last executing test programs: 4.482770645s ago: executing program 1 (id=907): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0x50b2, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="1300000000e5848ca19d8fbe206f501b6bca11e7a5f90f0368a7000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000ed850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="422c0900000000001cacb837c6000100786672eec76d000000000c0002800800020002fb3f001400030078660300000000000000000000000000662699b7ba183ab1aed1ed29d03e2c9e5f4ae1c4b38d40cb7a95a408ec9c4a4058d426c2220db3375c05efec8ee8c3047e8f32b8024185d5365816305753f1ddfbdb008de63e03e2804a21dc48e23ae680219b54a1984829b391880d0c8e8c92890fd758b7191bb2d77d826759accc86ae68f00ce8579342"], 0x50}}, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/197, 0xc5}, {&(0x7f0000000200)=""/174, 0xae}], 0x2, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40000040) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000078c0)=@assoc_value={0x0, 0x9}, 0x8) 4.21156775s ago: executing program 0 (id=911): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="54ffb19f76eb6a0ee639ce9ebdbf70f4450f41f5a7f1465366bf741f9b4875c1e02bce35c2f8f82ca3c60da7c0760d60f8df923a123b877c4c21c306f6d272bc4f0d7d0162dfe770bd26ed3789f1e9634802f5237be1bdd55a70063c2990744d4aebb1953833aeb8abd18af2de5d7de191590184b5664fb0337c3e2795fcb0947d05ac8f36a93a7cf8cfec883adfa8d7dcb56b3fe0ca3f39b30e1ff35e580a7e5dcc7e49", 0xa4}, {&(0x7f0000000300)="7234eb32518d574a541206c8c07880146fd0d3bda1014430f6c4ce8a1f8c97d6dce8e81d6dd96a8ab4ee0fa146076e08c8d776416ad2eb6392fd9b5dc75f838fc19ba8e867a9302b19a76e69ab76df4b805289fb7c150a4a09bef4bd18bcd0a4a856281c9d85e6ac83c2992df3989ad1aa125e5e40f521ae46361df37b19c129f6472ee7b597718fea305f852cf2747e3ba7c205cae86d7b8f3494a569bb23e6288f986b50b980cf0178c5d90889384db6e1436e2f", 0xb5}, {&(0x7f0000000080)="f2783d55d61fda6546ba797c4388da33d8cabb23c164347a9d", 0x19}, {&(0x7f0000000100)="7054d3de24884eccf53b404c71114fdaf2", 0x11}, {&(0x7f0000000500)="1d5ef5e21d366681cb0980b1dab3089fc28d62c1fcf9df1f346c4b8e7c3f666ff6f848b424424e9f138d9dec5e42a283740c7672b2b25d6f7fb381710d5a1dd9d20f4a20bf2dbbb41e371f30dbe1eea68ed5ec0276cf14d96c38223fea46ae2d81ac148f91b7b3f58319d80a21a30cdcb658d4c5a8f41235dba16e8bbcf8b973ff453cfde0948abab1ce74fe43c8fb53100576b6cba845bcdd5d613db77c43673e95bb87c5827a0c122e21d35f7fbf76129045094b30139c982ec43b1fcd88601756bf53153cde9d25", 0xc9}], 0x5, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x1018) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) 4.105225122s ago: executing program 2 (id=912): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1c, 0xff, 0x8d41, 0x2, 0x93fa936f2f92b92c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, @value, @void, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b00)={&(0x7f00000007c0)='}P', 0x0, &(0x7f0000000ac0)="265a8f2c42ac4cc4308e17fec64d17d80dd6773669146ee443efcf8a745863dbdda521fc33250f876a92fe758687d6f7bdc6cc942bb7", &(0x7f0000000e40)="2c02cbfa37d5ee783bea621ec7d9f070a8b0fe0f6d3d1f14a17063ab31ac1c2402a94cfa", 0x3, r1}, 0x38) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003700010324bd70028ae79ca907"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2000) listen(r3, 0x7f9) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) listen(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x9, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x2, 0x5, 0x44, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x700, 0x7800, 0x8, 0x5}}) sendmmsg$inet(r8, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000280)="c766ee61c692b298fcea7b60c183cbbe68374adbe41f0ccb1c1d422dc4e61d8e8e6b54269abaad488c60fd3b739a27d0688ad4813eb88571521cde3569bdda18eb94ae561e46c480936063892cff57fe0df56b08a1ae2b3ebd56308ffc0612a0387801e59d2cb98b2988e7e0bd00000000000000d5412c9100b6b05f40ee6030b8eb337d21f9c2d66a560b7c416adc9d398f63a882a2cdd505176620ab769369e4d6bdd93008cb5574e154dfc14f6c624d6682a2addbeca7080082e43e", 0xbd}, {&(0x7f0000000340)="c5bf05bb7d912a3ae5c8719ac6583e8bef0e90a83aa342a587b6c53a7d8c29724e60309f4ec81f2aacaee35b4887032437170a6c54039e2634bb123e0bb65db1f46ae137c274a5f6ec95f5f85bf9795b36d5595644247004edcda0e70deba32cd25903cf087b7b43379ee73d559b31446d12959f994cc596", 0x78}, {&(0x7f00000003c0)="e86e716004580f6b5c799b05e08d37767bb2cb07f5b90224a03d5627c1fbbbc619fb151a5a14c3c7a0b3c1fde8202e8ea233f8c2faa4b5c5ed871b", 0x3b}, {&(0x7f0000000400)="fb8fbd3acd50d7e60b812d01fa2003d8ddcb3327f111f3c7a949c62717b56502b46d6e1002e0b418caa573285950", 0x67}, {&(0x7f0000000440)="b867fafe5c4e45ffa9c05ff57aaafac0329c86291ef862ef44b584786919ac1822bace8354048489ae38629520beb3d2cec61aee3a014230ba3c894a800b63d1a85ac858133c3a6995a11fe2f2", 0x4d}, {&(0x7f00000004c0)="082470b5b40b36f415023a4cb37ad433127ba0d6bb2d567ab890acdf94c10e196ba343b7670c7c6f37bb016445d43fb96833b97ed7", 0x37}, {&(0x7f0000000500)="1bfab800ce50ac1197f7ca511ceab916bd630558d4ba928cd5", 0x19}, {&(0x7f0000000740)="622974d29f445c692b62bb2e790b89ce5ca763ea33f0ef24ab761c879cc6d482925e9eacc0c08d1a06625c538851875165f9dc5fa8356359482b360358629db861ba8cbfe5866c731fb71235f10209fc87", 0x51}, {&(0x7f00000005c0)="0deb9848c5663e9a6d6800eda984d2462154970e38e2dcb56d0c9f95c746e446ec1980a432e1a0b14ba808a7248f261af6b10a6ad05c7862a92eb30cf0b80711e1e537ed93b8e935e6c564cd6a26067715b9534b61d8b2fd3a89a77f9e87d01743ccbdde5547bb", 0x67}, {&(0x7f0000000640)="57fb2988447eda560ffa16866d828bbee46802bd2389fe2bd4aed8f0593dcca57780a73f32b7137a60891b0b0fbc326fbe7edf087879e13b2565afb1acf4989b1c016927560e1a5c893914e7f99e423221a4bb43603747443b48fe215b1727f266c0a4b5fea70fa3f4dcf14c5e2a7340f2a6dc952da6273b03c5b9ed9fb1eeba95f463fb9875ac6dcc22c38314a574b966f6c7cd16055beb67faab9532c500f9f7c3ffab163dbe34ad93048b7f39b087c215b1712486081f3cb73dc68410ae3007444a8d346b61ba01ae9fc29fdb7e9c7feeb2a6bc271517b4e2479b909f53ba227bb63a7e2e28964a3aa200", 0xec}, {&(0x7f0000000540)="aa61b261677a3933557bd838b0c39a2345c0ed24be87383c26f7050384c646ec84c25a97d3c5b975d9362b2c"}, {&(0x7f0000000b40)="da88d6f4521b36c8c60d7f73e6fa850053b4b87eeb9e37496c086a0aa5ed238a49a4684b865cf22be6eaa2f645214a5bf230ba4b08c8f62ae468d69c9a4a6de7d6cdef7b3ab1a3121caebf44c18d167b3668cc20d17a9921b65507f460c0c754e39a1f194b1c254e659526ef5edbbf20b39a6c867ddec0df772d68ceefee4b3c036c391bb7cb6aa081afd33a9c4c2fe3f5dba82af0a48c35a3eda028eb6db490ae7c69641463b40c6c217ae6abf8105b7800dcbabc373aa94392c7e998abdcd152c5459bd506eda7b4445fb0b6014b2fa266e1907de73b5741288bb471cd742f3ed361d5dd690e34e995d136"}, {&(0x7f0000000580)="88f5e7ab980269bf2c0b137c91dd646de0e3995adf2364805d5bb6bbba90c1c87cd3cf0491fe39900fd48ebde045f64f4008c8497a81"}], 0xa, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @local}}}], 0x20}}, {{&(0x7f0000000900)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000940)="ba09e675d90bc8b060d10f54ba077595c203b88b16492025366211083ab130f2a476a3beca8007ae49a1e03cd21665fe37a8b80cb2df1d1256d8b2c6a0dd560fe915240ac91f3c9fb64ab854935c66c4abd189c8536b6296492ead58580a20131bff840a55744f1ee5469539421a99190d6135816d3d26eddca1c4", 0x7b}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r11, @local, @rand_addr=0x64010100}}}], 0x30}}], 0x2, 0x8014) 4.013805043s ago: executing program 1 (id=914): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000383a00fe800000000000000000000000000002ff0200000000000000000000000000010300907801000000614c4a6e000533fffe80000010000000000000000000002afe8000000000000000000000009820aa3c00040002080700"], 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fe000005000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000020601080000000000000000020000000c000300686173683a6970008900020073bd00000000000000000780080006400000000705000500020000000500010006000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) close(0x3) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "208b7029061c96991dce1a45b0abb4ad"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[], 0xffdd) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) 3.908959501s ago: executing program 2 (id=915): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) (fail_nth: 16) shutdown(0xffffffffffffffff, 0x7be3fc410e09e21c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_mreqsrc(r3, 0x0, 0xe, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x400) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x71, "cc46c5017b8fc8333e99b409f72f8374df3465871ad4433412779314b35aefe9e2b4c3ba6325b91a974c3d9bee0d0f4a8c172af5e5e74a6096fcaa4c074e46846da9741987aac25ad18d4a88a12afe70626589e311c3b938f9351a4862273b315705ec0a2649f3287694b288d61e181dad"}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.206492619s ago: executing program 3 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x8917, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010124bd7000000000002b00000008000300", @ANYRES32=r1, @ANYBLOB="feff3400c400040004002a004ad3a61096cce9a334fbdadf584b7196e932bab8910f92688d3e6501998af9af04556784a3ba5002a2525beb85b6b95ae4c9c1c2ff9024f4d95647f007dd98406667842b3a4a06b2db07011f627cd00417923ec019726c0c3620fbe11608e91775c097009a64b82b000000000000000000000000000000000000007734bb9c8c00166b35a2c2"], 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x800000, 0x3, 0x3}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002bbd7000fddbdf2115000000080003008e0c6aa4772e7395385ce66dc2336a509693db3b530ab128aabbf6cd798c4026f0aab4b3029dbb3d84bad8349c13595ad7ae9b1f30f63eb399add5f3325d56024f43e0e4b4040000008bf382a011dc5639d7c6691f4e00b0193a427e82943f73c1721e152df59e4eab0a380ed981010bbd3aa32b88e451d0b9b37610bc554b086d48", @ANYRES32=r1, @ANYBLOB="0c00990007000000220000000a000600ffffffffffff00000a001a000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4008805) 3.129036498s ago: executing program 0 (id=920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x7000000}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3.083471417s ago: executing program 4 (id=921): syz_emit_ethernet(0xd6, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x46, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x9, "f7d11634eea26b"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 3.082897665s ago: executing program 2 (id=922): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000000880000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x20, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/58, 0x3a}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) close(r8) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000040)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_ife={0xc0, 0x1, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 2.957331489s ago: executing program 0 (id=923): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) nanosleep(&(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)) r4 = socket(0x1e, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0xe4) shutdown(r4, 0x0) read(r4, &(0x7f0000000140)=""/154, 0x9a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000240)=0xfe0000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x80d1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000280)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.925117205s ago: executing program 4 (id=924): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x6) write$cgroup_subtree(r3, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020a0000000000000000000000030006000000000002000000526524e0000002000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000"], 0x50}, 0x1, 0x7}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000000)=0x800, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x22020400) unshare(0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000008000000140001800800050000001100040001"], 0x28}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000280)) r10 = accept4$unix(r6, &(0x7f00000002c0)=@abs, &(0x7f0000000380)=0x6e, 0x80800) ioctl$BTRFS_IOC_SNAP_CREATE(r10, 0x50009401, &(0x7f0000000540)={{r1}, "3508d7a332e9159d0b443b6c54749b0a2848792eb577a8cd3dfffb5c47325804c8d195ef29fd8716fdc1c6ef2005cd60ad9a9736b085b4c224259766f00e980bfaa46ac3fa15ea29ef2ac31caf8e10eab8c0a656a6da484c5483d97a9864b9d69249dc4c40b1e34c467aee10add1de5395c42a90f1e837c560854c65551357c15f92171eaccc70fb2a6fdc40f33286088a93ff5a16fff1a352b21d23365d86b2d9a191d475f78edb3119cb9c9fbbd1905e2a93a90dd56edcb0b4454b1beced85a38c13d367faa591e294ac73926826ae9ae389d76c1ff5a318404e41a419b7b2482ef9899c5e5fa70248ba15b7e3019e16799a4559ea43f117d8401d3aa85a214872713f93e5df2e1e71e6f12b01b87271da61f1da14114b58f7fcd518c0bb329b110fe8923b61f5fea1bdf1a3a7a3b066497089bed498e343ea42f5a4bba6df8e361a627df81a7bdefb707f8a3191a736150cdde3a4a032ce7d258616ae38527f306f8cab91ce6ddae24997b705b9cf4c90cfdf74d0bc33cbf4511a138a03bc21253974552a2e8aa0d449fdb85c155cfe335250ecaee94c1357e0a6e3d28073b7a4c52f95bf05762c20c837a0338d930d71ea646701a39700215da739425f7c5fe1c8fc8d082458e4b2560a1f4ec5c7124c6ff9c2907cfa3cc3a7796a171472f6051041fd73aafe0c10ccbeaca8a4acab142b584916f9ec51674f954127e76886f758c541947295c7c9d35dc92c87a58131ea51df1bb9d0651d837e3632959a748016dc2e61422f95cb9c4dd9eb953f3e1be35b9e5e6014eafd73f30d260ef199be24024a20c1c30f485ef7c32cf7ed0119e03efaf387298f2a3a1141e28fc7b00eb83fc6f941ab760aea7afab1b8609af85e2403535f0c6dd53e90c9100981a1e180f8ddfbe7b9f491e3721fe1ebb157b85beafa0aed53b0373a3a0c51670f0069f74c65d7d7d877d6748f35f3bc39335efa6b0add0b59f9069a609c5a0a1fdce9bd2b154a4ee911ef310a791896f5408971bae4c5cd85dd3017ac1e771024592a6a1cc5328ba66918049aabf1209e05f5602740ee16fcb02a33031c335a7e4d3ce9a050d8f12b051c03ee5112b846931aa1669baf71224a0d15ef49b6b22a319504524c85ad9b65129016e65de0307dfd5783fc23045b70e30d4066909edd6e37a580bafe05625da5132ad60fc4256a33047dec8d11d89b506698a01e4e3f5f73587423da22a59a751b6513fa5401a112ff9353d8449aa372e0033ab6e35472aae0f15f65485dae2ac7e2376dc06fcb126b3ecd76df2ba43787872dc6c079e8711ad8e21586cc4e20b6c46c9ef89e250d46daf10509a6569c5d8a3d6d463b69a3eaa5fdd94be63b439d5265552956b0acc931fcd17d1add630945947cd4b71b7afec7e413506d59272ed00934d40e58ab7a57caae7e9ffe4abee76c2c65d743cb25f5e64564431c7861d436a9c668ef38a151a2f36ff24c63c33d31b18e17275b162f6ec00856d4a018343d0f7ec477a18ec6e2c880e95e0c8bfb2efad0d7368e3f54f6a622106b3ca2b9e80b3c49f29a8fef96b4ea56c9ac3a5451be774a1dc3f945125e23d9a16fae2fc527c3d0704ac5388fddaa87c31ef45298a994c881b8ee2ef49608d9653fc0b9eed0f6216f56067f4fbf79335a211ed508465f592ef014b65e8e39ef74032e4ab425b4c292c8b015cc693e15f68832f8a6fc66a9adde4c0dd332b17fb14016573cf6cee034c8c7edf95ce5b8bb7ad467626fd7cb3830a4a62de38b72abc0d52926802e2c6f7764f8d1d26600a593623b217044d5774ff8df2ea187f57672d9f4db296599363e362fd3f29e5e4ab7d8fd2e40c8a352ac63b69bf1dc81e17e6d3c55c7a7cfa09915faf43c45e586ec4d37ac4d34d7efe1bd53f96e6fea0162a637ed4e99d6cd96b57f430da2d23a9f40beec43898a86dc3bdfc787e0f073cd9b8c6609040b64be2a95f584816de7b65ef8e67752f565759c11be3c780f995435daaf79d911c6d93bea52f8f178bd728027498cad645915d6c17d5522d7d86d4bf4e4cc6bc98d336d01447067d540da9bcf6902641435eb3cd4efee0fd98b12ee45f2fbfd08bbad71a0e617cd55f29143510d204a408b15b9275241b994e3825c0cd522dea3dda36f721c0c0e2fa9334803f0e7f9169e8a50460d579eb4215c58ced91a0f6ae2be2aeae53848de92d3fd17612164ce3c20e333081ed8daa2e7093e535897794f1bde5f87190bb9e4ebc402b92a7ec2499e60fa0d45aa9f0db5bc566b805c8c8369388702780d6e34c04a13635226dda1f38b9bc4a851bf4b9c737668b3ab78c2272dded2377a2c53360acc3df5212c667bed9955fdda550effeb9c08643bc997f33c7fd93e26d61c245064d57f500f9f052e329074095cb55f2c693286d5a0fee8046c7668acec8313c29db25c17898d87788060674a0944ee0a61f62dd2d55efa23ccb19a75d2f87f6486ef86c47ec0aadb6536eef13395b34a32210342ba97929409e7cc7414b501576452347c0d93f259ce0056fc8232d87efc28a4a98bdf4f9f1cb04c6d943d5354ffca3fc3bc482fccfd1c97b8fa1ea92b3a0d30029896040ddd90eed79354764e6cae2b23d0a9f4c20b43128cb77aba14eb82e856ee3aae9732cc74454f3370f0ddc7b056d4dc7b4967298a6e84e10eb4253cc8eb5c1bd7225e8d63079b77239aa1b73156fd2526ddc9cfaeb85babc1735f93e5c4c1c57c75e2d59be361415c3798ea3c3b2aab554735ed49282739c25c3db36f551ea654847140334644fcf51e18acbb105b7c39c8ccf456581fb91f9f28a6b7677b47b71c6d04e1d431c0a2e7f0d84922384bfb0be1092aa90e272e5a13ffc8988a58fc952e5e2767afa615da94becf689bd06d54125e0aa34d8200f63c31befd094001f39d3e682b3c5dcea7e7ff8db8df761c248f0abf25f9a62c9947fac8487f69bacfb215eaecab8b62fb385a58718ead502b5f1f4a82ba16b182238e8cce01731866df17514136eac3bd05d27cfef5788af5a5896a2967ac8b3ecaf8d71a389206662e9f72680057de251547a197277dff0b2b7d653da9828062edf94faaa519038665e2db689c476fc42d8a12a70e6026778327803af016feb2a31946c9bf94e4dc49aefbb75ce784d6bf90da4df71131ef491992f291e06f6c87cc5834d383aa179a036e83ab56c3ebdd1ec8e4cef63550726adf36e330ac3fef551413ba2b877ae5202f00c6337792309350d8378f862f25a268841d0ed27f0d1b94706784d4d9ca7a0bf62660449da99848478b91b981540588716f2b672f9e14d16317d99ae8d62980921e790ab388cdbe46082a452005a1061d815ed6941d3c9c1308204259132b935e38bc6d15d5570a9a61f4cde6673514d4740e68c0e6a97c07de4418a6a5f1f7ff67ba008b090abc9362685f0482c6576c87aa8219334649392e2b8adc9b1a54f9911fd1ed10181d1f549adc0ec9786f92e2565c5b4715e100e1bdf85843f86dd06d6007dc7a536f1aa63bdd4b06d31c7f986b9baa13887b3668ce34907dac212d6ab57b1124b822565afa6073e749bbca2e6dca237fc2e28aa94a6c17260d4d41783f6844292c913fbe0f73bd682e48573a8890b445a0e96f7e8c14f76f59e9ac80122deb2bc92bf0eda14ca0cd21d22bb046006d4460ffc48f43ae278635daba3112125807e8360aae12e57bf200d38fba4cd41eb35165499f05bf737e2d08b5c497396b53eca537e3757554b81dcfe1e138b2aa47935514da62e86b25cf60503142b64fbf73625b7efa68a8b16517f1a593544785d1523bfd1d3712196db203f8e9a5bb738cb7d8e77e57eafbe59d0f0f43a2f57b9de71f936c01bb261bbaa57ca514612ec314d6796cb29de2ae21d47cf99fd1d4516da8adada10ceb783c1dd77791b1f1b41fa3b367da600de2eacab0eb18680b7363c8705d81c656c2b158119e31f8ae916af1ebcfc2f03fa6473e5876f20b5e70f650d3a3ebbc6b63e6a53ebe5f4f451fede081b07c5e11014c7b8cf07fb5b784fdff7397b9e7a43ca47e817331de8b0c44cdbac4932092656cbdebdd5102ad1cfbf136358cca9b220199c331de04b203299dd92534e516e6b225c496164686e85d0cbbb84f40cfc414f64126d65c428fdbe1a694e43c71ae40d07c9871546391d6793518e33fd232f8356ab046dd1544185a66433d3db3208b3361cf7ec3f810a0bff829d86a168f44d5cb7d59774d86384813605368f13aef2eb3e565fa0babcaf31b9113588fd9ae888e7c85a8db90e5d0100db124d243e5c3c75990c5f73bed4dcf3e44767a62db7cea81d829812993b7624c6c4a3ec55594af6dfa780e8f924caee32806e8ac76b59f5f526d5ecd8a9c8bb1eff29088e37e10da6872d7c05655afb641f90b332fb6310801a36dd9da57fad40aa0306006d3ec4c97b1a06e97ee1827dcba2de0a6e4fd53227b2e3e5bba00a9f3f4f9e4793b2253e624a59c73a82aed1da43eff933238f282420fb2d94aad08581d61a2efc43c41941bbc41536a2454bb6a714b6872e38ef0793d9a9b858c1a94d63fa6c1b2813ecef92e7b8db76025b6bb6bbcd64fcb9a3ad2b09d4883356e7e9188e570260d7e27a00ba29b12abfbcc7937528b20706a34256e6e0648ed833ac4bda6ca531be3c40a7a2dcce3ed481fcb918546ddad6d150451af13d5cc27283f5c1771ebbf8c7753c76848262464079265f86bd239c3cf283b22650bb961810ab40980f2af3f3126becc7538492cbeda6acca5baf6a18c5a26f7640abd8a164edcf5fde0a14a700d17d1a24ab57b9b6163e2b818721d4445430b6082beda171b60741efe5bf05e80eb248f2f5dec665f58e089b7fa82a22b43927cf459a64c2fa68b7b2023b8a739c60cb24de166effc59062170376e1f2028010f0e2fb8744dd0de09535035919e95388bd1ba19e530f8403f85e45f4381fd581966dd940acca21de29be6e1e1c1bb0da9043b84ae4e559cdbb24ce4da692fe68441a68f373d27782207b9e2bf98b645e73c61d1c20cf7b6db350462c0da4f928832262b86d3eb1db9a8ac2c300d14f16e0cfea4923ecfa0ec3d681804c4daffb15c8778ccf9cd55271eb79fbedad30616819dccb910e363920f6f34e80cb7a49d8645fa50911e50906d148766839514443448010090b1b872e8617973f236aa88059721c5d927b87668866c9552d5d5580e65e6e000c7d729be5ead5dbc4e76c11ae04ddef6e73c5f9a9262f47aec9ae82caa9a9f5762d642ac28255b1513a164ac22ec07205d60da0dbdcf1fc08ebff028350b72a12d77c206a672b0bfdcf1f38c7aae0ddf14717b62d8ca84e81d70014354fa3949cc35501b8d6823f0739457570c94a10ff0446017f4e0ff97ab8251a89562faa9898fea0696aa5cfc3351ca7456f5a702b2b9685d74d35bee55dc4ae858dce6f190c16c8443e7fee0aa5c75a37a7d351a2440c7fabb8fb80f6775125c5753f1034b58769789ecc42c48da4f0304d79177b7aeb6adf2343e623a83878acf65c6e216652d3ddb298bb833a9e9115b71415ca822a33174d9cd3a5b7ed0ad699fb42bd2928ab02c5595d1753be0116fe6f0950a48cad8fd8fd41b89c4ae0b479f2749c38df7553b1ebd1b7151a4a5b6c1e97c4d60b6e3f6993272e6b5ec1927bd4e6a0216784c2a011562ccef41ae024d27d3154c761ef604f39be46b215178e10d66bf9e2976e57bf6c77b9a655ae9a029e0d5475673d335a1eafd25e139bdfb91fa1611b49886"}) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084d98ca90000c428e254aae112ccf784"], 0x30}], 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'virt_wifi0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x204e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008080}, 0xc1) 2.755401902s ago: executing program 4 (id=925): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x5, 0xa, 0x0, 0x1, 0xfffffffffffffffe, 0x4000400, 0x9, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x400000}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r2, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x20, 