:1332kB free_cma:0kB [ 205.779192][T10178] lowmem_reserve[]: 0 0 0 0 0 [ 205.784009][T10178] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.797737][T10170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.812110][T10178] lowmem_reserve[]: 0 0 0 0 0 [ 205.827871][T10178] Node 1 Normal free:3903656kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 205.858018][T10178] lowmem_reserve[]: 0 0 0 0 0 [ 205.867218][T10178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.884446][T10178] Node 0 DMA32: 3*4kB (UME) 4*8kB (UE) 13*16kB (E) 296*32kB (UME) 571*64kB (UE) 182*128kB (UME) 49*256kB (UM) 29*512kB (UM) 30*1024kB (UME) 23*2048kB (UM) 299*4096kB (UM) = 1399484kB [ 205.922993][T10178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.942978][T10178] Node 1 Normal: 214*4kB (UE) 60*8kB (UME) 51*16kB (UME) 218*32kB (UME) 104*64kB (UME) 36*128kB (UME) 15*256kB (UM) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3903656kB [ 205.999524][T10178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.013840][T10178] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.043256][T10178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.058624][T10178] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.068337][T10178] 44230 total pagecache pages [ 206.077579][T10170] bond0: (slave netdevsim0): Releasing backup interface [ 206.084756][T10178] 0 pages in swap cache [ 206.089008][T10178] Free swap = 124996kB [ 206.093195][T10178] Total swap = 124996kB [ 206.097378][T10178] 2097051 pages RAM [ 206.103077][T10178] 0 pages HighMem/MovableOnly [ 206.107796][T10178] 427013 pages reserved [ 206.112993][T10170] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 206.124078][T10170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.138014][T10178] 0 pages cma reserved [ 206.138085][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.563328][T10170] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.581115][T10170] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.610375][T10219] __nla_validate_parse: 5 callbacks suppressed [ 206.610395][T10219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1405'. [ 206.661963][T10170] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.735629][T10170] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.876863][T10225] xt_bpf: check failed: parse error [ 206.969123][T10227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.977822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.989584][T10227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.999393][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.021187][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.036957][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.105227][T10231] syzkaller0: entered promiscuous mode [ 207.115493][T10231] syzkaller0: entered allmulticast mode [ 207.198502][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1414'. [ 207.231113][T10235] FAULT_INJECTION: forcing a failure. [ 207.231113][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 207.247178][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.2.1413 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 207.257988][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 207.268090][T10235] Call Trace: [ 207.271411][T10235] [ 207.274377][T10235] dump_stack_lvl+0x241/0x360 [ 207.279093][T10235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.284312][T10235] ? __pfx__printk+0x10/0x10 [ 207.288909][T10235] ? ref_tracker_alloc+0x332/0x490 [ 207.294027][T10235] should_fail_ex+0x3b0/0x4e0 [ 207.298984][T10235] should_failslab+0xac/0x100 [ 207.303850][T10235] ? skb_clone+0x20c/0x390 [ 207.308534][T10235] kmem_cache_alloc_noprof+0x70/0x380 [ 207.314332][T10235] skb_clone+0x20c/0x390 [ 207.318988][T10235] __netlink_deliver_tap+0x3cc/0x7f0 [ 207.325086][T10235] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.330445][T10235] netlink_deliver_tap+0x19d/0x1b0 [ 207.336042][T10235] netlink_sendskb+0x68/0x140 [ 207.340752][T10235] netlink_unicast+0x39d/0x990 [ 207.345549][T10235] ? __pfx_netlink_unicast+0x10/0x10 [ 207.350856][T10235] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 