last executing test programs: 3.172098231s ago: executing program 2 (id=1338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000400000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.101035555s ago: executing program 2 (id=1339): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00022dbd70000000000007000000"], 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x0, 0x7, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) pread64(r6, &(0x7f0000000280)=""/246, 0xf6, 0x1) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020605090400002027bd7000fbdbdf2502000100000004d303c5ec0300000040"], 0x20}}, 0x10) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="af0a00000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d22bdd1ee91caf601d39dd4100"/272], 0x110) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000200)="b6ef8fda624b0d955c5296a0c426724805e15e7d8eb08a9fe98d3eda703f98719e5e014f244a07ba31b95bce46e023c1dbc2624841628491be1ae826bb077221c5c48fcc874d011ee2a082350ecb38c7", 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x15}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000010bb24fb4997b0247c27412e98740000000000000000"], 0x48) socket$inet6(0xa, 0x800000000000802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 2.204474848s ago: executing program 4 (id=1355): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xc00}}, 0x10, 0x0}, 0x0) 1.830172232s ago: executing program 2 (id=1361): sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x4801) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18090000000000000000000000000000850000106d696c2500000000002020207b1af8ff00100000bfa100000008000000b70c2d4162212809a3e27c95030000000000008500000070000000950000000000000000000000000000008f5677bd6fe54737370dbae5a91d0000008000000000a14ef661d632995d729fb8add5f730236fbaca8987f347bce9"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe880000000000000000004000001001ff0200000000000000000000000000018900907800000000fe9b00000000000000000000000000010002122bbf2b55f5db48f57c6088f7e5f301bf88ad3df652ece2cdb69ab9dd7773f431"], 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x26}, @loopback, 0x0, 0x4, [@multicast1, @empty, @loopback, @multicast2]}, 0x20) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x3fe, @mcast2}, {0xa, 0x4e23, 0xe7, @private1, 0x7}, 0x1, {[0x5, 0x7fffffff, 0x81, 0x5, 0x1, 0x0, 0x87, 0xdf1]}}, 0x5c) 1.806399676s ago: executing program 3 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00000000000082f5772aba2aeab90000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) mmap(&(0x7f0000605000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r0, 0x5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r2, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaabb88a8300081001700080045190014fffeffff01329078ac14142d6401"], 0x2e) (async) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r3, 0x0, 0x0) (async) accept4(r2, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000009380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f00000093c0)={0x14, r7, 0xf691975171ad3b89, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.687739033s ago: executing program 1 (id=1364): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0xffff, 0x6}, 0x4) read(r0, 0x0, 0x0) 1.612936701s ago: executing program 2 (id=1365): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x9, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @alu={0x71c3ded1459b83b9, 0x0, 0x0, 0x4, 0x6, 0x30}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8e}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x38, &(0x7f0000000480)=""/56, 0x5b575d5d8275df0a, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xa, 0x401, 0xfffffffc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0xe, 0xb}, {0x3, 0x3, 0xd, 0x7}, {0x2, 0x5, 0x6, 0xb}, {0x0, 0x5, 0x8, 0x4}], 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='mlxsw_sp_acl_tcam_vregion_rehash_rollback_failed\x00', r2, 0x0, 0xff5}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r6], 0x20}}, 0x0) 1.581119219s ago: executing program 0 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000d40)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x1, 0x0, 0x6, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 1.368202255s ago: executing program 0 (id=1367): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) (fail_nth: 8) 1.367774008s ago: executing program 1 (id=1368): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd26, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.306790989s ago: executing program 2 (id=1369): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'veth0_to_team\x00', &(0x7f0000000600)=@ethtool_channels={0x3d, 0x0, 0x400, 0x0, 0x0, 0x4}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x630}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@local, @empty, @broadcast}, &(0x7f0000000100)=0xc) 784.516452ms ago: executing program 1 (id=1370): r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) bind$alg(r2, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r5) bind$packet(r0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b5b558217a5b0e0fb356bf4c9fc2e67ec74b2586b96e891aaa99e2b0c8b85e16c6a983a6acf677541684808b34e4058915dc54a308af117ee1a4d4a56dc02aef097cf2090f0db16b656cb6624fd894cadab26dab1b2fc27847cb3e3699bdda55c9bb88ce441ac0b9bf81266b6559c5a7e7fdd55ef65afd8a03426e7c85899c32199ccfc470", 0x85) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000001a40)={0x0, 0x0}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c011}, 0x20000800) 784.100006ms ago: executing program 2 (id=1371): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00022dbd70000000000007000000"], 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x0, 0x7, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) pread64(r6, &(0x7f0000000280)=""/246, 0xf6, 0x1) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020605090400002027bd7000fbdbdf2502000100000004d303c5ec0300000040"], 0x20}}, 0x10) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="af0a00000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d22bdd1ee91caf601d39dd4100"/272], 0x110) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000200)="b6ef8fda624b0d955c5296a0c426724805e15e7d8eb08a9fe98d3eda703f98719e5e014f244a07ba31b95bce46e023c1dbc2624841628491be1ae826bb077221c5c48fcc874d011ee2a082350ecb38c7", 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x15}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000010bb24fb4997b0247c27412e98740000000000000000"], 0x48) socket$inet6(0xa, 0x800000000000802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 783.914415ms ago: executing program 3 (id=1372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x8}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @window={0x3, 0x3, 0x800}, @sack_perm], 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000ff080000db000001000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000e00)="96a67b36bd06304a08a63f14f6c3881ca6167592d6060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f00000003c0)="fc4e566c4d7a4000", 0x8}], 0x2}}], 0x1, 0x40000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 716.175999ms ago: executing program 4 (id=1373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (fail_nth: 5) 695.806358ms ago: executing program 3 (id=1374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="adc20000000000322800000000000000", 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080), 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) 451.507065ms ago: executing program 1 (id=1375): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0xa81c) 392.225788ms ago: executing program 3 (id=1376): sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300020b000000000000000000000003000600002000000200000000000000000000000000000002000100000000000000fb0300200000030005000000000002000000ac1414aa0000000000000000010008"], 0x58}, 0x1, 0x7}, 0x0) 382.71988ms ago: executing program 4 (id=1377): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x20000092) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @loopback={0x97}, 0x1}, 0x1c, 0x0}}], 0x1, 0x4800) 367.737822ms ago: executing program 0 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000d40)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x1, 0x0, 0x6, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 303.984419ms ago: executing program 1 (id=1379): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x9, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @alu={0x71c3ded1459b83b9, 0x0, 0x0, 0x4, 0x6, 0x30}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8e}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x38, &(0x7f0000000480)=""/56, 0x5b575d5d8275df0a, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xa, 0x401, 0xfffffffc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0xe, 0xb}, {0x3, 0x3, 0xd, 0x7}, {0x2, 0x5, 0x6, 0xb}, {0x0, 0x5, 0x8, 0x4}], 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='mlxsw_sp_acl_tcam_vregion_rehash_rollback_failed\x00', r2, 0x0, 0xff5}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000300", @ANYRES32=r6], 0x20}}, 0x0) 297.341054ms ago: executing program 0 (id=1380): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r0, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'bond_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8000) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000000)="03040000008002ff", 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xd, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYBLOB="00000000000000b7080000000000007b8af8ff00000000bfa2000000000000fc010000f8ffffffb70300000000000000000094000000000085f5ffff2a00000018110f12", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 285.42771ms ago: executing program 4 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd26, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 156.100654ms ago: executing program 3 (id=1382): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)={0x3c, r4, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xfd}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x3c}}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r11=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r11}, &(0x7f0000000100)=0x8) 155.87401ms ago: executing program 1 (id=1383): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0) 124.463358ms ago: executing program 0 (id=1384): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000e0002000000e0000009000000000000000003000100000000000000000200000000030005000000000002000000e000000100000000000000000200080020"], 0x60}}, 0x0) 123.244193ms ago: executing program 4 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001900)="6e98", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000001c80)="17144e07", 