0x1, 0x101, 0x3, {{0x36, 0x4, 0x2, 0x7, 0xd8, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, {[@timestamp_addr={0x44, 0x14, 0xc4, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x5}, {@broadcast, 0x9}]}, @noop, @timestamp_addr={0x44, 0x34, 0xd, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4}, {@multicast1}, {@loopback, 0x21f6}, {@loopback, 0x90}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @cipso={0x86, 0x3a, 0xfffffffffffffffd, [{0x6, 0x6, "9c974e5e"}, {0x7, 0x2}, {0x1, 0xb, "dc8f2412c2d4b7a675"}, {0x2, 0x10, "9ca56a56c1245c54dfd6f0142956"}, {0x0, 0x11, "81da23e0c22c736c141bff26ec3f60"}]}, @cipso={0x86, 0x3b, 0x1, [{0x7, 0x5, "0516e2"}, {0x7, 0x12, "d20add1737fc82c119bb334fd75a5efb"}, {0x2, 0x9, "630b4e04be9667"}, {0x5, 0x6, "74c23dd3"}, {0x0, 0xb, "16e97613b7bedda247"}, {0x5, 0x4, "18b6"}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x4, 0x3ff, 0x1, @remote, @empty, 0x700, 0x7f87, 0x3, 0x1}}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0xf4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0xcc, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xbc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x101}}]}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x96, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xef15, 0x401}}]}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0xf4}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x40010, r0, 0xb3027000) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0xd}, {0x5, 0xf}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20040054) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r16, 0x800452d3, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)={0x1e8, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffffd4, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24000000}, 0xc8d0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2.735420692s ago: executing program 2 (id=926): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1c, 0xff, 0x8d41, 0x2, 0x93fa936f2f92b92c, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, @value, @void, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b00)={&(0x7f00000007c0)='}P', 0x0, &(0x7f0000000ac0)="265a8f2c42ac4cc4308e17fec64d17d80dd6773669146ee443efcf8a745863dbdda521fc33250f876a92fe758687d6f7bdc6cc942bb7", &(0x7f0000000e40)="2c02cbfa37d5ee783bea621ec7d9f070a8b0fe0f6d3d1f14a17063ab31ac1c2402a94cfa", 0x3, r1}, 0x38) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003700010324bd70028ae79ca907"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2000) listen(r3, 0x7f9) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) listen(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x9, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x2, 0x5, 0x44, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x700, 0x7800, 0x8, 0x5}}) sendmmsg$inet(r8, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000280)="c766ee61c692b298fcea7b60c183cbbe68374adbe41f0ccb1c1d422dc4e61d8e8e6b54269abaad488c60fd3b739a27d0688ad4813eb88571521cde3569bdda18eb94ae561e46c480936063892cff57fe0df56b08a1ae2b3ebd56308ffc0612a0387801e59d2cb98b2988e7e0bd00000000000000d5412c9100b6b05f40ee6030b8eb337d21f9c2d66a560b7c416adc9d398f63a882a2cdd505176620ab769369e4d6bdd93008cb5574e154dfc14f6c624d6682a2addbeca7080082e43e", 0xbd}, {&(0x7f0000000340)="c5bf05bb7d912a3ae5c8719ac6583e8bef0e90a83aa342a587b6c53a7d8c29724e60309f4ec81f2aacaee35b4887032437170a6c54039e2634bb123e0bb65db1f46ae137c274a5f6ec95f5f85bf9795b36d5595644247004edcda0e70deba32cd25903cf087b7b43379ee73d559b31446d12959f994cc596", 0x78}, {&(0x7f00000003c0)="e86e716004580f6b5c799b05e08d37767bb2cb07f5b90224a03d5627c1fbbbc619fb151a5a14c3c7a0b3c1fde8202e8ea233f8c2faa4b5c5ed871b", 0x3b}, {&(0x7f0000000400)="fb8fbd3acd50d7e60b812d01fa2003d8ddcb3327f111f3c7a949c62717b56502b46d6e1002e0b418caa573285950", 0x67}, {&(0x7f0000000440)="b867fafe5c4e45ffa9c05ff57aaafac0329c86291ef862ef44b584786919ac1822bace8354048489ae38629520beb3d2cec61aee3a014230ba3c894a800b63d1a85ac858133c3a6995a11fe2f2", 0x4d}, {&(0x7f00000004c0)="082470b5b40b36f415023a4cb37ad433127ba0d6bb2d567ab890acdf94c10e196ba343b7670c7c6f37bb016445d43fb96833b97ed7", 0x37}, {&(0x7f0000000500)="1bfab800ce50ac1197f7ca511ceab916bd630558d4ba928cd5", 0x19}, {&(0x7f0000000740)="622974d29f445c692b62bb2e790b89ce5ca763ea33f0ef24ab761c879cc6d482925e9eacc0c08d1a06625c538851875165f9dc5fa8356359482b360358629db861ba8cbfe5866c731fb71235f10209fc87", 0x51}, {&(0x7f00000005c0)="0deb9848c5663e9a6d6800eda984d2462154970e38e2dcb56d0c9f95c746e446ec1980a432e1a0b14ba808a7248f261af6b10a6ad05c7862a92eb30cf0b80711e1e537ed93b8e935e6c564cd6a26067715b9534b61d8b2fd3a89a77f9e87d01743ccbdde5547bb", 0x67}, {&(0x7f0000000640)="57fb2988447eda560ffa16866d828bbee46802bd2389fe2bd4aed8f0593dcca57780a73f32b7137a60891b0b0fbc326fbe7edf087879e13b2565afb1acf4989b1c016927560e1a5c893914e7f99e423221a4bb43603747443b48fe215b1727f266c0a4b5fea70fa3f4dcf14c5e2a7340f2a6dc952da6273b03c5b9ed9fb1eeba95f463fb9875ac6dcc22c38314a574b966f6c7cd16055beb67faab9532c500f9f7c3ffab163dbe34ad93048b7f39b087c215b1712486081f3cb73dc68410ae3007444a8d346b61ba01ae9fc29fdb7e9c7feeb2a6bc271517b4e2479b909f53ba227bb63a7e2e28964a3aa200", 0xec}, {&(0x7f0000000540)="aa61b261677a3933557bd838b0c39a2345c0ed24be87383c26f7050384c646ec84c25a97d3c5b975d9362b2c"}, {&(0x7f0000000b40)="da88d6f4521b36c8c60d7f73e6fa850053b4b87eeb9e37496c086a0aa5ed238a49a4684b865cf22be6eaa2f645214a5bf230ba4b08c8f62ae468d69c9a4a6de7d6cdef7b3ab1a3121caebf44c18d167b3668cc20d17a9921b65507f460c0c754e39a1f194b1c254e659526ef5edbbf20b39a6c867ddec0df772d68ceefee4b3c036c391bb7cb6aa081afd33a9c4c2fe3f5dba82af0a48c35a3eda028eb6db490ae7c69641463b40c6c217ae6abf8105b7800dcbabc373aa94392c7e998abdcd152c5459bd506eda7b4445fb0b6014b2fa266e1907de73b5741288bb471cd742f3ed361d5dd690e34e995d136"}, {&(0x7f0000000580)="88f5e7ab980269bf2c0b137c91dd646de0e3995adf2364805d5bb6bbba90c1c87cd3cf0491fe39900fd48ebde045f64f4008c8497a81"}], 0xa, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @local}}}], 0x20}}, {{&(0x7f0000000900)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000940)="ba09e675d90bc8b060d10f54ba077595c203b88b16492025366211083ab130f2a476a3beca8007ae49a1e03cd21665fe37a8b80cb2df1d1256d8b2c6a0dd560fe915240ac91f3c9fb64ab854935c66c4abd189c8536b6296492ead58580a20131bff840a55744f1ee5469539421a99190d6135816d3d26eddca1c4", 0x7b}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r11, @local, @rand_addr=0x64010100}}}], 0x30}}], 0x2, 0x8014) 2.00323382s ago: executing program 0 (id=927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe3, 0x3]}}, 0x5c) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095e3ffffff000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000080) unshare(0x20000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r8, 0x29, 0x12, 0x0, &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1.097719559s ago: executing program 4 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.063135125s ago: executing program 2 (id=929): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x0) shutdown(0xffffffffffffffff, 0x7be3fc410e09e21c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x0, 0xbef7, 0x1, r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_mreqsrc(r5, 0x0, 0xe, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x400) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x71, "cc46c5017b8fc8333e99b409f72f8374df3465871ad4433412779314b35aefe9e2b4c3ba6325b91a974c3d9bee0d0f4a8c172af5e5e74a6096fcaa4c074e46846da9741987aac25ad18d4a88a12afe70626589e311c3b938f9351a4862273b315705ec0a2649f3287694b288d61e181dad"}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1.034880888s ago: executing program 3 (id=930): r0 = socket(0x2b, 0x80801, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x6}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'wg1\x00'}, 0x18) 1.034243143s ago: executing program 1 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f0000001a00)=""/247, 0xf7}, {&(0x7f0000001440)=""/197, 0xc5}, {&(0x7f0000001340)=""/71, 0x47}], 0x6}, 0x5}], 0x1, 0x100, 0x0) 959.189996ms ago: executing program 0 (id=932): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = socket$kcm(0x2b, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x4, &(0x7f0000000300)=[{0x6, 0x8, 0xf7, 0x8000}, {0x1, 0x9, 0x62, 0x3}, {0xb, 0x8, 0x0, 0x33c}, {0x200, 0xff, 0x0, 0xffff}]}, 0x10) getpeername$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d00000005002e00000000000c000500000000000000000008000200", @ANYRES32=r6, @ANYBLOB="08002f000000000005002b"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000007dc3d77a0800000000002b110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x1, 0x20000000000, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc020000000000000000000000000000fe8000000000f64d00000000000000aa670000000000000021000000ff989078753cd0c8de0b478c6e113aeb0d87aedaaa7fc9ff6d5c552b221003a116fd267778b7e186d69b1c57"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="240000002c0001000000000000000000040000800e0011802fe5afbf24fbcccc552f000021cd86b817261ea6c5e168c3376965b2aa1aecd7932587b9b1073ce0558f2653e7c96e39a06f998432717fe6bb188be639ad6ba7111663d31cda95c20f515f301a183de5987815ca51f46cf2453514e7324cd10c2fbee3bab16b94fbc93db9b0578f0b921c2a7f9b52a2c7eecc44260fbba4c5b880fa9bb5d8e519be0e72efc471965a02801da0ad29d6c6ccf5532abc11bd950fe9c6bf95"], 0x24}], 0x1}, 0x0) 923.328756ms ago: executing program 4 (id=933): pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x5e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x5e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @broadcast, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', r2, 0x4, 0x80, 0x6, 0x1000, 0x62, @loopback, @loopback, 0x80, 0x20, 0xfffffffa, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', r2, 0x4, 0x80, 0x6, 0x1000, 0x62, @loopback, @loopback, 0x80, 0x20, 0xfffffffa, 0x7}}) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r4, 0x0, 0x2, 0x0) (async) openat$cgroup_type(r4, 0x0, 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), &(0x7f0000000340)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r7, 0x0) (async) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000003, 0x13, 0xffffffffffffffff, 0xfffff000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) mkdirat$cgroup(r5, &(0x7f0000000240)='syz1\x00', 0x1ff) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 874.093981ms ago: executing program 1 (id=934): syz_emit_ethernet(0xd6, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x46, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x9, "f7d11634eea26b"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 807.243623ms ago: executing program 3 (id=935): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x6) write$cgroup_subtree(r3, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020a0000000000000000000000030006000000000002000000526524e0000002000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000"], 0x50}, 0x1, 0x7}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000000)=0x800, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x22020400) unshare(0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000008000000140001800800050000001100040001"], 0x28}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000280)) r10 = accept4$unix(r6, &(0x7f00000002c0)=@abs, &(0x7f0000000380)=0x6e, 0x80800) ioctl$BTRFS_IOC_SNAP_CREATE(r10, 0x50009401, &(0x7f0000000540)={{r1}, "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"}) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000000084d98ca90000c428e254aae112ccf784"], 0x30}], 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'virt_wifi0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x204e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008080}, 0xc1) 734.963814ms ago: executing program 1 (id=936): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f0000001a00)=""/247, 0xf7}, {&(0x7f0000001340)=""/71, 0x47}], 0x4}, 0x5}], 0x1, 0x100, 0x0) 539.931773ms ago: executing program 1 (id=937): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2e4, 0x30, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{0x2d0, 0x1, [@m_nat={0xb8, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x678e, 0x8, 0x401, 0x7}, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, 0xff, 0x1}}]}, {0x65, 0x6, "22f8041133b73c8aea5c5688dbba84d22497a97c5283662e93bb7ebc1355b877d4ae5fd87a74d2ba911a1aa914cbc54186ccbcc807990cd8f2824a6a7ef12ef2cca086806b5b015e0f7b7d33f319419fc6ac5cf90c6b01d3bd08ba8952c5b159ff"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x14c, 0x1f, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xd, 0x0, 0x1, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0xbebe, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x407, 0x4, 0x6, 0xba, 0x7fff}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff3df, 0x6, 0xffffffffffffffff, 0x4, 0x3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0x4685, 0x7fffdfff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a302503, 0x188e, 0x0, 0x800, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9fa, 0x0, 0xc299, 0x9}, 0x79a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x30, 0x4, 0xffffffffffffffff, 0x9, 0x8}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x269c, 0x0, 0x7, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0xff, 0x10000000, 0x44d9, 0xfffffe01}, 0xe54}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_sample={0x98, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x69, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69db801c8d08e1d6ea90e03c637d4dc6a17cefee6540c36dba"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2e4}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x22, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$unix(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$tipc(r0, &(0x7f0000000e80)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040000}, 0x44000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r9, 0x8b20, &(0x7f0000000040)) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001d0000000c000600020000000000000008000300", @ANYRES32=r11, @ANYBLOB="24002f800c002c3ff23d677102000200aaaaaaaaaaaa0c0002000203aaaaaaaaaaaa0800010006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) 456.393333ms ago: executing program 4 (id=938): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0x50b2, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="1300000000e5848ca19d8fbe206f501b6bca11e7a5f90f0368a7000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000ed850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="422c0900000000001cacb837c6000100786672eec76d000000000c0002800800020002fb3f001400030078660300000000000000000000000000662699b7ba183ab1aed1ed29d03e2c9e5f4ae1c4b38d40cb7a95a408ec9c4a4058d426c2220db3375c05efec8ee8c3047e8f32b8024185d5365816305753f1ddfbdb008de63e03e2804a21dc48e23ae680219b54a1984829b391880d0c8e8c92890fd758b7191bb2d77d826759accc86ae68f00ce8579342"], 0x50}}, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/197, 0xc5}, {&(0x7f0000000200)=""/174, 0xae}], 0x2, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40000040) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000078c0)=@assoc_value={0x0, 0x9}, 0x8) 411.885127ms ago: executing program 2 (id=939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x140c, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6a040000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x20}, 0xe900) listen(r3, 0xfff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r3, 0x6, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r9, @ANYRES16=r6], 0x4c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r10, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r11}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r12}, @generic={0x66, 0x0, 0x0, 0x0, 0xfffc0000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x62318492}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYRES16=r5, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r6, @ANYRES32=r3], 0x20}}, 0x40080) 393.139241ms ago: executing program 3 (id=940): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000000080, 0x0, 0x0, 0x2000000000b0, 0x200000000314], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000100000000000001979b5000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200000001003629f5cd0000"]}, 0x108) 251.498677ms ago: executing program 3 (id=941): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x3b, @empty, 0x4e24, 0x2, 'wlc\x00', 0x20, 0xc9, 0x78}, 0x2c) (fail_nth: 7) 175.497807ms ago: executing program 3 (id=942): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000383a00fe800000000000000000000000000002ff0200000000000000000000000000010300907801000000614c4a6e000533fffe80000010000000000000000000002afe8000000000000000000000009820aa3c00040002080700"], 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000", @ANYRES32=0x0, @ANYBLOB="fe000005000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000020601080000000000000000020000000c000300686173683a6970008900020073bd00000000000000000780080006400000000705000500020000000500010006000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) close(0x3) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "208b7029061c96991dce1a45b0abb4ad"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[], 0xffdd) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) 0s ago: executing program 0 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.287692][ T6046] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 93.287723][ T6046] ? gup_fast_fallback+0x207e/0x29c0 [ 93.287754][ T6046] gup_fast_fallback+0x2266/0x29c0 [ 93.287816][ T6046] ? __pfx_gup_fast_fallback+0x10/0x10 [ 93.287862][ T6046] ? __pfx___schedule+0x10/0x10 [ 93.287892][ T6046] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.287930][ T6046] ? mark_lock+0x9a/0x360 [ 93.287959][ T6046] ? is_valid_gup_args+0x124/0x200 [ 93.287990][ T6046] pin_user_pages_fast+0xcc/0x160 [ 93.288022][ T6046] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 93.288056][ T6046] ? irqentry_exit+0x63/0x90 [ 93.288087][ T6046] iov_iter_extract_pages+0x3bb/0x5c0 [ 93.288118][ T6046] extract_iter_to_sg+0xea6/0x2650 [ 93.288153][ T6046] ? sg_next+0x7d/0xb0 [ 93.288187][ T6046] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 93.288241][ T6046] ? unpin_user_page+0xe0/0x1e0 [ 93.288266][ T6046] ? __pfx_unpin_user_page+0x10/0x10 [ 93.288298][ T6046] ? unpin_user_page+0x5/0x1e0 [ 93.288326][ T6046] ? __asan_memset+0x23/0x50 [ 93.288357][ T6046] hash_sendmsg+0x513/0x1110 [ 93.288405][ T6046] ? __pfx_hash_sendmsg+0x10/0x10 [ 93.288429][ T6046] __sock_sendmsg+0x221/0x270 [ 93.288459][ T6046] __sys_sendto+0x363/0x4c0 [ 93.288496][ T6046] ? __pfx___sys_sendto+0x10/0x10 [ 93.288542][ T6046] ? __fget_files+0x2a/0x410 [ 93.288575][ T6046] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.288607][ T6046] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.288643][ T6046] __x64_sys_sendto+0xde/0x100 [ 93.288678][ T6046] do_syscall_64+0xf3/0x230 [ 93.288707][ T6046] ? clear_bhb_loop+0x35/0x90 [ 93.288740][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.288768][ T6046] RIP: 0033:0x7f66aef8cde9 [ 93.288792][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.288810][ T6046] RSP: 002b:00007f66afd71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 93.288832][ T6046] RAX: ffffffffffffffda RBX: 00007f66af1a5fa0 RCX: 00007f66aef8cde9 [ 93.288847][ T6046] RDX: 00000000fffffd56 RSI: 00002000000004c0 RDI: 0000000000000004 [ 93.288860][ T6046] RBP: 00007f66afd71090 R08: 0000000000000000 R09: 0000000000000000 [ 93.288872][ T6046] R10: 00000000000180d4 R11: 0000000000000246 R12: 0000000000000002 [ 93.288884][ T6046] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 93.288916][ T6046] [ 94.041067][ T6040] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.066435][ T6040] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.097303][ T6040] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.105712][ T6040] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.377604][ T5994] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620084][ T6068] veth3: entered promiscuous mode [ 94.657767][ T6068] veth3: entered allmulticast mode [ 94.694620][ T6068] bond0: (slave veth3): Enslaving as an active interface with an up link [ 94.776755][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 94.866332][ T6073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.904840][ T6073] xt_TCPMSS: Only works on TCP SYN packets [ 94.946695][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42'. [ 