207.356601][T10235] ? qdisc_notify+0x2ec/0x4b0 [ 207.361374][T10235] nlmsg_notify+0x13b/0x1c0 [ 207.365892][T10235] qdisc_graft+0x12d3/0x1660 [ 207.370511][T10235] ? __pfx_qdisc_graft+0x10/0x10 [ 207.375464][T10235] ? __pfx_qdisc_create+0x10/0x10 [ 207.380501][T10235] tc_modify_qdisc+0xf47/0x1e40 [ 207.385704][T10235] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 207.391222][T10235] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 207.396543][T10235] rtnetlink_rcv_msg+0x73f/0xcf0 [ 207.401588][T10235] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 207.406798][T10235] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.412358][T10235] ? ref_tracker_free+0x643/0x7e0 [ 207.417447][T10235] netlink_rcv_skb+0x1e3/0x430 [ 207.422233][T10235] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.427819][T10235] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.433231][T10235] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.438446][T10235] netlink_unicast+0x7f6/0x990 [ 207.443229][T10235] ? __pfx_netlink_unicast+0x10/0x10 [ 207.448539][T10235] ? __virt_addr_valid+0x45f/0x530 [ 207.453680][T10235] ? __phys_addr_symbol+0x2f/0x70 [ 207.459621][T10235] ? __check_object_size+0x47a/0x730 [ 207.465711][T10235] netlink_sendmsg+0x8e4/0xcb0 [ 207.470524][T10235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.476113][T10235] ? aa_sock_msg_perm+0x91/0x160 [ 207.481097][T10235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.486411][T10235] __sock_sendmsg+0x221/0x270 [ 207.491285][T10235] ____sys_sendmsg+0x52a/0x7e0 [ 207.496476][T10235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.502196][T10235] ? __fget_files+0x2a/0x410 [ 207.506892][T10235] ? __fget_files+0x2a/0x410 [ 207.511636][T10235] __sys_sendmmsg+0x36a/0x720 [ 207.516709][T10235] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.521935][T10235] ? __pfx_lock_release+0x10/0x10 [ 207.526991][T10235] ? kstrtouint_from_user+0x128/0x190 [ 207.532386][T10235] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 207.538321][T10235] ? ksys_write+0x22a/0x2b0 [ 207.542846][T10235] ? __pfx_lock_release+0x10/0x10 [ 207.547903][T10235] ? vfs_write+0x730/0xd30 [ 207.552453][T10235] ? __mutex_unlock_slowpath+0x21e/0x790 [ 207.558109][T10235] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.564106][T10235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.570462][T10235] ? do_syscall_64+0x100/0x230 [ 207.575244][T10235] __x64_sys_sendmmsg+0xa0/0xb0 [ 207.580104][T10235] do_syscall_64+0xf3/0x230 [ 207.584618][T10235] ? clear_bhb_loop+0x35/0x90 [ 207.589308][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.595258][T10235] RIP: 0033:0x7f9da0b85d29 [ 207.599701][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.619338][T10235] RSP: 002b:00007f9da1a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.627769][T10235] RAX: ffffffffffffffda RBX: 00007f9da0d75fa0 RCX: 00007f9da0b85d29 [ 207.635752][T10235] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 207.643834][T10235] RBP: 00007f9da1a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 207.651905][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.659978][T10235] R13: 0000000000000000 R14: 00007f9da0d75fa0 R15: 00007ffc2a5105c8 [ 207.667961][T10235] [ 207.678918][T10213] delete_channel: no stack [ 207.903684][T10246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'. [ 207.921478][T10246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'. [ 207.940675][T10247] xt_l2tp: missing protocol rule (udp|l2tpip) [ 210.592499][T10291] xt_l2tp: missing protocol rule (udp|l2tpip) [ 210.995029][T10304] FAULT_INJECTION: forcing a failure. [ 210.995029][T10304] name failslab, interval 1, probability 0, space 0, times 0 [ 211.009045][T10304] CPU: 1 UID: 0 PID: 10304 Comm: syz.3.1436 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 211.019843][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 211.029926][T10304] Call Trace: [ 211.033242][T10304] [ 211.036226][T10304] dump_stack_lvl+0x241/0x360 [ 211.042169][T10304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.047413][T10304] ? __pfx__printk+0x10/0x10 [ 211.052032][T10304] should_fail_ex+0x3b0/0x4e0 [ 211.057187][T10304] should_failslab+0xac/0x100 [ 211.061891][T10304] __kmalloc_cache_noprof+0x70/0x390 [ 211.067214][T10304] ? __hw_addr_add_ex+0x1a8/0x610 [ 211.072693][T10304] __hw_addr_add_ex+0x1a8/0x610 [ 211.078080][T10304] dev_mc_add+0xa3/0x110 [ 211.080567][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 211.083322][T10304] garp_init_applicant+0x1a0/0x450 [ 211.083359][T10304] register_vlan_dev+0x1eb/0x810 [ 211.102930][T10304] vlan_newlink+0x476/0x5c0 [ 211.107483][T10304] ? __pfx_vlan_newlink+0x10/0x10 [ 211.112538][T10304] rtnl_newlink_create+0x2ee/0xa40 [ 211.117658][T10304] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 211.123354][T10304] ? ns_capable+0x8a/0xf0 [ 211.127744][T10304] rtnl_newlink+0x1c7e/0x2210 [ 211.132843][T10304] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.137916][T10304] ? __pfx_validate_chain+0x10/0x10 [ 211.143178][T10304] ? validate_chain+0x11e/0x5920 [ 211.148167][T10304] ? __pfx_lock_acquire+0x10/0x10 [ 211.153245][T10304] ? __pfx_lock_release+0x10/0x10 [ 211.158319][T10304] ? __pfx_validate_chain+0x10/0x10 [ 211.163639][T10304] ? mark_lock+0x9a/0x360 [ 211.168029][T10304] ? __lock_acquire+0x1397/0x2100 [ 211.173097][T10304] ? __pfx_lock_release+0x10/0x10 [ 211.178188][T10304] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.183501][T10304] rtnetlink_rcv_msg+0x791/0xcf0 [ 211.188506][T10304] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 211.193650][T10304] ? __lock_acquire+0x1397/0x2100 [ 211.198704][T10304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.204223][T10304] netlink_rcv_skb+0x1e3/0x430 [ 211.209003][T10304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.214470][T10304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.219773][T10304] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.224972][T10304] netlink_unicast+0x7f6/0x990 [ 211.229742][T10304] ? __pfx_netlink_unicast+0x10/0x10 [ 211.235028][T10304] ? __virt_addr_valid+0x45f/0x530 [ 211.240147][T10304] ? __phys_addr_symbol+0x2f/0x70 [ 211.245525][T10304] ? __check_object_size+0x47a/0x730 [ 211.250876][T10304] netlink_sendmsg+0x8e4/0xcb0 [ 211.255686][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.261090][T10304] ? aa_sock_msg_perm+0x91/0x160 [ 211.266068][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.271365][T10304] __sock_sendmsg+0x221/0x270 [ 211.276045][T10304] ____sys_sendmsg+0x52a/0x7e0 [ 211.280825][T10304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.286550][T10304] ? __fget_files+0x2a/0x410 [ 211.291609][T10304] ? __fget_files+0x2a/0x410 [ 211.296989][T10304] __sys_sendmsg+0x269/0x350 [ 211.302984][T10304] ? __pfx_lock_release+0x10/0x10 [ 211.309807][T10304] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.315754][T10304] ? __pfx_vfs_write+0x10/0x10 [ 211.320601][T10304] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.329045][T10304] ? do_syscall_64+0x100/0x230 [ 211.333921][T10304] ? do_syscall_64+0xb6/0x230 [ 211.338631][T10304] do_syscall_64+0xf3/0x230 [ 211.343173][T10304] ? clear_bhb_loop+0x35/0x90 [ 211.347884][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.353790][T10304] RIP: 0033:0x7fb5fdd85d29 [ 211.358226][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.377839][T10304] RSP: 002b:00007fb5fbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.386274][T10304] RAX: ffffffffffffffda RBX: 00007fb5fdf75fa0 RCX: 00007fb5fdd85d29 [ 211.395236][T10304] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 211.403332][T10304] RBP: 00007fb5fbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.411325][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.419310][T10304] R13: 0000000000000000 R14: 00007fb5fdf75fa0 R15: 00007fffaf45df58 [ 211.427310][T10304] [ 211.722856][T10326] xt_l2tp: missing protocol rule (udp|l2tpip) [ 211.755274][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 211.764780][T10321] ip6gretap0: left allmulticast mode [ 211.770799][T10321] ip6gretap0: left promiscuous mode [ 211.776687][T10321] bridge0: port 1(ip6gretap0) entered disabled state [ 211.822334][T10331] net_ratelimit: 5 