last executing test programs: 2m36.606817833s ago: executing program 3 (id=1222): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r2, @ANYBLOB="140005000000000000000000000000000000000014000700ff05"], 0x70}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x4, 0x4e21, 0x800, 0xa, 0x80, 0x80, 0x3e62f441d3188772}, {0x8, 0xead, 0x4, 0x6, 0x5, 0xae2, 0x6, 0x385}, {0x1081, 0xfffffffffffffffc, 0x2, 0x6}, 0xfffffffc, 0x6e6bbe, 0x0, 0x0, 0x3, 0x1}, {{@in=@multicast2, 0x4d2, 0xff}, 0xa, @in=@local, 0x0, 0x0, 0x3, 0x0, 0x5391c3b3, 0x4, 0x10001}}, 0xe8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000001c3a000000100000095", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x97, &(0x7f0000000040)=""/151, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x1}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000480)={'tunl0\x00', r2, 0x700, 0x20, 0x222, 0x5, {{0x21, 0x4, 0x2, 0x8, 0x84, 0x65, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x5, [{@private=0xa010101, 0xc6}, {@local, 0xc6a6}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x8000}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x31, 0x0, 0x5, [0xfffff800, 0xfffffff7, 0xdfea, 0x5, 0x7, 0x2]}, @end, @ssrr={0x89, 0x7, 0x31, [@local]}, @rr={0x7, 0xb, 0x8b, [@multicast1, @multicast2]}, @end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xf, 0x5, 0x1000, 0x400000d}, 0x1}}]}, {0x4}, {0xc, 0x4, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003406845d5cde00800490000380064000000029078ac1e0001ffffffff860dffffffff0005d9670f020240000011e090780000000011000000b400000000000000"], 0x0) r10 = accept$packet(r4, 0x0, &(0x7f0000000200)) sendmmsg(r10, &(0x7f0000000240), 0x0, 0x20044048) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x0, {{@in=@remote, @in6=@loopback, 0x4e21, 0x4, 0x4e20, 0x1, 0x2, 0x0, 0x20, 0x0, 0x0, r12}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in=@loopback, {0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x8, 0x2000000000088, 0x5}, {0x80000001, 0xf, 0xcc, 0x6}, {0x0, 0x7}, 0x3, 0x34ff, 0x2, 0x4, 0xb}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x84) sendmmsg$inet(r6, &(0x7f0000004c40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="110000000000000000000000010000000200000000000000140000000000000000000000010000000900000700000000110000000000000000000000010000000a000000000000001100000000000000000000000100000009000000000000002800000000000000000000000700000000028903dd440c195164010101000003470703f6000000001c"], 0xa8}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2m33.449262536s ago: executing program 3 (id=1230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0xc8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) 2m26.532962748s ago: executing program 3 (id=1230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0xc8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) 2m12.167901562s ago: executing program 3 (id=1230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0xc8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) 2m0.826673826s ago: executing program 3 (id=1230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0xc8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) 1m51.960950365s ago: executing program 4 (id=1536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x174, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xff, 0x5, 0x3, 0x2, 0x9c, 0x4, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xf, 0x7f, 0x6, 0x0, 0x2, 0x1, 0x10001, 0x2}}, {0x8, 0x2, [0x8, 0x8]}}, {{0x1c, 0x1, {0xc, 0x0, 0xe041, 0x5, 0x2, 0x5, 0x8baf, 0x4}}, {0xc, 0x2, [0x401, 0xf, 0x1, 0x9]}}, {{0x1c, 0x1, {0x8, 0x5, 0x8, 0x2, 0x0, 0x8001, 0xfbaa, 0xa}}, {0x18, 0x2, [0x6, 0x5, 0x4, 0x5, 0x8, 0x1ff, 0x5fb0, 0x2, 0x2, 0xfff]}}, {{0x1c, 0x1, {0xf7, 0x1, 0x10, 0x9, 0x1, 0xfffffffa, 0x8000, 0x5}}, {0xe, 0x2, [0x1, 0x0, 0x0, 0x7, 0x200]}}, {{0x1c, 0x1, {0x40, 0x40, 0x7, 0x7, 0x0, 0x10000, 0xd8, 0x6}}, {0x10, 0x2, [0x1, 0x0, 0x1, 0x6, 0x4, 0x7]}}, {{0x1c, 0x1, {0x7, 0xe, 0x3ff, 0x4, 0x0, 0xe, 0x7d92, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x80, 0x6, 0x4, 0x8, 0x0, 0x2, 0x8, 0x5}}, {0xe, 0x2, [0xf21, 0xffed, 0xfff0, 0x0, 0x3]}}]}]}, 0x174}}, 0x0) 1m51.848428941s ago: executing program 4 (id=1539): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) unshare(0x22020600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x28, 0x332231c6dd55fd74, 0x5, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000500)={{0xa, 0x4e20, 0x5080, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, {0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x0, {[0x100, 0xda, 0x9, 0x1, 0x882f, 0xffffffff, 0x3, 0xe]}}, 0x5c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000dc0)="d0b4163e964573", 0x7, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r8, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x5c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1dc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x400c4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r11}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r11, @ANYRESDEC], 0x0, 0xffffffff, 0xffffffffffffffc7, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020d392ab163cc2b14000000000000000000000b005687e22a2bbe7b692800660000edff459f00006787f7a81451510732092cdff73434a1745075459a"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r12, 0x58, &(0x7f0000000180)}, 0x10) 1m51.636952465s ago: executing program 4 (id=1541): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000800210021010000006d1efc151a2d3c2d0d183e9ff9ffffffa7919360204bed26bcf31353d3c5658089026813585c95f15b978f37792568cd151cbce518f6d08f47bf6299363b921c0030d002b8", @ANYRESHEX=r1, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 1m51.437906892s ago: executing program 4 (id=1543): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf49, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1m51.232489588s ago: executing program 4 (id=1545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x10270000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffff7}]}}]}, 0x38}}, 0x0) 1m50.225271716s ago: executing program 4 (id=1556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket(0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x11d0, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x11c0, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @nested={0x119c, 0xa3, 0x0, 0x1, [@nested={0x10d2, 0x34, 0x0, 0x1, [@typed={0x8, 0x10f, 0x0, 0x0, @pid}, @generic="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", @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x135}, @nested={0x4, 0x6a}, @generic="0a3819c146f3f6b5307b76bc9fa3f1b69ae1dd32c2b72f0d7dcb227b317952c06d7868a786d9e8d12df41f7d9e1f0f2d7468fd7c55129cc97067c496cd6c523fb87fde6e1092916333db839a2a0d1092ff236a1f7dd47aac1aa3ac5ac15bc93e54d6f27d6cde0371817377125f904d01ce72f592d42552144e4fc3fd4434d5f71bb55c4d9996e4a8", @nested={0x4, 0x35}, @generic="1a2afa30cdea43c1e47a30dc2a7462310e255ee63b8eca551241a5a3e80330ea5ee03e9f8f11"]}, @generic="74665d4aed6e6fdc1969b515e263d4b79588fc33304f442b1892ef647eb48d38050e861f67e7fcbb401b3808baf5ceb9d42f0f6bee73144f161edfac2fce0061", @typed={0x8, 0xd5, 0x0, 0x0, @uid}, @typed={0x8, 0x110, 0x0, 0x0, @fd}, @nested={0x72, 0xf8, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x12a}, @nested={0x4, 0x9}, @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x10c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @generic="a51ba5b9633490ed83d3f2249111a33d8d1dce1bbc558641e3f6c358cff2f3e4fa1ffcf7c9662159051c94b50e71570e4c10a23fee09c36876ca70e2371d"]}]}]}]}, 0x11d0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r8 = socket(0x15, 0x5, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) getsockopt(r8, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$L2TP_CMD_SESSION_DELETE(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000009ff2747ae54b2ae300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040000) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) socket$packet(0x11, 0xd2f0a5489d8612c4, 0x300) 1m50.224429153s ago: executing program 32 (id=1556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket(0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x11d0, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x11c0, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @nested={0x119c, 0xa3, 0x0, 0x1, [@nested={0x10d2, 0x34, 0x0, 0x1, [@typed={0x8, 0x10f, 0x0, 0x0, @pid}, @generic="8feb0c4bbac5912887cf88f86b3830af378719d1f4b769f26e88d1970e64bf198051b158c5596dd2ff9f5302915c6481534aad20daae688101f7b53c31734a0affa6b944f2c571f7911a134ecee6a87aec466cec8904f2a21c9efc4392784e4e518dfe23a5d4d14f9669a5c530cbc287346d183d5595be63380d3daf9cd85cc1c05c5cc0e1be20007e88a91149c8bc3a4cd1ac9593c5640f184b7723381b57162b95c37b985f7dec76b41f80110888ae83c04403d5d0d9aa302b7dac514b7344f04ee36741c35d46109408a3dedd48fc01a2f1d1716629c4fb6d3465e30b41cd6e7f79fdf6ab3748f3ca837a0100594988ad11b8f2175b0063ea106b82a298d51b9dd7f9ccbabdbb946e824c480178c7f094974b13185f2fd0b3214a817261e601e606072f0b5cc10983d1d9d58a4a19d7e91278f9989d2a5741c5a62ec1e0a2e1edc375968bd7f2c189a77b30763b3dd86df6c720aff77e650d8ebe2bf928cd5251e0ffdf5330a4ecc8083950c5a6ce36357e9a78cc256169ca58fcb4bbb1423e6b26a60149e5ae55344e6421db038f8701e1c4be296927f1158780e3361ff80ee2c40a6ff56db86de3b0d32ac02f23431a04368e8fe47d2472c4da939fb2123fe5e71585747cf7d3f9ab008e1c824b9da1753d7c072041c93a8f872232ed6ddec06760a09d729eea6cecc19399c83da03d1012886c4ea26f25d90b83a37389ac4df9bb8c379c492a1a2687580ff62fd08472c8f3900864742dc19702993f62309ab50b56af24a2e39cb99fd25657888e7ac03c9a868ff8acdb1434ffa79f18dba663427348127d5d1c1ee2023d380249175b58440d3a6bf14637b573100cca28e4b8b08db1d77e4dee06faf75ba95f556b22d5b748469f2cbe5f169e0fdf271fe78e43f3e59f2500bdcdea58183d048cec8b015469cae6a50a707fd86be603354145d4893021fa42046455678cb10c3e7bce4d0f619889576927424c780e81b0413da90a5fdf7be6ca37f5a65527e68057233caa43d8b40511a847d9eade42a7f96157fb9c089fc9734cd950de6d3a3e8b56fa2505ac8aea629024ddebb0f4d364b9a8720559c5568ea6eb130b52f749f051cf8c65e2cc75a8c677d2cc54e77eb4ecb48b50d718f97dd09f744b954105226b277180741f1018029daa1324c6070878b6e7d1ce82c32f55163558f027c5ec5f565ace4876686d88a0859a1254a02010281301c9ceda739380b7ebd7fd5fc02fccc8ede0a7316f38876c5841aa455b7352e1140a5022fe9835a1e829b610316087dc9010f666c663fbac39bb1ef24f62218c2c5b8b704d85a1f613a8be702b09668380ae8707d0c38f4f8f59035e1f7bada1400684515fa27708f24645b72edbb57630c049463fc6ebb158986552a7fe248590f22ee95376c923dc7a664389bd1f8165c4f9b550f330106fd77b1d0396c5ef92be196e9a36bae40c0ef30fd79a473857837d371b693a8ac61e91dd3105d644095db5c620a854945417f188f4f168bcab92a0538805f2d262b874016c820bc4e41f5e8cfcda96377351c503171b012336743ea89c3bd9b9a8e29d75bea8eb8df61872908ef5e0b07bcae3d913e804b81c663efb9b0b9619f64e089715cc867bed8fc444ea0e0bdec4e1d02505970dd8700cb62b363297dd4000055d7474d3cfef0d6e1384a96639e53c04354da8a62fc6984dd1a803f9b103ded1a329dc97175bfefc750ecbbaeaf8efaf6e81f432f6e8df3342b1764087e719652c4572ce9b1555c106132a1f04ee5c2552dda8538e507798395ad34e340adfafa7895d4750a25f06fe19a65bbcc17c15f7eb51a527871c158395dd8232f38ebf354c81a5a617d369486e110f8fb1ad9fe9006db01a1dbd63c66e68823f7396bfeaea4bed04c44a5c13a06255d13f9df7ff5767a711716f09c11c21b781e7672429bdc08e067cfbcbcc4f874ee40b9f2c8ec68e355170c38e1a5706c7ac05624898c5c874548f355fbccc3b7fe1af37532b023c3d07ef0da0dc4788b91f028ae9d99dbc7fdfa7f2d0e6814d67f0ce68c5f1bccacfa2186576dc9c252e004c3adc254575bca8f99472c16428bae589003d92d3f5a484f803306bae9637132ca2340ae1d3d64600380231dae71829b19e29978dcc4f5fac0cbc876a0fd658bf0c4e74b4fe3480eadbe8e6bffbc961ddc850dab0efe1c7fe2a67d7c1a8f5eb16c4da347299f2e62d0c6e75260de575783845ee1002f8d5676119a80e5ac2672817ff46e725f3410d4ba7b73c388c5eb9d9da48a709cc53c8beffad07d172c4a8bbbafa961d573acf8bdda4f7d706c390da76fcc304f9e589fa33e635891215039d7d5d949cd23eaf258aaec3ac9b1bc4f6eb3d8a2e841fe73089e8c1be0de29a2439c0ad0e0022274e9a9cb6ddbf2c71c78e00f49edfb553e59a6d215a0610d36bdd849aa858c5bb8af604d17cd6aaca3013f00e4a2dd80e37900dccfa42b1349298525e59709213bc471b7ab974fbf4fdc73aa2efab4653b663396472c4582ab6fc9e0c619c3e6d1a204130d048bb95c4429c1d5b2efb1837ac90e9b8adcc40af6c79b647063cc6fba076a27c93eedac6335b29a48fdac5614f1fec6694cd8ede658a60df9e0e2b28672dd22e5eb0c44d6adcee3bb343b8a584018a8b6d963e698163a5ee596fb2cfbc1953638e3341beb2a64b3b44df56e50e73817a09f9514f10c37e68ab11b8f342a2f74519c4c2a2867ecb44b7effc12ecf81745eb0eb283e0d5887732486a4344294a16904d809124912855207291300fb6be6e5fa79496f14bc182a55cb11eb2eaf5703f12b0fffaa312cffac88949a54d0a9929db0c13c8d9b8829fbd0d6df35d484cdbf2e988bd9b8f9c61609fb3998fa333d97786ddd665f721ce5339249de486cb6393c1efa8b968db03b4a4e3f7bc675ed195f672ea8811da0327908af810b9a49e37cd7e423f6f5bccff3ff6674e0cda8fc0900ed0152fffeb9013c7922a070490466cb876f357b03f4a1be8b0d23ca9871ebd13c21edb23bb9e1fa18b43fd54ed4b5f8f43325386b658991aa67ec1494ea4f71bf324403e2172ecc45a348067ef8232973d20c6773e1272d19c51fcbaad41dcc1e96ea3bf85c43ba4ca2931a3a4a5e88dcc88df55cafb066af04cfbbcdb39083a8cbaae7f90f0fd6ed5078dc532f0820b92b450ba682f56e505e873088542af2d5c8e40e50ea9ee13f868faa6b4eed2f85052073ca286ee9755b51b562e761622486baa90be88ae3950506c63604a3f14decb04d6d72138d491be3f8cdc36ff9e744261c1a1be3f9ae8c8393e089cc50962f8d23fb3115e2198c40afb55d3c965d1a099e0eddfbc8712e10880d684bd58497304da463e477700f69dcc5dbafc68568354f3eeac653c29e1a285651ce3ffafdf79091ed3d5cb3174fcab202dfacb09fa7959c37d54399048fb5538286a2b771dc9d019e7d33be4479b15357d6198219e006485693bd9fe6e7f5b6b728e469ed7a957033e6ac0a554b49e3ae30e69f1727739c47dcac38344af89ef1cf8bae1d7f6f35ee6d50be2578197be833f92cf111cfbcb20229987fd2d8ccc47e535ab27d3f8d50bbcda0c0faee5b46772b3cdd9ca3a850cca32c19fcbaca3ae073bb470c0ca024fb9bef00fbecc0af4e030609f4ea9328940ebbe872e7e9f8c36f94186125b8a2b08e4e8f361631a15af8de31a7b71fcc17e527ee110e6ed3f5b8701603cfa408d935516b515e1f85c6194bd4094d22e7f63e45c87c2015f1eaaa421bf5e57a893905cf89040731a5b8ecd87c0ba7d30af5ecedcea199be2eeac3c0a785645590274bb889c238a15c8373b40a61db4602caf6666ec4b2c5ba136d78b784f3faea151ecac3b18067a2885506579fb64f522dff503a3a9a1e99972529b44f92e915d987042458dfe2de738ebdf211617654bab304062bf7019f11b7db395895b0e3ef2beea84b8dbcda909cea44fe659bc10af86033db3528b9df53e3bac2e95358c76ba7fbc5ba6e6abe993f563f050bbffbe8fc57ed4f0bc8dff73e4b05ab6d9896e46d3318fb3c04eba9287816c2105793f004de2991651ec0e00e0eb571df7ea58d4079a373f5d0462a4f2abf1fb83efc7e4a68319752c37703f60c1176cf46753f4a29b139f385ebc1ee783810016e72d782432cf4910e065f0c55aff6d8e8fd0f792e7e66e6eac537ddda35844251589869d901df90ed32181ae448163f3a8a3b05d03b8a8e6580a8c5bdf6c3dec13dd7bcd4ec17d235d283530df831a38cbed116a004ec9cfe4657c4d159ebcabe69729b93d9ac6269813b009a8f12fff39869078dc78f5ee7b8a3c1cb3f90fc44a18f12d6ae0234d5cf0a7a64da6e99726d155dbb8dbed369a07e6b0b3e5f2130050faff2f454bc3de66ca6beb564f37910ba0e746169374fc1fce8501ab26d7fc22f64400bd5cfba68466ba5b7a412cc1544b0ffbc84d7ec39fdbdaab25dc2ac21d1973d346daed653f1614b375f34b3dadb8f4644f24690c67d0dfae6b4af53552127bd119b32c6e57fea5f9df0c2b1ecb166b8695e95ebf6e480b40cbfc2e0de24ed8a3cdd4aec93354de1a9e99d1b96a9f3cb27215557068dec24317afe2568cff37200417c791fc2c4cb93714d07c70d60b0dc2dcd8b12aaff6ea5cb4c99699c9fc839c30b87b2170f4a35bf7be1fa11fc6ddc7b08e5ed45357265c525cae9fed7cc308d497245315b56bf3a7b01636c42d46715a4bd2ac5621a1b29c0b771cd5f88459c587a9eca32baae17750ab71923f8d2d7333fbca45ec8103bc9ae2c14c03a6b630858f7ad2640e5cb964c9bb0c7afcdb8b05047428b5a0b43652dc485789c34e53eb7301db8808415b69a17c9cd5cf792c86d7f83479050431f309cd7336c8550cb169804c803a6545d4647c25430a84da01e601df80111be4856b1e19f8059de6d56cc04e34625ec3e786e1eae810e22bd8106d2600cf152288999e112255279e4dc6afc8a0daaf0c16364b2f9a4bbf3c7683afe4afcdba4efbfef59509da56d2bc3da2ef09f657eb44998e2cb0e2f20adc0bf8fe134de7810c47a63fb0e3d6d684b0df8398d88950faff5efdf0346cee2ca1b1aef521a9dfbb8e910312eec394b77307dd35a5bbea67f98987d5474e28a9ec2539b8c9668d5ee8d52acfda53540b47abd3edddb102f521733a287c9ba4ab0fcc97865d1d21037dbbe8775a1f28e7f5ac1a765c8a4c5d2331231065b184eef25ab28f6efb545bb99b7bcb1a1b3d0aeca26420cf543bc2ffaab4b94c5cca09d038054e2c613c41f65ac02501668080864cbb3afa5347a6d9b62e15c1531ba975489bfa5a3f8885059f55bd2fead090182682d976c2616036519276727a91abb4978f770c24a5416948c600b4feecabcd8255de8fd9e66dc714611b9ec4b5922a86ad30d5f286f826e866cf7eb7a0d41060d718b2e6b93b77e7e2f123f92c47ed8fa1c6af886ca686ff961df54c347f29cdfd682c367a5c2b649d11d5ca9c46e123fec7925a858100c3850a717806a4ca5c19dc14c124acff089b08978be2b2e09a02f94a300db1950eeffd305032c9fe2481027a05cd383a41e82ee8b56afb944ccebb28f896c47af92aa7692a382dda95855c70e64c00cc4cdb08f98d4f38d4328ee6238bee1e844bad5a707ce15983a39c13abe6c506fc03d5bc018d6c85f4af025cef30a623ee3140f263153e8fab51d0a43bb5a82902a27424375b71a8894d9f87dda7b66a2da9885acb7f2bfb2b0118c9dc51f809bd8e8cd1858e00d2acad0267", @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x135}, @nested={0x4, 0x6a}, @generic="0a3819c146f3f6b5307b76bc9fa3f1b69ae1dd32c2b72f0d7dcb227b317952c06d7868a786d9e8d12df41f7d9e1f0f2d7468fd7c55129cc97067c496cd6c523fb87fde6e1092916333db839a2a0d1092ff236a1f7dd47aac1aa3ac5ac15bc93e54d6f27d6cde0371817377125f904d01ce72f592d42552144e4fc3fd4434d5f71bb55c4d9996e4a8", @nested={0x4, 0x35}, @generic="1a2afa30cdea43c1e47a30dc2a7462310e255ee63b8eca551241a5a3e80330ea5ee03e9f8f11"]}, @generic="74665d4aed6e6fdc1969b515e263d4b79588fc33304f442b1892ef647eb48d38050e861f67e7fcbb401b3808baf5ceb9d42f0f6bee73144f161edfac2fce0061", @typed={0x8, 0xd5, 0x0, 0x0, @uid}, @typed={0x8, 0x110, 0x0, 0x0, @fd}, @nested={0x72, 0xf8, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x12a}, @nested={0x4, 0x9}, @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x10c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @generic="a51ba5b9633490ed83d3f2249111a33d8d1dce1bbc558641e3f6c358cff2f3e4fa1ffcf7c9662159051c94b50e71570e4c10a23fee09c36876ca70e2371d"]}]}]}]}, 0x11d0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r8 = socket(0x15, 0x5, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) getsockopt(r8, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$L2TP_CMD_SESSION_DELETE(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000009ff2747ae54b2ae300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040000) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) socket$packet(0x11, 0xd2f0a5489d8612c4, 0x300) 1m49.976061953s ago: executing program 3 (id=1230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0xc8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) 1m49.715127042s ago: executing program 33 (id=1230): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0xc8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) 4.016925601s ago: executing program 2 (id=2574): socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x5421, 0x110e22ffff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) sendto$inet6(r4, &(0x7f0000000380)="58fac1d3c099a258431f915d4dc48a009017f82f0de7f3be7d1b8807019cb372b9d17bddb55e18819e2577c0931a34cbd8c47293e094abaf50634a0d9688c3", 0x3f, 0x48011, &(0x7f000005ffe4)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) unshare(0xa020480) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 3.583199882s ago: executing program 5 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2.773432722s ago: executing program 2 (id=2593): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map=r0, 0xffffffffffffffff, 0x32, 0x0, 0x0, @void, @value=r1}, 0x20) socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xa}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000002c0)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x2, 0x81}}}], 0x18}}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x16}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.769500713s ago: executing program 6 (id=2594): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x927}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="13ce", 