0xc3fe}], 0x1}}], 0x2, 0xc40000) 47.263448ms ago: executing program 4 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x8000000}, 0x20) 206.811µs ago: executing program 3 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (fail_nth: 6) 0s ago: executing program 0 (id=1388): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x6c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014", 0x1d, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000"], 0xa0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x65, 0x0, 0x0, 0x29, 0x0, @empty=0x12, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): : batadv0: Removing interface: batadv_slave_1 [ 83.346598][ T6138] veth1_macvtap: left promiscuous mode [ 83.353274][ T6138] veth0_macvtap: left promiscuous mode [ 83.360023][ T6138] veth1_vlan: left promiscuous mode [ 83.377119][ T6138] veth0_vlan: left promiscuous mode [ 83.933205][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 83.969507][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 84.260936][ T5847] Bluetooth: hci2: command tx timeout [ 84.387303][ T6458] hsr_slave_0: entered promiscuous mode [ 84.402924][ T6458] hsr_slave_1: entered promiscuous mode [ 84.439024][ T6458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.450606][ T6458] Cannot create hsr debugfs directory [ 84.581766][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 84.593251][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 84.648035][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 84.709219][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 84.718897][ T6592] netlink: 'syz.3.153': attribute type 3 has an invalid length. [ 84.762755][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 84.817335][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 85.054307][ T6613] sctp: [Deprecated]: syz.1.157 (pid 6613) Use of int in max_burst socket option. [ 85.054307][ T6613] Use struct sctp_assoc_value instead [ 85.401901][ T6458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.428800][ T6458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.445796][ T6458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.463320][ T6458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.575188][ T6638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.582509][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.593171][ T6638] batadv_slave_1: entered promiscuous mode [ 85.604623][ T6637] batadv_slave_1: left promiscuous mode [ 85.623686][ T6458] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.637290][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.644510][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.667303][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.674435][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.835530][ T6647] netlink: 'syz.3.166': attribute type 7 has an invalid length. [ 85.918395][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.980154][ T6652] __nla_validate_parse: 32 callbacks suppressed [ 85.980173][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'. [ 86.029470][ T6458] veth0_vlan: entered promiscuous mode [ 86.069937][ T6458] veth1_vlan: entered promiscuous mode [ 86.101070][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'. [ 86.150221][ T6458] veth0_macvtap: entered promiscuous mode [ 86.171318][ T6458] veth1_macvtap: entered promiscuous mode [ 86.225726][ T6662] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 86.225876][ T6663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.170'. [ 86.346948][ T5847] Bluetooth: hci2: command tx timeout [ 86.356566][ T6662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.380188][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.398830][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.444839][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.472860][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.506904][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.544114][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.566962][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.586429][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.607433][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.646668][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 86.661506][ T6667] bond1: (slave batadv1): making interface the new active one [ 86.678456][ T6667] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 86.700114][ T6671] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 86.726542][ T6667] syz.3.170 (6667) used greatest stack depth: 19472 bytes left [ 86.816852][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.836382][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.846496][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.857004][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.866943][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.878069][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.888646][ T6458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.899551][ T6458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.912034][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.921886][ T6458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.930808][ T6458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.939640][ T6458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.948412][ T6458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.124551][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.132681][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.179331][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.196506][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.224044][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 87.270200][ T6692] netlink: 'syz.1.178': attribute type 7 has an invalid length. [ 87.505524][ T6703] syz.2.181[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.505786][ T6703] syz.2.181[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.509722][ T6701] syz.2.181[6701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.524967][ T6702] syz.2.181[6702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.566622][ T6703] syz.2.181[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.587176][ T6702] syz.2.181[6702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.625693][ T6701] syz.2.181[6701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.005952][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 88.061018][ T6724] erspan0: entered promiscuous mode [ 88.108485][ T6724] erspan0: left promiscuous mode [ 88.301970][ T6740] netlink: 632 bytes leftover after parsing attributes in process `syz.3.193'. [ 88.416486][ T5847] Bluetooth: hci2: command tx timeout [ 88.982725][ T6776] ip6tnl2: entered promiscuous mode [ 88.992911][ T6774] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 89.009747][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 89.223652][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 89.452677][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 89.492962][ T6812] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 89.537238][ T6812] netlink: 2 bytes leftover after parsing attributes in process `syz.1.215'. [ 89.565858][ T6812] team0: entered promiscuous mode [ 89.582009][ T6812] team_slave_0: entered promiscuous mode [ 89.589288][ T6812] team_slave_1: entered promiscuous mode [ 89.595384][ T6816] netlink: 'syz.0.217': attribute type 12 has an invalid length. [ 89.678441][ T6812] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 89.731685][ T6812] gretap0: entered promiscuous mode [ 89.749046][ T6829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.221'. [ 89.764036][ T6812] vlan2: entered promiscuous mode [ 89.792903][ T6812] gretap0: left promiscuous mode [ 89.935051][ T6833] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 90.238685][ T6870] �: renamed from pim6reg1 [ 90.271625][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.656462][ T6882] netlink: 'syz.4.235': attribute type 12 has an invalid length. [ 91.061566][ T6908] trusted_key: syz.4.241 sent an empty control message without MSG_MORE. [ 91.152330][ T6911] __nla_validate_parse: 2 callbacks suppressed [ 91.152352][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.245'. [ 91.212358][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 91.260536][ T6914] xt_CT: No such helper "snmp" [ 91.286278][ T6917] xt_CT: No such helper "snmp" [ 91.448750][ T6935] netlink: 372 bytes leftover after parsing attributes in process `syz.4.250'. [ 91.464309][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 91.464977][ T6935] openvswitch: netlink: Flow key attr not present in new flow. [ 91.633549][ T6945] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551607) [ 91.651162][ T6945] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 91.916683][ T6962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.256'. [ 91.928421][ T6957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.258'. [ 91.958025][ T6964] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 91.975110][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 91.985847][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.260'. [ 92.002957][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 92.136968][ T6971] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 92.432486][ T6996] FAULT_INJECTION: forcing a failure. [ 92.432486][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 92.445219][ T6996] CPU: 1 UID: 0 PID: 6996 Comm: syz.0.271 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 92.455838][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.465920][ T6996] Call Trace: [ 92.469234][ T6996] <TASK> [ 92.472183][ T6996] dump_stack_lvl+0x241/0x360 [ 92.476901][ T6996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.482131][ T6996] ? __pfx__printk+0x10/0x10 [ 92.486767][ T6996] should_fail_ex+0x3b0/0x4e0 [ 92.491471][ T6996] should_failslab+0xac/0x100 [ 92.496171][ T6996] ? skb_clone+0x20c/0x390 [ 92.500615][ T6996] kmem_cache_alloc_noprof+0x70/0x380 [ 92.506022][ T6996] skb_clone+0x20c/0x390 [ 92.510282][ T6996] bpf_clone_redirect+0xab/0x3d0 [ 92.515229][ T6996] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 92.520684][ T6996] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.526668][ T6996] ? bpf_test_run+0x370/0xa90 [ 92.531337][ T6996] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 92.537071][ T6996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.543407][ T6996] ? bpf_test_run+0x370/0xa90 [ 92.548086][ T6996] ? __pfx___cant_migrate+0x10/0x10 [ 92.553281][ T6996] ? bpf_test_run+0x370/0xa90 [ 92.557959][ T6996] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 92.563679][ T6996] ? bpf_test_timer_continue+0x11a/0x350 [ 92.569310][ T6996] bpf_test_run+0x4f0/0xa90 [ 92.573813][ T6996] ? bpf_test_run+0x370/0xa90 [ 92.578494][ T6996] ? __pfx_bpf_test_run+0x10/0x10 [ 92.583533][ T6996] ? __pfx_eth_type_trans+0x10/0x10 [ 92.588741][ T6996] ? convert___skb_to_skb+0x41/0x620 [ 92.594022][ T6996] bpf_prog_test_run_skb+0xca2/0x1820 [ 92.599401][ T6996] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 92.605201][ T6996] ? __fget_files+0x2a/0x410 [ 92.609790][ T6996] ? fput+0x21b/0x290 [ 92.613765][ T6996] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 92.619570][ T6996] bpf_prog_test_run+0x2e4/0x360 [ 92.624507][ T6996] __sys_bpf+0x48d/0x810 [ 92.628749][ T6996] ? __pfx___sys_bpf+0x10/0x10 [ 92.633520][ T6996] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.639500][ T6996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.645832][ T6996] ? do_syscall_64+0x100/0x230 [ 92.650621][ T6996] __x64_sys_bpf+0x7c/0x90 [ 92.655037][ T6996] do_syscall_64+0xf3/0x230 [ 92.659542][ T6996] ? clear_bhb_loop+0x35/0x90 [ 92.664215][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.670108][ T6996] RIP: 0033:0x7fc01c97fed9 [ 92.674520][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.694223][ T6996] RSP: 002b:00007fc01d7a9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.702636][ T6996] RAX: ffffffffffffffda RBX: 00007fc01cb45fa0 RCX: 00007fc01c97fed9 [ 92.710603][ T6996] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 92.718566][ T6996] RBP: 00007fc01d7a90a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.726532][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.734494][ T6996] R13: 0000000000000000 R14: 00007fc01cb45fa0 R15: 00007fff3a665c08 [ 92.742478][ T6996] </TASK> [ 93.176622][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 93.579483][ T7054] netlink: 'syz.4.292': attribute type 12 has an invalid length. [ 93.923425][ T7070] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 93.988670][ T7077] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 94.200902][ T5918] IPVS: starting estimator thread 0... [ 94.306515][ T7090] IPVS: using max 27 ests per chain, 64800 per kthread [ 94.668517][ T7122] netlink: 'syz.1.316': attribute type 1 has an invalid length. [ 95.113400][ T7144] syzkaller0: entered promiscuous mode [ 95.119164][ T7144] syzkaller0: entered allmulticast mode [ 97.089452][ T7190] __nla_validate_parse: 7 callbacks suppressed [ 97.089471][ T7190] netlink: 56 bytes leftover after parsing attributes in process `syz.2.339'. [ 97.752268][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 98.286803][ T7230] netlink: 'syz.2.352': attribute type 12 has an invalid length. [ 98.370974][ T7232] netlink: 'syz.0.353': attribute type 12 has an invalid length. [ 98.511713][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 98.746968][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'. [ 98.806202][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.360'. [ 98.985598][ T7261] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 99.006993][ T7262] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 99.032876][ T7261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.044471][ T7262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.055799][ T7264] netlink: 'syz.4.367': attribute type 12 has an invalid length. [ 99.532945][ T7299] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 99.544375][ T7296] netlink: 'syz.1.376': attribute type 27 has an invalid length. [ 99.553731][ T7299] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 99.561729][ T7296] C: renamed from team_slave_0 (while UP) [ 99.721940][ T7314] netlink: 'syz.1.382': attribute type 12 has an invalid length. [ 99.746122][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 99.939114][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 100.122793][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.377'. [ 100.168180][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 100.197086][ T7332] netlink: 52 bytes leftover after parsing attributes in process `syz.3.389'. [ 100.664016][ T7359] netlink: 'syz.3.397': attribute type 12 has an invalid length. [ 100.703112][ T7362] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 100.714750][ T7362] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 100.729433][ T7362] NCSI netlink: No device for ifindex 458760 [ 100.861067][ T7367] netlink: 'syz.4.399': attribute type 29 has an invalid length. [ 100.887926][ T7367] netlink: 'syz.4.399': attribute type 29 has an invalid length. [ 100.925113][ T7367] netlink: 'syz.4.399': attribute type 29 has an invalid length. [ 101.462579][ T7392] netlink: 'syz.1.411': attribute type 12 has an invalid length. [ 102.153698][ T7430] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.190121][ T7410] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.951072][ T7469] __nla_validate_parse: 4 callbacks suppressed [ 102.951092][ T7469] netlink: 68 bytes leftover after parsing attributes in process `syz.4.434'. [ 102.955612][ T7472] netlink: 184 bytes leftover after parsing attributes in process `syz.0.435'. [ 102.987270][ T7472] openvswitch: netlink: Flow key attr not present in new flow. [ 102.987463][ T7473] netlink: 184 bytes leftover after parsing attributes in process `syz.0.435'. [ 103.020709][ T7473] openvswitch: netlink: Flow key attr not present in new flow. [ 103.037234][ T7473] netlink: 160 bytes leftover after parsing attributes in process `syz.0.435'. [ 103.065060][ T7478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.611138][ T7512] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 103.939149][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 103.955603][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 104.216968][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 104.238787][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 104.249545][ T7547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.462'. [ 104.286113][ T7550] validate_nla: 1 callbacks suppressed [ 104.286133][ T7550] netlink: 'syz.2.461': attribute type 30 has an invalid length. [ 104.543106][ T7565] lo speed is unknown, defaulting to 1000 [ 104.557344][ T7565] lo speed is unknown, defaulting to 1000 [ 104.570791][ T7565] lo speed is unknown, defaulting to 1000 [ 104.603081][ T7565] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.629097][ T7565] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.666597][ T7573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.470'. [ 104.691424][ T7565] lo speed is unknown, defaulting to 1000 [ 104.740226][ T7565] lo speed is unknown, defaulting to 1000 [ 104.791222][ T7565] lo speed is unknown, defaulting to 1000 [ 104.802618][ T7565] lo speed is unknown, defaulting to 1000 [ 104.834674][ T7565] lo speed is unknown, defaulting to 1000 [ 105.461121][ T7622] netlink: 'syz.3.484': attribute type 8 has an invalid length. [ 105.484372][ T7622] ipt_rpfilter: unknown options [ 105.811514][ T7636] bridge_slave_0: left allmulticast mode [ 105.836778][ T7636] bridge_slave_0: left promiscuous mode [ 105.853627][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.889996][ T7636] bridge_slave_1: left allmulticast mode [ 105.902662][ T7636] bridge_slave_1: left promiscuous mode [ 105.915421][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.948668][ T7636] bond0: (slave bond_slave_0): Releasing backup interface [ 105.971706][ T7636] bond0: (slave bond_slave_1): Releasing backup interface [ 106.023673][ T7636] team0: Port device team_slave_0 removed [ 106.053175][ T7636] team0: Port device team_slave_1 removed [ 106.065225][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.075383][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.090494][ T7636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.101158][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.144511][ T7649] macvtap1: entered promiscuous mode [ 106.154985][ T7649] vlan0: entered promiscuous mode [ 106.173073][ T7649] vlan0: left promiscuous mode [ 106.294910][ T7660] netlink: 'syz.2.499': attribute type 12 has an invalid length. [ 106.436133][ T7667] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 106.714505][ T7688] netlink: 'syz.1.511': attribute type 12 has an invalid length. [ 106.946644][ T7706] netlink: 'syz.4.514': attribute type 5 has an invalid length. [ 107.024022][ T7701] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 107.033620][ T7694] smc: net device bond0 erased user defined pnetid SYZ0 [ 107.107886][ T7712] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 107.396498][ T7724] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 107.425716][ T7732] netlink: 'syz.1.522': attribute type 12 has an invalid length. [ 107.470663][ T7729] smc: net device bond0 applied user defined pnetid SYZ0 [ 107.820309][ T7748] netlink: 'syz.2.531': attribute type 5 has an invalid length. [ 107.934461][ T7761] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 107.968885][ T7765] netlink: 'syz.2.538': attribute type 12 has an invalid length. [ 108.304753][ T7785] ax25_connect(): syz.2.546 uses autobind, please contact jreuter@yaina.de [ 108.554102][ T7793] FAULT_INJECTION: forcing a failure. [ 108.554102][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 108.566850][ T7793] CPU: 1 UID: 0 PID: 7793 Comm: syz.4.549 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 108.577470][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.587552][ T7793] Call Trace: [ 108.590857][ T7793] <TASK> [ 108.593813][ T7793] dump_stack_lvl+0x241/0x360 [ 108.598513][ T7793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.603719][ T7793] ? __pfx__printk+0x10/0x10 [ 108.608322][ T7793] should_fail_ex+0x3b0/0x4e0 [ 108.612999][ T7793] should_failslab+0xac/0x100 [ 108.617681][ T7793] ? skb_clone+0x20c/0x390 [ 108.622095][ T7793] kmem_cache_alloc_noprof+0x70/0x380 [ 108.627469][ T7793] skb_clone+0x20c/0x390 [ 108.631713][ T7793] bpf_clone_redirect+0xab/0x3d0 [ 108.636653][ T7793] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 108.642107][ T7793] ? preempt_schedule+0xe1/0xf0 [ 108.646955][ T7793] ? preempt_schedule_common+0x84/0xd0 [ 108.652407][ T7793] ? preempt_schedule+0xe1/0xf0 [ 108.657255][ T7793] ? bpf_test_run+0x370/0xa90 [ 108.661927][ T7793] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 108.667646][ T7793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.673976][ T7793] ? bpf_test_run+0x370/0xa90 [ 108.678647][ T7793] ? __pfx___cant_migrate+0x10/0x10 [ 108.683840][ T7793] ? bpf_test_run+0x370/0xa90 [ 108.688512][ T7793] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 108.694234][ T7793] ? bpf_test_timer_continue+0x11a/0x350 [ 108.699864][ T7793] bpf_test_run+0x4f0/0xa90 [ 108.704369][ T7793] ? bpf_test_run+0x370/0xa90 [ 108.709051][ T7793] ? __pfx_bpf_test_run+0x10/0x10 [ 108.714086][ T7793] ? __pfx_eth_type_trans+0x10/0x10 [ 108.719301][ T7793] ? convert___skb_to_skb+0x41/0x620 [ 108.724605][ T7793] bpf_prog_test_run_skb+0xca2/0x1820 [ 108.730013][ T7793] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 108.735832][ T7793] ? __fget_files+0x2a/0x410 [ 108.740957][ T7793] ? fput+0x21b/0x290 [ 108.745026][ T7793] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 108.750831][ T7793] bpf_prog_test_run+0x2e4/0x360 [ 108.755780][ T7793] __sys_bpf+0x48d/0x810 [ 108.760025][ T7793] ? __pfx___sys_bpf+0x10/0x10 [ 108.764792][ T7793] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.770779][ T7793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.777107][ T7793] ? do_syscall_64+0x100/0x230 [ 108.781879][ T7793] __x64_sys_bpf+0x7c/0x90 [ 108.786307][ T7793] do_syscall_64+0xf3/0x230 [ 108.790853][ T7793] ? clear_bhb_loop+0x35/0x90 [ 108.795527][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.801417][ T7793] RIP: 0033:0x7fbf3457fed9 [ 108.805827][ T7793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.825453][ T7793] RSP: 002b:00007fbf323f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.833871][ T7793] RAX: ffffffffffffffda RBX: 00007fbf34745fa0 RCX: 00007fbf3457fed9 [ 108.841847][ T7793] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 108.849815][ T7793] RBP: 00007fbf323f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.857787][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.865757][ T7793] R13: 0000000000000000 R14: 00007fbf34745fa0 R15: 00007fff083cfb58 [ 108.873745][ T7793] </TASK> [ 108.938568][ T7795] netlink: 'syz.0.550': attribute type 12 has an invalid length. [ 109.170728][ T7805] __nla_validate_parse: 9 callbacks suppressed [ 109.170746][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 109.196490][ T7808] openvswitch: netlink: Message has 8 unknown bytes. [ 109.487292][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 109.639217][ T7833] netlink: 'syz.3.563': attribute type 12 has an invalid length. [ 109.691604][ T7840] ip6t_srh: unknown srh invflags 92A7 [ 109.740672][ T7840] syzkaller0: entered promiscuous mode [ 109.751511][ T7840] syzkaller0: entered allmulticast mode [ 109.773244][ T7841] sit0: entered promiscuous mode [ 109.782349][ T7841] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 109.790135][ T7841] netlink: 1 bytes leftover after parsing attributes in process `syz.4.566'. [ 110.083097][ T7847] lo speed is unknown, defaulting to 1000 [ 110.149662][ T7853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.205809][ T7862] lo speed is unknown, defaulting to 1000 [ 110.234128][ T7862] lo speed is unknown, defaulting to 1000 [ 110.297692][ T7853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.335193][ T7862] lo speed is unknown, defaulting to 1000 [ 110.421616][ T7853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.464438][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 110.574965][ T7853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.608778][ T7862] infiniband syz0: set active [ 110.615714][ T7862] infiniband syz0: added lo [ 110.626709][ T7862] syz0: rxe_create_cq: returned err = -12 [ 110.640572][ T7862] infiniband syz0: Couldn't create ib_mad CQ [ 110.647682][ T7862] infiniband syz0: Couldn't open port 1 [ 110.684577][ T7862] RDS/IB: syz0: added [ 110.697048][ T7862] smc: adding ib device syz0 with port count 1 [ 110.711768][ T7862] smc: ib device syz0 port 1 has pnetid [ 112.084847][ T5918] lo speed is unknown, defaulting to 1000 [ 112.118352][ T5880] lo speed is unknown, defaulting to 1000 [ 112.224464][ T7862] lo speed is unknown, defaulting to 1000 [ 112.224487][ T7886] netlink: 'syz.1.578': attribute type 12 has an invalid length. [ 112.263827][ T7853] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.293070][ T7853] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.388886][ T7853] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.458216][ T7853] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.522452][ T7862] lo speed is unknown, defaulting to 1000 [ 112.532760][ T7897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.582'. [ 112.601108][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.584'. [ 112.643249][ T7862] lo speed is unknown, defaulting to 1000 [ 112.648248][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.584'. [ 112.754728][ T7862] lo speed is unknown, defaulting to 1000 [ 112.765418][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 112.859541][ T7862] lo speed is unknown, defaulting to 1000 [ 112.974894][ T7862] lo speed is unknown, defaulting to 1000 [ 113.073124][ T7913] smc: net device wg0 applied user defined pnetid SYZ0 [ 113.101477][ T7913] netlink: 'syz.2.588': attribute type 39 has an invalid length. [ 113.133015][ T7915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 113.189394][ T7913] smc: removing net device wg0 with user defined pnetid SYZ0 [ 113.273268][ T7922] netlink: 'syz.0.591': attribute type 12 has an invalid length. [ 113.544276][ T7937] netlink: 152 bytes leftover after parsing attributes in process `syz.2.596'. [ 113.596579][ T7934] xt_CT: No such helper "snmp" [ 113.611535][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.598'. [ 114.336499][ T7977] __nla_validate_parse: 1 callbacks suppressed [ 114.336519][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.611'. [ 114.580877][ T7988] sctp: [Deprecated]: syz.1.612 (pid 7988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.580877][ T7988] Use struct sctp_sack_info instead [ 114.660160][ T7985] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 115.131198][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.622'. [ 115.709870][ T8035] xt_bpf: check failed: parse error [ 115.729283][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.632'. [ 115.961078][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 116.469275][ T8071] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.478160][ T8071] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.487052][ T8071] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.495770][ T8071] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.530073][ T8071] vxlan0: entered promiscuous mode [ 116.535757][ T8071] vxlan0: entered allmulticast mode [ 116.544743][ T8071] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.553899][ T8071] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.562937][ T8071] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.571997][ T8071] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.628256][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 117.065845][ T8113] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 117.117092][ T8113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.132712][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 117.157859][ T8113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.165384][ T8113] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 117.177302][ T8113] bond1: (slave vti0): Error -95 calling set_mac_address [ 117.203701][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'. [ 117.368457][ T8131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 117.444390][ T8137] syz.4.661[8137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.444483][ T8137] syz.4.661[8137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.461125][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 117.487055][ T8137] syz.4.661[8137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.532231][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 117.930803][ T8164] vlan2: entered promiscuous mode [ 117.937936][ T8164] vlan2: entered allmulticast mode [ 118.213590][ T8177] netlink: 'syz.1.677': attribute type 12 has an invalid length. [ 118.583054][ T8202] netlink: 'syz.1.688': attribute type 3 has an invalid length. [ 118.759491][ T8215] FAULT_INJECTION: forcing a failure. [ 118.759491][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 118.782694][ T8215] CPU: 1 UID: 0 PID: 8215 Comm: syz.1.693 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 118.793348][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.803434][ T8215] Call Trace: [ 118.806739][ T8215] <TASK> [ 118.809692][ T8215] dump_stack_lvl+0x241/0x360 [ 118.814417][ T8215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.819743][ T8215] ? __pfx__printk+0x10/0x10 [ 118.824386][ T8215] should_fail_ex+0x3b0/0x4e0 [ 118.829110][ T8215] should_failslab+0xac/0x100 [ 118.833824][ T8215] ? dst_alloc+0x12b/0x190 [ 118.838271][ T8215] kmem_cache_alloc_noprof+0x70/0x380 [ 118.843686][ T8215] dst_alloc+0x12b/0x190 [ 118.847969][ T8215] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 118.854082][ T8215] ip_route_output_key_hash+0x193/0x2b0 [ 118.859666][ T8215] ? ip_route_output_key_hash+0xdf/0x2b0 [ 118.865320][ T8215] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 118.871430][ T8215] tcp_v4_connect+0x6df/0x1ba0 [ 118.876241][ T8215] ? __pfx_tcp_v4_connect+0x10/0x10 [ 118.881469][ T8215] ? mptcp_connect+0x656/0xb20 [ 118.886267][ T8215] ? do_raw_spin_unlock+0x13c/0x8b0 [ 118.891494][ T8215] mptcp_connect+0x701/0xb20 [ 118.896117][ T8215] __inet_stream_connect+0x262/0xf30 [ 118.901434][ T8215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.907806][ T8215] ? __local_bh_enable_ip+0x168/0x200 [ 118.913210][ T8215] ? lockdep_hardirqs_on+0x99/0x150 [ 118.918439][ T8215] ? __pfx___inet_stream_connect+0x10/0x10 [ 118.924274][ T8215] ? __local_bh_enable_ip+0x168/0x200 [ 118.929695][ T8215] ? inet_stream_connect+0x50/0xa0 [ 118.934835][ T8215] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 118.940602][ T8215] inet_stream_connect+0x65/0xa0 [ 118.945592][ T8215] __sys_connect+0x288/0x2d0 [ 118.950217][ T8215] ? __fget_files+0x2a/0x410 [ 118.954833][ T8215] ? __pfx___sys_connect+0x10/0x10 [ 118.959992][ T8215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.966350][ T8215] ? do_syscall_64+0x100/0x230 [ 118.971151][ T8215] __x64_sys_connect+0x7a/0x90 [ 118.975941][ T8215] do_syscall_64+0xf3/0x230 [ 118.980486][ T8215] ? clear_bhb_loop+0x35/0x90 [ 118.985198][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.991128][ T8215] RIP: 0033:0x7fb27f17fed9 [ 118.995576][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.015268][ T8215] RSP: 002b:00007fb27ff71058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 119.023740][ T8215] RAX: ffffffffffffffda RBX: 00007fb27f345fa0 RCX: 00007fb27f17fed9 [ 119.031743][ T8215] RDX: 0000000000000010 RSI: 00000000200009c0 RDI: 0000000000000003 [ 