callbacks suppressed [ 211.822348][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.881366][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.982873][T10337] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1447'. [ 212.090984][T10339] erspan0 speed is unknown, defaulting to 1000 [ 212.411647][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 212.428691][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1451'. [ 212.602815][ T29] audit: type=1107 audit(1737141781.795:2): pid=10356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='65dWYGw42Dhoӈ]&<"NמpkjpvX? k' [ 212.993960][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 213.083233][T10371] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 213.103179][T10371] macsec0: entered allmulticast mode [ 213.110296][T10371] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 213.127145][T10371] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 213.142705][T10371] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 213.355561][T10373] netlink: 'syz.3.1460': attribute type 6 has an invalid length. [ 213.540986][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 213.572074][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1464'. [ 213.747065][T10394] netlink: 'syz.0.1466': attribute type 9 has an invalid length. [ 214.334351][T10413] veth0_macvtap: left promiscuous mode [ 214.335681][T10410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 214.401337][T10423] netlink: 'syz.4.1477': attribute type 9 has an invalid length. [ 214.473120][T10420] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 214.550877][T10430] FAULT_INJECTION: forcing a failure. [ 214.550877][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.566878][T10430] CPU: 1 UID: 0 PID: 10430 Comm: syz.4.1480 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 214.577313][T10429] erspan0 speed is unknown, defaulting to 1000 [ 214.577893][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.594823][T10430] Call Trace: [ 214.598134][T10430] [ 214.601089][T10430] dump_stack_lvl+0x241/0x360 [ 214.605834][T10430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.611069][T10430] ? __pfx__printk+0x10/0x10 [ 214.616306][T10430] ? __pfx_lock_release+0x10/0x10 [ 214.621894][T10430] should_fail_ex+0x3b0/0x4e0 [ 214.627110][T10430] _copy_from_iter+0x1e9/0x1c20 [ 214.631994][T10430] ? __virt_addr_valid+0x183/0x530 [ 214.637279][T10430] ? __alloc_skb+0x28f/0x440 [ 214.642044][T10430] ? __pfx__copy_from_iter+0x10/0x10 [ 214.648182][T10430] ? __virt_addr_valid+0x183/0x530 [ 214.654207][T10430] ? __virt_addr_valid+0x183/0x530 [ 214.659337][T10430] ? __virt_addr_valid+0x45f/0x530 [ 214.664541][T10430] ? __phys_addr_symbol+0x2f/0x70 [ 214.669584][T10430] ? __check_object_size+0x47a/0x730 [ 214.674883][T10430] netlink_sendmsg+0x73d/0xcb0 [ 214.679690][T10430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.684997][T10430] ? aa_sock_msg_perm+0x91/0x160 [ 214.689949][T10430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.695239][T10430] __sock_sendmsg+0x221/0x270 [ 214.699920][T10430] ____sys_sendmsg+0x52a/0x7e0 [ 214.704686][T10430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.709973][T10430] ? __fget_files+0x2a/0x410 [ 214.714562][T10430] ? __sys_sendmmsg+0x392/0x720 [ 214.719410][T10430] ? __might_fault+0xaa/0x120 [ 214.724806][T10430] __sys_sendmmsg+0x36a/0x720 [ 214.729507][T10430] ? __pfx___sys_sendmmsg+0x10/0x10 [ 214.734727][T10430] ? __pfx_lock_release+0x10/0x10 [ 214.739757][T10430] ? kstrtouint_from_user+0x128/0x190 [ 214.745146][T10430] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 214.751065][T10430] ? ksys_write+0x22a/0x2b0 [ 214.755577][T10430] ? __pfx_lock_release+0x10/0x10 [ 214.760616][T10430] ? vfs_write+0x730/0xd30 [ 214.765557][T10430] ? __mutex_unlock_slowpath+0x21e/0x790 [ 214.771211][T10430] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.777217][T10430] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.783817][T10430] ? do_syscall_64+0x100/0x230 [ 214.788666][T10430] __x64_sys_sendmmsg+0xa0/0xb0 [ 214.793690][T10430] do_syscall_64+0xf3/0x230 [ 214.798193][T10430] ? clear_bhb_loop+0x35/0x90 [ 214.802869][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.808762][T10430] RIP: 0033:0x7f39c8b85d29 [ 214.813177][T10430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.832782][T10430] RSP: 002b:00007f39c9a3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.841197][T10430] RAX: ffffffffffffffda RBX: 00007f39c8d75fa0 RCX: 00007f39c8b85d29 [ 214.849190][T10430] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 214.857172][T10430] RBP: 00007f39c9a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.865141][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.873108][T10430] R13: 0000000000000000 R14: 00007f39c8d75fa0 R15: 00007ffea137a2e8 [ 214.881203][T10430] [ 214.956517][T10434] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1476'. [ 215.287235][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 215.306376][T10452] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 215.329608][T10450] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 215.497656][T10459] bond3: (slave gretap2): making interface the new active one [ 215.561323][T10459] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 215.631716][T10460] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.815699][T10460] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.899629][T10475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1495'. [ 215.936451][T10474] delete_channel: no stack [ 215.960548][T10460] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.985601][T10479] netlink: 'syz.4.1497': attribute type 10 has an invalid length. [ 216.096196][T10460] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 216.103546][T10489] FAULT_INJECTION: forcing a failure. [ 216.103546][T10489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.121241][T10489] CPU: 0 UID: 0 PID: 10489 Comm: syz.0.1499 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 216.132052][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 216.142146][T10489] Call Trace: [ 216.145445][T10489] [ 216.148411][T10489] dump_stack_lvl+0x241/0x360 [ 216.153128][T10489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.158370][T10489] ? __pfx__printk+0x10/0x10 [ 216.163179][T10489] ? __pfx_lock_release+0x10/0x10 [ 216.168270][T10489] should_fail_ex+0x3b0/0x4e0 [ 216.173084][T10489] _copy_from_user+0x2f/0xc0 [ 216.177723][T10489] copy_msghdr_from_user+0xae/0x680 [ 216.182967][T10489] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 216.188996][T10489] ? __fget_files+0x2a/0x410 [ 216.193642][T10489] ? __fget_files+0x2a/0x410 [ 216.198284][T10489] __sys_sendmmsg+0x32b/0x720 [ 216.203123][T10489] ? __pfx___sys_sendmmsg+0x10/0x10 [ 216.208738][T10489] ? __pfx_lock_release+0x10/0x10 [ 216.214703][T10489] ? kstrtouint_from_user+0x128/0x190 [ 216.221366][T10489] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 216.227473][T10489] ? ksys_write+0x22a/0x2b0 [ 216.232123][T10489] ? __pfx_lock_release+0x10/0x10 [ 216.237276][T10489] ? vfs_write+0x730/0xd30 [ 216.241698][T10489] ? __mutex_unlock_slowpath+0x21e/0x790 [ 216.247336][T10489] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.253856][T10489] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.260224][T10489] ? do_syscall_64+0x100/0x230 [ 216.265029][T10489] __x64_sys_sendmmsg+0xa0/0xb0 [ 216.270021][T10489] do_syscall_64+0xf3/0x230 [ 216.274589][T10489] ? clear_bhb_loop+0x35/0x90 [ 216.279396][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.285362][T10489] RIP: 0033:0x7f990c985d29 [ 216.289825][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.310643][T10489] RSP: 002b:00007f990d851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.320808][T10489] RAX: ffffffffffffffda RBX: 00007f990cb75fa0 RCX: 00007f990c985d29 [ 216.329175][T10489] RDX: 0000000000000300 RSI: 0000000020002f40 RDI: 0000000000000003 [ 216.337206][T10489] RBP: 00007f990d851090 R08: 0000000000000000 R09: 0000000000000000 [ 216.345621][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.353829][T10489] R13: 0000000000000000 R14: 00007f990cb75fa0 R15: 00007ffd5d5c01a8 [ 216.361830][T10489] [ 216.544179][T10460] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.577172][T10497] tipc: Failed to obtain node identity [ 216.583345][T10497] tipc: Enabling of bearer rejected, failed to enable media [ 216.630368][T10460] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.725170][T10460] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.783544][T10460] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 217.230004][T10522] ip6tnl2: entered allmulticast mode [ 217.237376][T10527] __nla_validate_parse: 1 callbacks suppressed [ 217.237396][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 217.452069][T10538] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.669704][T10538] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.848139][T10538] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.899490][T10558] xt_l2tp: missing protocol rule (udp|l2tpip) [ 217.929205][T10538] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.963387][T10562] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 217.985549][T10562] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 218.163818][T10538] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.194371][T10570] vlan2: entered promiscuous mode [ 218.238293][T10538] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.276480][T10538] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.363616][T10538] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.370759][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1528'. [ 218.412474][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'. [ 218.493754][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 218.757262][T10588] IPVS: Error connecting to the multicast addr [ 218.975354][T10596] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 218.983939][T10596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.025597][T10597] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 219.386722][T10612] tipc: Can't bind to reserved service type 1 [ 219.395722][T10614] bridge0: port 3(hsr0) entered blocking state [ 219.407705][T10614] bridge0: port 3(hsr0) entered disabled state [ 219.415639][T10614] hsr0: entered allmulticast mode [ 219.421230][T10614] hsr_slave_0: entered allmulticast mode [ 219.426992][T10614] hsr_slave_1: entered allmulticast mode [ 219.433710][T10614] hsr0: entered promiscuous mode [ 219.525878][T10618] xt_cgroup: invalid path, errno=-2 [ 219.617721][T10625] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 219.631467][T10625] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.782210][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 219.804065][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1550'. [ 219.985647][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 220.131467][T10653] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 220.155269][T10653] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.348103][T10667] vlan3: entered promiscuous mode [ 220.372099][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 220.402832][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1566'. [ 220.418238][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 220.432848][T10671] netlink: 'syz.1.1568': attribute type 4 has an invalid length. [ 220.444722][T10671] netlink: 'syz.1.1568': attribute type 4 has an invalid length. [ 220.497161][T10674] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 220.725698][T10690] @: renamed from veth0_vlan (while UP) [ 220.886131][T10701] netlink: 'syz.0.1580': attribute type 3 has an invalid length. [ 221.024941][T10705] team0: entered promiscuous mode [ 221.034917][T10705] team_slave_0: entered promiscuous mode [ 221.042901][T10705] team_slave_1: entered promiscuous mode [ 221.051383][T10705] team0: left promiscuous mode [ 221.057855][T10705] team_slave_0: left promiscuous mode [ 221.068740][T10705] team_slave_1: left promiscuous mode [ 221.214997][T10707] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.251944][T10713] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 221.381877][T10707] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.436368][T10723] macsec1: entered allmulticast mode [ 221.442600][T10723] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 