0x2}], 0x1}}], 0x1, 0x20004888) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x4040090) 2.602241154s ago: executing program 0 (id=2596): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf49, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (fail_nth: 2) 2.602088926s ago: executing program 6 (id=2597): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x4, 0x6c1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x2140}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000800000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="060066008e8800000a0006000802c50525240000260033"], 0x58}}, 0x20000080) 2.601666241s ago: executing program 5 (id=2598): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf49, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2.073132864s ago: executing program 2 (id=2599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x28}, 0x1, 0x3000000000000}, 0x0) 2.072871773s ago: executing program 1 (id=2600): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e000100697036677265746170000000400002800400120005000b000700000008000100", @ANYRES32, @ANYBLOB="05000800000000000800040000040000060011004e24000008000100", @ANYRES32, @ANYBLOB="060011004e24000008000300", @ANYRES32], 0x7c}, 0x1, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.808095424s ago: executing program 6 (id=2601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000280)={'ip6gre0\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x80, 0xc, 0x7, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0xf, 0xf5, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x7, 0xd4, [@remote]}, @lsrr={0x83, 0xf, 0x70, [@empty, @remote, @broadcast]}, @ssrr={0x89, 0xf, 0x99, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x80, 0xc, 0x7, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0xf, 0xf5, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x7, 0xd4, [@remote]}, @lsrr={0x83, 0xf, 0x70, [@empty, @remote, @broadcast]}, @ssrr={0x89, 0xf, 0x99, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getnexthop={0x0, 0x6a, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NHA_ID, @NHA_MASTER, @NHA_OIF={0x0, 0x5, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004002}, 0xbe1c4b272f2a8e3e) 1.69505994s ago: executing program 0 (id=2602): close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001900)="6e98", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000001c80)="17144e07", 0xc3fe}], 0x1}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@private=0xa010100, 0x0, 0x81b7, 0xfffc, 0x0, 0xa, 0x20}, {0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x65a, 0x8002}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x20000000, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe40b}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) 1.585127082s ago: executing program 2 (id=2603): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x10000000000002b9) (fail_nth: 6) 1.584477698s ago: executing program 6 (id=2604): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003fc0)=@newtfilter={0x48c, 0x2c, 0xf27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x45c, 0x2, [@TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xc, 0xff, 0x9, 0x7f, 0x5, 0x2, 0x5393, 0x1, 0x7ff, 0x3, 0x0, 0x7, 0x600000, 0x5e, 0x3, 0xf, 0x4, 0x7, 0x7, 0x4, 0x4, 0x3, 0x2, 0x3, 0x4, 0x7, 0x10001, 0x66d, 0xb, 0x9, 0x10, 0x9b, 0x9, 0x9, 0xe4, 0x0, 0xde3b, 0xffffffb5, 0x1, 0x6, 0xb2, 0x3, 0x8, 0x200, 0x8, 0x0, 0x1, 0x7, 0x3, 0x80000000, 0x8000, 0x6, 0x6, 0x8, 0xe06, 0x2ca, 0xffffffff, 0x1, 0xdc, 0x5, 0x5, 0xffffffff, 0x5, 0x400, 0x1, 0x6, 0xfc4a, 0x7f, 0x2, 0x1000, 0xf, 0x2, 0x5, 0x0, 0x6, 0x7fffffff, 0x1, 0x3e07, 0x8a0, 0x1, 0x3, 0x6, 0x9, 0x711, 0x4, 0x8, 0x8, 0x7c, 0xfff, 0x4, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x5, 0x387c, 0xd20580bc, 0x8, 0x40, 0x8, 0x8, 0x101, 0x101, 0x9, 0x8, 0xf, 0x5de7b18b, 0x3, 0xe01, 0x9, 0x8, 0xd64e, 0x81, 0x6, 0xc, 0xe6, 0x10, 0x8, 0xdd, 0x0, 0x8, 0x40, 0x265, 0x7fffffff, 0x33, 0x2, 0x4, 0x9, 0x7, 0x2, 0xa, 0xffffff80, 0x8, 0x5, 0x8, 0xf, 0x9, 0x9, 0x5, 0x8001, 0x9, 0x5, 0x535, 0x14fe400, 0x3, 0x3, 0x0, 0x200, 0x6, 0x2, 0x0, 0x0, 0x2, 0x3, 0xa, 0xffff, 0x200, 0xf, 0xa, 0x2, 0x1, 0x3, 0x4, 0x7ff, 0x9, 0x7, 0x68, 0x684, 0x8, 0x5, 0x9, 0x40, 0x4, 0x9, 0x1ff, 0xc8, 0x40, 0x76d484ff, 0x4, 0x4, 0x9, 0x9, 0xf, 0x4, 0xfff, 0x7f, 0x7, 0x9, 0x8, 0x1e800000, 0x4853, 0x1, 0x6, 0x2, 0xf0, 0x100, 0x2, 0x2, 0x4, 0x81, 0x3, 0x5, 0x8, 0x4, 0x3, 0x0, 0xd, 0x4, 0x5, 0x7, 0x0, 0x2, 0x3, 0x9, 0x9, 0x2, 0x10, 0x7078, 0x3, 0x1, 0x3, 0x20a0b70b, 0x6, 0x9, 0xe, 0xb5f6, 0x10001, 0x1, 0x1000, 0x7, 0x10001, 0x5, 0x100, 0x8cfe, 0x6, 0x5, 0xfffffffb, 0x2, 0x9, 0x7fffffff, 0x2, 0x5, 0x2, 0xffffff81, 0x30809521, 0x0, 0x26, 0x7, 0xff, 0x7, 0xfffff000, 0x0, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff503}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fb3, 0x2000000e, 0x4, 0x7fffffff, 0x80, {0x5, 0x0, 0xfffa, 0x10, 0xe, 0x7fffffff}, {0x7, 0x0, 0x7, 0x7, 0x2a2, 0x5}, 0x7fff, 0x5, 0x80}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}]}}]}, 0x48c}}, 0x44800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc4009420, &(0x7f0000000200)={0x2, 0x6, 0x4000000000000000}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r4, @ANYBLOB="f900000000000000240012800c0001006d616376"], 0x4c}}, 0x0) 1.557125505s ago: executing program 1 (id=2605): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) unshare(0xa020480) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.511292172s ago: executing program 5 (id=2606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRESHEX=0x0, @ANYBLOB="000000000000001000000000000000001800000000313516a613fe000000000000000000000095000000000000003000000000000000180100002020382500000000002020207b1af8ffe1e700000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000040000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRESHEX=0x0, @ANYBLOB="000000000000001000000000000000001800000000313516a613fe000000000000000000000095000000000000003000000000000000180100002020382500000000002020207b1af8ffe1e700000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000040000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1.166206433s ago: executing program 5 (id=2607): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x8084) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d350010b0200000028bec77e337583dbdf25"], 0x10}}, 0x30000000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1814, 0x927}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000420000170000000c00068004e700008d000600000000002906f3d6629a98cbf8b098ccf50aeb59a9a364675ccc24f83eb2dd27b147fb5e8d46e1b7b827ec8fa4c5c5043e4ff9780278270d9dd9df383e321b244edc773039cd78caabad0d8f83fd"], 0x20}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000480)}}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) listen(r2, 0x100101) accept4(r2, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r0, &(0x7f0000000340)=""/56, 0x38, 0x100000002) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x14, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000ffffffffffffaabaaaaaaabb88a8130081002b0008004500102caa000000002f9078acc2b0aae00000010000655a0018907804ffff00000000000000000000000000347401e15db7c195c869f7e7"], 0x46) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.019264352s ago: executing program 6 (id=2608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x3000000}, 0x0) 939.8972ms ago: executing program 2 (id=2609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 856.982159ms ago: executing program 6 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001500)={'filter\x00', 0x2, 0x4, 0x3d0, 0x200, 0x0, 0x110, 0x2e8, 0x110, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x4000, @empty}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xa}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) clock_gettime(0x1, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="96", 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f0000000440)}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffe0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xa, 0x8002, [@TCA_FQ_PIE_ECN={0x0, 0xa, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2023}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x3ff}]}}]}, 0x54}}, 0x48810) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008040) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2}, {}, {0xfff2, 0xffe0}}}, 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) close(0xffffffffffffffff) 723.489655ms ago: executing program 0 (id=2611): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000}, 0x50) 641.26018ms ago: executing program 1 (id=2612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5401000016000100000008000000000000000000000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000008330000100000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd70000000000002000000080000000000000082000000fcffff7f480002006563622d63617374362d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000d00e0"], 0x154}}, 0x0) 463.957213ms ago: executing program 1 (id=2613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x97e346e}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x8, 0x3c, 0x64, 0x0, 0x8, 0x6, 0x0, @local, @local, {[@noop, @noop]}}, @payload_direct={{{{0x24, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0xe, 0x0, 0x1, 0x1, 0x2, 0x3, 0x3, 0xf, 0x4, 0x4e24, 0x4e22}, 0x4, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000140), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x258, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001a00)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x1c, r7, 0x121, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipmr_newroute={0x68, 0x18, 0x10, 0x70bd2d, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x2, 0xff, 0x1, 0xfd, 0x5, 0x500}, [@RTA_FLOW={0x8, 0xb, 0x20}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_PRIORITY={0x8, 0x6, 0x80000001}, @RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_FLOW={0x8, 0xb, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x10, 0x5, r12}}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 387.702761ms ago: executing program 0 (id=2614): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0600000000000000003000000005003400000000000500360003000000050033000700000008000200", @ANYRES32=r0, @ANYBLOB="050035"], 0x3c}}, 0x0) (async, rerun: 32) r3 = socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 32) setsockopt(r3, 0x800000010d, 0x2, &(0x7f00000002c0)="922b22c06d", 0x5) (async, rerun: 64) close(0x3) (rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200"], 0x7c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001800010000000000000000000a0080000004000000050000140005000000000000000000000000000000000160f49ed207a482526ff31ec6bca3ac03d704d30802aeda4e173282fd6e603b70e26404abed"], 0x30}}, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x40, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}]}, 0x54}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x40}}, 0x45) 288.615823ms ago: executing program 5 (id=2615): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a1c, 0x800, 0x0, 0x4b6ae4f95a5de35b) 209.031322ms ago: executing program 1 (id=2616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x74, r1, 0x1, 0x70bd28, 0x3f, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x43, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @random="ee01ae850007", {0xf, 0xe}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x38}, @val={0x2d, 0x1a, {0x300, 0x0, 0x7, 0x0, {0xa, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x8, 0xfffffff4, 0x2}}, @void}}]}, 0x74}, 0x1, 0x300}, 0x0) 191.314859ms ago: executing program 0 (id=2617): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000e80)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x5, 0x1, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x65, 0x0, 0xb5, 0x4, 0x0, @remote, @private=0xa010104, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xac, [@multicast2, @broadcast, @private=0xa010101, @broadcast, @multicast2, @empty]}, @generic={0x83, 0x3, "1f"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x2c, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002180)=@delqdisc={0xf0, 0x25, 0x320, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff3, 0xb}, {0x1, 0xa}, {0xffff, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x83c5}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0xc, 0x2, 0x1, 0x9, 0x0, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x10, 0x2, 0x9, 0x40, 0x0, 0x3, 0x6, 0x1}}, {0x6, 0x2, [0xfff9]}}, {{0x1c, 0x1, {0x0, 0xa, 0x9, 0x4a, 0x0, 0x3, 0x84000000, 0x5}}, {0xe, 0x2, [0x3ff, 0x4b60, 0x3, 0x8, 0x2]}}, {{0x1c, 0x1, {0x80, 0x5, 0x8, 0x1, 0x1, 0x9, 0x1, 0x2}}, {0x8, 0x2, [0x9, 0xc5]}}]}]}, 0xf0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x3}}]}}]}, 0x38}}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 136.647459ms ago: executing program 5 (id=2618): unshare(0x22020600) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) readv(0xffffffffffffffff, 0x0, 0xffffffffffffff31) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008"], 0x398}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="34a5e153f6a7ffffff03ffff88a8000081"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'geneve0\x00', 0x0}) r3 = socket(0x11, 0x3, 0x0) sendto$packet(r3, &(0x7f0000000000)="1412e0c84935a9738e0ff2f788a8", 0x36, 0x0, &(0x7f00000007c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB="0000000000000201875833d8293e4b0000002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x300, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 49.134518ms ago: executing program 1 (id=2619): socket$inet6(0xa, 0x802, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000003080101000000000000000000000800084000000000080001400021e6000800053707adc5ba9171a340000019ad31db7e6c3f06d64d97892d5d4b00000600024000000000"], 0x48}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 32.580639ms ago: executing program 2 (id=2620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2, 0x0, 0x0, 0xf0ffffff}}], 0x1, 0x0) 0s ago: executing program 0 (id=2621): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x16}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x48}, 0x1, 0x40000000, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): IBSS network, BSSID 50:50:50:50:50:50 [ 247.371828][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.409607][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.427786][T10801] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1638'. [ 247.440497][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.464347][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.552668][T10804] netlink: 'syz.0.1640': attribute type 39 has an invalid length. [ 247.567712][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.576390][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.900282][T10817] netlink: 'syz.6.1559': attribute type 1 has an invalid length. [ 247.921557][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1559'. [ 247.940910][T10817] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1559'. [ 247.975630][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 248.094099][T10823] IPVS: Scheduler module ip_vs_sip not found [ 248.102728][T10822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.242004][T10810] infiniband syz1: set down [ 248.252420][T10810] infiniband syz1: added syzkaller0 [ 248.351304][T10810] RDS/IB: syz1: added [ 248.379367][T10810] smc: adding ib device syz1 with port count 1 [ 248.403139][T10810] smc: ib device syz1 port 1 has pnetid [ 248.875745][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 249.096170][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 249.283165][T10847] netlink: 'syz.1.1650': attribute type 1 has an invalid length. [ 249.302216][T10847] netlink: 'syz.1.1650': attribute type 8 has an invalid length. [ 249.310983][T10847] netlink: 134664 bytes leftover after parsing attributes in process `syz.1.1650'. [ 249.408268][T10852] netlink: 'syz.6.1651': attribute type 32 has an invalid length. [ 249.454116][T10853] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1653'. [ 250.013263][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 250.194703][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1659'. [ 250.261671][ T11] smc: removing ib device syz1 [ 250.451748][T10882] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1662'. [ 250.481717][T10882] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 251.366587][T10896] Dead loop on virtual device ipvlan1, fix it urgently! [ 251.425931][T10897] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1667'. [ 251.648142][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 251.869821][T10904] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.082816][T10904] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.244637][T10904] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.379439][T10904] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.556567][T10928] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1691'. [ 252.573847][T10928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.614300][T10904] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.629212][T10904] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.644418][T10904] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.657871][T10936] bridge0: left allmulticast mode [ 252.672972][T10936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.701280][T10904] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.040627][T10972] syzkaller0: entered promiscuous mode [ 254.051281][T10972] syzkaller0: entered allmulticast mode [ 254.086960][T10976] infiniband syz0: set active [ 254.092494][T10976] infiniband syz0: set active [ 254.099319][T10976] infiniband syz0: set active [ 254.143615][T10981] __nla_validate_parse: 5 callbacks suppressed [ 254.143636][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 254.193677][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1698'. [ 254.234509][T10976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.278276][ T25] lo speed is unknown, defaulting to 1000 [ 254.286239][ T5833] lo speed is unknown, defaulting to 1000 [ 254.481929][ T5947] lo speed is unknown, defaulting to 1000 [ 254.493194][T10987] IPVS: Scheduler module ip_vs_sip not found [ 254.732121][T11001] netlink: 'syz.6.1702': attribute type 1 has an invalid length. [ 254.746152][T11000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1703'. [ 254.756113][T11001] netlink: 'syz.6.1702': attribute type 1 has an invalid length. [ 254.773392][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1702'. [ 255.896325][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.758851][T11000] ip6gretap0: entered promiscuous mode [ 256.778613][T11000] ip6gretap0: left promiscuous mode [ 257.055887][T11017] netlink: 'syz.6.1709': attribute type 1 has an invalid length. [ 257.083779][T11017] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1709'. [ 257.302838][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 257.361019][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 257.479646][T11038] IPVS: Scheduler module ip_vs_sip not found [ 257.544658][T11035] veth1_vlan: left allmulticast mode [ 257.561998][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 257.572794][T11035] macvlan0: left promiscuous mode [ 257.579003][T11035] macvlan0: left allmulticast mode [ 257.586712][T11035] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 257.607599][T11035] netlink: 'syz.2.1712': attribute type 2 has an