119.039745][ T8215] RBP: 00007fb27ff710a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.047750][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.055758][ T8215] R13: 0000000000000000 R14: 00007fb27f345fa0 R15: 00007ffdc8094828 [ 119.063759][ T8215] </TASK> [ 119.235299][ T8246] tipc: Failed to obtain node identity [ 119.252446][ T8246] tipc: Enabling of bearer <ib:wlan0> rejected, failed to enable media [ 119.582165][ T8268] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.595444][ T8268] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 119.627151][ T8272] FAULT_INJECTION: forcing a failure. [ 119.627151][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 119.640199][ T8272] CPU: 1 UID: 0 PID: 8272 Comm: syz.4.710 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 119.650817][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.660915][ T8272] Call Trace: [ 119.664221][ T8272] <TASK> [ 119.667172][ T8272] dump_stack_lvl+0x241/0x360 [ 119.671859][ T8272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.677065][ T8272] ? __pfx__printk+0x10/0x10 [ 119.681671][ T8272] should_fail_ex+0x3b0/0x4e0 [ 119.686354][ T8272] should_failslab+0xac/0x100 [ 119.691048][ T8272] ? dst_alloc+0x12b/0x190 [ 119.695460][ T8272] kmem_cache_alloc_noprof+0x70/0x380 [ 119.700852][ T8272] dst_alloc+0x12b/0x190 [ 119.705114][ T8272] xfrm_alloc_dst+0x6e/0x150 [ 119.709712][ T8272] xfrm_lookup_with_ifid+0xae1/0x1f60 [ 119.715095][ T8272] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 119.720908][ T8272] ? ip_route_output_key_hash+0x226/0x2b0 [ 119.726629][ T8272] ? ip_route_output_key_hash+0xdf/0x2b0 [ 119.732264][ T8272] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 119.738329][ T8272] ? 0xffffffffa0000948 [ 119.742517][ T8272] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.748673][ T8272] xfrm_lookup_route+0x3c/0x1c0 [ 119.753526][ T8272] vti6_tnl_xmit+0x5dd/0x1bd0 [ 119.758217][ T8272] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 119.763333][ T8272] ? __pfx_lock_acquire+0x10/0x10 [ 119.768365][ T8272] dev_hard_start_xmit+0x27a/0x7d0 [ 119.773489][ T8272] __dev_queue_xmit+0x1b73/0x3f50 [ 119.778529][ T8272] ? __dev_queue_xmit+0x2f4/0x3f50 [ 119.783646][ T8272] ? __pfx___dev_queue_xmit+0x10/0x10 [ 119.789020][ T8272] ? rcu_is_watching+0x15/0xb0 [ 119.793792][ T8272] ? skb_release_data+0x2b5/0x8a0 [ 119.798823][ T8272] ? pskb_expand_head+0xc52/0x1380 [ 119.803944][ T8272] ? __bpf_redirect+0x54d/0xe10 [ 119.808798][ T8272] __bpf_tx_skb+0x18e/0x260 [ 119.813300][ T8272] bpf_clone_redirect+0x26f/0x3d0 [ 119.818331][ T8272] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 119.823884][ T8272] ? preempt_schedule+0xe1/0xf0 [ 119.828740][ T8272] ? preempt_schedule_common+0x84/0xd0 [ 119.834198][ T8272] ? preempt_schedule+0xe1/0xf0 [ 119.839054][ T8272] ? bpf_test_run+0x370/0xa90 [ 119.843732][ T8272] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 119.849458][ T8272] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.855792][ T8272] ? bpf_test_run+0x370/0xa90 [ 119.860467][ T8272] ? __pfx___cant_migrate+0x10/0x10 [ 119.865661][ T8272] ? bpf_test_run+0x370/0xa90 [ 119.870335][ T8272] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.876060][ T8272] ? bpf_test_timer_continue+0x11a/0x350 [ 119.881702][ T8272] bpf_test_run+0x4f0/0xa90 [ 119.886214][ T8272] ? bpf_test_run+0x370/0xa90 [ 119.890911][ T8272] ? __pfx_bpf_test_run+0x10/0x10 [ 119.895951][ T8272] ? __pfx_eth_type_trans+0x10/0x10 [ 119.901155][ T8272] ? convert___skb_to_skb+0x41/0x620 [ 119.906475][ T8272] bpf_prog_test_run_skb+0xca2/0x1820 [ 119.911868][ T8272] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 119.917671][ T8272] ? __fget_files+0x2a/0x410 [ 119.922265][ T8272] ? fput+0x21b/0x290 [ 119.926243][ T8272] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 119.932050][ T8272] bpf_prog_test_run+0x2e4/0x360 [ 119.936991][ T8272] __sys_bpf+0x48d/0x810 [ 119.941233][ T8272] ? __pfx___sys_bpf+0x10/0x10 [ 119.946003][ T8272] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.952017][ T8272] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.958367][ T8272] ? do_syscall_64+0x100/0x230 [ 119.963137][ T8272] __x64_sys_bpf+0x7c/0x90 [ 119.967555][ T8272] do_syscall_64+0xf3/0x230 [ 119.972060][ T8272] ? clear_bhb_loop+0x35/0x90 [ 119.976735][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.982634][ T8272] RIP: 0033:0x7fbf3457fed9 [ 119.987063][ T8272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.006682][ T8272] RSP: 002b:00007fbf323f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.015115][ T8272] RAX: ffffffffffffffda RBX: 00007fbf34745fa0 RCX: 00007fbf3457fed9 [ 120.023095][ T8272] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 120.031067][ T8272] RBP: 00007fbf323f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.039038][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.047016][ T8272] R13: 0000000000000000 R14: 00007fbf34745fa0 R15: 00007fff083cfb58 [ 120.055007][ T8272] </TASK> [ 120.166077][ T8284] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 120.338916][ T8300] __nla_validate_parse: 4 callbacks suppressed [ 120.338935][ T8300] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.714'. [ 120.357562][ T8300] openvswitch: netlink: Missing key (keys=40, expected=80) [ 121.437894][ T8377] FAULT_INJECTION: forcing a failure. [ 121.437894][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 121.485769][ T8377] CPU: 0 UID: 0 PID: 8377 Comm: syz.3.738 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 121.496428][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.506509][ T8377] Call Trace: [ 121.509811][ T8377] <TASK> [ 121.512763][ T8377] dump_stack_lvl+0x241/0x360 [ 121.517473][ T8377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.522706][ T8377] ? __pfx__printk+0x10/0x10 [ 121.527331][ T8377] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 121.533336][ T8377] ? __pfx___might_resched+0x10/0x10 [ 121.538648][ T8377] should_fail_ex+0x3b0/0x4e0 [ 121.543331][ T8377] should_failslab+0xac/0x100 [ 121.548103][ T8377] kmem_cache_alloc_node_noprof+0x77/0x380 [ 121.553944][ T8377] ? __alloc_skb+0x1c3/0x440 [ 121.558537][ T8377] __alloc_skb+0x1c3/0x440 [ 121.562957][ T8377] ? __pfx___alloc_skb+0x10/0x10 [ 121.567895][ T8377] ? netlink_autobind+0xd6/0x2f0 [ 121.572835][ T8377] ? netlink_autobind+0x2b0/0x2f0 [ 121.577865][ T8377] netlink_sendmsg+0x638/0xcb0 [ 121.582635][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.587929][ T8377] ? aa_sock_msg_perm+0x91/0x160 [ 121.592872][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.598168][ T8377] __sock_sendmsg+0x221/0x270 [ 121.602878][ T8377] ____sys_sendmsg+0x52a/0x7e0 [ 121.607644][ T8377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.613019][ T8377] ? __fget_files+0x2a/0x410 [ 121.617616][ T8377] ? __fget_files+0x2a/0x410 [ 121.622221][ T8377] __sys_sendmsg+0x269/0x350 [ 121.626848][ T8377] ? __pfx_lock_release+0x10/0x10 [ 121.631874][ T8377] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.637003][ T8377] ? __pfx_vfs_write+0x10/0x10 [ 121.641804][ T8377] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.648135][ T8377] ? do_syscall_64+0x100/0x230 [ 121.652901][ T8377] ? do_syscall_64+0xb6/0x230 [ 121.657587][ T8377] do_syscall_64+0xf3/0x230 [ 121.662093][ T8377] ? clear_bhb_loop+0x35/0x90 [ 121.666798][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.672694][ T8377] RIP: 0033:0x7fcaee97fed9 [ 121.677121][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.696729][ T8377] RSP: 002b:00007fcaef7be058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.705143][ T8377] RAX: ffffffffffffffda RBX: 00007fcaeeb45fa0 RCX: 00007fcaee97fed9 [ 121.713114][ T8377] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000004 [ 121.721083][ T8377] RBP: 00007fcaef7be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.729058][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.737028][ T8377] R13: 0000000000000000 R14: 00007fcaeeb45fa0 R15: 00007ffe643efe28 [ 121.745016][ T8377] </TASK> [ 121.916413][ T8389] netlink: 256 bytes leftover after parsing attributes in process `syz.3.743'. [ 121.942209][ T8389] netlink: 'syz.3.743': attribute type 21 has an invalid length. [ 121.959736][ T8389] netlink: 152 bytes leftover after parsing attributes in process `syz.3.743'. [ 122.443529][ T8423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.688532][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'. [ 123.145524][ T8481] tipc: Started in network mode [ 123.160338][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 123.163183][ T8481] tipc: Node identity ae33e14ca6f2, cluster identity 4711 [ 123.193399][ T8481] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 123.322252][ T8481] syzkaller0: entered promiscuous mode [ 123.329978][ T8481] syzkaller0: entered allmulticast mode [ 123.336222][ T8481] tipc: Resetting bearer <eth:syzkaller0> [ 123.368995][ T8479] tipc: Resetting bearer <eth:syzkaller0> [ 124.240117][ T25] tipc: Node number set to 146923852 [ 125.104070][ T8479] tipc: Disabling bearer <eth:syzkaller0> [ 125.133232][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 125.157010][ T8508] bond0: option packets_per_slave: invalid value (18446744073709550593) [ 125.175622][ T8508] bond0: option packets_per_slave: allowed values 0 - 65535 [ 125.254467][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 125.597820][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 125.796725][ T8545] netlink: zone id is out of range [ 125.827909][ T8545] netlink: zone id is out of range [ 125.833082][ T8545] netlink: del zone limit has 4 unknown bytes [ 125.840941][ T8548] lo speed is unknown, defaulting to 1000 [ 125.848758][ T8548] lo speed is unknown, defaulting to 1000 [ 125.926695][ T8545] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.796'. [ 125.946519][ T8545] openvswitch: netlink: Unknown key attributes 20 [ 126.184574][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 126.289520][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.804'. [ 126.308775][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.804'. [ 126.577343][ T8583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.809'. [ 126.706886][ T8586] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.729241][ T8586] IPv6: Can't replace route, no match found [ 126.759912][ T8591] IPv6: Can't replace route, no match found [ 126.923183][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 127.340915][ T8619] tun0: tun_chr_ioctl cmd 2147767519 [ 127.370822][ T8619] vlan2: entered promiscuous mode [ 127.392906][ T8619] vlan2: entered allmulticast mode [ 127.610470][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 