221.463017][T10723] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 221.538341][T10707] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.605933][T10727] erspan0 speed is unknown, defaulting to 1000 [ 221.687212][ T5835] Bluetooth: hci3: link tx timeout [ 221.693085][ T5835] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 221.743595][T10707] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.814125][T10731] syzkaller1: entered promiscuous mode [ 221.832188][T10731] syzkaller1: entered allmulticast mode [ 221.946293][T10707] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.993044][T10707] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.012399][T10707] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.032553][T10707] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.280244][T10766] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 222.516765][T10773] __nla_validate_parse: 5 callbacks suppressed [ 222.516785][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 222.548430][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1604'. [ 222.676986][T10779] xt_bpf: check failed: parse error [ 222.844372][T10787] Cannot find del_set index 0 as target [ 222.900717][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 223.180298][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 223.219775][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1616'. [ 223.344290][T10806] netlink: 'syz.0.1617': attribute type 10 has an invalid length. [ 223.397509][T10812] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1620'. [ 223.499000][T10815] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1617'. [ 223.732358][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 223.847068][T10820] sctp: [Deprecated]: syz.4.1622 (pid 10820) Use of int in max_burst socket option. [ 223.847068][T10820] Use struct sctp_assoc_value instead [ 223.869712][ T8101] ------------[ cut here ]------------ [ 223.875393][ T8101] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 223.875490][ T8101] WARNING: CPU: 0 PID: 8101 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 223.891566][ T8101] Modules linked in: [ 223.895490][ T8101] CPU: 0 UID: 0 PID: 8101 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 223.907782][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 223.919368][ T8101] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 223.924694][ T8101] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 223.944381][ T8101] RSP: 0018:ffffc9000c657920 EFLAGS: 00010246 [ 223.950516][ T8101] RAX: b81f2bb00fa49500 RBX: ffff88805c0facb0 RCX: ffff88802b3c1e00 [ 223.958504][ T8101] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 223.966574][ T8101] RBP: ffffc9000c657ab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 223.974855][ T8101] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 223.983003][ T8101] R13: 0000000000000000 R14: 1ffff920018caf38 R15: dffffc0000000000 [ 223.985328][T10819] base_sock_release(ffff8880380b5400) sk=ffff8880530ba000 [ 223.991006][ T8101] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 223.991026][ T8101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.991039][ T8101] CR2: 000000110c38b4d4 CR3: 0000000022b24000 CR4: 00000000003526f0 [ 223.991055][ T8101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.991067][ T8101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.991078][ T8101] Call Trace: [ 223.991085][ T8101] [ 223.991093][ T8101] ? __warn+0x165/0x4d0 [ 223.991118][ T8101] ? __mutex_lock+0xdac/0xee0 [ 223.991141][ T8101] ? report_bug+0x2b3/0x500 [ 224.064391][ T8101] ? __mutex_lock+0xdac/0xee0 [ 224.069149][ T8101] ? handle_bug+0x60/0x90 [ 224.073525][ T8101] ? exc_invalid_op+0x1a/0x50 [ 224.078239][ T8101] ? asm_exc_invalid_op+0x1a/0x20 [ 224.083369][ T8101] ? __warn_printk+0x292/0x360 [ 224.088168][ T8101] ? __mutex_lock+0xdac/0xee0 [ 224.092922][ T8101] ? free_netdev+0x2d9/0x610 [ 224.097543][ T8101] ? __pfx___mutex_lock+0x10/0x10 [ 224.102658][ T8101] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 224.107966][ T8101] ? dev_addr_check+0x6f/0x240 [ 