invalid length. [ 257.670642][T11049] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 257.868131][T11055] netlink: 'syz.2.1719': attribute type 10 has an invalid length. [ 257.903344][T11055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1719'. [ 257.948703][T11055] bridge0: port 1(batadv0) entered blocking state [ 257.966741][T11055] bridge0: port 1(batadv0) entered disabled state [ 257.984813][T11055] batadv0: entered allmulticast mode [ 257.990750][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1720'. [ 258.012567][T11055] batadv0: entered promiscuous mode [ 258.055142][ T1033] batman_adv: batadv0: IGMP Querier appeared [ 258.061976][ T1033] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 258.920119][T11085] IPVS: Scheduler module ip_vs_sip not found [ 259.462913][T11115] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 259.498474][T11117] __nla_validate_parse: 3 callbacks suppressed [ 259.498490][T11117] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1740'. [ 259.533033][T11117] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 259.648521][T11121] netdevsim netdevsim0: Direct firmware load for / [ 259.648521][T11121] failed with error -2 [ 259.679519][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 259.703077][T11121] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 259.703077][T11121] [ 259.991320][T11136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1746'. [ 260.031106][T11136] dummy0: entered promiscuous mode [ 260.047182][T11136] dummy0: left promiscuous mode [ 260.097884][T11139] syz_tun: Device is already in use. [ 260.239905][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1753'. [ 260.253992][T11151] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.262292][T11151] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.270631][T11151] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.279012][T11151] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.431035][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'. [ 260.470763][T11163] IPVS: Scheduler module ip_vs_sip not found [ 260.599146][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1757'. [ 260.918127][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 260.927423][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 260.936688][T11178] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.1762'. [ 261.028700][T11180] : renamed from ipvlan1 [ 261.041246][T11180] netlink: 'syz.2.1763': attribute type 3 has an invalid length. [ 261.049880][T11180] netlink: 'syz.2.1763': attribute type 3 has an invalid length. [ 261.436188][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 261.550055][T11194] x_tables: duplicate entry at hook 2 [ 261.734253][T11210] FAULT_INJECTION: forcing a failure. [ 261.734253][T11210] name failslab, interval 1, probability 0, space 0, times 0 [ 261.768547][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.1.1774 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 261.779386][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 261.789499][T11210] Call Trace: [ 261.792811][T11210] [ 261.795772][T11210] dump_stack_lvl+0x241/0x360 [ 261.800487][T11210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.805705][T11210] ? __pfx__printk+0x10/0x10 [ 261.810314][T11210] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 261.816309][T11210] ? __pfx___might_resched+0x10/0x10 [ 261.821616][T11210] should_fail_ex+0x3b0/0x4e0 [ 261.826319][T11210] should_failslab+0xac/0x100 [ 261.831008][T11210] kmem_cache_alloc_node_noprof+0x77/0x380 [ 261.836828][T11210] ? __alloc_skb+0x1c3/0x440 [ 261.841432][T11210] __alloc_skb+0x1c3/0x440 [ 261.845865][T11210] ? __pfx___alloc_skb+0x10/0x10 [ 261.850814][T11210] ? __pfx_validate_chain+0x10/0x10 [ 261.856029][T11210] alloc_skb_with_frags+0xc3/0x820 [ 261.861159][T11210] sock_alloc_send_pskb+0x91a/0xa60 [ 261.866396][T11210] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 261.872130][T11210] ? __lock_acquire+0x1397/0x2100 [ 261.877175][T11210] __ip6_append_data+0x2d6c/0x44a0 [ 261.882327][T11210] ? __pfx_lock_acquire+0x10/0x10 [ 261.887363][T11210] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 261.892934][T11210] ? __pfx___ip6_append_data+0x10/0x10 [ 261.898404][T11210] ? ip6_setup_cork+0x9f7/0x1080 [ 261.903358][T11210] ip6_make_skb+0x43b/0x530 [ 261.907880][T11210] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 261.913439][T11210] ? __pfx_ip6_make_skb+0x10/0x10 [ 261.918480][T11210] ? __pfx_lock_release+0x10/0x10 [ 261.923564][T11210] ? ip6_sk_dst_lookup_flow+0x6bf/0xa30 [ 261.929148][T11210] udpv6_sendmsg+0x2383/0x32b0 [ 261.933942][T11210] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 261.939500][T11210] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 261.944624][T11210] ? __pfx___might_resched+0x10/0x10 [ 261.949920][T11210] ? irqentry_exit+0x63/0x90 [ 261.954527][T11210] ? aa_sk_perm+0x96d/0xab0 [ 261.959050][T11210] ? sock_rps_record_flow+0x1a/0x400 [ 261.964343][T11210] ? inet_send_prepare+0x21/0x260 [ 261.969377][T11210] ? inet_send_prepare+0x5a/0x260 [ 261.974413][T11210] __sock_sendmsg+0xef/0x270 [ 261.979018][T11210] ____sys_sendmsg+0x52a/0x7e0 [ 261.983805][T11210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.989100][T11210] ? __fget_files+0x2a/0x410 [ 261.993706][T11210] ? __fget_files+0x2a/0x410 [ 261.998312][T11210] __sys_sendmmsg+0x36a/0x720 [ 262.003008][T11210] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.008223][T11210] ? __pfx_lock_release+0x10/0x10 [ 262.013255][T11210] ? kstrtouint_from_user+0x128/0x190 [ 262.018650][T11210] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 262.024569][T11210] ? ksys_write+0x22a/0x2b0 [ 262.029074][T11210] ? __pfx_lock_release+0x10/0x10 [ 262.034107][T11210] ? vfs_write+0x730/0xd30 [ 262.038533][T11210] ? __mutex_unlock_slowpath+0x21e/0x790 [ 262.044191][T11210] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.050183][T11210] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.056519][T11210] ? do_syscall_64+0x100/0x230 [ 262.061330][T11210] __x64_sys_sendmmsg+0xa0/0xb0 [ 262.066224][T11210] do_syscall_64+0xf3/0x230 [ 262.070747][T11210] ? clear_bhb_loop+0x35/0x90 [ 262.075447][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.081353][T11210] RIP: 0033:0x7fc7c5f85d19 [ 262.085792][T11210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.105417][T11210] RSP: 002b:00007fc7c6e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.113842][T11210] RAX: ffffffffffffffda RBX: 00007fc7c6175fa0 RCX: 00007fc7c5f85d19 [ 262.121827][T11210] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 262.129805][T11210] RBP: 00007fc7c6e02090 R08: 0000000000000000 R09: 0000000000000000 [ 262.137796][T11210] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 262.145861][T11210] R13: 0000000000000000 R14: 00007fc7c6175fa0 R15: 00007ffffb646bd8 [ 262.153855][T11210] [ 262.351303][T11212] IPVS: Scheduler module ip_vs_sip not found [ 262.382960][T11219] IPv6: Can't replace route, no match found [ 262.715919][T11236] Dead loop on virtual device ipvlan1, fix it urgently! [ 263.622092][T11272] IPVS: Scheduler module ip_vs_sip not found [ 263.652733][T11275] lo speed is unknown, defaulting to 1000 [ 263.942863][T11285] netlink: 'syz.5.1798': attribute type 1 has an invalid length. [ 264.609038][T11311] __nla_validate_parse: 6 callbacks suppressed [ 264.609060][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 264.659605][T11311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1807'. [ 265.194164][T11327] lo speed is unknown, defaulting to 1000 [ 265.244545][T11342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1817'. [ 265.471563][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1820'. [ 265.480887][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1820'. [ 265.506357][T11350] bridge0: entered promiscuous mode [ 265.540437][T11350] syz_tun: entered promiscuous mode [ 265.591328][T11350] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 265.611804][T11350] Cannot create hsr debugfs directory [ 265.789989][T11359] netlink: 'syz.1.1822': attribute type 10 has an invalid length. [ 265.925018][T11359] team0: Port device team_slave_0 removed [ 266.034098][T11371] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.1826'. [ 266.044560][T11371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1826'. [ 266.622304][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 268.861335][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 268.870462][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 269.443360][T11420] syzkaller0: entered promiscuous mode [ 269.450575][T11420] syzkaller0: entered allmulticast mode [ 270.132798][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 270.147838][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 272.328023][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'. [ 272.852940][T11479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1862'. [ 272.863742][T11479] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1862'. [ 272.872971][T11479] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1862'. [ 272.977311][T11483] FAULT_INJECTION: forcing a failure. [ 272.977311][T11483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.990742][T11483] CPU: 0 UID: 0 PID: 11483 Comm: syz.5.1864 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 273.001567][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 273.011676][T11483] Call Trace: [ 273.015007][T11483] [ 273.017972][T11483] dump_stack_lvl+0x241/0x360 [ 273.022702][T11483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.027959][T11483] ? __pfx__printk+0x10/0x10 [ 273.032603][T11483] ? __pfx_lock_release+0x10/0x10 [ 273.035704][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'. [ 273.037661][T11483] should_fail_ex+0x3b0/0x4e0 [ 273.037732][T11483] _copy_from_iter+0x1e9/0x1c20 [ 273.056120][T11483] ? __virt_addr_valid+0x183/0x530 [ 273.061279][T11483] ? __pfx__copy_from_iter+0x10/0x10 [ 273.066598][T11483] ? __virt_addr_valid+0x183/0x530 [ 273.071741][T11483] ? __virt_addr_valid+0x183/0x530 [ 273.076887][T11483] ? __virt_addr_valid+0x45f/0x530 [ 273.082022][T11483] ? __phys_addr_symbol+0x2f/0x70 [ 273.087066][T11483] ? __check_object_size+0x47a/0x730 [ 273.092367][T11483] netlink_sendmsg+0x73d/0xcb0 [ 273.097156][T11483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.102456][T11483] ? aa_sock_msg_perm+0x91/0x160 [ 273.107417][T11483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.112707][T11483] __sock_sendmsg+0x221/0x270 [ 273.117406][T11483] __sys_sendto+0x363/0x4c0 [ 273.121928][T11483] ? __pfx___sys_sendto+0x10/0x10 [ 273.126959][T11483] ? __mutex_unlock_slowpath+0x21e/0x790 [ 273.132610][T11483] ? __fget_files+0x2a/0x410 [ 273.137221][T11483] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.143214][T11483] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.149561][T11483] __x64_sys_sendto+0xde/0x100 [ 273.154339][T11483] do_syscall_64+0xf3/0x230 [ 273.158856][T11483] ? clear_bhb_loop+0x35/0x90 [ 273.163590][T11483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.169489][T11483] RIP: 0033:0x7f5101b85d19 [ 273.173911][T11483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.193546][T11483] RSP: 002b:00007f5102a19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 273.201998][T11483] RAX: ffffffffffffffda RBX: 00007f5101d75fa0 RCX: 00007f5101b85d19 [ 273.209987][T11483] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000003 [ 273.218058][T11483] RBP: 00007f5102a19090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 273.226039][T11483] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 273.234016][T11483] R13: 0000000000000000 R14: 00007f5101d75fa0 R15: 00007ffd1e22d658 [ 273.242008][T11483] [ 273.465160][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 273.543154][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1869'. [ 273.811601][T11511] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1873'. [ 273.858474][T11513] FAULT_INJECTION: forcing a failure. [ 273.858474][T11513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.884369][T11513] CPU: 1 UID: 0 PID: 11513 Comm: syz.1.1874 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 273.895209][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 273.905310][T11513] Call Trace: [ 273.908629][T11513] [ 273.911603][T11513] dump_stack_lvl+0x241/0x360 [ 273.916341][T11513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.921608][T11513] ? __pfx__printk+0x10/0x10 [ 273.926261][T11513] should_fail_ex+0x3b0/0x4e0 [ 273.930999][T11513] prepare_alloc_pages+0x1da/0x5b0 [ 273.936156][T11513] __alloc_pages_noprof+0x16f/0x710 [ 273.941376][T11513] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 273.947111][T11513] ? rep_movs_alternative+0x4a/0x70 [ 273.952328][T11513] ? __virt_addr_valid+0x183/0x530 [ 273.957464][T11513] alloc_pages_mpol_noprof+0x3e8/0x680 [ 273.962954][T11513] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 273.968956][T11513] ? __virt_addr_valid+0x45f/0x530 [ 273.974083][T11513] ? __phys_addr_symbol+0x2f/0x70 [ 273.979119][T11513] ? __check_object_size+0x47a/0x730 [ 273.984416][T11513] ? alloc_pages_noprof+0xef/0x170 [ 273.989540][T11513] af_alg_sendmsg+0x1420/0x2650 [ 273.994428][T11513] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 273.999647][T11513] ? skcipher_check_key+0x15c/0x1d0 [ 274.004880][T11513] ? skcipher_sendmsg_nokey+0x61/0x130 [ 274.010354][T11513] ? __pfx_skcipher_sendmsg_nokey+0x10/0x10 [ 274.016257][T11513] __sock_sendmsg+0x221/0x270 [ 274.020957][T11513] __sys_sendto+0x363/0x4c0 [ 274.025475][T11513] ? __pfx___sys_sendto+0x10/0x10 [ 274.030506][T11513] ? __mutex_unlock_slowpath+0x21e/0x790 [ 274.036160][T11513] ? __fget_files+0x2a/0x410 [ 274.040774][T11513] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.046786][T11513] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.053127][T11513] __x64_sys_sendto+0xde/0x100 [ 274.057906][T11513] do_syscall_64+0xf3/0x230 [ 274.062426][T11513] ? clear_bhb_loop+0x35/0x90 [ 274.067179][T11513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.073083][T11513] RIP: 0033:0x7fc7c5f85d19 [ 274.077502][T11513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.097119][T11513] RSP: 002b:00007fc7c6e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 274.105546][T11513] RAX: ffffffffffffffda RBX: 00007fc7c6175fa0 RCX: 00007fc7c5f85d19 [ 274.113531][T11513] RDX: 00000000ffffff9d RSI: 0000000020000080 RDI: 0000000000000004 [ 274.121518][T11513] RBP: 00007fc7c6e02090 R08: 0000000000000000 R09: 0000000000000000 [ 274.129496][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.137473][T11513] R13: 0000000000000000 R14: 00007fc7c6175fa0 R15: 00007ffffb646bd8 [ 274.145461][T11513] [ 274.371244][T11523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.428079][T11521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.352004][T11560] __nla_validate_parse: 2 callbacks suppressed [ 275.352021][T11560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1889'. [ 275.795620][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1894'. [ 275.850631][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1895'. [ 275.883996][T11575] IPVS: Scheduler module ip_vs_sip not found [ 276.139578][T11592] team0: No ports can be present during mode change [ 276.332084][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1903'. [ 276.364433][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 276.452919][T11604] FAULT_INJECTION: forcing a failure. [ 276.452919][T11604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.492970][T11604] CPU: 1 UID: 0 PID: 11604 Comm: syz.6.1904 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 276.503808][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 276.513898][T11604] Call Trace: [ 276.517236][T11604] [ 276.520191][T11604] dump_stack_lvl+0x241/0x360 [ 276.524897][T11604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.530119][T11604] ? __pfx__printk+0x10/0x10 [ 276.534724][T11604] ? __pfx_lock_release+0x10/0x10 [ 276.539768][T11604] should_fail_ex+0x3b0/0x4e0 [ 276.544466][T11604] _copy_from_user+0x2f/0xc0 [ 276.549071][T11604] copy_msghdr_from_user+0xae/0x680 [ 276.554284][T11604] ? __pfx___might_resched+0x10/0x10 [ 276.559579][T11604] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 276.565396][T11604] ? __fget_files+0x2a/0x410 [ 276.570011][T11604] ? __sys_sendmmsg+0x392/0x720 [ 276.574874][T11604] ? __might_fault+0xaa/0x120 [ 276.579566][T11604] __sys_sendmmsg+0x32b/0x720 [ 276.584265][T11604] ? __pfx___sys_sendmmsg+0x10/0x10 [ 276.589481][T11604] ? __pfx_lock_release+0x10/0x10 [ 276.594514][T11604] ? kstrtouint_from_user+0x128/0x190 [ 276.599915][T11604] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 276.605825][T11604] ? ksys_write+0x22a/0x2b0 [ 276.610335][T11604] ? __pfx_lock_release+0x10/0x10 [ 276.615372][T11604] ? vfs_write+0x730/0xd30 [ 276.619815][T11604] ? __mutex_unlock_slowpath+0x21e/0x790 [ 276.625477][T11604] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.631489][T11604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.637829][T11604] ? do_syscall_64+0x100/0x230 [ 276.642605][T11604] __x64_sys_sendmmsg+0xa0/0xb0 [ 276.647470][T11604] do_syscall_64+0xf3/0x230 [ 276.651982][T11604] ? clear_bhb_loop+0x35/0x90 [ 276.656673][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.662573][T11604] RIP: 0033:0x7f9b28585d19 [ 276.666995][T11604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.686610][T11604] RSP: 002b:00007f9b292d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 276.695047][T11604] RAX: ffffffffffffffda RBX: 00007f9b28775fa0 RCX: 00007f9b28585d19 [ 276.703026][T11604] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 276.711003][T11604] RBP: 00007f9b292d1090 R08: 0000000000000000 R09: 0000000000000000 [ 276.719017][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.727030][T11604] R13: 0000000000000000 R14: 00007f9b28775fa0 R15: 00007fff5bcaea38 [ 276.735024][T11604] [ 277.087889][ T5834] Bluetooth: hci4: command tx timeout [ 277.217932][T11632] netlink: 'syz.6.1912': attribute type 1 has an invalid length. [ 277.247434][T11632] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1912'. [ 277.379100][T11639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 277.445707][T11636] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.501180][T11632] openvswitch: netlink: IP tunnel dst address not specified [ 277.512060][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 277.564600][T11650] IPVS: Scheduler module ip_vs_sip not found [ 277.621684][T11636] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.762517][T11636] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.906963][T11662] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1920'. [ 277.907121][T11636] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.055913][T11636] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.095972][T11636] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.127832][T11636] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.166493][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1925'. [ 278.171521][T11636] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.487669][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 278.528652][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1929'. [ 279.582526][T11713] IPVS: Scheduler module ip_vs_sip not found [ 280.544904][T11756] __nla_validate_parse: 9 callbacks suppressed [ 280.544925][T11756] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1954'. [ 280.602031][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1954'. [ 