127.620258][ T8636] netlink: 34 bytes leftover after parsing attributes in process `syz.3.828'. [ 127.635586][ T8640] vlan2: entered promiscuous mode [ 127.636029][ T8636] netlink: 34 bytes leftover after parsing attributes in process `syz.3.828'. [ 127.641287][ T8640] vlan2: entered allmulticast mode [ 127.700439][ T8638] vlan3: entered promiscuous mode [ 127.705536][ T8638] vlan3: entered allmulticast mode [ 128.143666][ T8666] veth0_to_batadv: entered promiscuous mode [ 128.256394][ T5144] Bluetooth: hci2: command 0x0405 tx timeout [ 128.258273][ T8666] bond2: entered promiscuous mode [ 128.292482][ T8666] bond2: entered allmulticast mode [ 128.298777][ T8666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.612263][ T8690] FAULT_INJECTION: forcing a failure. [ 128.612263][ T8690] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.641579][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.3.848 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 128.652252][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.662342][ T8690] Call Trace: [ 128.665646][ T8690] <TASK> [ 128.668596][ T8690] dump_stack_lvl+0x241/0x360 [ 128.673315][ T8690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.678589][ T8690] ? __pfx__printk+0x10/0x10 [ 128.683248][ T8690] ? __pfx_lock_release+0x10/0x10 [ 128.688322][ T8690] should_fail_ex+0x3b0/0x4e0 [ 128.693048][ T8690] _copy_from_user+0x2f/0xc0 [ 128.697682][ T8690] do_ip_setsockopt+0x45f/0x3cd0 [ 128.702672][ T8690] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 128.708081][ T8690] ? print_irqtrace_events+0x1a0/0x230 [ 128.713572][ T8690] ? __local_bh_enable_ip+0x168/0x200 [ 128.718975][ T8690] ? lockdep_hardirqs_on+0x99/0x150 [ 128.724207][ T8690] ? __local_bh_enable_ip+0x168/0x200 [ 128.729609][ T8690] ? mptcp_setsockopt+0xcdd/0x3bc0 [ 128.734771][ T8690] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 128.740529][ T8690] ip_setsockopt+0x63/0x100 [ 128.745073][ T8690] mptcp_setsockopt+0xf3c/0x3bc0 [ 128.750087][ T8690] ? aa_sk_perm+0x96d/0xab0 [ 128.754620][ T8690] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 128.760005][ T8690] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.764879][ T8690] ? __pfx_lock_acquire+0x10/0x10 [ 128.769910][ T8690] ? aa_sock_opt_perm+0x79/0x120 [ 128.774883][ T8690] ? sock_common_setsockopt+0x37/0xc0 [ 128.780260][ T8690] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 128.786182][ T8690] do_sock_setsockopt+0x3af/0x720 [ 128.791212][ T8690] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 128.796767][ T8690] ? __fget_files+0x395/0x410 [ 128.801442][ T8690] ? __fget_files+0x2a/0x410 [ 128.806043][ T8690] __x64_sys_setsockopt+0x1ee/0x280 [ 128.811247][ T8690] do_syscall_64+0xf3/0x230 [ 128.815759][ T8690] ? clear_bhb_loop+0x35/0x90 [ 128.820436][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.826327][ T8690] RIP: 0033:0x7fcaee97fed9 [ 128.830736][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.850343][ T8690] RSP: 002b:00007fcaef7be058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.858757][ T8690] RAX: ffffffffffffffda RBX: 00007fcaeeb45fa0 RCX: 00007fcaee97fed9 [ 128.866724][ T8690] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 128.874691][ T8690] RBP: 00007fcaef7be0a0 R08: 0000000000000001 R09: 0000000000000000 [ 128.882656][ T8690] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.890706][ T8690] R13: 0000000000000000 R14: 00007fcaeeb45fa0 R15: 00007ffe643efe28 [ 128.898690][ T8690] </TASK> [ 129.138142][ T8708] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 129.161715][ T8712] FAULT_INJECTION: forcing a failure. [ 129.161715][ T8712] name failslab, interval 1, probability 0, space 0, times 0 [ 129.181189][ T8712] CPU: 0 UID: 0 PID: 8712 Comm: syz.3.857 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 129.191821][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.201879][ T8712] Call Trace: [ 129.205155][ T8712] <TASK> [ 129.208081][ T8712] dump_stack_lvl+0x241/0x360 [ 129.212766][ T8712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.217994][ T8712] ? __pfx__printk+0x10/0x10 [ 129.222606][ T8712] should_fail_ex+0x3b0/0x4e0 [ 129.227288][ T8712] should_failslab+0xac/0x100 [ 129.231979][ T8712] __kmalloc_cache_noprof+0x70/0x390 [ 129.237274][ T8712] ? __hw_addr_add_ex+0x1a8/0x610 [ 129.242316][ T8712] __hw_addr_add_ex+0x1a8/0x610 [ 129.247173][ T8712] dev_addr_init+0x143/0x230 [ 129.251763][ T8712] ? __pfx_dev_addr_init+0x10/0x10 [ 129.256891][ T8712] ? read_word_at_a_time+0xe/0x20 [ 129.261933][ T8712] alloc_netdev_mqs+0x2ae/0x1080 [ 129.266882][ T8712] ? __pfx_vlan_setup+0x10/0x10 [ 129.271746][ T8712] ? __pfx_snprintf+0x10/0x10 [ 129.276425][ T8712] rtnl_create_link+0x2f9/0xc20 [ 129.281285][ T8712] rtnl_newlink_create+0x210/0xa40 [ 129.286432][ T8712] ? __pfx___mutex_lock+0x10/0x10 [ 129.291478][ T8712] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 129.297117][ T8712] ? ns_capable+0x8a/0xf0 [ 129.301463][ T8712] rtnl_newlink+0x1b40/0x20e0 [ 129.306168][ T8712] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.311198][ T8712] ? __netlink_deliver_tap+0x56b/0x7f0 [ 129.316659][ T8712] ? __pfx_validate_chain+0x10/0x10 [ 129.321860][ T8712] ? __sock_sendmsg+0x221/0x270 [ 129.326716][ T8712] ? ____sys_sendmsg+0x52a/0x7e0 [ 129.331669][ T8712] ? __sys_sendmsg+0x269/0x350 [ 129.336438][ T8712] ? do_syscall_64+0xf3/0x230 [ 129.341146][ T8712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.347245][ T8712] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.353239][ T8712] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.359580][ T8712] ? mark_lock+0x9a/0x360 [ 129.363913][ T8712] ? __lock_acquire+0x1397/0x2100 [ 129.368960][ T8712] ? __pfx_lock_release+0x10/0x10 [ 129.373992][ T8712] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.379021][ T8712] rtnetlink_rcv_msg+0x791/0xcf0 [ 129.383981][ T8712] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 129.389113][ T8712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.394595][ T8712] ? ref_tracker_free+0x643/0x7e0 [ 129.399625][ T8712] netlink_rcv_skb+0x1e3/0x430 [ 129.404400][ T8712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.409888][ T8712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.415312][ T8712] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.420513][ T8712] netlink_unicast+0x7f6/0x990 [ 129.425387][ T8712] ? __pfx_netlink_unicast+0x10/0x10 [ 129.430675][ T8712] ? __virt_addr_valid+0x183/0x530 [ 129.435791][ T8712] ? __check_object_size+0x48e/0x900 [ 129.441097][ T8712] netlink_sendmsg+0x8e4/0xcb0 [ 129.445919][ T8712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.451225][ T8712] ? aa_sock_msg_perm+0x91/0x160 [ 129.456171][ T8712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.461471][ T8712] __sock_sendmsg+0x221/0x270 [ 129.466172][ T8712] ____sys_sendmsg+0x52a/0x7e0 [ 129.470946][ T8712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.476232][ T8712] ? __fget_files+0x2a/0x410 [ 129.480823][ T8712] ? __fget_files+0x2a/0x410 [ 129.485415][ T8712] __sys_sendmsg+0x269/0x350 [ 129.490008][ T8712] ? __pfx_lock_release+0x10/0x10 [ 129.495034][ T8712] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.500152][ T8712] ? __pfx_vfs_write+0x10/0x10 [ 129.504969][ T8712] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.511304][ T8712] ? do_syscall_64+0x100/0x230 [ 129.516078][ T8712] ? do_syscall_64+0xb6/0x230 [ 129.520776][ T8712] do_syscall_64+0xf3/0x230 [ 129.525316][ T8712] ? clear_bhb_loop+0x35/0x90 [ 129.530021][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.535913][ T8712] RIP: 0033:0x7fcaee97fed9 [ 129.540342][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.559991][ T8712] RSP: 002b:00007fcaef7be058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.568430][ T8712] RAX: ffffffffffffffda RBX: 00007fcaeeb45fa0 RCX: 00007fcaee97fed9 [ 129.576421][ T8712] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000004 [ 129.584394][ T8712] RBP: 00007fcaef7be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.592365][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.600336][ T8712] R13: 0000000000000000 R14: 00007fcaeeb45fa0 R15: 00007ffe643efe28 [ 129.608333][ T8712] </TASK> [ 129.637636][ T8708] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 129.927886][ T8729] FAULT_INJECTION: forcing a failure. [ 129.927886][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 129.970559][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.2.864 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 129.981219][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.991309][ T8729] Call Trace: [ 129.994606][ T8729] <TASK> [ 129.997563][ T8729] dump_stack_lvl+0x241/0x360 [ 130.002282][ T8729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.007521][ T8729] ? __pfx__printk+0x10/0x10 [ 130.012142][ T8729] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 130.018066][ T8729] ? __pfx___might_resched+0x10/0x10 [ 130.023384][ T8729] should_fail_ex+0x3b0/0x4e0 [ 130.028179][ T8729] should_failslab+0xac/0x100 [ 130.032890][ T8729] ? sock_alloc_inode+0x28/0xc0 [ 130.037772][ T8729] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 130.043526][ T8729] sock_alloc_inode+0x28/0xc0 [ 130.048226][ T8729] ? __pfx_sock_alloc_inode+0x10/0x10 [ 130.053627][ T8729] alloc_inode+0x65/0x1a0 [ 130.057985][ T8729] __sock_create+0x127/0xa30 [ 130.062616][ T8729] mptcp_subflow_create_socket+0x132/0xdf0 [ 130.068456][ T8729] ? mark_lock+0x9a/0x360 [ 130.072816][ T8729] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 130.079161][ T8729] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.085523][ T8729] __mptcp_nmpc_sk+0x178/0x800 [ 130.090315][ T8729] ? __local_bh_enable_ip+0x168/0x200 [ 130.095721][ T8729] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 130.101041][ T8729] mptcp_setsockopt+0xf69/0x3bc0 [ 130.106014][ T8729] ? aa_sk_perm+0x96d/0xab0 [ 130.110544][ T8729] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 130.115946][ T8729] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.120835][ T8729] ? __pfx_lock_acquire+0x10/0x10 [ 130.125885][ T8729] ? aa_sock_opt_perm+0x79/0x120 [ 130.130855][ T8729] ? sock_common_setsockopt+0x37/0xc0 [ 130.136268][ T8729] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.142190][ T8729] do_sock_setsockopt+0x3af/0x720 [ 130.147243][ T8729] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.152814][ T8729] ? __fget_files+0x395/0x410 [ 130.157509][ T8729] ? __fget_files+0x2a/0x410 [ 130.162132][ T8729] __x64_sys_setsockopt+0x1ee/0x280 [ 130.167360][ T8729] do_syscall_64+0xf3/0x230 [ 130.171893][ T8729] ? clear_bhb_loop+0x35/0x90 [ 130.176611][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.182548][ T8729] RIP: 0033:0x7f31e257fed9 [ 130.186986][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.187105][ T8745] FAULT_INJECTION: forcing a failure. [ 130.187105][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 130.206688][ T8729] RSP: 002b:00007f31e3366058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.206766][ T8729] RAX: ffffffffffffffda RBX: 00007f31e2745fa0 RCX: 00007f31e257fed9 [ 130.206780][ T8729] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 130.206791][ T8729] RBP: 00007f31e33660a0 R08: 0000000000000001 R09: 0000000000000000 [ 130.206803][ T8729] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.259768][ T8729] R13: 0000000000000000 R14: 00007f31e2745fa0 R15: 00007ffe5c38fea8 [ 130.267772][ T8729] </TASK> [ 130.270804][ T8745] CPU: 1 UID: 0 PID: 8745 Comm: syz.0.870 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 130.281422][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.291503][ T8745] Call Trace: [ 130.294827][ T8745] <TASK> [ 130.297791][ T8745] dump_stack_lvl+0x241/0x360 [ 130.300579][ T8729] socket: no more sockets [ 130.302482][ T8745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.302514][ T8745] ? __pfx__printk+0x10/0x10 [ 130.316628][ T8745] should_fail_ex+0x3b0/0x4e0 [ 130.321323][ T8745] should_failslab+0xac/0x100 [ 130.326041][ T8745] __kmalloc_cache_noprof+0x70/0x390 [ 130.331334][ T8745] ? __hw_addr_add_ex+0x1a8/0x610 [ 130.336365][ T8745] __hw_addr_add_ex+0x1a8/0x610 [ 130.341219][ T8745] dev_addr_init+0x143/0x230 [ 130.345841][ T8745] ? __pfx_dev_addr_init+0x10/0x10 [ 130.350975][ T8745] ? read_word_at_a_time+0xe/0x20 [ 130.356022][ T8745] alloc_netdev_mqs+0x2ae/0x1080 [ 130.360967][ T8745] ? __pfx_vlan_setup+0x10/0x10 [ 130.365821][ T8745] ? __pfx_snprintf+0x10/0x10 [ 130.370936][ T8745] rtnl_create_link+0x2f9/0xc20 [ 130.375812][ T8745] rtnl_newlink_create+0x210/0xa40 [ 130.380932][ T8745] ? __pfx___mutex_lock+0x10/0x10 [ 130.385970][ T8745] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 130.391607][ T8745] ? ns_capable+0x8a/0xf0 [ 130.395941][ T8745] rtnl_newlink+0x1b40/0x20e0 [ 130.400630][ T8745] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.405670][ T8745] ? __netlink_deliver_tap+0x56b/0x7f0 [ 130.411133][ T8745] ? __pfx_validate_chain+0x10/0x10 [ 130.416334][ T8745] ? __sock_sendmsg+0x221/0x270 [ 130.421193][ T8745] ? ____sys_sendmsg+0x52a/0x7e0 [ 130.426134][ T8745] ? __sys_sendmsg+0x269/0x350 [ 130.430903][ T8745] ? do_syscall_64+0xf3/0x230 [ 130.435586][ T8745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.441759][ T8745] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 130.447829][ T8745] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.454173][ T8745] ? mark_lock+0x9a/0x360 [ 130.458504][ T8745] ? __lock_acquire+0x1397/0x2100 [ 130.463562][ T8745] ? __pfx_lock_release+0x10/0x10 [ 130.468594][ T8745] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.473619][ T8745] rtnetlink_rcv_msg+0x791/0xcf0 [ 130.478563][ T8745] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 130.483684][ T8745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.489150][ T8745] ? ref_tracker_free+0x643/0x7e0 [ 130.494176][ T8745] netlink_rcv_skb+0x1e3/0x430 [ 130.498940][ T8745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.504400][ T8745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.509712][ T8745] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.514905][ T8745] netlink_unicast+0x7f6/0x990 [ 130.519694][ T8745] ? __pfx_netlink_unicast+0x10/0x10 [ 130.524982][ T8745] ? __virt_addr_valid+0x183/0x530 [ 130.530122][ T8745] ? __check_object_size+0x48e/0x900 [ 130.535414][ T8745] netlink_sendmsg+0x8e4/0xcb0 [ 130.540184][ T8745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.545471][ T8745] ? aa_sock_msg_perm+0x91/0x160 [ 130.550409][ T8745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.555691][ T8745] __sock_sendmsg+0x221/0x270 [ 130.560374][ T8745] ____sys_sendmsg+0x52a/0x7e0 [ 130.565148][ T8745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.570433][ T8745] ? __fget_files+0x2a/0x410 [ 130.575022][ T8745] ? __fget_files+0x2a/0x410 [ 130.579622][ T8745] __sys_sendmsg+0x269/0x350 [ 130.584217][ T8745] ? __pfx_lock_release+0x10/0x10 [ 130.589246][ T8745] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.594365][ T8745] ? __pfx_vfs_write+0x10/0x10 [ 130.599147][ T8745] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.605471][ T8745] ? do_syscall_64+0x100/0x230 [ 130.610244][ T8745] ? do_syscall_64+0xb6/0x230 [ 130.614924][ T8745] do_syscall_64+0xf3/0x230 [ 130.619430][ T8745] ? clear_bhb_loop+0x35/0x90 [ 130.624103][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.629995][ T8745] RIP: 0033:0x7fc01c97fed9 [ 130.634406][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.654017][ T8745] RSP: 002b:00007fc01d7a9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.662438][ T8745] RAX: ffffffffffffffda RBX: 00007fc01cb45fa0 RCX: 00007fc01c97fed9 [ 130.670404][ T8745] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000004 [ 130.678399][ T8745] RBP: 00007fc01d7a90a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.686713][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.694681][ T8745] R13: 0000000000000000 R14: 00007fc01cb45fa0 R15: 00007fff3a665c08 [ 130.702669][ T8745] </TASK> [ 130.828988][ T8750] __nla_validate_parse: 38 callbacks suppressed [ 130.829008][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 130.851448][ T8753] vlan2: entered promiscuous mode [ 130.859148][ T8753] vlan2: entered allmulticast mode [ 130.935050][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 131.036138][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.880'. [ 131.221650][ T8773] netlink: 'syz.1.883': attribute type 12 has an invalid length. [ 131.378179][ T8778] netlink: 'syz.4.884': attribute type 12 has an invalid length. [ 131.420962][ T8766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.500177][ T8771] netlink: 'syz.2.879': attribute type 3 has an invalid length. [ 131.865329][ T8790] FAULT_INJECTION: forcing a failure. [ 131.865329][ T8790] name failslab, interval 1, probability 0, space 0, times 0 [ 131.879079][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.0.887 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 131.889710][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.899797][ T8790] Call Trace: [ 131.903096][ T8790] <TASK> [ 131.906043][ T8790] dump_stack_lvl+0x241/0x360 [ 131.910760][ T8790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.915978][ T8790] ? __pfx__printk+0x10/0x10 [ 131.920602][ T8790] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 131.926012][ T8790] ? __pfx___might_resched+0x10/0x10 [ 131.931343][ T8790] should_fail_ex+0x3b0/0x4e0 [ 131.936051][ T8790] should_failslab+0xac/0x100 [ 131.940769][ T8790] __kmalloc_node_noprof+0xe1/0x4d0 [ 131.946003][ T8790] ? __kvmalloc_node_noprof+0x72/0x190 [ 131.951503][ T8790] __kvmalloc_node_noprof+0x72/0x190 [ 131.956824][ T8790] alloc_netdev_mqs+0xa72/0x1080 [ 131.961805][ T8790] rtnl_create_link+0x2f9/0xc20 [ 131.966706][ T8790] rtnl_newlink_create+0x210/0xa40 [ 131.971872][ T8790] ? __pfx___mutex_lock+0x10/0x10 [ 131.976941][ T8790] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 131.982631][ T8790] ? ns_capable+0x8a/0xf0 [ 131.987004][ T8790] rtnl_newlink+0x1b40/0x20e0 [ 131.991718][ T8790] ? __pfx_rtnl_newlink+0x10/0x10 [ 131.996762][ T8790] ? __netlink_deliver_tap+0x56b/0x7f0 [ 132.002222][ T8790] ? __pfx_validate_chain+0x10/0x10 [ 132.007510][ T8790] ? __sock_sendmsg+0x221/0x270 [ 132.012362][ T8790] ? ____sys_sendmsg+0x52a/0x7e0 [ 132.017298][ T8790] ? __sys_sendmsg+0x269/0x350 [ 132.022059][ T8790] ? do_syscall_64+0xf3/0x230 [ 132.026742][ T8790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.032828][ T8790] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 132.038808][ T8790] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.045143][ T8790] ? mark_lock+0x9a/0x360 [ 132.049479][ T8790] ? __lock_acquire+0x1397/0x2100 [ 132.054536][ T8790] ? __pfx_lock_release+0x10/0x10 [ 132.059657][ T8790] ? __pfx_rtnl_newlink+0x10/0x10 [ 132.064686][ T8790] rtnetlink_rcv_msg+0x791/0xcf0 [ 132.069636][ T8790] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 132.074763][ T8790] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.080248][ T8790] ? ref_tracker_free+0x643/0x7e0 [ 132.085292][ T8790] netlink_rcv_skb+0x1e3/0x430 [ 132.090061][ T8790] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.095522][ T8790] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.100822][ T8790] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.106018][ T8790] netlink_unicast+0x7f6/0x990 [ 132.110789][ T8790] ? __pfx_netlink_unicast+0x10/0x10 [ 132.116080][ T8790] ? __virt_addr_valid+0x183/0x530 [ 132.121192][ T8790] ? __check_object_size+0x48e/0x900 [ 132.126481][ T8790] netlink_sendmsg+0x8e4/0xcb0 [ 132.131251][ T8790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.136577][ T8790] ? aa_sock_msg_perm+0x91/0x160 [ 132.141546][ T8790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.146828][ T8790] __sock_sendmsg+0x221/0x270 [ 132.151508][ T8790] ____sys_sendmsg+0x52a/0x7e0 [ 132.156274][ T8790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.161571][ T8790] ? __fget_files+0x2a/0x410 [ 132.166159][ T8790] ? __fget_files+0x2a/0x410 [ 132.170750][ T8790] __sys_sendmsg+0x269/0x350 [ 132.175339][ T8790] ? __pfx_lock_release+0x10/0x10 [ 132.180365][ T8790] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.185570][ T8790] ? __pfx_vfs_write+0x10/0x10 [ 132.190353][ T8790] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.196679][ T8790] ? do_syscall_64+0x100/0x230 [ 132.201448][ T8790] ? do_syscall_64+0xb6/0x230 [ 132.206129][ T8790] do_syscall_64+0xf3/0x230 [ 132.210631][ T8790] ? clear_bhb_loop+0x35/0x90 [ 132.215307][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.221223][ T8790] RIP: 0033:0x7fc01c97fed9 [ 132.225655][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.245269][ T8790] RSP: 002b:00007fc01d7a9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.253686][ T8790] RAX: ffffffffffffffda RBX: 00007fc01cb45fa0 RCX: 00007fc01c97fed9 [ 132.261653][ T8790] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000004 [ 132.269618][ T8790] RBP: 00007fc01d7a90a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.277592][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.285585][ T8790] R13: 0000000000000000 R14: 00007fc01cb45fa0 R15: 00007fff3a665c08 [ 132.293645][ T8790] </TASK> [ 132.315669][ T8793] vlan2: entered promiscuous mode [ 132.323213][ T8793] vlan2: entered allmulticast mode [ 132.374574][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 