224.112760][ T8101] ? dev_addr_flush+0x192/0x210 [ 224.117615][ T8101] free_netdev+0x2d9/0x610 [ 224.122218][ T8101] netdev_run_todo+0xf21/0x10d0 [ 224.127097][ T8101] ? __pfx_netdev_run_todo+0x10/0x10 [ 224.132466][ T8101] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 224.138870][ T8101] ? down_write+0x18c/0x220 [ 224.143410][ T8101] ? __pfx_down_write+0x10/0x10 [ 224.148298][ T8101] bnep_session+0x2e3c/0x3030 [ 224.153031][ T8101] ? __pfx_bnep_session+0x10/0x10 [ 224.158068][ T8101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.164448][ T8101] ? __pfx_woken_wake_function+0x10/0x10 [ 224.170109][ T8101] ? __kthread_parkme+0x169/0x1d0 [ 224.175144][ T8101] ? __pfx_bnep_session+0x10/0x10 [ 224.180234][ T8101] kthread+0x2f0/0x390 [ 224.184301][ T8101] ? __pfx_bnep_session+0x10/0x10 [ 224.189359][ T8101] ? __pfx_kthread+0x10/0x10 [ 224.193962][ T8101] ret_from_fork+0x4b/0x80 [ 224.198440][ T8101] ? __pfx_kthread+0x10/0x10 [ 224.203212][ T8101] ret_from_fork_asm+0x1a/0x30 [ 224.208723][ T8101] [ 224.211764][ T8101] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.219272][ T8101] CPU: 0 UID: 0 PID: 8101 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 224.230406][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 224.240483][ T8101] Call Trace: [ 224.243759][ T8101] [ 224.246683][ T8101] dump_stack_lvl+0x241/0x360 [ 224.251464][ T8101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.256659][ T8101] ? __pfx__printk+0x10/0x10 [ 224.261270][ T8101] ? _printk+0xd5/0x120 [ 224.265439][ T8101] ? __init_begin+0x41000/0x41000 [ 224.270481][ T8101] ? vscnprintf+0x5d/0x90 [ 224.274834][ T8101] panic+0x349/0x880 [ 224.278756][ T8101] ? __warn+0x174/0x4d0 [ 224.282923][ T8101] ? __pfx_panic+0x10/0x10 [ 224.287353][ T8101] ? ret_from_fork_asm+0x1a/0x30 [ 224.292308][ T8101] __warn+0x344/0x4d0 [ 224.296906][ T8101] ? __mutex_lock+0xdac/0xee0 [ 224.301680][ T8101] report_bug+0x2b3/0x500 [ 224.306097][ T8101] ? __mutex_lock+0xdac/0xee0 [ 224.310882][ T8101] handle_bug+0x60/0x90 [ 224.315113][ T8101] exc_invalid_op+0x1a/0x50 [ 224.319750][ T8101] asm_exc_invalid_op+0x1a/0x20 [ 224.326084][ T8101] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 224.332106][ T8101] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 224.352007][ T8101] RSP: 0018:ffffc9000c657920 EFLAGS: 00010246 [ 224.358111][ T8101] RAX: b81f2bb00fa49500 RBX: ffff88805c0facb0 RCX: ffff88802b3c1e00 [ 224.366092][ T8101] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 224.374060][ T8101] RBP: ffffc9000c657ab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 224.382029][ T8101] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 224.390003][ T8101] R13: 0000000000000000 R14: 1ffff920018caf38 R15: dffffc0000000000 [ 224.397973][ T8101] ? __warn_printk+0x292/0x360 [ 224.402749][ T8101] ? free_netdev+0x2d9/0x610 [ 224.407336][ T8101] ? __pfx___mutex_lock+0x10/0x10 [ 224.412354][ T8101] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 224.417870][ T8101] ? dev_addr_check+0x6f/0x240 [ 224.423518][ T8101] ? dev_addr_flush+0x192/0x210 [ 224.428463][ T8101] free_netdev+0x2d9/0x610 [ 224.432882][ T8101] netdev_run_todo+0xf21/0x10d0 [ 224.437729][ T8101] ? __pfx_netdev_run_todo+0x10/0x10 [ 224.443007][ T8101] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 224.449241][ T8101] ? down_write+0x18c/0x220 [ 224.453746][ T8101] ? __pfx_down_write+0x10/0x10 [ 224.458619][ T8101] bnep_session+0x2e3c/0x3030 [ 224.463312][ T8101] ? __pfx_bnep_session+0x10/0x10 [ 224.468332][ T8101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.474667][ T8101] ? __pfx_woken_wake_function+0x10/0x10 [ 224.480540][ T8101] ? __kthread_parkme+0x169/0x1d0 [ 224.485560][ T8101] ? __pfx_bnep_session+0x10/0x10 [ 224.490583][ T8101] kthread+0x2f0/0x390 [ 224.494687][ T8101] ? __pfx_bnep_session+0x10/0x10 [ 224.499706][ T8101] ? __pfx_kthread+0x10/0x10 [ 224.504295][ T8101] ret_from_fork+0x4b/0x80 [ 224.508709][ T8101] ? __pfx_kthread+0x10/0x10 [ 224.513302][ T8101] ret_from_fork_asm+0x1a/0x30 [ 224.518072][ T8101] [ 224.521414][ T8101] Kernel Offset: disabled [ 224.525743][ T8101] Rebooting in 86400 seconds..