280.691605][T11755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.716964][T11755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.726988][T11767] FAULT_INJECTION: forcing a failure. [ 280.726988][T11767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.761375][T11755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.766532][T11767] CPU: 1 UID: 0 PID: 11767 Comm: syz.5.1958 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 280.779684][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 280.788783][T11755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.789753][T11767] Call Trace: [ 280.789765][T11767] [ 280.789777][T11767] dump_stack_lvl+0x241/0x360 [ 280.807857][T11767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.813114][T11767] ? __pfx__printk+0x10/0x10 [ 280.817773][T11767] ? snprintf+0xda/0x120 [ 280.822089][T11767] should_fail_ex+0x3b0/0x4e0 [ 280.826828][T11767] _copy_to_user+0x31/0xb0 [ 280.831329][T11767] simple_read_from_buffer+0xca/0x150 [ 280.836763][T11767] proc_fail_nth_read+0x1e9/0x250 [ 280.841839][T11767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.847436][T11767] ? rw_verify_area+0x55e/0x6f0 [ 280.852331][T11767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.857927][T11767] vfs_read+0x1fc/0xb70 [ 280.862135][T11767] ? __pfx___mutex_lock+0x10/0x10 [ 280.867210][T11767] ? __pfx_vfs_read+0x10/0x10 [ 280.871946][T11767] ? __fget_files+0x2a/0x410 [ 280.876598][T11767] ? __fget_files+0x395/0x410 [ 280.881338][T11767] ? __fget_files+0x2a/0x410 [ 280.885998][T11767] ksys_read+0x18f/0x2b0 [ 280.890294][T11767] ? __pfx_ksys_read+0x10/0x10 [ 280.895101][T11767] ? do_syscall_64+0x100/0x230 [ 280.899913][T11767] ? do_syscall_64+0xb6/0x230 [ 280.904633][T11767] do_syscall_64+0xf3/0x230 [ 280.909175][T11767] ? clear_bhb_loop+0x35/0x90 [ 280.913892][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.919823][T11767] RIP: 0033:0x7f5101b8472c [ 280.924269][T11767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 280.943926][T11767] RSP: 002b:00007f5102a19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.952404][T11767] RAX: ffffffffffffffda RBX: 00007f5101d75fa0 RCX: 00007f5101b8472c [ 280.960424][T11767] RDX: 000000000000000f RSI: 00007f5102a190a0 RDI: 0000000000000003 [ 280.968472][T11767] RBP: 00007f5102a19090 R08: 0000000000000000 R09: 0000000000000000 [ 280.976510][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.984526][T11767] R13: 0000000000000000 R14: 00007f5101d75fa0 R15: 00007ffd1e22d658 [ 280.992558][T11767] [ 281.470089][T11788] IPVS: Scheduler module ip_vs_sip not found [ 281.553038][T11787] netlink: 'syz.2.1965': attribute type 39 has an invalid length. [ 281.849295][T11805] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1969'. [ 282.409234][T11817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.568311][T11817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.699083][T11817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.879243][T11817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.046028][T11833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.064557][T11833] team0: Port device bond1 added [ 283.179221][T11817] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.207567][T11817] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.236878][T11817] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.259727][T11817] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.367200][T11847] bridge_slave_0: left allmulticast mode [ 283.376325][T11847] bridge_slave_0: left promiscuous mode [ 283.401368][T11847] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.416410][T11854] netlink: 'syz.2.1987': attribute type 2 has an invalid length. [ 283.421333][T11848] IPVS: Scheduler module ip_vs_sip not found [ 283.435247][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 283.456738][T11847] bridge_slave_1: left allmulticast mode [ 283.462630][T11847] bridge_slave_1: left promiscuous mode [ 283.473929][T11847] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.487524][T11847] bond0: (slave bond_slave_0): Releasing backup interface [ 283.604453][T11847] bond0: (slave bond_slave_1): Releasing backup interface [ 283.771600][T11847] team0: Port device team_slave_0 removed [ 283.816714][T11847] team0: Port device team_slave_1 removed [ 283.842204][T11847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.872808][T11847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.893169][T11847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.903086][T11847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.951060][T11847] team0: Port device bond1 removed [ 284.100001][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1994'. [ 284.220397][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 284.230201][T11889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1998'. [ 284.239800][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 284.249374][T11890] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1998'. [ 284.328378][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 284.546246][T11907] tipc: Resetting bearer [ 284.584123][T11906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 284.594834][T11906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.624420][T11907] tipc: Disabling bearer [ 284.656787][T11907] team0 (unregistering): Port device team_slave_1 removed [ 284.681200][T11907] team0 (unregistering): Port device macvlan1 removed [ 284.988041][T11915] FAULT_INJECTION: forcing a failure. [ 284.988041][T11915] name failslab, interval 1, probability 0, space 0, times 0 [ 285.024015][T11915] CPU: 0 UID: 0 PID: 11915 Comm: syz.0.2005 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 285.034882][T11915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 285.044984][T11915] Call Trace: [ 285.048291][T11915] [ 285.051249][T11915] dump_stack_lvl+0x241/0x360 [ 285.056000][T11915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.061246][T11915] ? __pfx__printk+0x10/0x10 [ 285.065902][T11915] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 285.071928][T11915] ? __pfx___might_resched+0x10/0x10 [ 285.077261][T11915] should_fail_ex+0x3b0/0x4e0 [ 285.082001][T11915] should_failslab+0xac/0x100 [ 285.086729][T11915] kmem_cache_alloc_node_noprof+0x77/0x380 [ 285.092608][T11915] ? __alloc_skb+0x1c3/0x440 [ 285.097284][T11915] __alloc_skb+0x1c3/0x440 [ 285.101757][T11915] ? __pfx___alloc_skb+0x10/0x10 [ 285.106780][T11915] ? netlink_ack_tlv_len+0x6e/0x200 [ 285.112029][T11915] netlink_ack+0x145/0xa50 [ 285.116493][T11915] ? __pfx___might_resched+0x10/0x10 [ 285.121833][T11915] netlink_rcv_skb+0x262/0x430 [ 285.126663][T11915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.131739][T11915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.137114][T11915] genl_rcv+0x28/0x40 [ 285.141149][T11915] netlink_unicast+0x7f6/0x990 [ 285.145968][T11915] ? __pfx_netlink_unicast+0x10/0x10 [ 285.151307][T11915] ? __virt_addr_valid+0x45f/0x530 [ 285.156467][T11915] ? __phys_addr_symbol+0x2f/0x70 [ 285.161540][T11915] ? __check_object_size+0x47a/0x730 [ 285.166884][T11915] netlink_sendmsg+0x8e4/0xcb0 [ 285.171713][T11915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.177065][T11915] ? aa_sock_msg_perm+0x91/0x160 [ 285.182065][T11915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.187395][T11915] __sock_sendmsg+0x221/0x270 [ 285.192122][T11915] ____sys_sendmsg+0x52a/0x7e0 [ 285.196947][T11915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.202281][T11915] ? __fget_files+0x2a/0x410 [ 285.206950][T11915] ? __fget_files+0x2a/0x410 [ 285.211604][T11915] __sys_sendmsg+0x269/0x350 [ 285.216257][T11915] ? __pfx_lock_release+0x10/0x10 [ 285.221334][T11915] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.226510][T11915] ? __pfx_vfs_write+0x10/0x10 [ 285.231361][T11915] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.237748][T11915] ? do_syscall_64+0x100/0x230 [ 285.242573][T11915] ? do_syscall_64+0xb6/0x230 [ 285.247303][T11915] do_syscall_64+0xf3/0x230 [ 285.251856][T11915] ? clear_bhb_loop+0x35/0x90 [ 285.256579][T11915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.262549][T11915] RIP: 0033:0x7f05adf85d19 [ 285.266999][T11915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.286662][T11915] RSP: 002b:00007f05aed86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.295110][T11915] RAX: ffffffffffffffda RBX: 00007f05ae175fa0 RCX: 00007f05adf85d19 [ 285.303122][T11915] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 285.311112][T11915] RBP: 00007f05aed86090 R08: 0000000000000000 R09: 0000000000000000 [ 285.319112][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.327133][T11915] R13: 0000000000000000 R14: 00007f05ae175fa0 R15: 00007ffd8b847288 [ 285.335153][T11915] [ 285.345630][T11919] netlink: 'syz.6.2007': attribute type 4 has an invalid length. [ 285.391926][T11925] lo speed is unknown, defaulting to 1000 [ 285.511085][T11926] IPVS: Scheduler module ip_vs_sip not found [ 285.668893][T11936] lo speed is unknown, defaulting to 1000 [ 286.566183][T11955] __nla_validate_parse: 1 callbacks suppressed [ 286.566204][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 286.596251][T11955] batman_adv: batadv0: Interface deactivated: dummy0 [ 286.622294][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2015'. [ 286.646143][T11955] batman_adv: batadv0: Removing interface: dummy0 [ 286.687112][T11955] batadv0 (unregistering): left allmulticast mode [ 286.703206][T11955] batadv0 (unregistering): left promiscuous mode [ 286.710860][T11955] bridge0: port 1(batadv0) entered disabled state [ 286.743327][T11956] IPVS: Error connecting to the multicast addr [ 286.785473][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 286.981097][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 287.161168][T11969] lo speed is unknown, defaulting to 1000 [ 287.442854][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2022'. [ 287.760343][T11968] lo speed is unknown, defaulting to 1000 [ 287.798427][T11982] IPVS: Scheduler module ip_vs_sip not found [ 288.040165][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 288.086212][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 288.238449][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 288.268568][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 288.514173][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 289.544745][T12020] FAULT_INJECTION: forcing a failure. [ 289.544745][T12020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.558757][T12020] CPU: 0 UID: 0 PID: 12020 Comm: syz.0.2035 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 289.569576][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 289.579677][T12020] Call Trace: [ 289.582991][T12020] [ 289.585947][T12020] dump_stack_lvl+0x241/0x360 [ 289.590643][T12020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.595856][T12020] ? __pfx__printk+0x10/0x10 [ 289.600460][T12020] ? __pfx_lock_release+0x10/0x10 [ 289.605499][T12020] should_fail_ex+0x3b0/0x4e0 [ 289.610195][T12020] _copy_from_iter+0x1e9/0x1c20 [ 289.615087][T12020] ? __virt_addr_valid+0x183/0x530 [ 289.620239][T12020] ? __alloc_skb+0x28f/0x440 [ 289.624841][T12020] ? __pfx__copy_from_iter+0x10/0x10 [ 289.630175][T12020] ? __virt_addr_valid+0x183/0x530 [ 289.635315][T12020] ? __virt_addr_valid+0x183/0x530 [ 289.640457][T12020] ? __virt_addr_valid+0x45f/0x530 [ 289.645580][T12020] ? __phys_addr_symbol+0x2f/0x70 [ 289.650618][T12020] ? __check_object_size+0x47a/0x730 [ 289.655936][T12020] netlink_sendmsg+0x73d/0xcb0 [ 289.660719][T12020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.666033][T12020] ? aa_sock_msg_perm+0x91/0x160 [ 289.671017][T12020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.676345][T12020] __sock_sendmsg+0x221/0x270 [ 289.681058][T12020] ____sys_sendmsg+0x52a/0x7e0 [ 289.685856][T12020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.691187][T12020] ? __fget_files+0x2a/0x410 [ 289.695842][T12020] ? __fget_files+0x2a/0x410 [ 289.700495][T12020] __sys_sendmsg+0x269/0x350 [ 289.705135][T12020] ? __pfx_lock_release+0x10/0x10 [ 289.710214][T12020] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.715396][T12020] ? __pfx_vfs_write+0x10/0x10 [ 289.720234][T12020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.726619][T12020] ? do_syscall_64+0x100/0x230 [ 289.731462][T12020] ? do_syscall_64+0xb6/0x230 [ 289.736205][T12020] do_syscall_64+0xf3/0x230 [ 289.740804][T12020] ? clear_bhb_loop+0x35/0x90 [ 289.745535][T12020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.751482][T12020] RIP: 0033:0x7f05adf85d19 [ 289.755978][T12020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.761829][T12024] ebtables: ebtables: counters copy to user failed while replacing table [ 289.775601][T12020] RSP: 002b:00007f05aed86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.775640][T12020] RAX: ffffffffffffffda RBX: 00007f05ae175fa0 RCX: 00007f05adf85d19 [ 289.775657][T12020] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 289.775671][T12020] RBP: 00007f05aed86090 R08: 0000000000000000 R09: 0000000000000000 [ 289.775686][T12020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.775701][T12020] R13: 0000000000000000 R14: 00007f05ae175fa0 R15: 00007ffd8b847288 [ 289.775733][T12020] [ 289.875214][T12023] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 289.989927][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633dc000: rx timeout, send abort [ 289.999344][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633dfc00: rx timeout, send abort [ 290.008506][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880633dc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.022958][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880633dfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.437548][T12038] geneve2: entered promiscuous mode [ 290.453514][T12038] geneve2: entered allmulticast mode [ 290.633934][T12044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 290.791138][T12051] FAULT_INJECTION: forcing a failure. [ 290.791138][T12051] name failslab, interval 1, probability 0, space 0, times 0 [ 290.815583][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.6.2044 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 290.826438][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 290.836542][T12051] Call Trace: [ 290.839863][T12051] [ 290.842835][T12051] dump_stack_lvl+0x241/0x360 [ 290.847574][T12051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.852818][T12051] ? __pfx__printk+0x10/0x10 [ 290.857457][T12051] ? fs_reclaim_acquire+0x93/0x130 [ 290.862619][T12051] ? __pfx___might_resched+0x10/0x10 [ 290.867934][T12051] ? dynamic_dname+0x141/0x1b0 [ 290.872714][T12051] should_fail_ex+0x3b0/0x4e0 [ 290.877417][T12051] should_failslab+0xac/0x100 [ 290.882103][T12051] __kmalloc_noprof+0xdd/0x4c0 [ 290.886897][T12051] ? tomoyo_encode+0x26f/0x540 [ 290.891712][T12051] tomoyo_encode+0x26f/0x540 [ 290.896351][T12051] ? __pfx_sockfs_dname+0x10/0x10 [ 290.901447][T12051] tomoyo_realpath_from_path+0x59e/0x5e0 [ 290.907140][T12051] tomoyo_path_number_perm+0x236/0x860 [ 290.912651][T12051] ? rcu_read_lock_any_held+0xb7/0x160 [ 290.918154][T12051] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 290.924104][T12051] ? tomoyo_path_number_perm+0x206/0x860 [ 290.929765][T12051] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.935412][T12051] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.941415][T12051] ? sb_end_write+0xe9/0x1c0 [ 290.946025][T12051] ? vfs_write+0x730/0xd30 [ 290.950471][T12051] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.956468][T12051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.962812][T12051] security_file_ioctl+0xc6/0x2a0 [ 290.967855][T12051] __se_sys_ioctl+0x46/0x170 [ 290.972456][T12051] do_syscall_64+0xf3/0x230 [ 290.976984][T12051] ? clear_bhb_loop+0x35/0x90 [ 290.981674][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.987578][T12051] RIP: 0033:0x7f9b28585d19 [ 290.992001][T12051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.011620][T12051] RSP: 002b:00007f9b292d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.020047][T12051] RAX: ffffffffffffffda RBX: 00007f9b28775fa0 RCX: 00007f9b28585d19 [ 291.028025][T12051] RDX: 0000000020000300 RSI: 0000000000008983 RDI: 0000000000000008 [ 291.036015][T12051] RBP: 00007f9b292d1090 R08: 0000000000000000 R09: 0000000000000000 [ 291.043992][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.051985][T12051] R13: 0000000000000000 R14: 00007f9b28775fa0 R15: 00007fff5bcaea38 [ 291.060011][T12051] [ 291.078307][T12051] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.154636][T12060] sctp: [Deprecated]: syz.6.2044 (pid 12060) Use of int in max_burst socket option deprecated. [ 291.154636][T12060] Use struct sctp_assoc_value instead [ 291.233207][T12061] sit0: entered promiscuous mode [ 291.295708][T12061] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 291.372987][T12058] pim6reg1: entered promiscuous mode [ 291.378642][T12058] pim6reg1: entered allmulticast mode [ 292.016300][T12101] __nla_validate_parse: 9 callbacks suppressed [ 292.016332][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 292.108142][T12105] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2061'. [ 292.136857][T12105] netlink: 'syz.2.2061': attribute type 1 has an invalid length. [ 292.811348][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2072'. [ 292.922467][T12140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2074'. [ 293.143258][T12149] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2077'. [ 293.183928][T12149] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2077'. [ 293.192417][T12151] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2079'. [ 293.238074][T12149] syz_tun: entered promiscuous mode [ 293.239274][T12153] FAULT_INJECTION: forcing a failure. [ 293.239274][T12153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.264205][T12149] syz_tun: left promiscuous mode [ 293.277407][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.0.2080 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 293.288280][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 293.298360][T12153] Call Trace: [ 293.301676][T12153] [ 293.304648][T12153] dump_stack_lvl+0x241/0x360 [ 293.309393][T12153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.314646][T12153] ? __pfx__printk+0x10/0x10 [ 293.319288][T12153] ? __pfx_lock_release+0x10/0x10 [ 293.324360][T12153] should_fail_ex+0x3b0/0x4e0 [ 293.329089][T12153] _copy_from_user+0x2f/0xc0 [ 293.333728][T12153] do_ip6t_set_ctl+0x73a/0x1270 [ 293.338673][T12153] ? __pfx___mutex_trylock_common+0x10/0x10 [ 293.344627][T12153] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 293.349962][T12153] ? __pfx_lock_release+0x10/0x10 [ 293.355038][T12153] ? rcu_is_watching+0x15/0xb0 [ 293.359831][T12153] ? trace_contention_end+0x3c/0x120 [ 293.365142][T12153] ? __mutex_unlock_slowpath+0x21e/0x790 [ 293.370785][T12153] ? __pfx___mutex_lock+0x10/0x10 [ 293.375818][T12153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 293.381805][T12153] ? aa_sk_perm+0x96d/0xab0 [ 293.386338][T12153] ? __pfx_aa_sk_perm+0x10/0x10 [ 293.391211][T12153] nf_setsockopt+0x295/0x2c0 [ 293.395815][T12153] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 293.401724][T12153] do_sock_setsockopt+0x3af/0x720 [ 293.406765][T12153] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 293.412328][T12153] ? __fget_files+0x395/0x410 [ 293.417025][T12153] ? __fget_files+0x2a/0x410 [ 293.421647][T12153] __x64_sys_setsockopt+0x1ee/0x280 [ 293.426864][T12153] do_syscall_64+0xf3/0x230 [ 293.431377][T12153] ? clear_bhb_loop+0x35/0x90 [ 293.436070][T12153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.441975][T12153] RIP: 0033:0x7f05adf85d19 [ 293.446423][T12153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.466040][T12153] RSP: 002b:00007f05aed86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 293.474477][T12153] RAX: ffffffffffffffda RBX: 00007f05ae175fa0 RCX: 00007f05adf85d19 [ 293.482457][T12153] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 293.490448][T12153] RBP: 00007f05aed86090 R08: 0000000000000410 R09: 0000000000000000 [ 293.498429][T12153] R10: 0000000020001480 R11: 0000000000000246 R12: 0000000000000001 [ 293.506416][T12153] R13: 0000000000000000 R14: 00007f05ae175fa0 R15: 00007ffd8b847288 [ 293.514410][T12153] [ 293.691679][T12162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2083'. [ 293.722982][ T5834] Bluetooth: hci4: link tx timeout [ 293.729754][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.746260][ T5852] Bluetooth: hci4: link tx timeout [ 293.751542][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.769016][ T5852] Bluetooth: hci4: link tx timeout [ 293.774292][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 294.044466][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 294.589259][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2096'. [ 294.599590][T12187] sit0: left promiscuous mode [ 294.836903][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.844360][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.592928][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.643292][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.763121][T12187] macvlan1: left promiscuous mode [ 295.825483][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 295.847502][T12187] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.860295][T12187] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.872237][T12187] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.895505][T12187] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.243204][T12187] syz_tun: left allmulticast mode [ 296.259187][T12187] macsec1: left promiscuous mode [ 296.269692][T12187] macsec1: left allmulticast mode [ 296.430956][T12167] hsr_slave_0: left promiscuous mode [ 296.440929][T12167] hsr_slave_1: left promiscuous mode [ 297.306452][T12251] vlan2: entered allmulticast mode [ 297.311865][T12251] bridge_slave_0: entered allmulticast mode [ 297.340742][T12251] bridge_slave_0: left allmulticast mode [ 297.467803][T12260] __nla_validate_parse: 4 callbacks suppressed [ 297.467822][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2113'. [ 297.509842][T12260] FAULT_INJECTION: forcing a failure. [ 297.509842][T12260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.537191][T12260] CPU: 1 UID: 0 PID: 12260 Comm: syz.6.2113 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 297.548118][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 297.558214][T12260] Call Trace: [ 297.561526][T12260] [ 297.564489][T12260] dump_stack_lvl+0x241/0x360 [ 297.569211][T12260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.574453][T12260] ? __pfx__printk+0x10/0x10 [ 297.579098][T12260] ? snprintf+0xda/0x120 [ 297.583394][T12260] should_fail_ex+0x3b0/0x4e0 [ 297.588128][T12260] _copy_to_user+0x31/0xb0 [ 297.592593][T12260] simple_read_from_buffer+0xca/0x150 [ 297.598013][T12260] proc_fail_nth_read+0x1e9/0x250 [ 297.603086][T12260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.608674][T12260] ? rw_verify_area+0x55e/0x6f0 [ 297.613558][T12260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.619135][T12260] vfs_read+0x1fc/0xb70 [ 297.623310][T12260] ? __pfx___mutex_lock+0x10/0x10 [ 297.628349][T12260] ? __pfx_vfs_read+0x10/0x10 [ 297.633040][T12260] ? __fget_files+0x2a/0x410 [ 297.637646][T12260] ? __fget_files+0x395/0x410 [ 297.642331][T12260] ? __fget_files+0x2a/0x410 [ 297.646940][T12260] ksys_read+0x18f/0x2b0 [ 297.651189][T12260] ? __pfx_ksys_read+0x10/0x10 [ 297.656011][T12260] ? do_syscall_64+0x100/0x230 [ 297.660786][T12260] ? do_syscall_64+0xb6/0x230 [ 297.665468][T12260] do_syscall_64+0xf3/0x230 [ 297.669979][T12260] ? clear_bhb_loop+0x35/0x90 [ 297.674669][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.680573][T12260] RIP: 0033:0x7f9b2858472c [ 297.684996][T12260] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.704621][T12260] RSP: 002b:00007f9b263f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.713045][T12260] RAX: ffffffffffffffda RBX: 00007f9b28776080 RCX: 00007f9b2858472c [ 297.721023][T12260] RDX: 000000000000000f RSI: 00007f9b263f60a0 RDI: 0000000000000003 [ 297.729000][T12260] RBP: 00007f9b263f6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.737012][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.744989][T12260] R13: 0000000000000001 R14: 00007f9b28776080 R15: 00007fff5bcaea38 [ 297.752980][T12260] [ 297.882607][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 298.165778][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2125'. [ 298.379851][T12298] dvmrp1: entered allmulticast mode [ 298.600003][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 298.891304][T12323] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2138'. [ 298.900959][T12323] FAULT_INJECTION: forcing a failure. [ 298.900959][T12323] name failslab, interval 1, probability 0, space 0, times 0 [ 298.919460][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.1.2138 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 298.930319][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 298.940428][T12323] Call Trace: [ 298.943745][T12323] [ 298.946703][T12323] dump_stack_lvl+0x241/0x360 [ 298.951424][T12323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.956658][T12323] ? __pfx__printk+0x10/0x10 [ 298.961300][T12323] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 298.967326][T12323] ? __pfx___might_resched+0x10/0x10 [ 298.972666][T12323] should_fail_ex+0x3b0/0x4e0 [ 298.977413][T12323] should_failslab+0xac/0x100 [ 298.982158][T12323] kmem_cache_alloc_node_noprof+0x77/0x380 [ 298.988024][T12323] ? __alloc_skb+0x1c3/0x440 [ 298.992661][T12323] __alloc_skb+0x1c3/0x440 [ 298.997122][T12323] ? __pfx___alloc_skb+0x10/0x10 [ 299.002076][T12323] ? netlink_ack_tlv_len+0x6e/0x200 [ 299.007328][T12323] netlink_ack+0x145/0xa50 [ 299.011771][T12323] netlink_rcv_skb+0x262/0x430 [ 299.016555][T12323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.022033][T12323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.027349][T12323] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.032560][T12323] netlink_unicast+0x7f6/0x990 [ 299.037355][T12323] ? __pfx_netlink_unicast+0x10/0x10 [ 299.042654][T12323] ? __virt_addr_valid+0x45f/0x530 [ 299.047786][T12323] ? __phys_addr_symbol+0x2f/0x70 [ 299.052828][T12323] ? __check_object_size+0x47a/0x730 [ 299.058132][T12323] netlink_sendmsg+0x8e4/0xcb0 [ 299.062916][T12323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.068216][T12323] ? aa_sock_msg_perm+0x91/0x160 [ 299.073166][T12323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.078459][T12323] __sock_sendmsg+0x221/0x270 [ 299.083156][T12323] __sys_sendto+0x363/0x4c0 [ 299.087679][T12323] ? __pfx___sys_sendto+0x10/0x10 [ 299.092710][T12323] ? __mutex_unlock_slowpath+0x21e/0x790 [ 299.098362][T12323] ? __fget_files+0x2a/0x410 [ 299.102977][T12323] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.108976][T12323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.115322][T12323] __x64_sys_sendto+0xde/0x100 [ 299.120097][T12323] do_syscall_64+0xf3/0x230 [ 299.124618][T12323] ? clear_bhb_loop+0x35/0x90 [ 299.129314][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.135219][T12323] RIP: 0033:0x7fc7c5f85d19 [ 299.139642][T12323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.159260][T12323] RSP: 002b:00007fc7c6e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 299.167693][T12323] RAX: ffffffffffffffda RBX: 00007fc7c6175fa0 RCX: 00007fc7c5f85d19 [ 299.175682][T12323] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000003 [ 299.183668][T12323] RBP: 00007fc7c6e02090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 299.191659][T12323] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 299.199642][T12323] R13: 0000000000000000 R14: 00007fc7c6175fa0 R15: 00007ffffb646bd8 [ 299.207636][T12323] [ 299.631499][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 300.180766][T12366] xt_NFQUEUE: number of total queues is 0 [ 300.295081][T12370] lo speed is unknown, defaulting to 1000 [ 300.855383][T12381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2157'. [ 300.866124][T12381] infiniband syz0: set active [ 300.871395][T12381] infiniband syz0: set active [ 300.924344][T12381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.001246][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2160'. [ 301.077070][ T9] lo speed is unknown, defaulting to 1000 [ 301.083847][ T5886] lo speed is unknown, defaulting to 1000 [ 301.091872][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2159'. [ 301.338604][T12394] FAULT_INJECTION: forcing a failure. [ 301.338604][T12394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.372374][T12394] CPU: 1 UID: 0 PID: 12394 Comm: syz.6.2166 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 301.383271][T12394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 301.393382][T12394] Call Trace: [ 301.396705][T12394] [ 301.399676][T12394] dump_stack_lvl+0x241/0x360 [ 301.404432][T12394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.409695][T12394] ? __pfx__printk+0x10/0x10 [ 301.414344][T12394] ? __pfx_lock_release+0x10/0x10 [ 301.419427][T12394] should_fail_ex+0x3b0/0x4e0 [ 301.424173][T12394] _copy_from_iter+0x1e9/0x1c20 [ 301.429071][T12394] ? __virt_addr_valid+0x183/0x530 [ 301.434243][T12394] ? __alloc_skb+0x28f/0x440 [ 301.438880][T12394] ? __pfx__copy_from_iter+0x10/0x10 [ 301.444224][T12394] ? __virt_addr_valid+0x183/0x530 [ 301.449388][T12394] ? __virt_addr_valid+0x183/0x530 [ 301.454551][T12394] ? __virt_addr_valid+0x45f/0x530 [ 301.457737][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 301.459689][T12394] ? __phys_addr_symbol+0x2f/0x70 [ 301.459725][T12394] ? __check_object_size+0x47a/0x730 [ 301.478943][T12394] netlink_sendmsg+0x73d/0xcb0 [ 301.483770][T12394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.489120][T12394] ? aa_sock_msg_perm+0x91/0x160 [ 301.494105][T12394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.499431][T12394] __sock_sendmsg+0x221/0x270 [ 301.504173][T12394] ____sys_sendmsg+0x52a/0x7e0 [ 301.508991][T12394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.514321][T12394] ? __fget_files+0x2a/0x410 [ 301.518967][T12394] ? __fget_files+0x2a/0x410 [ 301.523623][T12394] __sys_sendmsg+0x269/0x350 [ 301.528261][T12394] ? __pfx_lock_release+0x10/0x10 [ 301.533342][T12394] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.538507][T12394] ? __pfx_vfs_write+0x10/0x10 [ 301.543340][T12394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.549720][T12394] ? do_syscall_64+0x100/0x230 [ 301.554537][T12394] ? do_syscall_64+0xb6/0x230 [ 301.559267][T12394] do_syscall_64+0xf3/0x230 [ 301.563814][T12394] ? clear_bhb_loop+0x35/0x90 [ 301.568534][T12394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.574480][T12394] RIP: 0033:0x7f9b28585d19 [ 301.578929][T12394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.598579][T12394] RSP: 002b:00007f9b292d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.607041][T12394] RAX: ffffffffffffffda RBX: 00007f9b28775fa0 RCX: 00007f9b28585d19 [ 301.615055][T12394] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 301.623065][T12394] RBP: 00007f9b292d1090 R08: 0000000000000000 R09: 0000000000000000 [ 301.631082][T12394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.639102][T12394] R13: 0000000000000000 R14: 00007f9b28775fa0 R15: 00007fff5bcaea38 [ 301.647136][T12394] [ 302.076272][T12418] netlink: 'syz.5.2173': attribute type 5 has an invalid length. [ 302.127414][T12418] ip6erspan0: entered promiscuous mode [ 302.371872][T12434] FAULT_INJECTION: forcing a failure. [ 302.371872][T12434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.385717][T12434] CPU: 1 UID: 0 PID: 12434 Comm: syz.2.2177 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 302.396534][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 302.406686][T12434] Call Trace: [ 302.410057][T12434] [ 302.412998][T12434] dump_stack_lvl+0x241/0x360 [ 302.417715][T12434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.422973][T12434] ? __pfx__printk+0x10/0x10 [ 302.427624][T12434] ? snprintf+0xda/0x120 [ 302.431111][T12437] gretap0: left promiscuous mode [ 302.431918][T12434] should_fail_ex+0x3b0/0x4e0 [ 302.431969][T12434] _copy_to_user+0x31/0xb0 [ 302.432004][T12434] simple_read_from_buffer+0xca/0x150 [ 302.451836][T12434] proc_fail_nth_read+0x1e9/0x250 [ 302.456889][T12434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.462455][T12434] ? rw_verify_area+0x55e/0x6f0 [ 302.467315][T12434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.472872][T12434] vfs_read+0x1fc/0xb70 [ 302.477039][T12434] ? __pfx___mutex_lock+0x10/0x10 [ 302.482074][T12434] ? __pfx_vfs_read+0x10/0x10 [ 302.486761][T12434] ? __fget_files+0x2a/0x410 [ 302.491367][T12434] ? __fget_files+0x395/0x410 [ 302.496063][T12434] ? __fget_files+0x2a/0x410 [ 302.500681][T12434] ksys_read+0x18f/0x2b0 [ 302.504936][T12434] ? __pfx_ksys_read+0x10/0x10 [ 302.509707][T12434] ? do_syscall_64+0x100/0x230 [ 302.514482][T12434] ? do_syscall_64+0xb6/0x230 [ 302.519168][T12434] do_syscall_64+0xf3/0x230 [ 302.523680][T12434] ? clear_bhb_loop+0x35/0x90 [ 302.528369][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.534277][T12434] RIP: 0033:0x7fbca978472c [ 302.538704][T12434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.558326][T12434] RSP: 002b:00007fbcaa5ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.566766][T12434] RAX: ffffffffffffffda RBX: 00007fbca9976080 RCX: 00007fbca978472c [ 302.574747][T12434] RDX: 000000000000000f RSI: 00007fbcaa5ef0a0 RDI: 0000000000000004 [ 302.582725][T12434] RBP: 00007fbcaa5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 302.590708][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.598681][T12434] R13: 0000000000000001 R14: 00007fbca9976080 R15: 00007fffda5049b8 [ 302.606677][T12434] [ 302.669150][T12437] syz_tun: left promiscuous mode [ 302.711739][T12437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.728582][T12437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.949980][T12448] vlan2: entered promiscuous mode [ 302.959750][T12448] bond0: entered promiscuous mode [ 303.005816][T12448] bond0: left promiscuous mode [ 303.521821][T12465] lo speed is unknown, defaulting to 1000 [ 303.815232][T12477] __nla_validate_parse: 5 callbacks suppressed [ 303.815256][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'. [ 303.883208][T12477] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2196'. [ 304.937657][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 304.986011][T12500] netlink: 'syz.1.2204': attribute type 11 has an invalid length. [ 305.005374][T12497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.529509][T12513] syzkaller1: entered promiscuous mode [ 305.543629][T12513] syzkaller1: entered allmulticast mode [ 306.527539][T12532] FAULT_INJECTION: forcing a failure. [ 306.527539][T12532] name failslab, interval 1, probability 0, space 0, times 0 [ 306.569346][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.5.2214 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 306.580186][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 306.590295][T12532] Call Trace: [ 306.593605][T12532] [ 306.596563][T12532] dump_stack_lvl+0x241/0x360 [ 306.601308][T12532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.606560][T12532] ? __pfx__printk+0x10/0x10 [ 306.611201][T12532] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 306.617163][T12532] ? __pfx___might_resched+0x10/0x10 [ 306.622505][T12532] should_fail_ex+0x3b0/0x4e0 [ 306.627238][T12532] should_failslab+0xac/0x100 [ 306.631977][T12532] ? __get_vm_area_node+0x132/0x2d0 [ 306.637236][T12532] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 306.643007][T12532] __get_vm_area_node+0x132/0x2d0 [ 306.648095][T12532] __vmalloc_node_range_noprof+0x344/0x1380 [ 306.654043][T12532] ? do_replace+0x298/0x5b0 [ 306.658613][T12532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.664994][T12532] ? do_replace+0x298/0x5b0 [ 306.669550][T12532] __vmalloc_noprof+0x79/0x90 [ 306.674258][T12532] ? do_replace+0x298/0x5b0 [ 306.678779][T12532] do_replace+0x298/0x5b0 [ 306.683123][T12532] ? __pfx_validate_chain+0x10/0x10 [ 306.688339][T12532] ? __pfx_aa_get_newest_label+0x10/0x10 [ 306.693981][T12532] ? __pfx_do_replace+0x10/0x10 [ 306.698856][T12532] ? bpf_lsm_capable+0x9/0x10 [ 306.703542][T12532] ? security_capable+0x7e/0x2d0 [ 306.708492][T12532] do_ebt_set_ctl+0x2d5/0x17d0 [ 306.713265][T12532] ? mark_lock+0x9a/0x360 [ 306.717621][T12532] ? __lock_acquire+0x1397/0x2100 [ 306.722665][T12532] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 306.727906][T12532] ? __pfx___mutex_trylock_common+0x10/0x10 [ 306.733834][T12532] ? nf_setsockopt+0x240/0x2c0 [ 306.738616][T12532] ? __pfx_lock_release+0x10/0x10 [ 306.743651][T12532] ? rcu_is_watching+0x15/0xb0 [ 306.748432][T12532] ? trace_contention_end+0x3c/0x120 [ 306.753733][T12532] ? __mutex_lock+0x37f/0xee0 [ 306.758421][T12532] ? do_ip_setsockopt+0x1f5f/0x3cd0 [ 306.763635][T12532] ? trace_contention_end+0x3c/0x120 [ 306.768978][T12532] ? __mutex_unlock_slowpath+0x21e/0x790 [ 306.774637][T12532] ? __pfx___mutex_lock+0x10/0x10 [ 306.779673][T12532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.785670][T12532] ? smc_setsockopt+0x1c3/0xe50 [ 306.790543][T12532] ? __pfx___mutex_lock+0x10/0x10 [ 306.795587][T12532] nf_setsockopt+0x295/0x2c0 [ 306.800189][T12532] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 306.806102][T12532] smc_setsockopt+0x275/0xe50 [ 306.810791][T12532] ? __pfx_smc_setsockopt+0x10/0x10 [ 306.816002][T12532] ? aa_sock_opt_perm+0x79/0x120 [ 306.820954][T12532] ? __pfx_smc_setsockopt+0x10/0x10 [ 306.826165][T12532] do_sock_setsockopt+0x3af/0x720 [ 306.831206][T12532] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 306.836779][T12532] ? __fget_files+0x395/0x410 [ 306.841474][T12532] ? __fget_files+0x2a/0x410 [ 306.846089][T12532] __x64_sys_setsockopt+0x1ee/0x280 [ 306.851306][T12532] do_syscall_64+0xf3/0x230 [ 306.855836][T12532] ? clear_bhb_loop+0x35/0x90 [ 306.860536][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.866440][T12532] RIP: 0033:0x7f5101b85d19 [ 306.870866][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.890486][T12532] RSP: 002b:00007f5102a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.898922][T12532] RAX: ffffffffffffffda RBX: 00007f5101d75fa0 RCX: 00007f5101b85d19 [ 306.906905][T12532] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 306.914884][T12532] RBP: 00007f5102a19090 R08: 0000000000000108 R09: 0000000000000000 [ 306.922862][T12532] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 306.930847][T12532] R13: 0000000000000000 R14: 00007f5101d75fa0 R15: 00007ffd1e22d658 [ 306.938843][T12532] [ 306.979370][T12532] syz.5.2214: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.019858][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'. [ 307.021382][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.5.2214 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 307.039643][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 307.049830][T12532] Call Trace: [ 307.053169][T12532] [ 