95.205728][ T6082] IPVS: length: 249 != 8 [ 95.503129][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 95.543538][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 95.635748][ T6086] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 96.101823][ T6108] netlink: 596 bytes leftover after parsing attributes in process `syz.0.52'. [ 97.927494][ T6107] netlink: 'syz.0.52': attribute type 29 has an invalid length. [ 98.154250][ T6115] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 98.173290][ T6111] delete_channel: no stack [ 98.279776][ T6116] tipc: Started in network mode [ 98.284836][ T6116] tipc: Node identity ac1414aa, cluster identity 4711 [ 98.324260][ T6116] tipc: Enabled bearer , priority 10 [ 99.465032][ T6140] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 99.759499][ T6118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.910893][ T978] tipc: Node number set to 2886997162 [ 100.961525][ T6156] nftables ruleset with unbound chain [ 101.144089][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 101.150914][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 101.327620][ T6162] __nla_validate_parse: 2 callbacks suppressed [ 101.327643][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'. [ 101.546452][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 101.604122][ T6169] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 101.642409][ T6172] netlink: 100 bytes leftover after parsing attributes in process `syz.1.73'. [ 101.688142][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 101.844115][ T6175] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 101.907929][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c54a000: rx timeout, send abort [ 102.020135][ T6189] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 102.061061][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 102.182327][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 102.196781][ T6200] netlink: 68 bytes leftover after parsing attributes in process `syz.1.79'. [ 102.339323][ T6205] macvlan2: entered promiscuous mode [ 102.360688][ T6205] macvlan2: entered allmulticast mode [ 102.378253][ T6205] bond_slave_0: entered promiscuous mode [ 102.384352][ T6205] bond_slave_1: entered promiscuous mode [ 102.414503][ T6205] bond0: entered allmulticast mode [ 102.420294][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c54a000: abort rx timeout. Force session deactivation [ 102.434454][ T6205] bond_slave_0: entered allmulticast mode [ 102.442338][ T6205] bond_slave_1: entered allmulticast mode [ 102.464958][ T6205] bond0: entered promiscuous mode [ 102.484988][ T6205] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.539422][ T6205] team0: Port device macvlan2 added [ 102.791619][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 102.810389][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 102.819904][ T6215] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 102.853792][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 102.873055][ T6215] tipc: Enabled bearer , priority 10 [ 102.955154][ T6223] sctp: [Deprecated]: syz.4.86 (pid 6223) Use of int in max_burst socket option. [ 102.955154][ T6223] Use struct sctp_assoc_value instead [ 103.934559][ T6250] netlink: 'syz.1.94': attribute type 4 has an invalid length. [ 104.226393][ T6259] gretap0: entered promiscuous mode [ 104.245247][ T6259] gretap0: left promiscuous mode [ 104.453499][ T6261] sctp: [Deprecated]: syz.0.99 (pid 6261) Use of int in maxseg socket option. [ 104.453499][ T6261] Use struct sctp_assoc_value instead [ 104.570329][ T6266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.672978][ T6270] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 104.850291][ T6273] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 104.882605][ T978] IPVS: starting estimator thread 0... [ 105.006504][ T6275] IPVS: using max 20 ests per chain, 48000 per kthread [ 105.490012][ T6299] Illegal XDP return value 38 on prog (id 41) dev N/A, expect packet loss! [ 105.543823][ T6301] trusted_key: syz.1.114 sent an empty control message without MSG_MORE. [ 106.170719][ T6322] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 106.247299][ T6322] veth1_macvtap: left promiscuous mode [ 106.261223][ T6322] team0: Device veth1_macvtap failed to register rx_handler [ 106.264005][ T6331] xt_recent: Unsupported userspace flags (00000042) [ 106.481523][ T6333] __nla_validate_parse: 7 callbacks suppressed [ 106.481546][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'. [ 106.513368][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 106.554851][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 106.896652][ T6351] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.246721][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.311066][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.317639][ T6363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.534311][ T6371] raw_sendmsg: syz.0.141 forgot to set AF_INET. Fix it! [ 108.011553][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 108.021096][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 108.476904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cdb7000: rx timeout, send abort [ 108.536881][ T6404] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 108.563443][ T6406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 108.643682][ T978] IPVS: starting estimator thread 0... [ 108.756083][ T6415] IPVS: using max 19 ests per chain, 45600 per kthread [ 108.985205][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cdb7000: abort rx timeout. Force session deactivation [ 109.130694][ T6425] af_packet: tpacket_rcv: packet too big, clamped from 65624 to 3952. macoff=96 [ 109.713521][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 109.722928][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.164'. [ 109.865153][ T6439] bridge0: port 4(vlan2) entered blocking state [ 109.872230][ T6439] bridge0: port 4(vlan2) entered disabled state [ 109.880206][ T6439] vlan2: entered allmulticast mode [ 109.889317][ T6439] vlan2: left allmulticast mode [ 109.972252][ T6445] syz.3.165 (6445) used obsolete PPPIOCDETACH ioctl [ 110.124660][ T6448] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 110.561262][ T6463] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 110.885151][ T6474] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 110.893882][ T6474] bond0: entered promiscuous mode [ 110.899687][ T6474] bond_slave_0: entered promiscuous mode [ 110.905608][ T6474] bond_slave_1: entered promiscuous mode [ 110.911785][ T6474] bond0: entered allmulticast mode [ 110.917290][ T6474] bond_slave_0: entered allmulticast mode [ 110.923149][ T6474] bond_slave_1: entered allmulticast mode [ 110.935240][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.942813][ T6474] bridge0: port 3(bond0) entered blocking state [ 110.990697][ T6474] bridge0: port 3(bond0) entered disabled state [ 113.317597][ T6528] __nla_validate_parse: 12 callbacks suppressed [ 113.317620][ T6528] netlink: 60 bytes leftover after parsing attributes in process `syz.3.195'. [ 113.526712][ T6538] FAULT_INJECTION: forcing a failure. [ 113.526712][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.546949][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.2.200 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 113.546978][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 113.546991][ T6538] Call Trace: [ 113.546998][ T6538] [ 113.547007][ T6538] dump_stack_lvl+0x241/0x360 [ 113.547036][ T6538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.547056][ T6538] ? __pfx__printk+0x10/0x10 [ 113.547091][ T6538] ? snprintf+0xda/0x120 [ 113.547114][ T6538] should_fail_ex+0x40a/0x550 [ 113.547140][ T6538] _copy_to_user+0x31/0xb0 [ 113.547161][ T6538] simple_read_from_buffer+0xca/0x150 [ 113.547194][ T6538] proc_fail_nth_read+0x1e9/0x250 [ 113.547225][ T6538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.547258][ T6538] ? rw_verify_area+0x243/0x630 [ 113.547283][ T6538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.547316][ T6538] vfs_read+0x1f8/0xb40 [ 113.547343][ T6538] ? fdget_pos+0x254/0x320 [ 113.547365][ T6538] ? __pfx___mutex_lock+0x10/0x10 [ 113.547390][ T6538] ? __pfx_vfs_read+0x10/0x10 [ 113.547414][ T6538] ? do_sys_openat2+0x17a/0x1d0 [ 113.547439][ T6538] ? __fget_files+0x2a/0x410 [ 113.547461][ T6538] ? __fget_files+0x395/0x410 [ 113.547481][ T6538] ? __fget_files+0x2a/0x410 [ 113.547511][ T6538] ksys_read+0x18f/0x2b0 [ 113.547543][ T6538] ? __pfx_ksys_read+0x10/0x10 [ 113.547572][ T6538] ? do_syscall_64+0x100/0x230 [ 113.547604][ T6538] ? do_syscall_64+0xb6/0x230 [ 113.547635][ T6538] do_syscall_64+0xf3/0x230 [ 113.547665][ T6538] ? clear_bhb_loop+0x35/0x90 [ 113.547698][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.547726][ T6538] RIP: 0033:0x7f66aef8b7fc [ 113.547746][ T6538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.547763][ T6538] RSP: 002b:00007f66afd71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.547785][ T6538] RAX: ffffffffffffffda RBX: 00007f66af1a5fa0 RCX: 00007f66aef8b7fc [ 113.547800][ T6538] RDX: 000000000000000f RSI: 00007f66afd710a0 RDI: 0000000000000004 [ 113.547813][ T6538] RBP: 00007f66afd71090 R08: 0000000000000000 R09: 0000000000000000 [ 113.547825][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.547836][ T6538] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 113.547865][ T6538] [ 113.835640][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 113.870374][ T6543] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 114.137913][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 114.166936][ T6557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 114.213450][ T6560] vcan1: entered promiscuous mode [ 114.243113][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'. [ 115.430837][ T6592] FAULT_INJECTION: forcing a failure. [ 115.430837][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 115.452090][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.2.217 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 115.452119][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.452130][ T6592] Call Trace: [ 115.452137][ T6592] [ 115.452145][ T6592] dump_stack_lvl+0x241/0x360 [ 115.452173][ T6592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.452192][ T6592] ? __pfx__printk+0x10/0x10 [ 115.452222][ T6592] ? __kmalloc_cache_noprof+0x48/0x390 [ 115.452244][ T6592] ? __pfx___might_resched+0x10/0x10 [ 115.452270][ T6592] should_fail_ex+0x40a/0x550 [ 115.452295][ T6592] should_failslab+0xac/0x100 [ 115.452315][ T6592] __kmalloc_cache_noprof+0x70/0x390 [ 115.452334][ T6592] ? __xdp_reg_mem_model+0x1e3/0x620 [ 115.452361][ T6592] __xdp_reg_mem_model+0x1e3/0x620 [ 115.452388][ T6592] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 115.452415][ T6592] ? page_pool_create_percpu+0x73b/0xb70 [ 115.452446][ T6592] xdp_reg_mem_model+0x22/0x40 [ 115.452469][ T6592] bpf_test_run_xdp_live+0x32f/0x2230 [ 115.452500][ T6592] ? __pfx_lock_release+0x10/0x10 [ 115.452530][ T6592] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 115.452560][ T6592] ? __pfx___might_resched+0x10/0x10 [ 115.452585][ T6592] ? __mutex_unlock_slowpath+0x227/0x800 [ 115.452620][ T6592] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 115.452647][ T6592] ? synchronize_rcu+0x11b/0x360 [ 115.452665][ T6592] ? __pfx_synchronize_rcu+0x10/0x10 [ 115.452703][ T6592] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 115.452734][ T6592] ? 0xffffffffa0000950 [ 115.452768][ T6592] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 115.452802][ T6592] ? _copy_from_user+0x95/0xb0 [ 115.452821][ T6592] ? bpf_test_init+0x15a/0x180 [ 115.452847][ T6592] ? xdp_convert_md_to_buff+0x5b/0x330 [ 115.452878][ T6592] bpf_prog_test_run_xdp+0x805/0x11e0 [ 115.452912][ T6592] ? __pfx_lock_release+0x10/0x10 [ 115.452945][ T6592] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.452975][ T6592] ? __fget_files+0x2a/0x410 [ 115.452998][ T6592] ? __fget_files+0x2a/0x410 [ 115.453021][ T6592] ? fput+0x21b/0x290 [ 115.453040][ T6592] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.453071][ T6592] bpf_prog_test_run+0x2e4/0x360 [ 115.453097][ T6592] __sys_bpf+0x48d/0x810 [ 115.453121][ T6592] ? __pfx___sys_bpf+0x10/0x10 [ 115.453154][ T6592] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.453181][ T6592] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.453208][ T6592] ? do_syscall_64+0x100/0x230 [ 115.453239][ T6592] __x64_sys_bpf+0x7c/0x90 [ 115.453259][ T6592] do_syscall_64+0xf3/0x230 [ 115.453284][ T6592] ? clear_bhb_loop+0x35/0x90 [ 115.453313][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.453338][ T6592] RIP: 0033:0x7f66aef8cde9 [ 115.453355][ T6592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.453370][ T6592] RSP: 002b:00007f66afd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.453391][ T6592] RAX: ffffffffffffffda RBX: 00007f66af1a5fa0 RCX: 00007f66aef8cde9 [ 115.453404][ T6592] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 115.453416][ T6592] RBP: 00007f66afd71090 R08: 0000000000000000 R09: 0000000000000000 [ 115.453427][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.453437][ T6592] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 115.453463][ T6592] [ 117.302150][ T6585] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 117.542720][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 117.576173][ T6616] tc_dump_action: action bad kind [ 117.599141][ T6616] syzkaller1: entered promiscuous mode [ 117.604803][ T6616] syzkaller1: entered allmulticast mode [ 117.690516][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 117.705386][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 117.814855][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 117.849394][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 117.850742][ T6633] netlink: 'syz.0.230': attribute type 11 has an invalid length. [ 117.904335][ T6636] FAULT_INJECTION: forcing a failure. [ 117.904335][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 117.926357][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.2.231 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 117.926389][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 117.926402][ T6636] Call Trace: [ 117.926409][ T6636] [ 117.926418][ T6636] dump_stack_lvl+0x241/0x360 [ 117.926450][ T6636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.926472][ T6636] ? __pfx__printk+0x10/0x10 [ 117.926515][ T6636] ? __kmalloc_cache_noprof+0x48/0x390 [ 117.926542][ T6636] ? __pfx___might_resched+0x10/0x10 [ 117.926565][ T6636] ? arch_stack_walk+0xfd/0x150 [ 117.926599][ T6636] should_fail_ex+0x40a/0x550 [ 117.926628][ T6636] should_failslab+0xac/0x100 [ 117.926650][ T6636] __kmalloc_cache_noprof+0x70/0x390 [ 117.926670][ T6636] ? rtnl_newlink+0x12e/0x2210 [ 117.926698][ T6636] rtnl_newlink+0x12e/0x2210 [ 117.926728][ T6636] ? kasan_save_track+0x51/0x80 [ 117.926755][ T6636] ? kasan_save_free_info+0x40/0x50 [ 117.926777][ T6636] ? __kasan_slab_free+0x59/0x70 [ 117.926804][ T6636] ? kmem_cache_free+0x195/0x410 [ 117.926827][ T6636] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.926849][ T6636] ? __netlink_deliver_tap+0x56b/0x7f0 [ 117.926869][ T6636] ? __pfx_validate_chain+0x10/0x10 [ 117.926887][ T6636] ? __sock_sendmsg+0x221/0x270 [ 117.926909][ T6636] ? sock_sendmsg+0x134/0x200 [ 117.926931][ T6636] ? splice_to_socket+0xa10/0x10b0 [ 117.926958][ T6636] ? do_splice+0xd68/0x18b0 [ 117.926986][ T6636] ? __se_sys_splice+0x2e0/0x450 [ 117.927015][ T6636] ? do_syscall_64+0xf3/0x230 [ 117.927043][ T6636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.927083][ T6636] ? mark_lock+0x9a/0x360 [ 117.927116][ T6636] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.927146][ T6636] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.927177][ T6636] ? mark_lock+0x9a/0x360 [ 117.927214][ T6636] ? mark_lock+0x9a/0x360 [ 117.927248][ T6636] ? __lock_acquire+0x1397/0x2100 [ 117.927308][ T6636] ? rcu_read_unlock+0x87/0xa0 [ 117.927330][ T6636] ? __pfx_lock_release+0x10/0x10 [ 117.927375][ T6636] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.927402][ T6636] rtnetlink_rcv_msg+0x791/0xcf0 [ 117.927425][ T6636] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 117.927455][ T6636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.927495][ T6636] ? ref_tracker_free+0x643/0x7e0 [ 117.927529][ T6636] netlink_rcv_skb+0x1e3/0x430 [ 117.927552][ T6636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.927579][ T6636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.927623][ T6636] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.927647][ T6636] netlink_unicast+0x7f6/0x990 [ 117.927685][ T6636] ? __pfx_netlink_unicast+0x10/0x10 [ 117.927713][ T6636] ? __virt_addr_valid+0x45f/0x530 [ 117.927745][ T6636] ? __phys_addr_symbol+0x2f/0x70 [ 117.927775][ T6636] ? __check_object_size+0x47a/0x730 [ 117.927801][ T6636] netlink_sendmsg+0x8e4/0xcb0 [ 117.927835][ T6636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.927861][ T6636] ? aa_sock_msg_perm+0x91/0x160 [ 117.927895][ T6636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.927914][ T6636] __sock_sendmsg+0x221/0x270 [ 117.927945][ T6636] sock_sendmsg+0x134/0x200 [ 117.927976][ T6636] ? __pfx_sock_sendmsg+0x10/0x10 [ 117.928019][ T6636] ? iov_iter_bvec+0x4e/0x180 [ 117.928042][ T6636] splice_to_socket+0xa10/0x10b0 [ 117.928073][ T6636] ? __pfx_lock_release+0x10/0x10 [ 117.928124][ T6636] ? __pfx_splice_to_socket+0x10/0x10 [ 117.928181][ T6636] ? __lock_acquire+0x1397/0x2100 [ 117.928208][ T6636] ? fsnotify_pre_content+0x3ce/0x5b0 [ 117.928259][ T6636] ? rw_verify_area+0x239/0x630 [ 117.928289][ T6636] ? __pfx_splice_to_socket+0x10/0x10 [ 117.928319][ T6636] do_splice+0xd68/0x18b0 [ 117.928352][ T6636] ? __fget_files+0x2a/0x410 [ 117.928376][ T6636] ? __pfx_lock_release+0x10/0x10 [ 117.928402][ T6636] ? vfs_write+0x7fa/0xd10 [ 117.928433][ T6636] ? __mutex_unlock_slowpath+0x227/0x800 [ 117.928470][ T6636] ? pipe_clear_nowait+0x196/0x220 [ 117.928500][ T6636] ? __pfx_do_splice+0x10/0x10 [ 117.928529][ T6636] ? __fget_files+0x2a/0x410 [ 117.928562][ T6636] __se_sys_splice+0x2e0/0x450 [ 117.928601][ T6636] ? __pfx___se_sys_splice+0x10/0x10 [ 117.928635][ T6636] ? do_syscall_64+0x100/0x230 [ 117.928667][ T6636] ? __x64_sys_splice+0x21/0xf0 [ 117.928703][ T6636] do_syscall_64+0xf3/0x230 [ 117.928733][ T6636] ? clear_bhb_loop+0x35/0x90 [ 117.928766][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.928794][ T6636] RIP: 0033:0x7f66aef8cde9 [ 117.928813][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.928830][ T6636] RSP: 002b:00007f66afd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 117.928853][ T6636] RAX: ffffffffffffffda RBX: 00007f66af1a5fa0 RCX: 00007f66aef8cde9 [ 117.928868][ T6636] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 117.928880][ T6636] RBP: 00007f66afd71090 R08: 0000000000010500 R09: 0000000000000000 [ 117.928893][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.928905][ T6636] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 117.928936][ T6636] [ 118.456319][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 118.478861][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.490735][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.533205][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 118.546188][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.555183][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.564095][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.573069][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.584109][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.593948][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.915525][ T6650] FAULT_INJECTION: forcing a failure. [ 118.915525][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 118.934262][ T6650] CPU: 0 UID: 0 PID: 6650 Comm: syz.3.235 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 118.934293][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.934306][ T6650] Call Trace: [ 118.934314][ T6650] [ 118.934323][ T6650] dump_stack_lvl+0x241/0x360 [ 118.934354][ T6650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.934377][ T6650] ? __pfx__printk+0x10/0x10 [ 118.934425][ T6650] should_fail_ex+0x40a/0x550 [ 118.934468][ T6650] should_failslab+0xac/0x100 [ 118.934491][ T6650] __kmalloc_noprof+0xdd/0x4c0 [ 118.934513][ T6650] ? dev_prep_valid_name+0x3c2/0xa40 [ 118.934543][ T6650] dev_prep_valid_name+0x3c2/0xa40 [ 118.934572][ T6650] ? lockdep_init_map_type+0xa1/0x910 [ 118.934603][ T6650] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 118.934643][ T6650] register_netdevice+0x542/0x1b10 [ 118.934675][ T6650] ? l2tp_session_register+0x109/0xf30 [ 118.934706][ T6650] ? rcu_is_watching+0x15/0xb0 [ 118.934728][ T6650] ? l2tp_eth_create+0x7a6/0xae0 [ 118.934757][ T6650] ? __pfx_register_netdevice+0x10/0x10 [ 118.934794][ T6650] ? __pfx_l2tp_session_register+0x10/0x10 [ 118.934834][ T6650] l2tp_eth_create+0x7ca/0xae0 [ 118.934865][ T6650] ? l2tp_eth_create+0x335/0xae0 [ 118.934890][ T6650] ? __pfx_l2tp_eth_create+0x10/0x10 [ 118.934924][ T6650] l2tp_nl_cmd_session_create+0x7df/0xe30 [ 118.934957][ T6650] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 118.934989][ T6650] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 118.935023][ T6650] genl_rcv_msg+0xb14/0xec0 [ 118.935056][ T6650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.935112][ T6650] ? __pfx_lock_acquire+0x10/0x10 [ 118.935139][ T6650] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 118.935163][ T6650] ? __pfx___might_resched+0x10/0x10 [ 118.935196][ T6650] netlink_rcv_skb+0x1e3/0x430 [ 118.935217][ T6650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.935269][ T6650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.935301][ T6650] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 118.935335][ T6650] genl_rcv+0x28/0x40 [ 118.935357][ T6650] netlink_unicast+0x7f6/0x990 [ 118.935394][ T6650] ? __pfx_netlink_unicast+0x10/0x10 [ 118.935421][ T6650] ? __virt_addr_valid+0x45f/0x530 [ 118.935451][ T6650] ? __phys_addr_symbol+0x2f/0x70 [ 118.935479][ T6650] ? __check_object_size+0x47a/0x730 [ 118.935505][ T6650] netlink_sendmsg+0x8e4/0xcb0 [ 118.935540][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.935567][ T6650] ? aa_sock_msg_perm+0x91/0x160 [ 118.935601][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.935620][ T6650] __sock_sendmsg+0x221/0x270 [ 118.935649][ T6650] ____sys_sendmsg+0x52a/0x7e0 [ 118.935678][ T6650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.935696][ T6650] ? __fget_files+0x2a/0x410 [ 118.935721][ T6650] ? __fget_files+0x2a/0x410 [ 118.935752][ T6650] __sys_sendmsg+0x269/0x350 [ 118.935777][ T6650] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.935812][ T6650] ? do_sys_openat2+0x17a/0x1d0 [ 118.935863][ T6650] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.935895][ T6650] ? do_syscall_64+0x100/0x230 [ 118.935932][ T6650] ? do_syscall_64+0xb6/0x230 [ 118.935962][ T6650] do_syscall_64+0xf3/0x230 [ 118.935990][ T6650] ? clear_bhb_loop+0x35/0x90 [ 118.936022][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.936050][ T6650] RIP: 0033:0x7fb434f8cde9 [ 118.936069][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.936085][ T6650] RSP: 002b:00007fb435e4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.936107][ T6650] RAX: ffffffffffffffda RBX: 00007fb4351a5fa0 RCX: 00007fb434f8cde9 [ 118.936122][ T6650] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 118.936134][ T6650] RBP: 00007fb435e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 118.936147][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.936158][ T6650] R13: 0000000000000000 R14: 00007fb4351a5fa0 R15: 00007ffe03241bd8 [ 118.936190][ T6650] [ 119.448267][ T6665] FAULT_INJECTION: forcing a failure. [ 119.448267][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.466963][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.1.240 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 119.466996][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 119.467009][ T6665] Call Trace: [ 119.467017][ T6665] [ 119.467026][ T6665] dump_stack_lvl+0x241/0x360 [ 119.467058][ T6665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.467081][ T6665] ? __pfx__printk+0x10/0x10 [ 119.467117][ T6665] ? __pfx_lock_release+0x10/0x10 [ 119.467156][ T6665] should_fail_ex+0x40a/0x550 [ 119.467186][ T6665] _copy_from_user+0x2d/0xb0 [ 119.467208][ T6665] copy_msghdr_from_user+0xae/0x680 [ 119.467241][ T6665] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 119.467266][ T6665] ? __fget_files+0x2a/0x410 [ 119.467292][ T6665] ? __fget_files+0x2a/0x410 [ 119.467323][ T6665] __sys_sendmsg+0x209/0x350 [ 119.467355][ T6665] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.467388][ T6665] ? do_sys_openat2+0x17a/0x1d0 [ 119.467444][ T6665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.467474][ T6665] ? do_syscall_64+0x100/0x230 [ 119.467506][ T6665] ? do_syscall_64+0xb6/0x230 [ 119.467536][ T6665] do_syscall_64+0xf3/0x230 [ 119.467564][ T6665] ? clear_bhb_loop+0x35/0x90 [ 119.467596][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.467623][ T6665] RIP: 0033:0x7ff4fd58cde9 [ 119.467641][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.467657][ T6665] RSP: 002b:00007ff4fe39d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.467686][ T6665] RAX: ffffffffffffffda RBX: 00007ff4fd7a6080 RCX: 00007ff4fd58cde9 [ 119.467699][ T6665] RDX: 0000000000004020 RSI: 0000200000000080 RDI: 0000000000000005 [ 119.467710][ T6665] RBP: 00007ff4fe39d090 R08: 0000000000000000 R09: 0000000000000000 [ 119.467721][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.467732][ T6665] R13: 0000000000000000 R14: 00007ff4fd7a6080 R15: 00007ffec68f0d58 [ 119.467760][ T6665] [ 122.402930][ T6684] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 122.856132][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.875815][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.887630][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.895212][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.221429][ T6703] tipc: Started in network mode [ 123.230113][ T6703] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 123.240416][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 123.399705][ T6709] netlink: 'syz.0.254': attribute type 2 has an invalid length. [ 123.416086][ T6709] netlink: 'syz.0.254': attribute type 9 has an invalid length. [ 123.510832][ T6711] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 123.699142][ T6722] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 123.822275][ T6725] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 123.857257][ T6725] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 123.891548][ T6725] bond1: (slave vti0): making interface the new active one [ 123.904744][ T6725] bond1: (slave vti0): Enslaving as an active interface with an up link [ 123.913556][ T6727] __nla_validate_parse: 77 callbacks suppressed [ 123.913573][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 123.931422][ T6729] dummy0: entered promiscuous mode [ 124.086668][ T6736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.262'. [ 124.165472][ T6738] netlink: 272 bytes leftover after parsing attributes in process `syz.0.263'. [ 124.180907][ T6738] netlink: 272 bytes leftover after parsing attributes in process `syz.0.263'. [ 124.257217][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 124.269231][ T6742] tipc: Started in network mode [ 124.274160][ T6742] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 124.292824][ T6742] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 124.316277][ T6742] tipc: Enabled bearer , priority 10 [ 124.333720][ T6745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.343782][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 124.617450][ T6756] FAULT_INJECTION: forcing a failure. [ 124.617450][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 124.649858][ T6762] netlink: 48 bytes leftover after parsing attributes in process `syz.0.272'. [ 124.659410][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.4.269 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 124.659440][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.659452][ T6756] Call Trace: [ 124.659459][ T6756] [ 124.659467][ T6756] dump_stack_lvl+0x241/0x360 [ 124.659505][ T6756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.659528][ T6756] ? __pfx__printk+0x10/0x10 [ 124.659563][ T6756] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 124.659588][ T6756] ? __pfx___might_resched+0x10/0x10 [ 124.659618][ T6756] should_fail_ex+0x40a/0x550 [ 124.659647][ T6756] should_failslab+0xac/0x100 [ 124.659670][ T6756] kmem_cache_alloc_node_noprof+0x77/0x380 [ 124.659692][ T6756] ? __alloc_skb+0x1c3/0x440 [ 124.659726][ T6756] __alloc_skb+0x1c3/0x440 [ 124.659760][ T6756] ? __pfx___alloc_skb+0x10/0x10 [ 124.659793][ T6756] ? netlink_ack_tlv_len+0x6e/0x200 [ 124.659830][ T6756] netlink_ack+0x145/0xa50 [ 124.659867][ T6756] ? __pfx___might_resched+0x10/0x10 [ 124.659900][ T6756] netlink_rcv_skb+0x262/0x430 [ 124.659921][ T6756] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.659950][ T6756] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.659984][ T6756] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 124.660020][ T6756] genl_rcv+0x28/0x40 [ 124.660052][ T6756] netlink_unicast+0x7f6/0x990 [ 124.660093][ T6756] ? __pfx_netlink_unicast+0x10/0x10 [ 124.660123][ T6756] ? __virt_addr_valid+0x45f/0x530 [ 124.660157][ T6756] ? __phys_addr_symbol+0x2f/0x70 [ 124.660187][ T6756] ? __check_object_size+0x47a/0x730 [ 124.660214][ T6756] netlink_sendmsg+0x8e4/0xcb0 [ 124.660250][ T6756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.660277][ T6756] ? aa_sock_msg_perm+0x91/0x160 [ 124.660313][ T6756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.660333][ T6756] __sock_sendmsg+0x221/0x270 [ 124.660362][ T6756] ____sys_sendmsg+0x52a/0x7e0 [ 124.660392][ T6756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.660411][ T6756] ? __fget_files+0x2a/0x410 [ 124.660438][ T6756] ? __fget_files+0x2a/0x410 [ 124.660471][ T6756] __sys_sendmsg+0x269/0x350 [ 124.660498][ T6756] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.660534][ T6756] ? do_sys_openat2+0x17a/0x1d0 [ 124.660587][ T6756] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.660620][ T6756] ? do_syscall_64+0x100/0x230 [ 124.660655][ T6756] ? do_syscall_64+0xb6/0x230 [ 124.660688][ T6756] do_syscall_64+0xf3/0x230 [ 124.660718][ T6756] ? clear_bhb_loop+0x35/0x90 [ 124.660752][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.660780][ T6756] RIP: 0033:0x7f6cec38cde9 [ 124.660799][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.660817][ T6756] RSP: 002b:00007f6ced15e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.660839][ T6756] RAX: ffffffffffffffda RBX: 00007f6cec5a5fa0 RCX: 00007f6cec38cde9 [ 124.660854][ T6756] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 124.660867][ T6756] RBP: 00007f6ced15e090 R08: 0000000000000000 R09: 0000000000000000 [ 124.660880][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.660892][ T6756] R13: 0000000000000000 R14: 00007f6cec5a5fa0 R15: 00007fffb5e34b48 [ 124.660924][ T6756] [ 124.664904][ T6762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 125.060196][ T6769] FAULT_INJECTION: forcing a failure. [ 125.060196][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 125.116128][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.2.274 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 125.116158][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.116169][ T6769] Call Trace: [ 125.116176][ T6769] [ 125.116185][ T6769] dump_stack_lvl+0x241/0x360 [ 125.116215][ T6769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.116236][ T6769] ? __pfx__printk+0x10/0x10 [ 125.116269][ T6769] ? __kmalloc_noprof+0xb5/0x4c0 [ 125.116292][ T6769] ? __pfx___might_resched+0x10/0x10 [ 125.116314][ T6769] ? aa_get_newest_label+0xff/0x6f0 [ 125.116347][ T6769] should_fail_ex+0x40a/0x550 [ 125.116376][ T6769] should_failslab+0xac/0x100 [ 125.116399][ T6769] __kmalloc_noprof+0xdd/0x4c0 [ 125.116421][ T6769] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 125.116449][ T6769] ? apparmor_capable+0x13b/0x1b0 [ 125.116474][ T6769] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 125.116510][ T6769] genl_rcv_msg+0x802/0xec0 [ 125.116547][ T6769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.116605][ T6769] ? __pfx_lock_acquire+0x10/0x10 [ 125.116634][ T6769] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 125.116660][ T6769] ? __pfx___might_resched+0x10/0x10 [ 125.116697][ T6769] netlink_rcv_skb+0x1e3/0x430 [ 125.116719][ T6769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.116747][ T6769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.116801][ T6769] genl_rcv+0x28/0x40 [ 125.116825][ T6769] netlink_unicast+0x7f6/0x990 [ 125.116865][ T6769] ? __pfx_netlink_unicast+0x10/0x10 [ 125.116894][ T6769] ? __virt_addr_valid+0x45f/0x530 [ 125.116926][ T6769] ? __phys_addr_symbol+0x2f/0x70 [ 125.116956][ T6769] ? __check_object_size+0x47a/0x730 [ 125.116983][ T6769] netlink_sendmsg+0x8e4/0xcb0 [ 125.117027][ T6769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.117054][ T6769] ? aa_sock_msg_perm+0x91/0x160 [ 125.117089][ T6769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.117107][ T6769] __sock_sendmsg+0x221/0x270 [ 125.117137][ T6769] ____sys_sendmsg+0x52a/0x7e0 [ 125.117168][ T6769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.117187][ T6769] ? __fget_files+0x2a/0x410 [ 125.117213][ T6769] ? __fget_files+0x2a/0x410 [ 125.117246][ T6769] __sys_sendmsg+0x269/0x350 [ 125.117273][ T6769] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.117309][ T6769] ? do_sys_openat2+0x17a/0x1d0 [ 125.117362][ T6769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.117393][ T6769] ? do_syscall_64+0x100/0x230 [ 125.117426][ T6769] ? do_syscall_64+0xb6/0x230 [ 125.117458][ T6769] do_syscall_64+0xf3/0x230 [ 125.117487][ T6769] ? clear_bhb_loop+0x35/0x90 [ 125.117522][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.117550][ T6769] RIP: 0033:0x7f66aef8cde9 [ 125.117568][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.117585][ T6769] RSP: 002b:00007f66afd71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.117607][ T6769] RAX: ffffffffffffffda RBX: 00007f66af1a5fa0 RCX: 00007f66aef8cde9 [ 125.117622][ T6769] RDX: 0000000004040004 RSI: 0000200000000d40 RDI: 0000000000000004 [ 125.117635][ T6769] RBP: 00007f66afd71090 R08: 0000000000000000 R09: 0000000000000000 [ 125.117648][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.117659][ T6769] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 125.117691][ T6769] [ 125.527129][ T5833] tipc: Node number set to 1 [ 125.593779][ T6777] bond0: option mode: unable to set because the bond device has slaves [ 125.639231][ T6773] netlink: 34 bytes leftover after parsing attributes in process `syz.3.276'. [ 125.865769][ T6795] TCP: TCP_TX_DELAY enabled [ 125.881331][ T6790] FAULT_INJECTION: forcing a failure. [ 125.881331][ T6790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.909324][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.4.282 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 125.909356][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.909368][ T6790] Call Trace: [ 125.909376][ T6790] [ 125.909384][ T6790] dump_stack_lvl+0x241/0x360 [ 125.909415][ T6790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.909438][ T6790] ? __pfx__printk+0x10/0x10 [ 125.909473][ T6790] ? __pfx_lock_release+0x10/0x10 [ 125.909504][ T6790] ? validate_chain+0x11e/0x5920 [ 125.909527][ T6790] should_fail_ex+0x40a/0x550 [ 125.909555][ T6790] _copy_from_iter+0x1e9/0x1c20 [ 125.909599][ T6790] ? __pfx__copy_from_iter+0x10/0x10 [ 125.909645][ T6790] tun_get_user+0x43f/0x48a0 [ 125.909691][ T6790] ? __lock_acquire+0x1397/0x2100 [ 125.909726][ T6790] ? __pfx_tun_get_user+0x10/0x10 [ 125.909775][ T6790] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 125.909801][ T6790] ? tun_get+0x1e/0x2f0 [ 125.909831][ T6790] ? __pfx_lock_release+0x10/0x10 [ 125.909873][ T6790] ? tun_get+0x1e/0x2f0 [ 125.909903][ T6790] ? tun_get+0x27d/0x2f0 [ 125.909945][ T6790] tun_chr_write_iter+0x10d/0x1f0 [ 125.909980][ T6790] vfs_write+0xacf/0xd10 [ 125.910013][ T6790] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 125.910045][ T6790] ? __pfx_vfs_write+0x10/0x10 [ 125.910069][ T6790] ? do_sys_openat2+0x17a/0x1d0 [ 125.910095][ T6790] ? __fget_files+0x2a/0x410 [ 125.910124][ T6790] ? __fget_files+0x2a/0x410 [ 125.910155][ T6790] ksys_write+0x18f/0x2b0 [ 125.910185][ T6790] ? __pfx_ksys_write+0x10/0x10 [ 125.910214][ T6790] ? do_syscall_64+0x100/0x230 [ 125.910247][ T6790] ? do_syscall_64+0xb6/0x230 [ 125.910279][ T6790] do_syscall_64+0xf3/0x230 [ 125.910307][ T6790] ? clear_bhb_loop+0x35/0x90 [ 125.910340][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.910367][ T6790] RIP: 0033:0x7f6cec38cde9 [ 125.910385][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.910401][ T6790] RSP: 002b:00007f6ced15e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.910423][ T6790] RAX: ffffffffffffffda RBX: 00007f6cec5a5fa0 RCX: 00007f6cec38cde9 [ 125.910437][ T6790] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000008 [ 125.910450][ T6790] RBP: 00007f6ced15e090 R08: 0000000000000000 R09: 0000000000000000 [ 125.910461][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.910473][ T6790] R13: 0000000000000000 R14: 00007f6cec5a5fa0 R15: 00007fffb5e34b48 [ 125.910502][ T6790] [ 126.537654][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.292'. [ 126.675507][ T6821] warning: `syz.4.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.720945][ T6821] vlan2: entered promiscuous mode [ 126.728691][ T6821] team0: entered promiscuous mode [ 126.734343][ T6821] team_slave_0: entered promiscuous mode [ 126.740846][ T6821] team_slave_1: entered promiscuous mode [ 126.766747][ T6821] vlan2: entered allmulticast mode [ 126.783833][ T6821] team0: entered allmulticast mode [ 126.792849][ T6821] team_slave_0: entered allmulticast mode [ 126.801354][ T6821] team_slave_1: entered allmulticast mode [ 126.851896][ T6823] netlink: 'syz.1.296': attribute type 2 has an invalid length. [ 126.860326][ T6823] netlink: 'syz.1.296': attribute type 9 has an invalid length. [ 127.496217][ T6864] bridge0: port 3(bond0) entered disabled state [ 127.520350][ T6864] bridge_slave_0: left allmulticast mode [ 127.532604][ T6864] bridge_slave_0: left promiscuous mode [ 127.540205][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.561359][ T6864] bridge_slave_1: left allmulticast mode [ 127.572986][ T6864] bridge_slave_1: left promiscuous mode [ 127.580865][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.592024][ T6864] bond0: (slave bond_slave_0): Releasing backup interface [ 127.600018][ T6864] bond_slave_0: left promiscuous mode [ 127.605778][ T6864] bond_slave_0: left allmulticast mode [ 127.613585][ T6864] bond0: (slave bond_slave_1): Releasing backup interface [ 127.623330][ T6864] bond_slave_1: left promiscuous mode [ 127.629121][ T6864] bond_slave_1: left allmulticast mode [ 127.640194][ T6864] team0: Port device team_slave_0 removed [ 127.648250][ T6873] netlink: 'syz.0.310': attribute type 2 has an invalid length. [ 127.648770][ T6864] team0: Port device team_slave_1 removed [ 127.662876][ T6864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.671409][ T6873] netlink: 'syz.0.310': attribute type 9 has an invalid length. [ 127.672186][ T6864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.817185][ T6876] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 127.933588][ T6880] bond0: left promiscuous mode [ 127.943740][ T6880] bond0: left allmulticast mode [ 128.342540][ T6901] FAULT_INJECTION: forcing a failure. [ 128.342540][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.371559][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.3.321 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 128.371609][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 128.371621][ T6901] Call Trace: [ 128.371628][ T6901] [ 128.371637][ T6901] dump_stack_lvl+0x241/0x360 [ 128.371678][ T6901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.371701][ T6901] ? __pfx__printk+0x10/0x10 [ 128.371737][ T6901] ? __pfx_lock_release+0x10/0x10 [ 128.371775][ T6901] should_fail_ex+0x40a/0x550 [ 128.371805][ T6901] _copy_from_user+0x2d/0xb0 [ 128.371828][ T6901] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 128.371858][ T6901] map_update_elem+0x4d0/0x6f0 [ 128.371892][ T6901] __sys_bpf+0x76f/0x810 [ 128.371917][ T6901] ? __pfx___sys_bpf+0x10/0x10 [ 128.371952][ T6901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.371983][ T6901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.372012][ T6901] ? do_syscall_64+0x100/0x230 [ 128.372044][ T6901] __x64_sys_bpf+0x7c/0x90 [ 128.372067][ T6901] do_syscall_64+0xf3/0x230 [ 128.372096][ T6901] ? clear_bhb_loop+0x35/0x90 [ 128.372129][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.372156][ T6901] RIP: 0033:0x7fb434f8cde9 [ 128.372174][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.372190][ T6901] RSP: 002b:00007fb435e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.372212][ T6901] RAX: ffffffffffffffda RBX: 00007fb4351a5fa0 RCX: 00007fb434f8cde9 [ 128.372227][ T6901] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 128.372240][ T6901] RBP: 00007fb435e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 128.372253][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.372265][ T6901] R13: 0000000000000000 R14: 00007fb4351a5fa0 R15: 00007ffe03241bd8 [ 128.372296][ T6901] [ 128.590449][ T6903] netlink: 'syz.4.322': attribute type 2 has an invalid length. [ 128.598294][ T6903] netlink: 'syz.4.322': attribute type 9 has an invalid length. [ 128.859790][ T6916] atomic_op ffff888034e72998 conn xmit_atomic 0000000000000000 [ 128.963535][ T6920] __nla_validate_parse: 12 callbacks suppressed [ 128.963558][ T6920] netlink: 104 bytes leftover after parsing attributes in process `syz.4.330'. [ 129.252085][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 129.306583][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 130.033534][ T6975] FAULT_INJECTION: forcing a failure. [ 130.033534][ T6975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.087247][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: syz.4.343 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 130.087278][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 130.087291][ T6975] Call Trace: [ 130.087298][ T6975] [ 130.087306][ T6975] dump_stack_lvl+0x241/0x360 [ 130.087347][ T6975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.087370][ T6975] ? __pfx__printk+0x10/0x10 [ 130.087405][ T6975] ? __pfx_lock_release+0x10/0x10 [ 130.087432][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 130.087435][ T6975] ? validate_chain+0x11e/0x5920 [ 130.087466][ T6975] should_fail_ex+0x40a/0x550 [ 130.087491][ T6975] _copy_from_iter+0x1e9/0x1c20 [ 130.087541][ T6975] ? __pfx__copy_from_iter+0x10/0x10 [ 130.087594][ T6975] tun_get_user+0x43f/0x48a0 [ 130.087645][ T6975] ? __lock_acquire+0x1397/0x2100 [ 130.087683][ T6975] ? __pfx_tun_get_user+0x10/0x10 [ 130.087737][ T6975] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.087767][ T6975] ? tun_get+0x1e/0x2f0 [ 130.087799][ T6975] ? __pfx_lock_release+0x10/0x10 [ 130.087846][ T6975] ? tun_get+0x1e/0x2f0 [ 130.087878][ T6975] ? tun_get+0x27d/0x2f0 [ 130.087913][ T6975] tun_chr_write_iter+0x10d/0x1f0 [ 130.087950][ T6975] vfs_write+0xacf/0xd10 [ 130.087986][ T6975] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 130.088020][ T6975] ? __pfx_vfs_write+0x10/0x10 [ 130.088047][ T6975] ? do_sys_openat2+0x17a/0x1d0 [ 130.088076][ T6975] ? __fget_files+0x2a/0x410 [ 130.088102][ T6975] ? __fget_files+0x2a/0x410 [ 130.088137][ T6975] ksys_write+0x18f/0x2b0 [ 130.088169][ T6975] ? __pfx_ksys_write+0x10/0x10 [ 130.088199][ T6975] ? do_syscall_64+0x100/0x230 [ 130.088234][ T6975] ? do_syscall_64+0xb6/0x230 [ 130.088269][ T6975] do_syscall_64+0xf3/0x230 [ 130.088299][ T6975] ? clear_bhb_loop+0x35/0x90 [ 130.088341][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.088371][ T6975] RIP: 0033:0x7f6cec38cde9 [ 130.088392][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.088409][ T6975] RSP: 002b:00007f6ced15e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.088434][ T6975] RAX: ffffffffffffffda RBX: 00007f6cec5a5fa0 RCX: 00007f6cec38cde9 [ 130.088450][ T6975] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 0000000000000003 [ 130.088464][ T6975] RBP: 00007f6ced15e090 R08: 0000000000000000 R09: 0000000000000000 [ 130.088477][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.088490][ T6975] R13: 0000000000000000 R14: 00007f6cec5a5fa0 R15: 00007fffb5e34b48 [ 130.088522][ T6975] [ 130.315624][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.344'. [ 130.348425][ T6973] tipc: Started in network mode [ 130.365198][ T6973] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 130.411717][ T6973] tipc: Enabling of bearer rejected, failed to enable media [ 130.851540][ T7010] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 130.970593][ T7015] openvswitch: netlink: Flow key attr not present in new flow. [ 131.034419][ T7018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.357'. [ 131.055127][ T7010] team0: Port device wlan1 added [ 131.093474][ T7018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.104301][ T7018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.357'. [ 131.172247][ T7018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.284887][ T7018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.389150][ T7018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.405900][ T7025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.359'. [ 131.445521][ T7018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.587444][ T7029] FAULT_INJECTION: forcing a failure. [ 131.587444][ T7029] name failslab, interval 1, probability 0, space 0, times 0 [ 131.601665][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.0.363 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 131.601695][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 131.601707][ T7029] Call Trace: [ 131.601715][ T7029] [ 131.601723][ T7029] dump_stack_lvl+0x241/0x360 [ 131.601756][ T7029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.601778][ T7029] ? __pfx__printk+0x10/0x10 [ 131.601814][ T7029] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 131.601839][ T7029] ? __pfx___might_resched+0x10/0x10 [ 131.601870][ T7029] should_fail_ex+0x40a/0x550 [ 131.601900][ T7029] should_failslab+0xac/0x100 [ 131.601923][ T7029] kmem_cache_alloc_node_noprof+0x77/0x380 [ 131.601946][ T7029] ? __alloc_skb+0x1c3/0x440 [ 131.601985][ T7029] __alloc_skb+0x1c3/0x440 [ 131.602021][ T7029] ? __pfx___alloc_skb+0x10/0x10 [ 131.602063][ T7029] netlink_dump+0x239/0xe10 [ 131.602099][ T7029] ? __mutex_lock+0x397/0x1010 [ 131.602135][ T7029] ? __pfx_netlink_dump+0x10/0x10 [ 131.602194][ T7029] ? __pfx_lock_acquire+0x10/0x10 [ 131.602234][ T7029] __netlink_dump_start+0x5a2/0x790 [ 131.602276][ T7029] ? __pfx_ipmr_rtm_dumproute+0x10/0x10 [ 131.602298][ T7029] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 131.602329][ T7029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.602353][ T7029] ? __pfx_rtnl_dumpit+0x10/0x10 [ 131.602377][ T7029] ? __pfx_ipmr_rtm_dumproute+0x10/0x10 [ 131.602412][ T7029] netlink_rcv_skb+0x1e3/0x430 [ 131.602434][ T7029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.602460][ T7029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.602507][ T7029] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.602530][ T7029] netlink_unicast+0x7f6/0x990 [ 131.602570][ T7029] ? __pfx_netlink_unicast+0x10/0x10 [ 131.602597][ T7029] ? __virt_addr_valid+0x45f/0x530 [ 131.602630][ T7029] ? __phys_addr_symbol+0x2f/0x70 [ 131.602660][ T7029] ? __check_object_size+0x47a/0x730 [ 131.602687][ T7029] netlink_sendmsg+0x8e4/0xcb0 [ 131.602721][ T7029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.602748][ T7029] ? aa_sock_msg_perm+0x91/0x160 [ 131.602782][ T7029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.602802][ T7029] __sock_sendmsg+0x221/0x270 [ 131.602832][ T7029] ____sys_sendmsg+0x52a/0x7e0 [ 131.602862][ T7029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.602880][ T7029] ? __fget_files+0x2a/0x410 [ 131.602907][ T7029] ? __fget_files+0x2a/0x410 [ 131.602939][ T7029] __sys_sendmsg+0x269/0x350 [ 131.602966][ T7029] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.603001][ T7029] ? do_sys_openat2+0x17a/0x1d0 [ 131.603054][ T7029] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.603085][ T7029] ? do_syscall_64+0x100/0x230 [ 131.603117][ T7029] ? do_syscall_64+0xb6/0x230 [ 131.603148][ T7029] do_syscall_64+0xf3/0x230 [ 131.603205][ T7029] ? clear_bhb_loop+0x35/0x90 [ 131.603239][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.603267][ T7029] RIP: 0033:0x7f5853b8cde9 [ 131.603285][ T7029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.603302][ T7029] RSP: 002b:00007f5854919038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.603324][ T7029] RAX: ffffffffffffffda RBX: 00007f5853da5fa0 RCX: 00007f5853b8cde9 [ 131.603339][ T7029] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 131.603351][ T7029] RBP: 00007f5854919090 R08: 0000000000000000 R09: 0000000000000000 [ 131.603364][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.603376][ T7029] R13: 0000000000000000 R14: 00007f5853da5fa0 R15: 00007ffe960a7758 [ 131.603408][ T7029] [ 131.613561][ T7018] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.670673][ T7035] netlink: 'syz.1.361': attribute type 10 has an invalid length. [ 131.722280][ T7018] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.998935][ T7018] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.069369][ T7018] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.191773][ T7045] netlink: 'syz.0.367': attribute type 2 has an invalid length. [ 132.236132][ T7045] netlink: 'syz.0.367': attribute type 9 has an invalid length. [ 132.246119][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 132.255248][ T7045] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.367'. [ 132.273435][ T7049] netlink: 'syz.3.368': attribute type 6 has an invalid length. [ 132.302474][ T7047] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 132.444301][ T7055] bond0: option mode: unable to set because the bond device has slaves [ 132.849926][ T7066] tipc: Enabling of bearer rejected, failed to enable media [ 132.897680][ T7069] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 132.905625][ T7069] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 132.928992][ T7069] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 132.992198][ T7069] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 133.019455][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029947][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.110299][ T7069] team0: Port device wlan1 added [ 133.317235][ T7074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.354880][ T7074] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.393129][ T7074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.521627][ T7082] netlink: 'syz.4.382': attribute type 2 has an invalid length. [ 133.771009][ T7091] bond0: option mode: unable to set because the bond device has slaves [ 134.372057][ T7118] __nla_validate_parse: 10 callbacks suppressed [ 134.372082][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.395'. [ 134.410795][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.395'. [ 134.450175][ T7118] team0: entered promiscuous mode [ 134.465099][ T7118] team_slave_0: entered promiscuous mode [ 134.472322][ T7118] team_slave_1: entered promiscuous mode [ 134.478621][ T7118] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 134.490496][ T7118] team0: left promiscuous mode [ 134.495500][ T7118] team_slave_0: left promiscuous mode [ 134.501859][ T7118] team_slave_1: left promiscuous mode [ 134.510222][ T7118] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 134.661399][ T7124] syzkaller1: entered promiscuous mode [ 134.681844][ T7124] syzkaller1: entered allmulticast mode [ 134.921852][ T7133] validate_nla: 1 callbacks suppressed [ 134.921872][ T7133] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 134.934689][ T7136] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 134.969183][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 134.970641][ T7138] netlink: 76 bytes leftover after parsing attributes in process `syz.2.400'. [ 135.004734][ T7136] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 135.028190][ T7133] netlink: 76 bytes leftover after parsing attributes in process `syz.2.400'. [ 135.054205][ T7136] veth3: entered promiscuous mode [ 135.062308][ T7136] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 135.145122][ T7144] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 135.159618][ T7144] syz_tun: entered promiscuous mode [ 135.175507][ T7144] syz_tun: entered allmulticast mode [ 135.186402][ T7144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.342568][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 135.767186][ T7169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.412'. [ 135.846413][ T7174] netlink: 'syz.1.412': attribute type 2 has an invalid length. [ 135.848210][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.413'. [ 135.854193][ T7174] netlink: 'syz.1.412': attribute type 9 has an invalid length. [ 135.854215][ T7174] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.412'. [ 136.050154][ T7184] netlink: 'syz.1.415': attribute type 10 has an invalid length. [ 136.114963][ T7189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.416'. [ 136.786906][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c18cc00: rx timeout, send abort [ 136.863972][ T7222] FAULT_INJECTION: forcing a failure. [ 136.863972][ T7222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.878902][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.3.423 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 136.878931][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.878944][ T7222] Call Trace: [ 136.878952][ T7222] [ 136.878960][ T7222] dump_stack_lvl+0x241/0x360 [ 136.878991][ T7222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.879014][ T7222] ? __pfx__printk+0x10/0x10 [ 136.879048][ T7222] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.879096][ T7222] should_fail_ex+0x40a/0x550 [ 136.879125][ T7222] prepare_alloc_pages+0x1da/0x5b0 [ 136.879164][ T7222] __alloc_frozen_pages_noprof+0x16f/0x710 [ 136.879199][ T7222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.879253][ T7222] alloc_pages_mpol+0x311/0x660 [ 136.879281][ T7222] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 136.879314][ T7222] vma_alloc_folio_noprof+0x12b/0x260 [ 136.879340][ T7222] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 136.879365][ T7222] ? do_raw_spin_unlock+0x13c/0x8b0 [ 136.879395][ T7222] folio_prealloc+0x2e/0x170 [ 136.879425][ T7222] do_wp_page+0x1253/0x49b0 [ 136.879467][ T7222] ? __pfx_do_wp_page+0x10/0x10 [ 136.879493][ T7222] ? __pfx_validate_chain+0x10/0x10 [ 136.879517][ T7222] ? __pfx_lock_acquire+0x10/0x10 [ 136.879543][ T7222] ? rcu_is_watching+0x15/0xb0 [ 136.879568][ T7222] ? do_raw_spin_lock+0x14f/0x370 [ 136.879592][ T7222] ? __pfx____pte_offset_map+0x10/0x10 [ 136.879635][ T7222] __handle_mm_fault+0x24d5/0x70f0 [ 136.879660][ T7222] ? mark_lock+0x9a/0x360 [ 136.879720][ T7222] ? __pfx___handle_mm_fault+0x10/0x10 [ 136.879758][ T7222] ? mt_find+0x2a9/0x920 [ 136.879787][ T7222] ? __pfx_lock_release+0x10/0x10 [ 136.879830][ T7222] ? mt_find+0x2a9/0x920 [ 136.879860][ T7222] ? mt_find+0x6c8/0x920 [ 136.879890][ T7222] ? mt_find+0x2a9/0x920 [ 136.879924][ T7222] ? __pfx_mt_find+0x10/0x10 [ 136.879975][ T7222] ? find_vma+0xf9/0x170 [ 136.880000][ T7222] ? __pfx_find_vma+0x10/0x10 [ 136.880023][ T7222] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.880056][ T7222] handle_mm_fault+0x3e5/0x8d0 [ 136.880100][ T7222] exc_page_fault+0x2b9/0x8b0 [ 136.880134][ T7222] asm_exc_page_fault+0x26/0x30 [ 136.880162][ T7222] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 136.880185][ T7222] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 136.880202][ T7222] RSP: 0018:ffffc90003a4f738 EFLAGS: 00050206 [ 136.880221][ T7222] RAX: ffffffff84e62e01 RBX: 0000200000000400 RCX: 00000000000035d0 [ 136.880236][ T7222] RDX: 0000000000000000 RSI: ffff88807b42cce8 RDI: 000020000000d000 [ 136.880250][ T7222] RBP: ffffc90003a4f8b8 R08: ffff88807b4302b7 R09: 1ffff1100f686056 [ 136.880266][ T7222] R10: dffffc0000000000 R11: ffffed100f686057 R12: 1ffff92000749fc3 [ 136.880281][ T7222] R13: ffffc90003a4fe18 R14: 00000000000101d0 R15: ffff88807b4200e8 [ 136.880305][ T7222] ? _copy_to_iter+0x1e1/0x1c50 [ 136.880344][ T7222] _copy_to_iter+0x267/0x1c50 [ 136.880374][ T7222] ? __virt_addr_valid+0x183/0x530 [ 136.880408][ T7222] ? __pfx_lock_release+0x10/0x10 [ 136.880447][ T7222] ? __pfx__copy_to_iter+0x10/0x10 [ 136.880482][ T7222] ? __virt_addr_valid+0x183/0x530 [ 136.880512][ T7222] ? __virt_addr_valid+0x183/0x530 [ 136.880540][ T7222] ? __virt_addr_valid+0x45f/0x530 [ 136.880574][ T7222] ? __check_object_size+0x47a/0x730 [ 136.880601][ T7222] __skb_datagram_iter+0x107/0x900 [ 136.880625][ T7222] ? __local_bh_enable_ip+0x168/0x200 [ 136.880647][ T7222] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 136.880672][ T7222] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 136.880709][ T7222] skb_copy_datagram_iter+0xd1/0x250 [ 136.880736][ T7222] tipc_recvstream+0x7a8/0xf80 [ 136.880785][ T7222] ? __pfx_tipc_recvstream+0x10/0x10 [ 136.880813][ T7222] ? aa_sock_msg_perm+0x91/0x160 [ 136.880844][ T7222] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 136.880876][ T7222] ? __pfx_tipc_recvstream+0x10/0x10 [ 136.880906][ T7222] sock_recvmsg+0x22f/0x280 [ 136.880938][ T7222] ____sys_recvmsg+0x1c6/0x480 [ 136.880970][ T7222] ? __pfx_____sys_recvmsg+0x10/0x10 [ 136.881018][ T7222] __sys_recvmsg+0x291/0x390 [ 136.881045][ T7222] ? __pfx___sys_recvmsg+0x10/0x10 [ 136.881092][ T7222] ? __fget_files+0x2a/0x410 [ 136.881132][ T7222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.881162][ T7222] ? do_syscall_64+0x100/0x230 [ 136.881195][ T7222] ? do_syscall_64+0xb6/0x230 [ 136.881227][ T7222] do_syscall_64+0xf3/0x230 [ 136.881256][ T7222] ? clear_bhb_loop+0x35/0x90 [ 136.881289][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.881317][ T7222] RIP: 0033:0x7fb434f8cde9 [ 136.881335][ T7222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.881352][ T7222] RSP: 002b:00007fb435e4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 136.881372][ T7222] RAX: ffffffffffffffda RBX: 00007fb4351a5fa0 RCX: 00007fb434f8cde9 [ 136.881388][ T7222] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 136.881401][ T7222] RBP: 00007fb435e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 136.881414][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.881426][ T7222] R13: 0000000000000000 R14: 00007fb4351a5fa0 R15: 00007ffe03241bd8 [ 136.881458][ T7222] [ 137.295227][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c18cc00: abort rx timeout. Force session deactivation [ 137.412177][ T7227] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 138.035559][ T7256] SET target dimension over the limit! [ 139.289558][ T7298] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 139.399402][ T7305] bridge0: port 4(hsr0) entered blocking state [ 139.408245][ T7305] bridge0: port 4(hsr0) entered disabled state [ 139.415277][ T7305] hsr0: entered allmulticast mode [ 139.436724][ T7305] hsr_slave_0: entered allmulticast mode [ 139.442500][ T7305] hsr_slave_1: entered allmulticast mode [ 139.462040][ T7305] hsr0: entered promiscuous mode [ 139.881397][ T7319] __nla_validate_parse: 3 callbacks suppressed [ 139.881417][ T7319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.449'. [ 139.975192][ T7314] tipc: Enabling of bearer rejected, already enabled [ 140.079465][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 140.148625][ T7325] veth0_to_bridge: entered promiscuous mode [ 140.186067][ T7327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 140.290637][ T7321] veth0_to_bridge: left promiscuous mode [ 140.333470][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 140.479312][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 140.540292][ T7333] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 140.565305][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 140.572661][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 140.583314][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 141.016764][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f73400: rx timeout, send abort [ 141.090056][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f73800: rx timeout, send abort [ 141.525078][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f73400: abort rx timeout. Force session deactivation [ 141.598398][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f73800: abort rx timeout. Force session deactivation [ 142.181807][ T7341] team0: entered promiscuous mode [ 142.187027][ T7341] team_slave_0: entered promiscuous mode [ 142.192808][ T7341] team_slave_1: entered promiscuous mode [ 142.198829][ T7341] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 