307.056140][T12532] dump_stack_lvl+0x241/0x360 [ 307.060862][T12532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.066085][T12532] ? __pfx__printk+0x10/0x10 [ 307.070703][T12532] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 307.077148][T12532] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 307.083685][T12532] warn_alloc+0x278/0x410 [ 307.088031][T12532] ? __pfx_warn_alloc+0x10/0x10 [ 307.092891][T12532] ? __kasan_kmalloc+0x23/0xb0 [ 307.097665][T12532] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 307.103665][T12532] ? __get_vm_area_node+0x280/0x2d0 [ 307.108883][T12532] __vmalloc_node_range_noprof+0x369/0x1380 [ 307.114818][T12532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.121169][T12532] ? do_replace+0x298/0x5b0 [ 307.125698][T12532] __vmalloc_noprof+0x79/0x90 [ 307.130405][T12532] ? do_replace+0x298/0x5b0 [ 307.134925][T12532] do_replace+0x298/0x5b0 [ 307.139272][T12532] ? __pfx_validate_chain+0x10/0x10 [ 307.144493][T12532] ? __pfx_aa_get_newest_label+0x10/0x10 [ 307.150152][T12532] ? __pfx_do_replace+0x10/0x10 [ 307.155023][T12532] ? bpf_lsm_capable+0x9/0x10 [ 307.159709][T12532] ? security_capable+0x7e/0x2d0 [ 307.164668][T12532] do_ebt_set_ctl+0x2d5/0x17d0 [ 307.169443][T12532] ? mark_lock+0x9a/0x360 [ 307.173810][T12532] ? __lock_acquire+0x1397/0x2100 [ 307.178881][T12532] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 307.184142][T12532] ? __pfx___mutex_trylock_common+0x10/0x10 [ 307.190119][T12532] ? nf_setsockopt+0x240/0x2c0 [ 307.194909][T12532] ? __pfx_lock_release+0x10/0x10 [ 307.199952][T12532] ? rcu_is_watching+0x15/0xb0 [ 307.204735][T12532] ? trace_contention_end+0x3c/0x120 [ 307.210040][T12532] ? __mutex_lock+0x37f/0xee0 [ 307.214736][T12532] ? do_ip_setsockopt+0x1f5f/0x3cd0 [ 307.219968][T12532] ? trace_contention_end+0x3c/0x120 [ 307.225274][T12532] ? __mutex_unlock_slowpath+0x21e/0x790 [ 307.230919][T12532] ? __pfx___mutex_lock+0x10/0x10 [ 307.235958][T12532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.241966][T12532] ? smc_setsockopt+0x1c3/0xe50 [ 307.246939][T12532] ? __pfx___mutex_lock+0x10/0x10 [ 307.251994][T12532] nf_setsockopt+0x295/0x2c0 [ 307.256612][T12532] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 307.262529][T12532] smc_setsockopt+0x275/0xe50 [ 307.267219][T12532] ? __pfx_smc_setsockopt+0x10/0x10 [ 307.272425][T12532] ? aa_sock_opt_perm+0x79/0x120 [ 307.277382][T12532] ? __pfx_smc_setsockopt+0x10/0x10 [ 307.282589][T12532] do_sock_setsockopt+0x3af/0x720 [ 307.287628][T12532] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 307.293188][T12532] ? __fget_files+0x395/0x410 [ 307.297877][T12532] ? __fget_files+0x2a/0x410 [ 307.302499][T12532] __x64_sys_setsockopt+0x1ee/0x280 [ 307.307710][T12532] do_syscall_64+0xf3/0x230 [ 307.312222][T12532] ? clear_bhb_loop+0x35/0x90 [ 307.316913][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.322819][T12532] RIP: 0033:0x7f5101b85d19 [ 307.327253][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.346867][T12532] RSP: 002b:00007f5102a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.355304][T12532] RAX: ffffffffffffffda RBX: 00007f5101d75fa0 RCX: 00007f5101b85d19 [ 307.363286][T12532] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 307.371260][T12532] RBP: 00007f5102a19090 R08: 0000000000000108 R09: 0000000000000000 [ 307.379257][T12532] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 307.387233][T12532] R13: 0000000000000000 R14: 00007f5101d75fa0 R15: 00007ffd1e22d658 [ 307.395224][T12532] [ 307.417478][T12532] Mem-Info: [ 307.420829][T12532] active_anon:6504 inactive_anon:0 isolated_anon:0 [ 307.420829][T12532] active_file:1933 inactive_file:38355 isolated_file:0 [ 307.420829][T12532] unevictable:768 dirty:197 writeback:125 [ 307.420829][T12532] slab_reclaimable:10637 slab_unreclaimable:107706 [ 307.420829][T12532] mapped:29321 shmem:1405 pagetables:773 [ 307.420829][T12532] sec_pagetables:0 bounce:0 [ 307.420829][T12532] kernel_misc_reclaimable:0 [ 307.420829][T12532] free:1313534 free_pcp:13536 free_cma:0 [ 307.479546][T12532] Node 0 active_anon:25828kB inactive_anon:0kB active_file:7732kB inactive_file:153348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117296kB dirty:800kB writeback:100kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11552kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no [ 307.540578][T12532] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 307.608267][T12548] Cannot find add_set index 0 as target [ 307.611437][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 307.635600][T12532] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.667188][T12550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.689262][T12532] lowmem_reserve[]: 0 2465 2466 0 0 [ 307.709012][T12532] Node 0 DMA32 free:1384336kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:25988kB inactive_anon:0kB active_file:7732kB inactive_file:152528kB unevictable:1536kB writepending:700kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:1988kB local_pcp:936kB free_cma:0kB [ 307.759432][T12532] lowmem_reserve[]: 0 0 0 0 0 [ 307.764750][T12532] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 307.799349][T12532] lowmem_reserve[]: 0 0 0 0 0 [ 307.805147][T12532] Node 1 Normal free:3907552kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.841424][T12532] lowmem_reserve[]: 0 0 0 0 0 [ 307.846997][T12532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 307.863564][T12532] Node 0 DMA32: 889*4kB (UME) 627*8kB (UME) 577*16kB (UME) 302*32kB (UME) 85*64kB (UME) 94*128kB (UME) 52*256kB (UM) 29*512kB (UM) 32*1024kB (UME) 10*2048kB (UM) 307*4096kB (UM) = 1383820kB [ 307.902418][T12532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 307.953572][T12532] Node 1 Normal: 200*4kB (UME) 66*8kB (UME) 39*16kB (UME) 205*32kB (UME) 95*64kB (UME) 26*128kB (UME) 16*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3907584kB [ 308.033977][T12532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.067933][T12532] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.090457][T12532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.108598][T12532] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.119622][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2227'. [ 308.135474][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2227'. [ 308.148479][T12532] 41697 total pagecache pages [ 308.161701][T12532] 0 pages in swap cache [ 308.170663][T12532] Free swap = 124996kB [ 308.176848][T12532] Total swap = 124996kB [ 308.181554][T12532] 2097051 pages RAM [ 308.205225][T12532] 0 pages HighMem/MovableOnly [ 308.214085][T12532] 427012 pages reserved [ 308.219212][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2228'. [ 308.229211][T12532] 0 pages cma reserved [ 308.239024][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 308.404867][T12572] openvswitch: netlink: nsh attr 15109 is out of range max 3 [ 308.412875][T12572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.788995][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2239'. [ 308.842291][T12591] lo speed is unknown, defaulting to 1000 [ 309.166432][T12598] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 309.217782][T12599] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 309.234499][T12599] __nla_validate_parse: 1 callbacks suppressed [ 309.234541][T12599] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2242'. [ 309.279365][T12601] Cannot find set identified by id 0 to match [ 309.299103][T12598] bond0: (slave team0): Releasing backup interface [ 309.327770][T12598] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 309.364196][T12598] team0: left promiscuous mode [ 309.377003][T12598] batman_adv: batadv0: Adding interface: team0 [ 309.383399][T12598] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.422855][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2244'. [ 309.440965][T12598] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 309.463697][T12599] team0: entered promiscuous mode [ 309.470636][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.485852][T12599] batman_adv: batadv0: Interface activated: team0 [ 309.498842][T12614] FAULT_INJECTION: forcing a failure. [ 309.498842][T12614] name failslab, interval 1, probability 0, space 0, times 0 [ 309.504088][T12599] batman_adv: batadv0: Interface deactivated: team0 [ 309.516259][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.2.2245 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 309.525757][T12599] batman_adv: batadv0: Removing interface: team0 [ 309.528871][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 309.528891][T12614] Call Trace: [ 309.528902][T12614] [ 309.528912][T12614] dump_stack_lvl+0x241/0x360 [ 309.556257][T12614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.561502][T12614] ? __pfx__printk+0x10/0x10 [ 309.566143][T12614] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 309.572173][T12614] ? __pfx___might_resched+0x10/0x10 [ 309.577550][T12614] should_fail_ex+0x3b0/0x4e0 [ 309.582278][T12614] should_failslab+0xac/0x100 [ 309.587003][T12614] kmem_cache_alloc_node_noprof+0x77/0x380 [ 309.592861][T12614] ? __alloc_skb+0x1c3/0x440 [ 309.597499][T12614] __alloc_skb+0x1c3/0x440 [ 309.601992][T12614] ? __pfx___alloc_skb+0x10/0x10 [ 309.606987][T12614] ? netlink_ack_tlv_len+0x6e/0x200 [ 309.612232][T12614] netlink_ack+0x145/0xa50 [ 309.616693][T12614] ? __sock_sendmsg+0x221/0x270 [ 309.621607][T12614] ? ____sys_sendmsg+0x52a/0x7e0 [ 309.626609][T12614] netlink_rcv_skb+0x262/0x430 [ 309.631420][T12614] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 309.636932][T12614] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.642276][T12614] ? apparmor_capable+0x13b/0x1b0 [ 309.647358][T12614] ? bpf_lsm_capable+0x9/0x10 [ 309.652110][T12614] ? security_capable+0x7e/0x2d0 [ 309.657110][T12614] nfnetlink_rcv+0x297/0x2ab0 [ 309.661843][T12614] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 309.667624][T12614] ? __dev_queue_xmit+0x2f4/0x3f50 [ 309.672799][T12614] ? __dev_queue_xmit+0x1775/0x3f50 [ 309.678077][T12614] ? kasan_save_track+0x51/0x80 [ 309.682982][T12614] ? ____sys_sendmsg+0x52a/0x7e0 [ 309.687971][T12614] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 309.693122][T12614] ? __dev_queue_xmit+0x2f4/0x3f50 [ 309.698281][T12614] ? __pfx___dev_queue_xmit+0x10/0x10 [ 309.703717][T12614] ? ref_tracker_free+0x643/0x7e0 [ 309.708771][T12614] ? __asan_memcpy+0x40/0x70 [ 309.713431][T12614] ? __pfx_ref_tracker_free+0x10/0x10 [ 309.718850][T12614] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.724071][T12614] ? skb_clone+0x240/0x390 [ 309.728520][T12614] ? __pfx_lock_release+0x10/0x10 [ 309.733570][T12614] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 309.739071][T12614] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.744293][T12614] netlink_unicast+0x7f6/0x990 [ 309.749106][T12614] ? __pfx_netlink_unicast+0x10/0x10 [ 309.754421][T12614] ? __virt_addr_valid+0x45f/0x530 [ 309.759589][T12614] ? __phys_addr_symbol+0x2f/0x70 [ 309.764640][T12614] ? __check_object_size+0x47a/0x730 [ 309.769987][T12614] netlink_sendmsg+0x8e4/0xcb0 [ 309.774797][T12614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.780115][T12614] ? aa_sock_msg_perm+0x91/0x160 [ 309.785079][T12614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.790404][T12614] __sock_sendmsg+0x221/0x270 [ 309.795132][T12614] ____sys_sendmsg+0x52a/0x7e0 [ 309.799946][T12614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.805273][T12614] ? __fget_files+0x2a/0x410 [ 309.809902][T12614] ? __fget_files+0x2a/0x410 [ 309.814535][T12614] __sys_sendmsg+0x269/0x350 [ 309.819156][T12614] ? __pfx_lock_release+0x10/0x10 [ 309.824207][T12614] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.829362][T12614] ? __pfx_vfs_write+0x10/0x10 [ 309.834174][T12614] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.840529][T12614] ? do_syscall_64+0x100/0x230 [ 309.845319][T12614] ? do_syscall_64+0xb6/0x230 [ 309.850042][T12614] do_syscall_64+0xf3/0x230 [ 309.854585][T12614] ? clear_bhb_loop+0x35/0x90 [ 309.859313][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.865239][T12614] RIP: 0033:0x7fbca9785d19 [ 309.869699][T12614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.889345][T12614] RSP: 002b:00007fbcaa610038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.897774][T12614] RAX: ffffffffffffffda RBX: 00007fbca9975fa0 RCX: 00007fbca9785d19 [ 309.905774][T12614] RDX: 0000000004000080 RSI: 00000000200002c0 RDI: 0000000000000003 [ 309.913784][T12614] RBP: 00007fbcaa610090 R08: 0000000000000000 R09: 0000000000000000 [ 309.921784][T12614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.929778][T12614] R13: 0000000000000000 R14: 00007fbca9975fa0 R15: 00007fffda5049b8 [ 309.937808][T12614] [ 309.946051][T12599] bridge1: port 1(team0) entered blocking state [ 309.973805][T12599] bridge1: port 1(team0) entered disabled state [ 309.990421][T12599] team0: entered allmulticast mode [ 309.999745][T12599] macvlan1: entered allmulticast mode [ 310.008510][T12599] veth1_vlan: entered allmulticast mode [ 310.025110][T12599] bridge1: port 1(team0) entered blocking state [ 310.031564][T12599] bridge1: port 1(team0) entered forwarding state [ 310.064251][T12607] pim6reg: entered allmulticast mode [ 310.102607][T12608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.126232][T12613] pim6reg: left allmulticast mode [ 310.472244][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2249'. [ 310.701781][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 310.932689][T12654] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2254'. [ 311.264042][T12666] netlink: 'syz.2.2258': attribute type 6 has an invalid length. [ 311.672726][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'. [ 311.905881][T12696] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 312.259630][T12717] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 312.271042][T12717] macvlan0: entered allmulticast mode [ 312.356683][T12720] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2280'. [ 312.386242][T12720] 1·: renamed from 70· [ 312.419081][T12720] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 312.439388][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 312.480014][T12727] netlink: 'syz.6.2282': attribute type 11 has an invalid length. [ 312.582609][T12731] FAULT_INJECTION: forcing a failure. [ 312.582609][T12731] name failslab, interval 1, probability 0, space 0, times 0 [ 312.601747][T12731] CPU: 1 UID: 0 PID: 12731 Comm: syz.1.2283 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 312.612592][T12731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 312.622687][T12731] Call Trace: [ 312.625994][T12731] [ 312.628931][T12731] dump_stack_lvl+0x241/0x360 [ 312.633640][T12731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.638874][T12731] ? __pfx__printk+0x10/0x10 [ 312.643497][T12731] should_fail_ex+0x3b0/0x4e0 [ 312.648198][T12731] should_failslab+0xac/0x100 [ 312.652887][T12731] ? skb_clone+0x20c/0x390 [ 312.657318][T12731] kmem_cache_alloc_noprof+0x70/0x380 [ 312.662710][T12731] skb_clone+0x20c/0x390 [ 312.666967][T12731] __netlink_deliver_tap+0x3cc/0x7f0 [ 312.672274][T12731] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.677486][T12731] netlink_deliver_tap+0x19d/0x1b0 [ 312.682613][T12731] netlink_unicast+0x7c4/0x990 [ 312.687402][T12731] ? __pfx_netlink_unicast+0x10/0x10 [ 312.692700][T12731] ? __virt_addr_valid+0x45f/0x530 [ 312.697827][T12731] ? __phys_addr_symbol+0x2f/0x70 [ 312.702863][T12731] ? __check_object_size+0x47a/0x730 [ 312.708165][T12731] netlink_sendmsg+0x8e4/0xcb0 [ 312.712951][T12731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.718298][T12731] ? aa_sock_msg_perm+0x91/0x160 [ 312.723247][T12731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.728545][T12731] __sock_sendmsg+0x221/0x270 [ 312.733242][T12731] ____sys_sendmsg+0x52a/0x7e0 [ 312.738027][T12731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.743321][T12731] ? __fget_files+0x2a/0x410 [ 312.747938][T12731] ? __fget_files+0x2a/0x410 [ 312.752551][T12731] __sys_sendmsg+0x269/0x350 [ 312.757159][T12731] ? __pfx_lock_release+0x10/0x10 [ 312.762197][T12731] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.767340][T12731] ? __pfx_vfs_write+0x10/0x10 [ 312.772141][T12731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.778486][T12731] ? do_syscall_64+0x100/0x230 [ 312.783272][T12731] ? do_syscall_64+0xb6/0x230 [ 312.787970][T12731] do_syscall_64+0xf3/0x230 [ 312.792500][T12731] ? clear_bhb_loop+0x35/0x90 [ 312.797194][T12731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.803103][T12731] RIP: 0033:0x7fc7c5f85d19 [ 312.807542][T12731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.827158][T12731] RSP: 002b:00007fc7c6e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.835582][T12731] RAX: ffffffffffffffda RBX: 00007fc7c6175fa0 RCX: 00007fc7c5f85d19 [ 312.843573][T12731] RDX: 0000000004000100 RSI: 0000000020000000 RDI: 0000000000000005 [ 312.851575][T12731] RBP: 00007fc7c6e02090 R08: 0000000000000000 R09: 0000000000000000 [ 312.859560][T12731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.867540][T12731] R13: 0000000000000000 R14: 00007fc7c6175fa0 R15: 00007ffffb646bd8 [ 312.875540][T12731] [ 313.625484][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 313.651480][T12754] lo speed is unknown, defaulting to 1000 [ 313.695802][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 313.770942][ T5947] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 314.435567][T12770] __nla_validate_parse: 3 callbacks suppressed [ 314.435590][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'. [ 317.344739][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.885920][T12787] IPVS: Scheduler module ip_vs_sip not found [ 317.918050][T12790] macvlan1: entered promiscuous mode [ 317.940061][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 317.949353][T12790] team0: Port device macvlan1 added [ 318.032759][T12799] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.041713][T12799] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.050380][T12799] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.058723][T12799] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.382583][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 318.493253][T12817] lo speed is unknown, defaulting to 1000 [ 318.655442][T12821] bridge1: port 1(team0) entered disabled state [ 319.289952][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 321.329954][T12821] team0 (unregistering): left allmulticast mode [ 321.337244][T12821] macvlan1: left allmulticast mode [ 321.342417][T12821] veth1_vlan: left allmulticast mode [ 321.348607][T12821] bridge1: port 1(team0) entered disabled state [ 321.383668][T12821] team0 (unregistering): Port device macvlan1 removed [ 321.413103][T12829] tipc: Enabling of bearer rejected, failed to enable media [ 321.961738][T12850] vlan2: entered promiscuous mode [ 322.089970][T12852] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2326'. [ 322.197540][T12852] lo speed is unknown, defaulting to 1000 [ 322.344880][T12861] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2328'. [ 322.389240][T12864] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 322.412407][T12864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2329'. [ 322.440195][T12865] netlink: 'syz.0.2329': attribute type 3 has an invalid length. [ 322.603127][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2330'. [ 322.782602][T12877] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2332'. [ 323.185297][T12893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2338'. [ 323.226090][T12893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2338'. [ 323.470754][T12899] hsr0: entered promiscuous mode [ 323.488359][T12899] macsec2: entered allmulticast mode [ 323.507320][T12899] hsr0: entered allmulticast mode [ 323.528503][T12899] hsr_slave_0: entered allmulticast mode [ 323.542432][T12899] hsr_slave_1: entered allmulticast mode [ 323.585843][T12899] hsr0: left allmulticast mode [ 323.590802][T12899] hsr_slave_0: left allmulticast mode [ 323.609241][T12899] hsr_slave_1: left allmulticast mode [ 323.759057][T12911] netlink: 'syz.6.2345': attribute type 4 has an invalid length. [ 324.014014][T12923] lo speed is unknown, defaulting to 1000 [ 324.024448][T12926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'. [ 324.092675][T12926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.365322][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2356'. [ 324.473018][T12943] tipc: Enabling of bearer rejected, failed to enable media [ 324.665805][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2359'. [ 324.932748][T12963] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 327.251487][T13025] SET target dimension over the limit! [ 327.739923][T13044] __nla_validate_parse: 3 callbacks suppressed [ 327.739954][T13044] netlink: 1256 bytes leftover after parsing attributes in process `syz.6.2392'. [ 327.774009][T13044] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 328.013660][T13055] syz.5.2394 (13055) used obsolete PPPIOCDETACH ioctl [ 328.654671][T13078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.662048][T13078] IPv6: NLM_F_CREATE should be set when creating new route [ 328.699311][T13083] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2405'. [ 328.713724][T13073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.977944][T13095] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.024788][T13095] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.091084][T13102] netlink: 'syz.5.2413': attribute type 30 has an invalid length. [ 329.135015][T13095] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.179577][T13095] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.303206][T13095] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.349825][T13095] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.439437][T13095] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.457666][T13095] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.478939][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 329.553193][T13095] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.562160][T13095] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.591670][T13095] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.611776][T13095] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.637454][T13095] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.650702][T13095] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.737266][T13095] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.746535][T13095] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.972957][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2417'. [ 329.992388][T13127] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2422'. [ 330.363316][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 330.456144][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'. [ 331.078408][T13169] netlink: 'syz.6.2436': attribute type 1 has an invalid length. [ 331.106833][T13171] FAULT_INJECTION: forcing a failure. [ 331.106833][T13171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.143738][T13171] CPU: 0 UID: 0 PID: 13171 Comm: syz.2.2435 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 331.154578][T13171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 331.164680][T13171] Call Trace: [ 331.167990][T13171] [ 331.170946][T13171] dump_stack_lvl+0x241/0x360 [ 331.175663][T13171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.180918][T13171] ? __pfx__printk+0x10/0x10 [ 331.185550][T13171] ? migrate_enable+0x395/0x510 [ 331.190460][T13171] should_fail_ex+0x3b0/0x4e0 [ 331.195190][T13171] _copy_to_user+0x31/0xb0 [ 331.199659][T13171] __htab_map_lookup_and_delete_batch+0x1a4e/0x1f80 [ 331.206329][T13171] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 331.213328][T13171] ? __fget_files+0x2a/0x410 [ 331.217979][T13171] ? __fget_files+0x395/0x410 [ 331.222711][T13171] ? __fget_files+0x2a/0x410 [ 331.227364][T13171] ? __pfx_htab_lru_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 331.235131][T13171] bpf_map_do_batch+0x494/0x660 [ 331.240045][T13171] __sys_bpf+0x66f/0x810 [ 331.244345][T13171] ? __pfx___sys_bpf+0x10/0x10 [ 331.249167][T13171] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 331.255194][T13171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.261575][T13171] ? do_syscall_64+0x100/0x230 [ 331.266404][T13171] __x64_sys_bpf+0x7c/0x90 [ 331.270875][T13171] do_syscall_64+0xf3/0x230 [ 331.275424][T13171] ? clear_bhb_loop+0x35/0x90 [ 331.280150][T13171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.286085][T13171] RIP: 0033:0x7fbca9785d19 [ 331.290538][T13171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.310231][T13171] RSP: 002b:00007fbcaa5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.318786][T13171] RAX: ffffffffffffffda RBX: 00007fbca9976080 RCX: 00007fbca9785d19 [ 331.326805][T13171] RDX: 0000000000000038 RSI: 0000000020000280 RDI: 0000000000000019 [ 331.334824][T13171] RBP: 00007fbcaa5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 331.342890][T13171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.350903][T13171] R13: 0000000000000001 R14: 00007fbca9976080 R15: 00007fffda5049b8 [ 331.358948][T13171] [ 331.510734][T13187] sctp: [Deprecated]: syz.2.2439 (pid 13187) Use of int in max_burst socket option. [ 331.510734][T13187] Use struct sctp_assoc_value instead [ 331.724884][T13196] FAULT_INJECTION: forcing a failure. [ 331.724884][T13196] name failslab, interval 1, probability 0, space 0, times 0 [ 331.777587][T13196] CPU: 0 UID: 0 PID: 13196 Comm: syz.0.2442 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 331.788432][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 331.798531][T13196] Call Trace: [ 331.801855][T13196] [ 331.804821][T13196] dump_stack_lvl+0x241/0x360 [ 331.809557][T13196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.814810][T13196] ? __pfx__printk+0x10/0x10 [ 331.819430][T13196] ? kmem_cache_alloc_noprof+0x48/0x380 [ 331.825039][T13196] ? __pfx___might_resched+0x10/0x10 [ 331.830346][T13196] should_fail_ex+0x3b0/0x4e0 [ 331.835055][T13196] should_failslab+0xac/0x100 [ 331.839755][T13196] ? vm_area_dup+0x27/0x290 [ 331.844280][T13196] kmem_cache_alloc_noprof+0x70/0x380 [ 331.849676][T13196] vm_area_dup+0x27/0x290 [ 331.854025][T13196] __split_vma+0x1cb/0xc50 [ 331.858457][T13196] ? ima_match_policy+0x111/0x2230 [ 331.863583][T13196] ? __pfx___split_vma+0x10/0x10 [ 331.868535][T13196] ? __pfx_validate_chain+0x10/0x10 [ 331.873752][T13196] ? __pfx_up_write+0x10/0x10 [ 331.878475][T13196] ? ima_get_action+0x75/0xb0 [ 331.883162][T13196] vms_gather_munmap_vmas+0x2e6/0x1600 [ 331.888652][T13196] ? mtree_range_walk+0x6fd/0x8e0 [ 331.893697][T13196] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 331.899612][T13196] ? mas_find+0x8c0/0xbb0 [ 331.904036][T13196] __mmap_region+0x7de/0x2cd0 [ 331.908749][T13196] ? __pfx___mmap_region+0x10/0x10 [ 331.913879][T13196] ? __lock_acquire+0x1397/0x2100 [ 331.918952][T13196] ? mark_lock+0x9a/0x360 [ 331.923294][T13196] ? __pfx_lock_acquire+0x10/0x10 [ 331.928332][T13196] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 331.934632][T13196] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 331.941270][T13196] ? cap_mmap_addr+0x163/0x2c0 [ 331.946078][T13196] mmap_region+0x1d0/0x2c0 [ 331.950509][T13196] ? security_mmap_addr+0x6f/0x250 [ 331.955650][T13196] do_mmap+0x8f0/0x1000 [ 331.959831][T13196] ? __pfx_do_mmap+0x10/0x10 [ 331.964437][T13196] ? __pfx_down_write_killable+0x10/0x10 [ 331.970081][T13196] ? common_file_perm+0x1a6/0x210 [ 331.975120][T13196] vm_mmap_pgoff+0x1dd/0x3d0 [ 331.979727][T13196] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 331.984852][T13196] ? __fget_files+0x2a/0x410 [ 331.989460][T13196] ? __fget_files+0x395/0x410 [ 331.994150][T13196] ? __fget_files+0x2a/0x410 [ 331.998757][T13196] ksys_mmap_pgoff+0x4eb/0x720 [ 332.003540][T13196] ? __x64_sys_mmap+0x7f/0x140 [ 332.008328][T13196] do_syscall_64+0xf3/0x230 [ 332.012841][T13196] ? clear_bhb_loop+0x35/0x90 [ 332.017535][T13196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.023446][T13196] RIP: 0033:0x7f05adf85d19 [ 332.027869][T13196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.047571][T13196] RSP: 002b:00007f05aed86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 332.056031][T13196] RAX: ffffffffffffffda RBX: 00007f05ae175fa0 RCX: 00007f05adf85d19 [ 332.064012][T13196] RDX: 0000000000000004 RSI: 0000000000014000 RDI: 00000000206b7000 [ 332.071988][T13196] RBP: 00007f05aed86090 R08: 0000000000000006 R09: 0000000000000000 [ 332.079967][T13196] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 332.087948][T13196] R13: 0000000000000000 R14: 00007f05ae175fa0 R15: 00007ffd8b847288 [ 332.095948][T13196] [ 332.277661][T13198] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2443'. [ 333.883181][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2479'. [ 333.892772][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2479'. [ 334.346985][T13303] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2486'. [ 334.682682][T13318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'. [ 335.093305][T13335] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2496'. [ 335.376520][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2498'. [ 335.782766][T13364] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 335.884619][T13371] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2508'. [ 336.084510][T13384] netlink: 'syz.2.2511': attribute type 7 has an invalid length. [ 336.119411][T13384] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2511'. [ 336.489415][T13399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2518'. [ 336.499160][T13399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2518'. [ 336.518138][T13399] bridge0: entered promiscuous mode [ 336.527562][T13399] syz_tun: entered promiscuous mode [ 336.537119][T13399] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 336.547627][T13399] Cannot create hsr debugfs directory [ 337.125023][T13428] xt_hashlimit: size too large, truncated to 1048576 [ 337.143820][T13428] xt_hashlimit: max too large, truncated to 1048576 [ 337.150731][T13428] xt_hashlimit: overflow, try lower: 0/0 [ 337.649931][T13450] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.665496][T13450] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.710000][T13450] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.730970][T13450] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.768122][T13455] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.821437][T13450] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.837726][T13450] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.911640][T13450] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.948460][T13450] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.003833][T13459] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 338.079186][T13459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.191547][T13450] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.215301][T13450] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.262001][T13465] bond4: (slave ip6gretap1): making interface the new active one [ 338.279839][T13465] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 338.332273][T13450] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.422684][T13450] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.491739][T13450] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.562542][T13450] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.644684][T13450] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.668894][T13450] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.691325][T13475] netlink: 'syz.0.2544': attribute type 2 has an invalid length. [ 338.930420][T13476] syzkaller1: entered promiscuous mode [ 338.941902][T13476] syzkaller1: entered allmulticast mode [ 339.119145][T13486] __nla_validate_parse: 10 callbacks suppressed [ 339.119168][T13486] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2548'. [ 339.329579][T13495] FAULT_INJECTION: forcing a failure. [ 339.329579][T13495] name failslab, interval 1, probability 0, space 0, times 0 [ 339.363642][T13495] CPU: 1 UID: 0 PID: 13495 Comm: syz.0.2553 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 339.374487][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 339.384588][T13495] Call Trace: [ 339.387899][T13495] [ 339.390860][T13495] dump_stack_lvl+0x241/0x360 [ 339.395589][T13495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.400830][T13495] ? __pfx__printk+0x10/0x10 [ 339.405465][T13495] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 339.412018][T13495] ? __pfx___might_resched+0x10/0x10 [ 339.417344][T13495] should_fail_ex+0x3b0/0x4e0 [ 339.422054][T13495] should_failslab+0xac/0x100 [ 339.426757][T13495] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 339.433104][T13495] ? alloc_vfsmnt+0xeb/0x4d0 [ 339.437710][T13495] kstrdup+0x39/0xb0 [ 339.441642][T13495] alloc_vfsmnt+0xeb/0x4d0 [ 339.446072][T13495] clone_mnt+0x6b/0xc80 [ 339.450270][T13495] ? is_subdir+0x7b/0x250 [ 339.454610][T13495] copy_tree+0x3f5/0x830 [ 339.458896][T13495] copy_mnt_ns+0x176/0x8c0 [ 339.463328][T13495] ? rcu_is_watching+0x15/0xb0 [ 339.468115][T13495] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 339.473514][T13495] create_new_namespaces+0xd3/0x7b0 [ 339.478734][T13495] ? bpf_lsm_capable+0x9/0x10 [ 339.483422][T13495] ? security_capable+0x7e/0x2d0 [ 339.488385][T13495] unshare_nsproxy_namespaces+0x124/0x180 [ 339.494117][T13495] ksys_unshare+0x57d/0xa70 [ 339.498649][T13495] ? __pfx_ksys_unshare+0x10/0x10 [ 339.503689][T13495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.510029][T13495] ? do_syscall_64+0x100/0x230 [ 339.514809][T13495] __x64_sys_unshare+0x38/0x40 [ 339.519584][T13495] do_syscall_64+0xf3/0x230 [ 339.524095][T13495] ? clear_bhb_loop+0x35/0x90 [ 339.528784][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.534697][T13495] RIP: 0033:0x7f05adf85d19 [ 339.539140][T13495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.558764][T13495] RSP: 002b:00007f05aed86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 339.567192][T13495] RAX: ffffffffffffffda RBX: 00007f05ae175fa0 RCX: 00007f05adf85d19 [ 339.575175][T13495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 339.583158][T13495] RBP: 00007f05aed86090 R08: 0000000000000000 R09: 0000000000000000 [ 339.591138][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.599118][T13495] R13: 0000000000000000 R14: 00007f05ae175fa0 R15: 00007ffd8b847288 [ 339.607116][T13495] [ 339.787231][T13507] ip6tnl3: entered allmulticast mode [ 339.904537][T13516] FAULT_INJECTION: forcing a failure. [ 339.904537][T13516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.918051][T13516] CPU: 0 UID: 0 PID: 13516 Comm: syz.0.2560 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 339.928955][T13516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 339.939062][T13516] Call Trace: [ 339.942384][T13516] [ 339.945355][T13516] dump_stack_lvl+0x241/0x360 [ 339.950087][T13516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.955341][T13516] ? __pfx__printk+0x10/0x10 [ 339.959987][T13516] ? __pfx_lock_release+0x10/0x10 [ 339.965123][T13516] should_fail_ex+0x3b0/0x4e0 [ 339.969870][T13516] _copy_from_user+0x2f/0xc0 [ 339.974516][T13516] __sys_bpf+0x1a4/0x810 [ 339.978847][T13516] ? __pfx___sys_bpf+0x10/0x10 [ 339.983642][T13516] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.989636][T13516] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.996064][T13516] ? do_syscall_64+0x100/0x230 [ 340.000880][T13516] __x64_sys_bpf+0x7c/0x90 [ 340.005512][T13516] do_syscall_64+0xf3/0x230 [ 340.010042][T13516] ? clear_bhb_loop+0x35/0x90 [ 340.014785][T13516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.020699][T13516] RIP: 0033:0x7f05adf85d19 [ 340.025129][T13516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.044747][T13516] RSP: 002b:00007f05aed86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.053169][T13516] RAX: ffffffffffffffda RBX: 00007f05ae175fa0 RCX: 00007f05adf85d19 [ 340.061145][T13516] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 340.069148][T13516] RBP: 00007f05aed86090 R08: 0000000000000000 R09: 0000000000000000 [ 340.077141][T13516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.085127][T13516] R13: 0000000000000000 R14: 00007f05ae175fa0 R15: 00007ffd8b847288 [ 340.093126][T13516] [ 340.144882][T13518] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2561'. [ 340.350471][T13528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2565'. [ 340.396316][T13530] hsr0: entered promiscuous mode [ 340.669829][T13538] netlink: 'syz.0.2571': attribute type 142 has an invalid length. [ 340.682206][T13538] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2571'. [ 340.902307][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'. [ 340.917114][T13550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2575'. [ 340.936445][T13548] lo speed is unknown, defaulting to 1000 [ 341.267659][T13568] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2582'. [ 341.504486][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 341.657559][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2587'. [ 341.879805][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2590'. [ 342.162210][T13606] FAULT_INJECTION: forcing a failure. [ 342.162210][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 342.233568][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.1.2595 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 342.244439][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 342.254510][T13606] Call Trace: [ 342.257794][T13606] [ 342.260730][T13606] dump_stack_lvl+0x241/0x360 [ 342.265433][T13606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.270648][T13606] ? __pfx__printk+0x10/0x10 [ 342.275256][T13606] ? kmem_cache_alloc_noprof+0x48/0x380 [ 342.280814][T13606] ? __pfx___might_resched+0x10/0x10 [ 342.286118][T13606] should_fail_ex+0x3b0/0x4e0 [ 342.290817][T13606] should_failslab+0xac/0x100 [ 342.295507][T13606] ? sk_prot_alloc+0x58/0x210 [ 342.300190][T13606] kmem_cache_alloc_noprof+0x70/0x380 [ 342.305582][T13606] sk_prot_alloc+0x58/0x210 [ 342.310095][T13606] ? sk_alloc+0x26/0x370 [ 342.314351][T13606] sk_alloc+0x38/0x370 [ 342.318430][T13606] inet6_create+0x6ce/0x10f0 [ 342.323025][T13606] ? inet6_create+0x78/0x10f0 [ 342.327728][T13606] __sock_create+0x4c0/0xa30 [ 342.332345][T13606] l2tp_tunnel_register+0x382/0x1b10 [ 342.337662][T13606] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 342.343411][T13606] ? __asan_memset+0x23/0x50 [ 342.348013][T13606] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 342.353835][T13606] ? __kasan_kmalloc+0x98/0xb0 [ 342.358612][T13606] ? l2tp_tunnel_create+0x258/0x400 [ 342.363821][T13606] ? l2tp_tunnel_create+0x2d4/0x400 [ 342.369037][T13606] l2tp_nl_cmd_tunnel_create+0x76f/0xb60 [ 342.374692][T13606] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 342.380859][T13606] ? __nla_parse+0x40/0x60 [ 342.385320][T13606] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 