142.207246][ T7341] erspan0: entered promiscuous mode [ 142.342015][ T7351] bond0: option mode: unable to set because the bond device has slaves [ 142.520134][ T7360] dccp_invalid_packet: P.Data Offset(4) too small [ 142.593960][ T7365] xt_recent: Unsupported userspace flags (00000042) [ 142.839632][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 142.897625][ T7375] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 142.986573][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'. [ 143.112111][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.472'. [ 143.249284][ T7397] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20003 [ 143.386631][ T7401] FAULT_INJECTION: forcing a failure. [ 143.386631][ T7401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.409951][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.1.481 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 143.409985][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.409998][ T7401] Call Trace: [ 143.410005][ T7401] [ 143.410013][ T7401] dump_stack_lvl+0x241/0x360 [ 143.410045][ T7401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.410067][ T7401] ? __pfx__printk+0x10/0x10 [ 143.410103][ T7401] ? __pfx_lock_release+0x10/0x10 [ 143.410141][ T7401] should_fail_ex+0x40a/0x550 [ 143.410170][ T7401] _copy_from_user+0x2d/0xb0 [ 143.410193][ T7401] move_addr_to_kernel+0x82/0x150 [ 143.410221][ T7401] copy_msghdr_from_user+0x43e/0x680 [ 143.410254][ T7401] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.410279][ T7401] ? __fget_files+0x2a/0x410 [ 143.410305][ T7401] ? __fget_files+0x2a/0x410 [ 143.410336][ T7401] __sys_sendmmsg+0x32b/0x720 [ 143.410370][ T7401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.410403][ T7401] ? __pfx_lock_release+0x10/0x10 [ 143.410430][ T7401] ? kstrtouint_from_user+0x128/0x190 [ 143.410483][ T7401] ? ksys_write+0x22a/0x2b0 [ 143.410518][ T7401] ? __pfx_lock_release+0x10/0x10 [ 143.410554][ T7401] ? sb_end_write+0xe9/0x1c0 [ 143.410577][ T7401] ? vfs_write+0x7fa/0xd10 [ 143.410607][ T7401] ? __mutex_unlock_slowpath+0x227/0x800 [ 143.410666][ T7401] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.410698][ T7401] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.410729][ T7401] ? do_syscall_64+0x100/0x230 [ 143.410762][ T7401] __x64_sys_sendmmsg+0xa0/0xb0 [ 143.410786][ T7401] do_syscall_64+0xf3/0x230 [ 143.410815][ T7401] ? clear_bhb_loop+0x35/0x90 [ 143.410848][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.410876][ T7401] RIP: 0033:0x7ff4fd58cde9 [ 143.410894][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.410911][ T7401] RSP: 002b:00007ff4fe3be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.410933][ T7401] RAX: ffffffffffffffda RBX: 00007ff4fd7a5fa0 RCX: 00007ff4fd58cde9 [ 143.410948][ T7401] RDX: 0000000000000004 RSI: 0000200000005b40 RDI: 0000000000000003 [ 143.410961][ T7401] RBP: 00007ff4fe3be090 R08: 0000000000000000 R09: 0000000000000000 [ 143.410974][ T7401] R10: 000000000000c080 R11: 0000000000000246 R12: 0000000000000001 [ 143.410987][ T7401] R13: 0000000000000000 R14: 00007ff4fd7a5fa0 R15: 00007ffec68f0d58 [ 143.411017][ T7401] [ 143.670508][ T7407] IPVS: Error joining to the multicast group [ 143.943135][ T7415] sctp: [Deprecated]: syz.2.486 (pid 7415) Use of int in max_burst socket option. [ 143.943135][ T7415] Use struct sctp_assoc_value instead [ 144.187544][ T7429] netlink: 'syz.4.491': attribute type 2 has an invalid length. [ 144.216196][ T7429] netlink: 'syz.4.491': attribute type 9 has an invalid length. [ 145.126593][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f96b400: rx timeout, send abort [ 145.198607][ T7470] __nla_validate_parse: 8 callbacks suppressed [ 145.198631][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 145.213973][ T7468] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 145.231193][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 145.428974][ T7474] netlink: 48 bytes leftover after parsing attributes in process `syz.4.508'. [ 145.465242][ T7474] netlink: 'syz.4.508': attribute type 2 has an invalid length. [ 145.473290][ T7474] netlink: 'syz.4.508': attribute type 9 has an invalid length. [ 145.481546][ T7474] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.508'. [ 145.527530][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 145.556272][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.576707][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.634944][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f96b400: abort rx timeout. Force session deactivation [ 145.691385][ T7482] vxcan2: entered promiscuous mode [ 145.758326][ T7482] vxcan2: entered allmulticast mode [ 145.803661][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 145.937569][ T7489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.514'. [ 146.197481][ T7495] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 146.211526][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 146.463776][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'. [ 146.527979][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'. [ 147.007339][ T5850] Bluetooth: hci4: command tx timeout [ 147.090425][ T7535] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 148.390456][ T7577] netlink: 'syz.2.544': attribute type 2 has an invalid length. [ 148.399541][ T7577] netlink: 'syz.2.544': attribute type 9 has an invalid length. [ 148.510635][ T7582] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 148.891684][ T7601] xt_cgroup: invalid path, errno=-2 [ 149.313719][ T7616] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 150.758315][ T7675] __nla_validate_parse: 20 callbacks suppressed [ 150.758337][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 150.810923][ T7675] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 150.818935][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 151.139456][ T7694] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 151.186870][ T7694] batman_adv: batadv0: Adding interface: wlan0 [ 151.193099][ T7694] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.230698][ T7694] batman_adv: batadv0: Interface activated: wlan0 [ 151.249079][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 151.328614][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.580'. [ 151.438326][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.584'. [ 151.560994][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 151.641059][ T7717] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 151.653077][ T7717] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 151.721573][ T7720] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 152.600259][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 152.774799][ T7755] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.596'. [ 152.904043][ T7762] FAULT_INJECTION: forcing a failure. [ 152.904043][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 152.936356][ T7762] CPU: 1 UID: 0 PID: 7762 Comm: syz.1.597 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 152.936386][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.936398][ T7762] Call Trace: [ 152.936405][ T7762] [ 152.936413][ T7762] dump_stack_lvl+0x241/0x360 [ 152.936443][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.936465][ T7762] ? __pfx__printk+0x10/0x10 [ 152.936499][ T7762] ? __kmalloc_noprof+0xb5/0x4c0 [ 152.936522][ T7762] ? __pfx___might_resched+0x10/0x10 [ 152.936559][ T7762] should_fail_ex+0x40a/0x550 [ 152.936588][ T7762] should_failslab+0xac/0x100 [ 152.936609][ T7762] __kmalloc_noprof+0xdd/0x4c0 [ 152.936630][ T7762] ? bpf_test_init+0xe1/0x180 [ 152.936669][ T7762] bpf_test_init+0xe1/0x180 [ 152.936705][ T7762] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 152.936745][ T7762] ? __pfx_lock_release+0x10/0x10 [ 152.936783][ T7762] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 152.936818][ T7762] ? __fget_files+0x2a/0x410 [ 152.936843][ T7762] ? __fget_files+0x2a/0x410 [ 152.936869][ T7762] ? fput+0x21b/0x290 [ 152.936890][ T7762] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 152.936925][ T7762] bpf_prog_test_run+0x2e4/0x360 [ 152.936955][ T7762] __sys_bpf+0x48d/0x810 [ 152.936980][ T7762] ? __pfx___sys_bpf+0x10/0x10 [ 152.937015][ T7762] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.937045][ T7762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.937073][ T7762] ? do_syscall_64+0x100/0x230 [ 152.937107][ T7762] __x64_sys_bpf+0x7c/0x90 [ 152.937128][ T7762] do_syscall_64+0xf3/0x230 [ 152.937156][ T7762] ? clear_bhb_loop+0x35/0x90 [ 152.937189][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.937216][ T7762] RIP: 0033:0x7ff4fd58cde9 [ 152.937235][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.937252][ T7762] RSP: 002b:00007ff4fe3be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.937274][ T7762] RAX: ffffffffffffffda RBX: 00007ff4fd7a5fa0 RCX: 00007ff4fd58cde9 [ 152.937289][ T7762] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 152.937301][ T7762] RBP: 00007ff4fe3be090 R08: 0000000000000000 R09: 0000000000000000 [ 152.937313][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.937324][ T7762] R13: 0000000000000000 R14: 00007ff4fd7a5fa0 R15: 00007ffec68f0d58 [ 152.937355][ T7762] [ 153.215233][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 153.231243][ T7767] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 153.498709][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 153.578490][ T7787] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.591684][ T7787] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.122180][ T7806] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 154.271977][ T7793] openvswitch: netlink: Unknown nsh attribute 0 [ 154.310920][ T7793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.633276][ T7816] ip6gretap0: entered promiscuous mode [ 154.658026][ T7816] batadv_slave_0: entered promiscuous mode [ 154.665508][ T7816] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 154.688123][ T7816] Cannot create hsr debugfs directory [ 155.360310][ T7836] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 155.650842][ T7848] netlink: 'syz.4.630': attribute type 21 has an invalid length. [ 155.662771][ T7848] netlink: 'syz.4.630': attribute type 4 has an invalid length. [ 155.823750][ T7852] __nla_validate_parse: 7 callbacks suppressed [ 155.823773][ T7852] netlink: 52 bytes leftover after parsing attributes in process `syz.3.632'. [ 155.856263][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 156.157723][ T7866] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.225409][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 156.264807][ T7873] netlink: 'syz.0.639': attribute type 1 has an invalid length. [ 156.584354][ T7888] FAULT_INJECTION: forcing a failure. [ 156.584354][ T7888] name failslab, interval 1, probability 0, space 0, times 0 [ 156.606553][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.4.644 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 156.606585][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.606598][ T7888] Call Trace: [ 156.606605][ T7888] [ 156.606614][ T7888] dump_stack_lvl+0x241/0x360 [ 156.606646][ T7888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.606668][ T7888] ? __pfx__printk+0x10/0x10 [ 156.606705][ T7888] ? __kmalloc_cache_noprof+0x48/0x390 [ 156.606730][ T7888] ? __pfx___might_resched+0x10/0x10 [ 156.606753][ T7888] ? dev_prep_valid_name+0x916/0xa40 [ 156.606785][ T7888] should_fail_ex+0x40a/0x550 [ 156.606816][ T7888] should_failslab+0xac/0x100 [ 156.606840][ T7888] __kmalloc_cache_noprof+0x70/0x390 [ 156.606862][ T7888] ? register_netdevice+0x59c/0x1b10 [ 156.606901][ T7888] register_netdevice+0x59c/0x1b10 [ 156.606933][ T7888] ? l2tp_session_register+0x109/0xf30 [ 156.606967][ T7888] ? rcu_is_watching+0x15/0xb0 [ 156.606991][ T7888] ? l2tp_eth_create+0x7a6/0xae0 [ 156.607021][ T7888] ? __pfx_register_netdevice+0x10/0x10 [ 156.607058][ T7888] ? __pfx_l2tp_session_register+0x10/0x10 [ 156.607099][ T7888] l2tp_eth_create+0x7ca/0xae0 [ 156.607133][ T7888] ? l2tp_eth_create+0x335/0xae0 [ 156.607161][ T7888] ? __pfx_l2tp_eth_create+0x10/0x10 [ 156.607199][ T7888] l2tp_nl_cmd_session_create+0x7df/0xe30 [ 156.607247][ T7888] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 156.607282][ T7888] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 156.607320][ T7888] genl_rcv_msg+0xb14/0xec0 [ 156.607358][ T7888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.607419][ T7888] ? __pfx_lock_acquire+0x10/0x10 [ 156.607447][ T7888] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 156.607474][ T7888] ? __pfx___might_resched+0x10/0x10 [ 156.607512][ T7888] netlink_rcv_skb+0x1e3/0x430 [ 156.607534][ T7888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.607563][ T7888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.607596][ T7888] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 156.607635][ T7888] genl_rcv+0x28/0x40 [ 156.607659][ T7888] netlink_unicast+0x7f6/0x990 [ 156.607700][ T7888] ? __pfx_netlink_unicast+0x10/0x10 [ 156.607729][ T7888] ? __virt_addr_valid+0x45f/0x530 [ 156.607756][ T7888] ? __phys_addr_symbol+0x2f/0x70 [ 156.607780][ T7888] ? __check_object_size+0x47a/0x730 [ 156.607801][ T7888] netlink_sendmsg+0x8e4/0xcb0 [ 156.607829][ T7888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.607851][ T7888] ? aa_sock_msg_perm+0x91/0x160 [ 156.607879][ T7888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.607894][ T7888] __sock_sendmsg+0x221/0x270 [ 156.607919][ T7888] ____sys_sendmsg+0x52a/0x7e0 [ 156.607944][ T7888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.607958][ T7888] ? __fget_files+0x2a/0x410 [ 156.607979][ T7888] ? __fget_files+0x2a/0x410 [ 156.608005][ T7888] __sys_sendmsg+0x269/0x350 [ 156.608026][ T7888] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.608054][ T7888] ? do_sys_openat2+0x17a/0x1d0 [ 156.608096][ T7888] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.608121][ T7888] ? do_syscall_64+0x100/0x230 [ 156.608148][ T7888] ? do_syscall_64+0xb6/0x230 [ 156.608173][ T7888] do_syscall_64+0xf3/0x230 [ 156.608196][ T7888] ? clear_bhb_loop+0x35/0x90 [ 156.608229][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.608251][ T7888] RIP: 0033:0x7f6cec38cde9 [ 156.608267][ T7888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.608281][ T7888] RSP: 002b:00007f6ced15e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.608299][ T7888] RAX: ffffffffffffffda RBX: 00007f6cec5a5fa0 RCX: 00007f6cec38cde9 [ 156.608311][ T7888] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 156.608321][ T7888] RBP: 00007f6ced15e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.608331][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.608341][ T7888] R13: 0000000000000000 R14: 00007f6cec5a5fa0 R15: 00007fffb5e34b48 [ 156.608366][ T7888] [ 157.003232][ T7892] FAULT_INJECTION: forcing a failure. [ 157.003232][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 157.016563][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.1.646 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 157.016589][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 157.016600][ T7892] Call Trace: [ 157.016606][ T7892] [ 157.016612][ T7892] dump_stack_lvl+0x241/0x360 [ 157.016638][ T7892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.016656][ T7892] ? __pfx__printk+0x10/0x10 [ 157.016695][ T7892] should_fail_ex+0x40a/0x550 [ 157.016719][ T7892] should_failslab+0xac/0x100 [ 157.016737][ T7892] __kmalloc_cache_noprof+0x70/0x390 [ 157.016756][ T7892] ? netlbl_unlhsh_add+0x685/0x1220 [ 157.016777][ T7892] netlbl_unlhsh_add+0x685/0x1220 [ 157.016797][ T7892] ? netlbl_unlhsh_add+0xd5/0x1220 [ 157.016816][ T7892] ? __pfx_netlbl_unlhsh_add+0x10/0x10 [ 157.016841][ T7892] netlbl_unlabel_staticadd+0x5e3/0x7b0 [ 157.016863][ T7892] ? __pfx_netlbl_unlabel_staticadd+0x10/0x10 [ 157.016888][ T7892] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 157.016918][ T7892] genl_rcv_msg+0xb14/0xec0 [ 157.016946][ T7892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.016992][ T7892] ? __pfx_lock_acquire+0x10/0x10 [ 157.017016][ T7892] ? __pfx_netlbl_unlabel_staticadd+0x10/0x10 [ 157.017035][ T7892] ? __pfx___might_resched+0x10/0x10 [ 157.017064][ T7892] netlink_rcv_skb+0x1e3/0x430 [ 157.017081][ T7892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.017104][ T7892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.017146][ T7892] genl_rcv+0x28/0x40 [ 157.017165][ T7892] netlink_unicast+0x7f6/0x990 [ 157.017206][ T7892] ? __pfx_netlink_unicast+0x10/0x10 [ 157.017230][ T7892] ? __virt_addr_valid+0x45f/0x530 [ 157.017256][ T7892] ? __phys_addr_symbol+0x2f/0x70 [ 157.017280][ T7892] ? __check_object_size+0x47a/0x730 [ 157.017302][ T7892] netlink_sendmsg+0x8e4/0xcb0 [ 157.017329][ T7892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.017351][ T7892] ? aa_sock_msg_perm+0x91/0x160 [ 157.017380][ T7892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.017396][ T7892] __sock_sendmsg+0x221/0x270 [ 157.017420][ T7892] ____sys_sendmsg+0x52a/0x7e0 [ 157.017447][ T7892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.017462][ T7892] ? __fget_files+0x2a/0x410 [ 157.017484][ T7892] ? __fget_files+0x2a/0x410 [ 157.017509][ T7892] __sys_sendmsg+0x269/0x350 [ 157.017531][ T7892] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.017560][ T7892] ? do_sys_openat2+0x17a/0x1d0 [ 157.017602][ T7892] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.017627][ T7892] ? do_syscall_64+0x100/0x230 [ 157.017654][ T7892] ? do_syscall_64+0xb6/0x230 [ 157.017680][ T7892] do_syscall_64+0xf3/0x230 [ 157.017703][ T7892] ? clear_bhb_loop+0x35/0x90 [ 157.017731][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.017753][ T7892] RIP: 0033:0x7ff4fd58cde9 [ 157.017769][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.017784][ T7892] RSP: 002b:00007ff4fe3be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.017802][ T7892] RAX: ffffffffffffffda RBX: 00007ff4fd7a5fa0 RCX: 00007ff4fd58cde9 [ 157.017815][ T7892] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 157.017825][ T7892] RBP: 00007ff4fe3be090 R08: 0000000000000000 R09: 0000000000000000 [ 157.017836][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.017846][ T7892] R13: 0000000000000000 R14: 00007ff4fd7a5fa0 R15: 00007ffec68f0d58 [ 157.017871][ T7892] [ 157.479674][ T7896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.648'. [ 157.627263][ T7908] FAULT_INJECTION: forcing a failure. [ 157.627263][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.636463][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'. [ 157.641244][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.2.651 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 157.641278][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 157.641293][ T7908] Call Trace: [ 157.641301][ T7908] [ 157.641311][ T7908] dump_stack_lvl+0x241/0x360 [ 157.641345][ T7908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.641369][ T7908] ? __pfx__printk+0x10/0x10 [ 157.641407][ T7908] ? __pfx_lock_release+0x10/0x10 [ 157.641441][ T7908] ? aa_label_sk_perm+0x4f3/0x6c0 [ 157.641475][ T7908] should_fail_ex+0x40a/0x550 [ 157.641506][ T7908] _copy_from_iter+0x424/0x1c20 [ 157.641558][ T7908] ? __pfx__copy_from_iter+0x10/0x10 [ 157.641609][ T7908] bcm_sendmsg+0x157/0x7a0 [ 157.641638][ T7908] ? __pfx_bcm_sendmsg+0x10/0x10 [ 157.641664][ T7908] ? __import_iovec+0x3a8/0x870 [ 157.641688][ T7908] ? aa_sock_msg_perm+0x91/0x160 [ 157.641725][ T7908] ? __pfx_bcm_sendmsg+0x10/0x10 [ 157.641744][ T7908] __sock_sendmsg+0x221/0x270 [ 157.641776][ T7908] ____sys_sendmsg+0x52a/0x7e0 [ 157.641808][ T7908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.641830][ T7908] ? __fget_files+0x2a/0x410 [ 157.641860][ T7908] ? __fget_files+0x2a/0x410 [ 157.641894][ T7908] __sys_sendmsg+0x269/0x350 [ 157.641923][ T7908] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.641959][ T7908] ? do_sys_openat2+0x17a/0x1d0 [ 157.642014][ T7908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.642046][ T7908] ? do_syscall_64+0x100/0x230 [ 157.642082][ T7908] ? do_syscall_64+0xb6/0x230 [ 157.642116][ T7908] do_syscall_64+0xf3/0x230 [ 157.642147][ T7908] ? clear_bhb_loop+0x35/0x90 [ 157.642181][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.642211][ T7908] RIP: 0033:0x7f66aef8cde9 [ 157.642240][ T7908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.642258][ T7908] RSP: 002b:00007f66afd71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.642283][ T7908] RAX: ffffffffffffffda RBX: 