342.391685][T13606] genl_rcv_msg+0xb14/0xec0 [ 342.396241][T13606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.401316][T13606] ? __pfx_lock_acquire+0x10/0x10 [ 342.406354][T13606] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 342.412518][T13606] ? __pfx___might_resched+0x10/0x10 [ 342.417829][T13606] netlink_rcv_skb+0x1e3/0x430 [ 342.422602][T13606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.427642][T13606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.432951][T13606] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 342.438434][T13606] genl_rcv+0x28/0x40 [ 342.442429][T13606] netlink_unicast+0x7f6/0x990 [ 342.447238][T13606] ? __pfx_netlink_unicast+0x10/0x10 [ 342.452535][T13606] ? __virt_addr_valid+0x45f/0x530 [ 342.457660][T13606] ? __phys_addr_symbol+0x2f/0x70 [ 342.462696][T13606] ? __check_object_size+0x47a/0x730 [ 342.467997][T13606] netlink_sendmsg+0x8e4/0xcb0 [ 342.472786][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.478097][T13606] ? aa_sock_msg_perm+0x91/0x160 [ 342.483046][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.488340][T13606] __sock_sendmsg+0x221/0x270 [ 342.493046][T13606] ____sys_sendmsg+0x52a/0x7e0 [ 342.497830][T13606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.503127][T13606] ? __fget_files+0x2a/0x410 [ 342.507738][T13606] ? __fget_files+0x2a/0x410 [ 342.512352][T13606] __sys_sendmsg+0x269/0x350 [ 342.516954][T13606] ? __pfx_lock_release+0x10/0x10 [ 342.522008][T13606] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.527143][T13606] ? __pfx_vfs_write+0x10/0x10 [ 342.531943][T13606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.538283][T13606] ? do_syscall_64+0x100/0x230 [ 342.543058][T13606] ? do_syscall_64+0xb6/0x230 [ 342.547768][T13606] do_syscall_64+0xf3/0x230 [ 342.552283][T13606] ? clear_bhb_loop+0x35/0x90 [ 342.556973][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.562876][T13606] RIP: 0033:0x7fc7c5f85d19 [ 342.567312][T13606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.586931][T13606] RSP: 002b:00007fc7c6e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.595355][T13606] RAX: ffffffffffffffda RBX: 00007fc7c6175fa0 RCX: 00007fc7c5f85d19 [ 342.603337][T13606] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 342.611340][T13606] RBP: 00007fc7c6e02090 R08: 0000000000000000 R09: 0000000000000000 [ 342.619321][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.627296][T13606] R13: 0000000000000000 R14: 00007fc7c6175fa0 R15: 00007ffffb646bd8 [ 342.635312][T13606] [ 342.705763][T13611] FAULT_INJECTION: forcing a failure. [ 342.705763][T13611] name failslab, interval 1, probability 0, space 0, times 0 [ 342.760736][T13611] CPU: 1 UID: 0 PID: 13611 Comm: syz.0.2596 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 342.771603][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 342.781712][T13611] Call Trace: [ 342.785036][T13611] [ 342.787993][T13611] dump_stack_lvl+0x241/0x360 [ 342.792724][T13611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.797970][T13611] ? __pfx__printk+0x10/0x10 [ 342.802611][T13611] ? __kmalloc_noprof+0xb5/0x4c0 [ 342.807602][T13611] ? __pfx___might_resched+0x10/0x10 [ 342.812937][T13611] should_fail_ex+0x3b0/0x4e0 [ 342.817688][T13611] should_failslab+0xac/0x100 [ 342.822411][T13611] __kmalloc_noprof+0xdd/0x4c0 [ 342.827233][T13611] ? bpf_test_init+0xe1/0x180 [ 342.831958][T13611] bpf_test_init+0xe1/0x180 [ 342.836505][T13611] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 342.841915][T13611] ? __pfx_lock_release+0x10/0x10 [ 342.846972][T13611] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 342.852821][T13611] ? __fget_files+0x2a/0x410 [ 342.857455][T13611] ? __fget_files+0x2a/0x410 [ 342.862088][T13611] ? fput+0x21b/0x290 [ 342.866113][T13611] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 342.871963][T13611] bpf_prog_test_run+0x2e4/0x360 [ 342.876949][T13611] __sys_bpf+0x48d/0x810 [ 342.881231][T13611] ? __pfx___sys_bpf+0x10/0x10 [ 342.886058][T13611] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.887258][T13616] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 342.892060][T13611] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.907613][T13611] ? do_syscall_64+0x100/0x230 [ 342.912423][T13611] __x64_sys_bpf+0x7c/0x90 [ 342.916882][T13611] do_syscall_64+0xf3/0x230 [ 342.921398][T13611] ? clear_bhb_loop+0x35/0x90 [ 342.926093][T13611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.932009][T13611] RIP: 0033:0x7f05adf85d19 [ 342.936439][T13611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.956056][T13611] RSP: 002b:00007f05aed86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.964481][T13611] RAX: ffffffffffffffda RBX: 00007f05ae175fa0 RCX: 00007f05adf85d19 [ 342.972456][T13611] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 342.980445][T13611] RBP: 00007f05aed86090 R08: 0000000000000000 R09: 0000000000000000 [ 342.988425][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.996414][T13611] R13: 0000000000000000 R14: 00007f05ae175fa0 R15: 00007ffd8b847288 [ 343.004406][T13611] [ 343.072249][T13622] netlink: 'syz.2.2599': attribute type 4 has an invalid length. [ 343.363335][T13633] FAULT_INJECTION: forcing a failure. [ 343.363335][T13633] name failslab, interval 1, probability 0, space 0, times 0 [ 343.394407][T13633] CPU: 1 UID: 0 PID: 13633 Comm: syz.2.2603 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 343.405267][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 343.415366][T13633] Call Trace: [ 343.418677][T13633] [ 343.421643][T13633] dump_stack_lvl+0x241/0x360 [ 343.426379][T13633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.431639][T13633] ? __pfx__printk+0x10/0x10 [ 343.436282][T13633] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 343.442318][T13633] ? __pfx___might_resched+0x10/0x10 [ 343.447655][T13633] should_fail_ex+0x3b0/0x4e0 [ 343.452393][T13633] should_failslab+0xac/0x100 [ 343.457127][T13633] kmem_cache_alloc_node_noprof+0x77/0x380 [ 343.462985][T13633] ? __alloc_skb+0x1c3/0x440 [ 343.467630][T13633] __alloc_skb+0x1c3/0x440 [ 343.472106][T13633] ? __pfx___alloc_skb+0x10/0x10 [ 343.477102][T13633] netlink_dump+0x239/0xe10 [ 343.481653][T13633] ? __mutex_lock+0x37f/0xee0 [ 343.486380][T13633] ? __pfx_netlink_dump+0x10/0x10 [ 343.491478][T13633] __netlink_dump_start+0x5a2/0x790 [ 343.496751][T13633] xsk_diag_handler_dump+0x1dc/0x270 [ 343.502090][T13633] ? __pfx_xsk_diag_handler_dump+0x10/0x10 [ 343.507940][T13633] ? __pfx_xsk_diag_dump+0x10/0x10 [ 343.513077][T13633] ? sock_diag_lock_handler+0x19/0x280 [ 343.518551][T13633] ? __pfx_xsk_diag_handler_dump+0x10/0x10 [ 343.524372][T13633] sock_diag_rcv_msg+0x3dc/0x5f0 [ 343.529320][T13633] netlink_rcv_skb+0x1e3/0x430 [ 343.534092][T13633] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 343.539559][T13633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.544870][T13633] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.550073][T13633] netlink_unicast+0x7f6/0x990 [ 343.554861][T13633] ? __pfx_netlink_unicast+0x10/0x10 [ 343.560169][T13633] ? __virt_addr_valid+0x45f/0x530 [ 343.565288][T13633] ? __phys_addr_symbol+0x2f/0x70 [ 343.570326][T13633] ? __check_object_size+0x47a/0x730 [ 343.575642][T13633] netlink_sendmsg+0x8e4/0xcb0 [ 343.580422][T13633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.585738][T13633] ? aa_sock_msg_perm+0x91/0x160 [ 343.590699][T13633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.595996][T13633] __sock_sendmsg+0x221/0x270 [ 343.600693][T13633] sock_write_iter+0x2d7/0x3f0 [ 343.605476][T13633] ? __pfx_sock_write_iter+0x10/0x10 [ 343.610803][T13633] ? iovec_from_user+0x10e/0x240 [ 343.615755][T13633] ? iovec_from_user+0x16c/0x240 [ 343.620712][T13633] do_iter_readv_writev+0x600/0x880 [ 343.625923][T13633] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 343.631659][T13633] ? bpf_lsm_file_permission+0x9/0x10 [ 343.637049][T13633] ? security_file_permission+0x74/0x280 [ 343.642696][T13633] ? rw_verify_area+0x1c3/0x6f0 [ 343.647561][T13633] vfs_writev+0x376/0xba0 [ 343.651917][T13633] ? __pfx_lock_acquire+0x10/0x10 [ 343.656957][T13633] ? __pfx_vfs_writev+0x10/0x10 [ 343.661835][T13633] ? __pfx_vfs_write+0x10/0x10 [ 343.666610][T13633] ? __fget_files+0x2a/0x410 [ 343.671214][T13633] ? __fget_files+0x395/0x410 [ 343.675903][T13633] ? __fget_files+0x2a/0x410 [ 343.680513][T13633] do_writev+0x1b6/0x360 [ 343.684779][T13633] ? __pfx_do_writev+0x10/0x10 [ 343.689555][T13633] ? do_syscall_64+0x100/0x230 [ 343.694338][T13633] ? do_syscall_64+0xb6/0x230 [ 343.699025][T13633] do_syscall_64+0xf3/0x230 [ 343.703538][T13633] ? clear_bhb_loop+0x35/0x90 [ 343.708230][T13633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.714134][T13633] RIP: 0033:0x7fbca9785d19 [ 343.718556][T13633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.738171][T13633] RSP: 002b:00007fbcaa610038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.746595][T13633] RAX: ffffffffffffffda RBX: 00007fbca9975fa0 RCX: 00007fbca9785d19 [ 343.754580][T13633] RDX: 10000000000002b9 RSI: 0000000020019440 RDI: 0000000000000003 [ 343.762564][T13633] RBP: 00007fbcaa610090 R08: 0000000000000000 R09: 0000000000000000 [ 343.770540][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.778523][T13633] R13: 0000000000000000 R14: 00007fbca9975fa0 R15: 00007fffda5049b8 [ 343.786517][T13633] [ 344.012452][T13645] bond0: (slave bond_slave_0): Releasing backup interface [ 344.240180][T13652] __nla_validate_parse: 8 callbacks suppressed [ 344.240206][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'. [ 344.423292][T13654] netlink: 'syz.1.2613': attribute type 3 has an invalid length. [ 344.463799][T13654] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2613'. [ 344.618954][T13663] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2615'. [ 344.850776][T13672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2619'. [ 344.874704][T13670] ------------[ cut here ]------------ [ 344.880677][T13670] WARNING: CPU: 0 PID: 13670 at net/rxrpc/sendmsg.c:296 rxrpc_send_data+0x2969/0x2b30 [ 344.890880][T13670] Modules linked in: [ 344.895367][T13670] CPU: 0 UID: 0 PID: 13670 Comm: syz.5.2618 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 344.906321][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 344.916837][T13670] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 [ 344.922626][T13670] Code: 24 48 48 89 de e8 67 bf b2 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 68 ba b2 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 7a 7e 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 344.942615][T13670] RSP: 0018:ffffc900043873a0 EFLAGS: 00010283 [ 344.949257][T13670] RAX: ffffffff8aeca3d8 RBX: ffff88807ee3bf80 RCX: 0000000000080000 [ 344.957373][T13670] RDX: ffffc900148a9000 RSI: 0000000000000074 RDI: 0000000000000075 [ 344.965458][T13670] RBP: ffffc90004387650 R08: ffff88807c0f043f R09: 0000000000000000 [ 344.973890][T13670] R10: ffff88807c0f0340 R11: ffffed100f81e088 R12: ffff88807ee3bf48 [ 344.981901][T13670] R13: 1ffff1100fdc77ef R14: ffff88807c0f0000 R15: 0000000000000000 [ 344.989981][T13670] FS: 00007f5102a196c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 344.999068][T13670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.006196][T13670] CR2: 0000001b2d40cff8 CR3: 0000000056e82000 CR4: 00000000003526f0 [ 345.014374][T13670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 345.022392][T13670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 345.030652][T13670] Call Trace: [ 345.034327][T13670] [ 345.037319][T13670] ? __warn+0x165/0x4d0 [ 345.041530][T13670] ? rxrpc_send_data+0x2969/0x2b30 [ 345.046778][T13670] ? report_bug+0x2b3/0x500 [ 345.051346][T13670] ? rxrpc_send_data+0x2969/0x2b30 [ 345.056624][T13670] ? handle_bug+0x60/0x90 [ 345.061071][T13670] ? exc_invalid_op+0x1a/0x50 [ 345.066165][T13670] ? asm_exc_invalid_op+0x1a/0x20 [ 345.071266][T13670] ? rxrpc_send_data+0x2968/0x2b30 [ 345.076561][T13670] ? rxrpc_send_data+0x2969/0x2b30 [ 345.081783][T13670] ? __pfx_rxrpc_send_data+0x10/0x10 [ 345.087346][T13670] ? __local_bh_enable_ip+0x168/0x200 [ 345.092787][T13670] ? lockdep_hardirqs_on+0x99/0x150 [ 345.098398][T13670] ? __local_bh_enable_ip+0x168/0x200 [ 345.103893][T13670] ? __pfx_default_wake_function+0x10/0x10 [ 345.109774][T13670] rxrpc_do_sendmsg+0x1569/0x1910 [ 345.114995][T13670] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 345.120423][T13670] ? rxrpc_sendmsg+0x127/0x920 [ 345.125658][T13670] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.131685][T13670] ? do_raw_spin_unlock+0x13c/0x8b0 [ 345.137051][T13670] ? rxrpc_sendmsg+0x5d8/0x920 [ 345.141887][T13670] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 345.147205][T13670] __sock_sendmsg+0x221/0x270 [ 345.151945][T13670] ____sys_sendmsg+0x52a/0x7e0 [ 345.157172][T13670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.162503][T13670] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.168781][T13670] ? preempt_schedule_common+0x84/0xd0 [ 345.174382][T13670] ? preempt_schedule+0xe1/0xf0 [ 345.179298][T13670] __sys_sendmmsg+0x36a/0x720 [ 345.184397][T13670] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.190785][T13670] ? __pfx___sys_sendmmsg+0x10/0x10 [ 345.196100][T13670] ? try_to_wake_up+0x9c3/0x1470 [ 345.201085][T13670] ? __pfx_lock_release+0x10/0x10 [ 345.206277][T13670] ? wake_up_q+0xdc/0x120 [ 345.210658][T13670] ? futex_wake+0x523/0x5c0 [ 345.215576][T13670] ? __pfx_futex_wake+0x10/0x10 [ 345.220559][T13670] ? __local_bh_enable_ip+0x168/0x200 [ 345.226062][T13670] ? rxrpc_connect+0x3a3/0x4a0 [ 345.230868][T13670] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.236871][T13670] ? do_futex+0x392/0x560 [ 345.241251][T13670] ? __sys_connect+0xf0/0x2d0 [ 345.246358][T13670] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.252386][T13670] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.258827][T13670] ? do_syscall_64+0x100/0x230 [ 345.263690][T13670] __x64_sys_sendmmsg+0xa0/0xb0 [ 345.268561][T13670] do_syscall_64+0xf3/0x230 [ 345.273086][T13670] ? clear_bhb_loop+0x35/0x90 [ 345.278184][T13670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.284187][T13670] RIP: 0033:0x7f5101b85d19 [ 345.288613][T13670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.308576][T13670] RSP: 002b:00007f5102a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.317133][T13670] RAX: ffffffffffffffda RBX: 00007f5101d75fa0 RCX: 00007f5101b85d19 [ 345.325274][T13670] RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 000000000000000b [ 345.333277][T13670] RBP: 00007f5101c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 345.341855][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.350007][T13670] R13: 0000000000000000 R14: 00007f5101d75fa0 R15: 00007ffd1e22d658 [ 345.358130][T13670] [ 345.361213][T13670] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.368535][T13670] CPU: 0 UID: 0 PID: 13670 Comm: syz.5.2618 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 345.379329][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 345.389402][T13670] Call Trace: [ 345.392697][T13670] [ 345.395640][T13670] dump_stack_lvl+0x241/0x360 [ 345.400337][T13670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.405560][T13670] ? __pfx__printk+0x10/0x10 [ 345.410166][T13670] ? _printk+0xd5/0x120 [ 345.414352][T13670] ? __init_begin+0x41000/0x41000 [ 345.419422][T13670] ? vscnprintf+0x5d/0x90 [ 345.423786][T13670] panic+0x349/0x880 [ 345.427699][T13670] ? __warn+0x174/0x4d0 [ 345.431866][T13670] ? __pfx_panic+0x10/0x10 [ 345.436324][T13670] __warn+0x344/0x4d0 [ 345.440362][T13670] ? rxrpc_send_data+0x2969/0x2b30 [ 345.445505][T13670] report_bug+0x2b3/0x500 [ 345.449874][T13670] ? rxrpc_send_data+0x2969/0x2b30 [ 345.454999][T13670] handle_bug+0x60/0x90 [ 345.459180][T13670] exc_invalid_op+0x1a/0x50 [ 345.463725][T13670] asm_exc_invalid_op+0x1a/0x20 [ 345.468618][T13670] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 [ 345.474366][T13670] Code: 24 48 48 89 de e8 67 bf b2 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 68 ba b2 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 7a 7e 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 345.493985][T13670] RSP: 0018:ffffc900043873a0 EFLAGS: 00010283 [ 345.500067][T13670] RAX: ffffffff8aeca3d8 RBX: ffff88807ee3bf80 RCX: 0000000000080000 [ 345.508050][T13670] RDX: ffffc900148a9000 RSI: 0000000000000074 RDI: 0000000000000075 [ 345.516035][T13670] RBP: ffffc90004387650 R08: ffff88807c0f043f R09: 0000000000000000 [ 345.524014][T13670] R10: ffff88807c0f0340 R11: ffffed100f81e088 R12: ffff88807ee3bf48 [ 345.531993][T13670] R13: 1ffff1100fdc77ef R14: ffff88807c0f0000 R15: 0000000000000000 [ 345.539985][T13670] ? rxrpc_send_data+0x2968/0x2b30 [ 345.545149][T13670] ? __pfx_rxrpc_send_data+0x10/0x10 [ 345.550446][T13670] ? __local_bh_enable_ip+0x168/0x200 [ 345.555836][T13670] ? lockdep_hardirqs_on+0x99/0x150 [ 345.561044][T13670] ? __local_bh_enable_ip+0x168/0x200 [ 345.566436][T13670] ? __pfx_default_wake_function+0x10/0x10 [ 345.572267][T13670] rxrpc_do_sendmsg+0x1569/0x1910 [ 345.577320][T13670] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 345.582708][T13670] ? rxrpc_sendmsg+0x127/0x920 [ 345.587488][T13670] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.593226][T13670] ? do_raw_spin_unlock+0x13c/0x8b0 [ 345.598441][T13670] ? rxrpc_sendmsg+0x5d8/0x920 [ 345.603225][T13670] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 345.608347][T13670] __sock_sendmsg+0x221/0x270 [ 345.613046][T13670] ____sys_sendmsg+0x52a/0x7e0 [ 345.617830][T13670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.623126][T13670] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.629122][T13670] ? preempt_schedule_common+0x84/0xd0 [ 345.634606][T13670] ? preempt_schedule+0xe1/0xf0 [ 345.639478][T13670] __sys_sendmmsg+0x36a/0x720 [ 345.644170][T13670] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.650522][T13670] ? __pfx___sys_sendmmsg+0x10/0x10 [ 345.655730][T13670] ? try_to_wake_up+0x9c3/0x1470 [ 345.660706][T13670] ? __pfx_lock_release+0x10/0x10 [ 345.665757][T13670] ? wake_up_q+0xdc/0x120 [ 345.670094][T13670] ? futex_wake+0x523/0x5c0 [ 345.674653][T13670] ? __pfx_futex_wake+0x10/0x10 [ 345.679514][T13670] ? __local_bh_enable_ip+0x168/0x200 [ 345.684924][T13670] ? rxrpc_connect+0x3a3/0x4a0 [ 345.689701][T13670] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.695440][T13670] ? do_futex+0x392/0x560 [ 345.699793][T13670] ? __sys_connect+0xf0/0x2d0 [ 345.704484][T13670] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.710471][T13670] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.716810][T13670] ? do_syscall_64+0x100/0x230 [ 345.721617][T13670] __x64_sys_sendmmsg+0xa0/0xb0 [ 345.726482][T13670] do_syscall_64+0xf3/0x230 [ 345.730993][T13670] ? clear_bhb_loop+0x35/0x90 [ 345.735681][T13670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.741587][T13670] RIP: 0033:0x7f5101b85d19 [ 345.746014][T13670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.765627][T13670] RSP: 002b:00007f5102a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.774054][T13670] RAX: ffffffffffffffda RBX: 00007f5101d75fa0 RCX: 00007f5101b85d19 [ 345.782032][T13670] RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 000000000000000b [ 345.790008][T13670] RBP: 00007f5101c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 345.797983][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.805961][T13670] R13: 0000000000000000 R14: 00007f5101d75fa0 R15: 00007ffd1e22d658 [ 345.813953][T13670] [ 345.817400][T13670] Kernel Offset: disabled [ 345.821787][T13670] Rebooting in 86400 seconds..