00007f66af1a5fa0 RCX: 00007f66aef8cde9 [ 157.642300][ T7908] RDX: 0000000000004020 RSI: 0000200000000080 RDI: 0000000000000005 [ 157.642315][ T7908] RBP: 00007f66afd71090 R08: 0000000000000000 R09: 0000000000000000 [ 157.642328][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.642342][ T7908] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 157.642374][ T7908] [ 157.863451][ T7913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.653'. [ 157.914987][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 157.969649][ T7915] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 158.193156][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 158.332435][ T7931] FAULT_INJECTION: forcing a failure. [ 158.332435][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 158.350636][ T7931] CPU: 1 UID: 0 PID: 7931 Comm: syz.1.660 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 158.350668][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.350681][ T7931] Call Trace: [ 158.350689][ T7931] [ 158.350698][ T7931] dump_stack_lvl+0x241/0x360 [ 158.350728][ T7931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.350751][ T7931] ? __pfx__printk+0x10/0x10 [ 158.350786][ T7931] ? __kmalloc_cache_noprof+0x48/0x390 [ 158.350812][ T7931] ? __pfx___might_resched+0x10/0x10 [ 158.350845][ T7931] should_fail_ex+0x40a/0x550 [ 158.350875][ T7931] should_failslab+0xac/0x100 [ 158.350897][ T7931] __kmalloc_cache_noprof+0x70/0x390 [ 158.350918][ T7931] ? nft_last_init+0xd0/0x310 [ 158.350946][ T7931] nft_last_init+0xd0/0x310 [ 158.350982][ T7931] ? __pfx_nft_last_init+0x10/0x10 [ 158.351008][ T7931] ? nft_connlimit_do_init+0x1e0/0x2c0 [ 158.351042][ T7931] nf_tables_newrule+0x1857/0x2980 [ 158.351081][ T7931] ? __pfx_nf_tables_newrule+0x10/0x10 [ 158.351138][ T7931] ? __nla_parse+0x40/0x60 [ 158.351170][ T7931] nfnetlink_rcv+0x14e3/0x2ab0 [ 158.351252][ T7931] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 158.351335][ T7931] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.351355][ T7931] ? skb_clone+0x240/0x390 [ 158.351384][ T7931] ? __pfx_lock_release+0x10/0x10 [ 158.351429][ T7931] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.351454][ T7931] netlink_unicast+0x7f6/0x990 [ 158.351494][ T7931] ? __pfx_netlink_unicast+0x10/0x10 [ 158.351524][ T7931] ? __virt_addr_valid+0x45f/0x530 [ 158.351557][ T7931] ? __phys_addr_symbol+0x2f/0x70 [ 158.351588][ T7931] ? __check_object_size+0x47a/0x730 [ 158.351615][ T7931] netlink_sendmsg+0x8e4/0xcb0 [ 158.351651][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.351678][ T7931] ? aa_sock_msg_perm+0x91/0x160 [ 158.351714][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.351734][ T7931] __sock_sendmsg+0x221/0x270 [ 158.351764][ T7931] ____sys_sendmsg+0x52a/0x7e0 [ 158.351794][ T7931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.351813][ T7931] ? __fget_files+0x2a/0x410 [ 158.351840][ T7931] ? __fget_files+0x2a/0x410 [ 158.351872][ T7931] __sys_sendmsg+0x269/0x350 [ 158.351899][ T7931] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.351934][ T7931] ? do_sys_openat2+0x17a/0x1d0 [ 158.351988][ T7931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.352019][ T7931] ? do_syscall_64+0x100/0x230 [ 158.352052][ T7931] ? do_syscall_64+0xb6/0x230 [ 158.352085][ T7931] do_syscall_64+0xf3/0x230 [ 158.352115][ T7931] ? clear_bhb_loop+0x35/0x90 [ 158.352148][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.352176][ T7931] RIP: 0033:0x7ff4fd58cde9 [ 158.352195][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.352215][ T7931] RSP: 002b:00007ff4fe3be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.352238][ T7931] RAX: ffffffffffffffda RBX: 00007ff4fd7a5fa0 RCX: 00007ff4fd58cde9 [ 158.352255][ T7931] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 158.352268][ T7931] RBP: 00007ff4fe3be090 R08: 0000000000000000 R09: 0000000000000000 [ 158.352282][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.352294][ T7931] R13: 0000000000000000 R14: 00007ff4fd7a5fa0 R15: 00007ffec68f0d58 [ 158.352327][ T7931] [ 158.788935][ T7942] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 158.831358][ T7945] netlink: 52 bytes leftover after parsing attributes in process `syz.1.663'. [ 159.053454][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 159.059835][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.066505][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.073043][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.079628][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.086197][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.092750][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.099353][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.105946][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.112481][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.119049][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.125590][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.132182][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.138776][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.145354][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.151915][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.158503][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.165038][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.171643][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.178213][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.184778][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.191360][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.197921][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.204453][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.211128][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.217714][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.224271][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.230855][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.237438][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.243988][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.250586][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.257174][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.263745][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.270340][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.276931][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.283482][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.290096][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.296687][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.303228][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.309806][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.316406][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.322951][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.329544][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.336133][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.342678][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.349287][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.355845][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.362430][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.369027][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.375582][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.382172][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.388156][ T7954] netlink: 52 bytes leftover after parsing attributes in process `syz.3.668'. [ 159.388742][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.404055][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.410631][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.417205][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.423753][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.430328][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.436926][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.443469][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.450046][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.456634][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.463184][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.469766][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.476356][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.486343][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.492926][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.499500][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.506073][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.512761][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 159.744778][ T7960] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 159.840283][ T7966] tipc: Started in network mode [ 159.845238][ T7966] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 159.891573][ T7966] tipc: Enabling of bearer rejected, failed to enable media [ 160.141272][ T7991] bridge2: entered promiscuous mode [ 160.152087][ T7991] bridge2: entered allmulticast mode [ 160.159449][ T7991] team0: Device bridge2 is up. Set it down before adding it as a team port [ 160.269308][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e7be400: rx timeout, send abort [ 160.307873][ T7998] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 160.379772][ T7996] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 160.395525][ T7996] tipc: Enabled bearer , priority 10 [ 160.437975][ T8003] sch_fq: defrate 117 ignored. [ 160.708390][ T8019] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 160.738413][ T8019] netlink: 'syz.1.691': attribute type 8 has an invalid length. [ 160.777623][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e7be400: abort rx timeout. Force session deactivation [ 160.909814][ T8028] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 160.922155][ T8032] __nla_validate_parse: 13 callbacks suppressed [ 160.922179][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.698'. [ 160.947446][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 160.964308][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 160.974117][ T8037] netlink: 3 bytes leftover after parsing attributes in process `syz.4.696'. [ 160.975856][ T8028] bond1: entered promiscuous mode [ 160.994042][ T8032] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 160.995754][ T8028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.015242][ T8037] batadv1: entered allmulticast mode [ 161.022190][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.041409][ T8039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.697'. [ 161.047243][ T8037] bond1: (slave batadv1): making interface the new active one [ 161.058626][ T8037] batadv1: entered promiscuous mode [ 161.065177][ T8037] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 161.083791][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 161.128096][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 161.148371][ T8041] bridge_slave_0: invalid flags given to default FDB implementation [ 161.254507][ T8037] netlink: 100 bytes leftover after parsing attributes in process `syz.4.696'. [ 161.404769][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.705'. [ 161.526191][ T978] tipc: Node number set to 1 [ 163.629092][ T8084] netlink: 'syz.4.715': attribute type 4 has an invalid length. [ 163.663460][ T8087] netlink: 52 bytes leftover after parsing attributes in process `syz.0.719'. [ 163.963465][ T8087] ip6gretap0: entered promiscuous mode [ 163.984075][ T8087] batadv_slave_0: entered promiscuous mode [ 163.999222][ T8087] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 164.009530][ T8087] Cannot create hsr debugfs directory [ 164.588679][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 164.966499][ T8140] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 165.345233][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ad6e400: rx timeout, send abort [ 165.854350][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ad6e400: abort rx timeout. Force session deactivation [ 167.345303][ T8158] __nla_validate_parse: 5 callbacks suppressed [ 167.345324][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.737'. [ 167.532181][ T8165] netlink: 'syz.1.743': attribute type 4 has an invalid length. [ 167.558790][ T8165] netlink: 'syz.1.743': attribute type 2 has an invalid length. [ 167.642359][ T8171] tipc: Enabling of bearer rejected, already enabled [ 167.664497][ T8171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'. [ 167.755772][ T8176] ax25_connect(): syz.1.747 uses autobind, please contact jreuter@yaina.de [ 168.115987][ T8183] syzkaller1: entered promiscuous mode [ 168.129641][ T8183] syzkaller1: entered allmulticast mode [ 168.470973][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 168.539903][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 168.572345][ T8202] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 168.658619][ T8206] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 [ 168.814684][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 168.998530][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.765'. [ 169.054191][ T8220] bond0: option mode: unable to set because the bond device has slaves [ 169.309376][ T8230] macsec1: entered promiscuous mode [ 169.314722][ T8230] macsec1: entered allmulticast mode [ 169.459808][ T8236] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.679050][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 169.696841][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 169.721304][ T8241] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 170.133738][ T975] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 170.557545][ T8265] FAULT_INJECTION: forcing a failure. [ 170.557545][ T8265] name failslab, interval 1, probability 0, space 0, times 0 [ 170.571105][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.3.784 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 170.571133][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 170.571147][ T8265] Call Trace: [ 170.571155][ T8265] [ 170.571164][ T8265] dump_stack_lvl+0x241/0x360 [ 170.571195][ T8265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.571217][ T8265] ? __pfx__printk+0x10/0x10 [ 170.571252][ T8265] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 170.571278][ T8265] ? __pfx___might_resched+0x10/0x10 [ 170.571308][ T8265] should_fail_ex+0x40a/0x550 [ 170.571337][ T8265] should_failslab+0xac/0x100 [ 170.571361][ T8265] kmem_cache_alloc_node_noprof+0x77/0x380 [ 170.571384][ T8265] ? __alloc_skb+0x1c3/0x440 [ 170.571419][ T8265] __alloc_skb+0x1c3/0x440 [ 170.571461][ T8265] ? __pfx___alloc_skb+0x10/0x10 [ 170.571498][ T8265] ? __pfx___might_resched+0x10/0x10 [ 170.571525][ T8265] alloc_skb_with_frags+0xc3/0x820 [ 170.571559][ T8265] ? validate_chain+0x11e/0x5920 [ 170.571587][ T8265] sock_alloc_send_pskb+0x91a/0xa60 [ 170.571623][ T8265] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 170.571656][ T8265] ? iov_iter_advance+0x8f/0x1e0 [ 170.571689][ T8265] tun_get_user+0xcf6/0x48a0 [ 170.571738][ T8265] ? __lock_acquire+0x1397/0x2100 [ 170.571772][ T8265] ? __pfx_tun_get_user+0x10/0x10 [ 170.571829][ T8265] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 170.571855][ T8265] ? tun_get+0x1e/0x2f0 [ 170.571883][ T8265] ? __pfx_lock_release+0x10/0x10 [ 170.571926][ T8265] ? tun_get+0x1e/0x2f0 [ 170.571974][ T8265] ? tun_get+0x27d/0x2f0 [ 170.572005][ T8265] tun_chr_write_iter+0x10d/0x1f0 [ 170.572038][ T8265] vfs_write+0xacf/0xd10 [ 170.572071][ T8265] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 170.572102][ T8265] ? __pfx_vfs_write+0x10/0x10 [ 170.572127][ T8265] ? do_sys_openat2+0x17a/0x1d0 [ 170.572152][ T8265] ? __fget_files+0x2a/0x410 [ 170.572177][ T8265] ? __fget_files+0x2a/0x410 [ 170.572205][ T8265] ksys_write+0x18f/0x2b0 [ 170.572234][ T8265] ? __pfx_ksys_write+0x10/0x10 [ 170.572264][ T8265] ? do_syscall_64+0x100/0x230 [ 170.572295][ T8265] ? do_syscall_64+0xb6/0x230 [ 170.572326][ T8265] do_syscall_64+0xf3/0x230 [ 170.572353][ T8265] ? clear_bhb_loop+0x35/0x90 [ 170.572384][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.572412][ T8265] RIP: 0033:0x7fb434f8cde9 [ 170.572429][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.572455][ T8265] RSP: 002b:00007fb435e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.572477][ T8265] RAX: ffffffffffffffda RBX: 00007fb4351a5fa0 RCX: 00007fb434f8cde9 [ 170.572490][ T8265] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000008 [ 170.572504][ T8265] RBP: 00007fb435e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 170.572515][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.572527][ T8265] R13: 0000000000000000 R14: 00007fb4351a5fa0 R15: 00007ffe03241bd8 [ 170.572557][ T8265] [ 171.216743][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 171.248043][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 171.311306][ T8270] netlink: 'syz.0.787': attribute type 1 has an invalid length. [ 172.210437][ T975] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 173.701825][ T8314] __nla_validate_parse: 4 callbacks suppressed [ 173.701848][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 173.737735][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 173.766847][ T8314] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 173.786421][ T8318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.805'. [ 173.795357][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 174.000200][ T8330] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 174.116067][ T8330] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 174.239847][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 174.409800][ T8348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'. [ 174.509356][ T8355] Cannot find add_set index 2 as target [ 174.561562][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 174.583475][ T8359] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 174.741947][ T8366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.822'. [ 174.822715][ T8370] FAULT_INJECTION: forcing a failure. [ 174.822715][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.842170][ T8371] netlink: 'syz.0.823': attribute type 39 has an invalid length. [ 174.850501][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.1.825 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 174.850530][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.850543][ T8370] Call Trace: [ 174.850551][ T8370] [ 174.850560][ T8370] dump_stack_lvl+0x241/0x360 [ 174.850592][ T8370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.850615][ T8370] ? __pfx__printk+0x10/0x10 [ 174.850656][ T8370] ? snprintf+0xda/0x120 [ 174.850682][ T8370] should_fail_ex+0x40a/0x550 [ 174.850713][ T8370] _copy_to_user+0x31/0xb0 [ 174.850738][ T8370] simple_read_from_buffer+0xca/0x150 [ 174.850777][ T8370] proc_fail_nth_read+0x1e9/0x250 [ 174.850814][ T8370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.850851][ T8370] ? rw_verify_area+0x243/0x630 [ 174.850878][ T8370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.850914][ T8370] vfs_read+0x1f8/0xb40 [ 174.850943][ T8370] ? fdget_pos+0x254/0x320 [ 174.850968][ T8370] ? __pfx___mutex_lock+0x10/0x10 [ 174.850998][ T8370] ? __pfx_vfs_read+0x10/0x10 [ 174.851030][ T8370] ? __fget_files+0x2a/0x410 [ 174.851055][ T8370] ? __fget_files+0x395/0x410 [ 174.851076][ T8370] ? __fget_files+0x2a/0x410 [ 174.851117][ T8370] ksys_read+0x18f/0x2b0 [ 174.851149][ T8370] ? __pfx_ksys_read+0x10/0x10 [ 174.851178][ T8370] ? do_syscall_64+0x100/0x230 [ 174.851212][ T8370] ? do_syscall_64+0xb6/0x230 [ 174.851244][ T8370] do_syscall_64+0xf3/0x230 [ 174.851274][ T8370] ? clear_bhb_loop+0x35/0x90 [ 174.851307][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.851336][ T8370] RIP: 0033:0x7ff4fd58b7fc [ 174.851354][ T8370] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.851373][ T8370] RSP: 002b:00007ff4fe3be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.851396][ T8370] RAX: ffffffffffffffda RBX: 00007ff4fd7a5fa0 RCX: 00007ff4fd58b7fc [ 174.851411][ T8370] RDX: 000000000000000f RSI: 00007ff4fe3be0a0 RDI: 0000000000000003 [ 174.851425][ T8370] RBP: 00007ff4fe3be090 R08: 0000000000000000 R09: 0000000000000000 [ 174.851438][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.851450][ T8370] R13: 0000000000000000 R14: 00007ff4fd7a5fa0 R15: 00007ffec68f0d58 [ 174.851483][ T8370] [ 175.209026][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 175.346804][ T8384] set match dimension is over the limit! [ 176.781294][ T8361] tipc: Enabling of bearer rejected, already enabled [ 177.149794][ T8402] netlink: 'syz.2.834': attribute type 13 has an invalid length. [ 177.205657][ T8402] gretap0: refused to change device tx_queue_len [ 177.230335][ T8402] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.511200][ T8413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'. [ 179.683800][ T8430] __nla_validate_parse: 1 callbacks suppressed [ 179.683816][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 179.699408][ T8430] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 179.708059][ T8430] tipc: Enabled bearer , priority 10 [ 179.972216][ T8464] pim6reg: entered allmulticast mode [ 180.003884][ T8464] openvswitch: netlink: Duplicate or invalid key (type 1). [ 180.025005][ T8472] FAULT_INJECTION: forcing a failure. [ 180.025005][ T8472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.027384][ T8464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.096945][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: syz.2.855 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 180.096979][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 180.096992][ T8472] Call Trace: [ 180.097000][ T8472] [ 180.097008][ T8472] dump_stack_lvl+0x241/0x360 [ 180.097040][ T8472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.097063][ T8472] ? __pfx__printk+0x10/0x10 [ 180.097103][ T8472] ? snprintf+0xda/0x120 [ 180.097129][ T8472] should_fail_ex+0x40a/0x550 [ 180.097160][ T8472] _copy_to_user+0x31/0xb0 [ 180.097184][ T8472] simple_read_from_buffer+0xca/0x150 [ 180.097223][ T8472] proc_fail_nth_read+0x1e9/0x250 [ 180.097260][ T8472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.097298][ T8472] ? rw_verify_area+0x243/0x630 [ 180.097326][ T8472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.097363][ T8472] vfs_read+0x1f8/0xb40 [ 180.097409][ T8472] ? fdget_pos+0x254/0x320 [ 180.097433][ T8472] ? __pfx___mutex_lock+0x10/0x10 [ 180.097463][ T8472] ? __pfx_vfs_read+0x10/0x10 [ 180.097495][ T8472] ? __fget_files+0x2a/0x410 [ 180.097520][ T8472] ? __fget_files+0x395/0x410 [ 180.097541][ T8472] ? __fget_files+0x2a/0x410 [ 180.097575][ T8472] ksys_read+0x18f/0x2b0 [ 180.097606][ T8472] ? __pfx_ksys_read+0x10/0x10 [ 180.097635][ T8472] ? do_syscall_64+0x100/0x230 [ 180.097669][ T8472] ? do_syscall_64+0xb6/0x230 [ 180.097708][ T8472] do_syscall_64+0xf3/0x230 [ 180.097738][ T8472] ? clear_bhb_loop+0x35/0x90 [ 180.097771][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.097801][ T8472] RIP: 0033:0x7f66aef8b7fc [ 180.097819][ T8472] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 180.097838][ T8472] RSP: 002b:00007f66afd71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.097861][ T8472] RAX: ffffffffffffffda RBX: 00007f66af1a5fa0 RCX: 00007f66aef8b7fc [ 180.097877][ T8472] RDX: 000000000000000f RSI: 00007f66afd710a0 RDI: 0000000000000007 [ 180.097890][ T8472] RBP: 00007f66afd71090 R08: 0000000000000000 R09: 0000000000000000 [ 180.097903][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.097916][ T8472] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 180.097949][ T8472] [ 180.345125][ T8475] SET target dimension over the limit! [ 180.402044][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 180.439380][ T8477] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 180.450422][ T8482] netlink: 'syz.3.859': attribute type 2 has an invalid length. [ 180.459370][ T8482] netlink: 'syz.3.859': attribute type 9 has an invalid length. [ 180.467582][ T8482] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.859'. [ 180.569244][ T8485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.860'. [ 180.581570][ T8485] netlink: 'syz.0.860': attribute type 2 has an invalid length. [ 180.589771][ T8485] netlink: 'syz.0.860': attribute type 9 has an invalid length. [ 180.598195][ T8485] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.860'. [ 180.746191][ T5833] tipc: Node number set to 1 [ 180.764686][ T8490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.776269][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 180.883510][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.863'. [ 180.984803][ T8499] tipc: Enabling of bearer rejected, already enabled [ 180.995374][ T8499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.866'. [ 181.482726][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 181.498482][ T8526] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 183.391977][ T8543] netlink: 'syz.4.875': attribute type 39 has an invalid length. [ 183.684834][ T8552] atomic_op ffff88801cb75998 conn xmit_atomic 0000000000000000 [ 183.767314][ T8556] netlink: 'syz.0.881': attribute type 2 has an invalid length. [ 183.785418][ T8556] netlink: 'syz.0.881': attribute type 9 has an invalid length. [ 183.799748][ T8556] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.881'. [ 183.850804][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 183.902139][ T8559] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 184.033841][ T8566] netlink: 'syz.0.885': attribute type 10 has an invalid length. [ 184.082560][ T8566] team0: Port device wlan1 added [ 184.122165][ T8570] atomic_op ffff888011c8d198 conn xmit_atomic 0000000000000000 [ 184.464518][ T8581] netlink: 'syz.2.890': attribute type 10 has an invalid length. [ 184.788462][ T8599] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 186.377233][ T8594] veth5: entered promiscuous mode [ 186.384438][ T8594] bond0: (slave veth5): Enslaving as an active interface with an up link [ 186.572268][ T8610] __nla_validate_parse: 5 callbacks suppressed [ 186.572288][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.902'. [ 186.772393][ T8621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.907'. [ 186.815726][ T8621] netlink: 'syz.1.907': attribute type 2 has an invalid length. [ 186.828179][ T8621] netlink: 'syz.1.907': attribute type 9 has an invalid length. [ 186.886126][ T8621] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.907'. [ 186.913497][ T8624] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 187.269425][ T8639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.914'. [ 187.582647][ T8644] FAULT_INJECTION: forcing a failure. [ 187.582647][ T8644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.597600][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: syz.2.915 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 187.597631][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 187.597644][ T8644] Call Trace: [ 187.597651][ T8644] [ 187.597661][ T8644] dump_stack_lvl+0x241/0x360 [ 187.597706][ T8644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.597730][ T8644] ? __pfx__printk+0x10/0x10 [ 187.597766][ T8644] ? __pfx_lock_release+0x10/0x10 [ 187.597797][ T8644] ? __lock_acquire+0x1397/0x2100 [ 187.597833][ T8644] should_fail_ex+0x40a/0x550 [ 187.597863][ T8644] _copy_from_user+0x2d/0xb0 [ 187.597887][ T8644] kstrtouint_from_user+0xc6/0x190 [ 187.597920][ T8644] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 187.597955][ T8644] ? __pfx_lock_acquire+0x10/0x10 [ 187.597994][ T8644] proc_fail_nth_write+0xaa/0x2d0 [ 187.598029][ T8644] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 187.598054][ T8644] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.598104][ T8644] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.598140][ T8644] vfs_write+0x29f/0xd10 [ 187.598172][ T8644] ? fdget_pos+0x254/0x320 [ 187.598194][ T8644] ? __mutex_unlock_slowpath+0x227/0x800 [ 187.598228][ T8644] ? __pfx_vfs_write+0x10/0x10 [ 187.598261][ T8644] ? __fget_files+0x2a/0x410 [ 187.598285][ T8644] ? __fget_files+0x395/0x410 [ 187.598307][ T8644] ? __fget_files+0x2a/0x410 [ 187.598340][ T8644] ksys_write+0x18f/0x2b0 [ 187.598371][ T8644] ? __pfx_ksys_write+0x10/0x10 [ 187.598402][ T8644] ? do_syscall_64+0x100/0x230 [ 187.598435][ T8644] ? do_syscall_64+0xb6/0x230 [ 187.598468][ T8644] do_syscall_64+0xf3/0x230 [ 187.598498][ T8644] ? clear_bhb_loop+0x35/0x90 [ 187.598531][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.598560][ T8644] RIP: 0033:0x7f66aef8b89f [ 187.598585][ T8644] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 187.598603][ T8644] RSP: 002b:00007f66afd71030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 187.598630][ T8644] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66aef8b89f [ 187.598645][ T8644] RDX: 0000000000000001 RSI: 00007f66afd710a0 RDI: 0000000000000005 [ 187.598658][ T8644] RBP: 00007f66afd71090 R08: 0000000000000000 R09: 0000000000000000 [ 187.598671][ T8644] R10: 00000000000180d4 R11: 0000000000000293 R12: 0000000000000002 [ 187.598684][ T8644] R13: 0000000000000000 R14: 00007f66af1a5fa0 R15: 00007fff29dbd558 [ 187.598718][ T8644] [ 188.094714][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 188.492902][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'. [ 188.700138][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 190.259137][ T8692] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 0, id = 0 [ 190.365777][ T8699] validate_nla: 1 callbacks suppressed [ 190.365799][ T8699] netlink: 'syz.4.933': attribute type 21 has an invalid length. [ 190.420042][ T8699] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.452743][ T8704] netlink: 'syz.3.935': attribute type 1 has an invalid length. [ 190.476287][ T8699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.483565][ T8699] IPv6: NLM_F_CREATE should be set when creating new route [ 190.490940][ T8699] IPv6: NLM_F_CREATE should be set when creating new route [ 190.498244][ T8699] IPv6: NLM_F_CREATE should be set when creating new route [ 190.536133][ T8696] netlink: 'syz.4.933': attribute type 21 has an invalid length. [ 190.546237][ T8696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.784078][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.938'. [ 190.832992][ T8718] netlink: 'syz.4.938': attribute type 2 has an invalid length. [ 190.840900][ T8718] netlink: 'syz.4.938': attribute type 9 has an invalid length. [ 190.852625][ T8718] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.938'. [ 191.098628][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.942'. [ 191.133267][ T8711] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 191.183878][ T8711] ------------[ cut here ]------------ [ 191.189788][ T8711] WARNING: CPU: 1 PID: 8711 at net/core/dev.c:9832 unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.201820][ T8711] Modules linked in: [ 191.205801][ T8711] CPU: 1 UID: 0 PID: 8711 Comm: syz.1.937 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 191.216591][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.226804][ T8711] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.234105][ T8711] Code: ff f7 90 0f 0b 90 e9 49 ff ff ff e8 3e 6e ff f7 90 0f 0b 90 eb 97 e8 33 6e ff f7 90 0f 0b 90 e9 99 f0 ff ff e8 25 6e ff f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 17 6e ff f7 90 0f 0b 90 e9 71 f3 ff ff [ 191.254292][ T8711] RSP: 0018:ffffc90002e86fa0 EFLAGS: 00010283 [ 191.260587][ T8711] RAX: ffffffff89bfeffb RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 191.268700][ T8711] RDX: ffffc9000bf59000 RSI: 0000000000006757 RDI: 0000000000006758 [ 191.276818][ T8711] RBP: ffffc90002e87190 R08: ffffffff89bfe200 R09: fffffbfff1cfa588 [ 191.284851][ T8711] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffffc9000b947000 [ 191.292991][ T8711] R13: 1ffff1100fd9b186 R14: ffff88807ecd8c30 R15: ffff88807ecd8c28 [ 191.301217][ T8711] FS: 00007ff4fe3be6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 191.310378][ T8711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.317083][ T8711] CR2: 00007f58548d56c0 CR3: 000000002806a000 CR4: 00000000003526f0 [ 191.325109][ T8711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.333242][ T8711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.341401][ T8711] Call Trace: [ 191.344731][ T8711] [ 191.347771][ T8711] ? __warn+0x165/0x4d0 [ 191.351980][ T8711] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.358717][ T8711] ? report_bug+0x2b3/0x500 [ 191.363306][ T8711] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.370193][ T8711] ? handle_bug+0x60/0x90 [ 191.374605][ T8711] ? exc_invalid_op+0x1a/0x50 [ 191.379443][ T8711] ? asm_exc_invalid_op+0x1a/0x20 [ 191.384524][ T8711] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 191.391150][ T8711] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 191.398078][ T8711] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.404738][ T8711] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 191.411678][ T8711] ? rtnl_dellink+0x394/0x8d0 [ 191.416615][ T8711] ? unregister_netdevice_queue+0x26b/0x370 [ 191.422577][ T8711] ? __nla_parse+0x40/0x60 [ 191.427157][ T8711] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 191.433484][ T8711] rtnl_dellink+0x52b/0x8d0 [ 191.438154][ T8711] ? __pfx_rtnl_dellink+0x10/0x10 [ 191.443243][ T8711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.449290][ T8711] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.455722][ T8711] ? __pfx_rtnl_dellink+0x10/0x10 [ 191.460903][ T8711] rtnetlink_rcv_msg+0x791/0xcf0 [ 191.465938][ T8711] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 191.471105][ T8711] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.476685][ T8711] ? ref_tracker_free+0x643/0x7e0 [ 191.481777][ T8711] netlink_rcv_skb+0x1e3/0x430 [ 191.486957][ T8711] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.492474][ T8711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.498022][ T8711] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.503376][ T8711] netlink_unicast+0x7f6/0x990 [ 191.508259][ T8711] ? __pfx_netlink_unicast+0x10/0x10 [ 191.513612][ T8711] ? __virt_addr_valid+0x45f/0x530 [ 191.518894][ T8711] ? __phys_addr_symbol+0x2f/0x70 [ 191.523986][ T8711] ? __check_object_size+0x47a/0x730 [ 191.529526][ T8711] netlink_sendmsg+0x8e4/0xcb0 [ 191.534369][ T8711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.539826][ T8711] ? aa_sock_msg_perm+0x91/0x160 [ 191.544842][ T8711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.550306][ T8711] __sock_sendmsg+0x221/0x270 [ 191.555059][ T8711] ____sys_sendmsg+0x52a/0x7e0 [ 191.560005][ T8711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.565380][ T8711] ? __fget_files+0x2a/0x410 [ 191.570142][ T8711] ? __fget_files+0x2a/0x410 [ 191.574804][ T8711] __sys_sendmsg+0x269/0x350 [ 191.579557][ T8711] ? __pfx_futex_wake+0x10/0x10 [ 191.584489][ T8711] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.589883][ T8711] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.596561][ T8711] ? do_syscall_64+0x100/0x230 [ 191.601494][ T8711] ? do_syscall_64+0xb6/0x230 [ 191.606348][ T8711] do_syscall_64+0xf3/0x230 [ 191.610922][ T8711] ? clear_bhb_loop+0x35/0x90 [ 191.615663][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.621690][ T8711] RIP: 0033:0x7ff4fd58cde9 [ 191.626224][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.646097][ T8711] RSP: 002b:00007ff4fe3be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.654577][ T8711] RAX: ffffffffffffffda RBX: 00007ff4fd7a5fa0 RCX: 00007ff4fd58cde9 [ 191.662697][ T8711] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 191.670944][ T8711] RBP: 00007ff4fd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.679048][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.687100][ T8711] R13: 0000000000000000 R14: 00007ff4fd7a5fa0 R15: 00007ffec68f0d58 [ 191.695116][ T8711] [ 191.698228][ T8711] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.705523][ T8711] CPU: 1 UID: 0 PID: 8711 Comm: syz.1.937 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 191.716123][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.726190][ T8711] Call Trace: [ 191.729480][ T8711] [ 191.732419][ T8711] dump_stack_lvl+0x241/0x360 [ 191.737130][ T8711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.742356][ T8711] ? __pfx__printk+0x10/0x10 [ 191.746965][ T8711] ? _printk+0xd5/0x120 [ 191.751142][ T8711] ? __init_begin+0x41000/0x41000 [ 191.756195][ T8711] ? vscnprintf+0x5d/0x90 [ 191.760570][ T8711] panic+0x349/0x880 [ 191.764507][ T8711] ? __warn+0x174/0x4d0 [ 191.768690][ T8711] ? __pfx_panic+0x10/0x10 [ 191.773144][ T8711] __warn+0x344/0x4d0 [ 191.777160][ T8711] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.783767][ T8711] report_bug+0x2b3/0x500 [ 191.788132][ T8711] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.794742][ T8711] handle_bug+0x60/0x90 [ 191.798945][ T8711] exc_invalid_op+0x1a/0x50 [ 191.803469][ T8711] asm_exc_invalid_op+0x1a/0x20 [ 191.808350][ T8711] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 191.815573][ T8711] Code: ff f7 90 0f 0b 90 e9 49 ff ff ff e8 3e 6e ff f7 90 0f 0b 90 eb 97 e8 33 6e ff f7 90 0f 0b 90 e9 99 f0 ff ff e8 25 6e ff f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 17 6e ff f7 90 0f 0b 90 e9 71 f3 ff ff [ 191.835204][ T8711] RSP: 0018:ffffc90002e86fa0 EFLAGS: 00010283 [ 191.841295][ T8711] RAX: ffffffff89bfeffb RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 191.849285][ T8711] RDX: ffffc9000bf59000 RSI: 0000000000006757 RDI: 0000000000006758 [ 191.857279][ T8711] RBP: ffffc90002e87190 R08: ffffffff89bfe200 R09: fffffbfff1cfa588 [ 191.865267][ T8711] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffffc9000b947000 [ 191.873253][ T8711] R13: 1ffff1100fd9b186 R14: ffff88807ecd8c30 R15: ffff88807ecd8c28 [ 191.881247][ T8711] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 191.887770][ T8711] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 191.894400][ T8711] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 191.901183][ T8711] ? rtnl_dellink+0x394/0x8d0 [ 191.905890][ T8711] ? unregister_netdevice_queue+0x26b/0x370 [ 191.911823][ T8711] ? __nla_parse+0x40/0x60 [ 191.916265][ T8711] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 191.922531][ T8711] rtnl_dellink+0x52b/0x8d0 [ 191.927055][ T8711] ? __pfx_rtnl_dellink+0x10/0x10 [ 191.932101][ T8711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.938103][ T8711] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.944501][ T8711] ? __pfx_rtnl_dellink+0x10/0x10 [ 191.949553][ T8711] rtnetlink_rcv_msg+0x791/0xcf0 [ 191.954502][ T8711] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 191.959634][ T8711] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.965116][ T8711] ? ref_tracker_free+0x643/0x7e0 [ 191.970170][ T8711] netlink_rcv_skb+0x1e3/0x430 [ 191.974951][ T8711] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.980430][ T8711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.985748][ T8711] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.990967][ T8711] netlink_unicast+0x7f6/0x990 [ 191.995761][ T8711] ? __pfx_netlink_unicast+0x10/0x10 [ 192.001070][ T8711] ? __virt_addr_valid+0x45f/0x530 [ 192.006291][ T8711] ? __phys_addr_symbol+0x2f/0x70 [ 192.011338][ T8711] ? __check_object_size+0x47a/0x730 [ 192.016647][ T8711] netlink_sendmsg+0x8e4/0xcb0 [ 192.021436][ T8711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.026758][ T8711] ? aa_sock_msg_perm+0x91/0x160 [ 192.031746][ T8711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.037060][ T8711] __sock_sendmsg+0x221/0x270 [ 192.041776][ T8711] ____sys_sendmsg+0x52a/0x7e0 [ 192.046569][ T8711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.051872][ T8711] ? __fget_files+0x2a/0x410 [ 192.056492][ T8711] ? __fget_files+0x2a/0x410 [ 192.061150][ T8711] __sys_sendmsg+0x269/0x350 [ 192.065757][ T8711] ? __pfx_futex_wake+0x10/0x10 [ 192.070642][ T8711] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.075826][ T8711] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.082180][ T8711] ? do_syscall_64+0x100/0x230 [ 192.086968][ T8711] ? do_syscall_64+0xb6/0x230 [ 192.091668][ T8711] do_syscall_64+0xf3/0x230 [ 192.096196][ T8711] ? clear_bhb_loop+0x35/0x90 [ 192.100895][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.106810][ T8711] RIP: 0033:0x7ff4fd58cde9 [ 192.111245][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.130875][ T8711] RSP: 002b:00007ff4fe3be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.139318][ T8711] RAX: ffffffffffffffda RBX: 00007ff4fd7a5fa0 RCX: 00007ff4fd58cde9 [ 192.147302][ T8711] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 192.155288][ T8711] RBP: 00007ff4fd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.163283][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.171274][ T8711] R13: 0000000000000000 R14: 00007ff4fd7a5fa0 R15: 00007ffec68f0d58 [ 192.179275][ T8711] [ 192.182633][ T8711] Kernel Offset: disabled [ 192.186968][ T8711] Rebooting in 86400 seconds..