132.393061][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.890'. [ 132.511713][ T8791] syz.4.888 (8791) used greatest stack depth: 19088 bytes left [ 132.529563][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 132.720220][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 132.737388][ T8817] netlink: 72 bytes leftover after parsing attributes in process `syz.1.896'. [ 132.819008][ T8822] netlink: 'syz.1.897': attribute type 12 has an invalid length. [ 132.919056][ T8824] netlink: 'syz.2.898': attribute type 12 has an invalid length. [ 133.213451][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 133.230683][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.900'. [ 133.246909][ T8836] vlan3: entered allmulticast mode [ 133.252174][ T8836] bridge_slave_0: entered allmulticast mode [ 133.323950][ T8840] FAULT_INJECTION: forcing a failure. [ 133.323950][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 133.342713][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.0.901 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 133.353373][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.363900][ T8840] Call Trace: [ 133.367206][ T8840] <TASK> [ 133.370156][ T8840] dump_stack_lvl+0x241/0x360 [ 133.374868][ T8840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.380103][ T8840] ? __pfx__printk+0x10/0x10 [ 133.384819][ T8840] ? __kmalloc_cache_noprof+0x48/0x390 [ 133.390316][ T8840] ? __pfx___might_resched+0x10/0x10 [ 133.395638][ T8840] should_fail_ex+0x3b0/0x4e0 [ 133.400356][ T8840] should_failslab+0xac/0x100 [ 133.405087][ T8840] __kmalloc_cache_noprof+0x70/0x390 [ 133.410421][ T8840] ? alloc_netdev_mqs+0xbc6/0x1080 [ 133.415600][ T8840] ? __xdp_rxq_info_reg+0x142/0x290 [ 133.420840][ T8840] alloc_netdev_mqs+0xbc6/0x1080 [ 133.425810][ T8840] rtnl_create_link+0x2f9/0xc20 [ 133.430694][ T8840] rtnl_newlink_create+0x210/0xa40 [ 133.435829][ T8840] ? __pfx___mutex_lock+0x10/0x10 [ 133.440861][ T8840] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 133.446505][ T8840] ? ns_capable+0x8a/0xf0 [ 133.450841][ T8840] rtnl_newlink+0x1b40/0x20e0 [ 133.455531][ T8840] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.460557][ T8840] ? __netlink_deliver_tap+0x56b/0x7f0 [ 133.466016][ T8840] ? __pfx_validate_chain+0x10/0x10 [ 133.471214][ T8840] ? __sock_sendmsg+0x221/0x270 [ 133.476062][ T8840] ? ____sys_sendmsg+0x52a/0x7e0 [ 133.480998][ T8840] ? __sys_sendmsg+0x269/0x350 [ 133.485757][ T8840] ? do_syscall_64+0xf3/0x230 [ 133.490443][ T8840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.496528][ T8840] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.502511][ T8840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.508845][ T8840] ? mark_lock+0x9a/0x360 [ 133.513191][ T8840] ? __lock_acquire+0x1397/0x2100 [ 133.518238][ T8840] ? __pfx_lock_release+0x10/0x10 [ 133.523273][ T8840] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.528303][ T8840] rtnetlink_rcv_msg+0x791/0xcf0 [ 133.533238][ T8840] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 133.538355][ T8840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.543828][ T8840] ? ref_tracker_free+0x643/0x7e0 [ 133.548884][ T8840] netlink_rcv_skb+0x1e3/0x430 [ 133.553660][ T8840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.559121][ T8840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.564427][ T8840] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.569625][ T8840] netlink_unicast+0x7f6/0x990 [ 133.574438][ T8840] ? __pfx_netlink_unicast+0x10/0x10 [ 133.579726][ T8840] ? __virt_addr_valid+0x183/0x530 [ 133.584843][ T8840] ? __check_object_size+0x48e/0x900 [ 133.590132][ T8840] netlink_sendmsg+0x8e4/0xcb0 [ 133.594903][ T8840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.600189][ T8840] ? aa_sock_msg_perm+0x91/0x160 [ 133.605143][ T8840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.610431][ T8840] __sock_sendmsg+0x221/0x270 [ 133.615116][ T8840] ____sys_sendmsg+0x52a/0x7e0 [ 133.619889][ T8840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.625171][ T8840] ? __fget_files+0x2a/0x410 [ 133.629879][ T8840] ? __fget_files+0x2a/0x410 [ 133.634490][ T8840] __sys_sendmsg+0x269/0x350 [ 133.639084][ T8840] ? __pfx_lock_release+0x10/0x10 [ 133.644116][ T8840] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.649237][ T8840] ? __pfx_vfs_write+0x10/0x10 [ 133.654020][ T8840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.660365][ T8840] ? do_syscall_64+0x100/0x230 [ 133.665138][ T8840] ? do_syscall_64+0xb6/0x230 [ 133.669816][ T8840] do_syscall_64+0xf3/0x230 [ 133.674325][ T8840] ? clear_bhb_loop+0x35/0x90 [ 133.679006][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.684902][ T8840] RIP: 0033:0x7fc01c97fed9 [ 133.689316][ T8840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.708935][ T8840] RSP: 002b:00007fc01d7a9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.717353][ T8840] RAX: ffffffffffffffda RBX: 00007fc01cb45fa0 RCX: 00007fc01c97fed9 [ 133.725417][ T8840] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000004 [ 133.733389][ T8840] RBP: 00007fc01d7a90a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.741364][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.749331][ T8840] R13: 0000000000000000 R14: 00007fc01cb45fa0 R15: 00007fff3a665c08 [ 133.757317][ T8840] </TASK> [ 133.964805][ T8850] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 134.024670][ T8854] netlink: 'syz.4.909': attribute type 12 has an invalid length. [ 134.222483][ T8866] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 134.269409][ T8850] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 134.497330][ T8881] FAULT_INJECTION: forcing a failure. [ 134.497330][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 134.515838][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.4.918 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 134.526502][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.536592][ T8881] Call Trace: [ 134.539903][ T8881] <TASK> [ 134.542866][ T8881] dump_stack_lvl+0x241/0x360 [ 134.547588][ T8881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.552807][ T8881] ? __pfx__printk+0x10/0x10 [ 134.557499][ T8881] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 134.562890][ T8881] ? __pfx___might_resched+0x10/0x10 [ 134.568192][ T8881] should_fail_ex+0x3b0/0x4e0 [ 134.572900][ T8881] should_failslab+0xac/0x100 [ 134.577606][ T8881] __kmalloc_node_noprof+0xe1/0x4d0 [ 134.582812][ T8881] ? __kvmalloc_node_noprof+0x72/0x190 [ 134.588278][ T8881] __kvmalloc_node_noprof+0x72/0x190 [ 134.593566][ T8881] alloc_netdev_mqs+0xc0f/0x1080 [ 134.598508][ T8881] rtnl_create_link+0x2f9/0xc20 [ 134.603362][ T8881] rtnl_newlink_create+0x210/0xa40 [ 134.608480][ T8881] ? __pfx___mutex_lock+0x10/0x10 [ 134.613504][ T8881] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 134.619155][ T8881] ? ns_capable+0x8a/0xf0 [ 134.623517][ T8881] rtnl_newlink+0x1b40/0x20e0 [ 134.628244][ T8881] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.633297][ T8881] ? __netlink_deliver_tap+0x56b/0x7f0 [ 134.638772][ T8881] ? __pfx_validate_chain+0x10/0x10 [ 134.643978][ T8881] ? __sock_sendmsg+0x221/0x270 [ 134.648856][ T8881] ? ____sys_sendmsg+0x52a/0x7e0 [ 134.653826][ T8881] ? __sys_sendmsg+0x269/0x350 [ 134.658622][ T8881] ? do_syscall_64+0xf3/0x230 [ 134.663339][ T8881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.669475][ T8881] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.675491][ T8881] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.681847][ T8881] ? mark_lock+0x9a/0x360 [ 134.686186][ T8881] ? __lock_acquire+0x1397/0x2100 [ 134.691223][ T8881] ? __pfx_lock_release+0x10/0x10 [ 134.696263][ T8881] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.701321][ T8881] rtnetlink_rcv_msg+0x791/0xcf0 [ 134.706290][ T8881] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 134.711444][ T8881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.716947][ T8881] ? ref_tracker_free+0x643/0x7e0 [ 134.722007][ T8881] netlink_rcv_skb+0x1e3/0x430 [ 134.726791][ T8881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.732260][ T8881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.737559][ T8881] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.742787][ T8881] netlink_unicast+0x7f6/0x990 [ 134.747578][ T8881] ? __pfx_netlink_unicast+0x10/0x10 [ 134.752866][ T8881] ? __virt_addr_valid+0x183/0x530 [ 134.757976][ T8881] ? __check_object_size+0x48e/0x900 [ 134.763285][ T8881] netlink_sendmsg+0x8e4/0xcb0 [ 134.768098][ T8881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.773418][ T8881] ? aa_sock_msg_perm+0x91/0x160 [ 134.778392][ T8881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.783694][ T8881] __sock_sendmsg+0x221/0x270 [ 134.788385][ T8881] ____sys_sendmsg+0x52a/0x7e0 [ 134.793172][ T8881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.798463][ T8881] ? __fget_files+0x2a/0x410 [ 134.803055][ T8881] ? __fget_files+0x2a/0x410 [ 134.807648][ T8881] __sys_sendmsg+0x269/0x350 [ 134.812279][ T8881] ? __pfx_lock_release+0x10/0x10 [ 134.817340][ T8881] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.822494][ T8881] ? __pfx_vfs_write+0x10/0x10 [ 134.827318][ T8881] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.833668][ T8881] ? do_syscall_64+0x100/0x230 [ 134.838447][ T8881] ? do_syscall_64+0xb6/0x230 [ 134.843139][ T8881] do_syscall_64+0xf3/0x230 [ 134.847671][ T8881] ? clear_bhb_loop+0x35/0x90 [ 134.852384][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.858287][ T8881] RIP: 0033:0x7fbf3457fed9 [ 134.862698][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.882318][ T8881] RSP: 002b:00007fbf323f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.890768][ T8881] RAX: ffffffffffffffda RBX: 00007fbf34745fa0 RCX: 00007fbf3457fed9 [ 134.898768][ T8881] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000004 [ 134.906769][ T8881] RBP: 00007fbf323f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 134.914739][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.922724][ T8881] R13: 0000000000000000 R14: 00007fbf34745fa0 R15: 00007fff083cfb58 [ 134.930741][ T8881] </TASK> [ 135.901745][ T8944] FAULT_INJECTION: forcing a failure. [ 135.901745][ T8944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.918890][ T8944] CPU: 0 UID: 0 PID: 8944 Comm: syz.2.937 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 135.929568][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.939653][ T8944] Call Trace: [ 135.942953][ T8944] <TASK> [ 135.945901][ T8944] dump_stack_lvl+0x241/0x360 [ 135.950616][ T8944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.955852][ T8944] ? __pfx__printk+0x10/0x10 [ 135.960488][ T8944] ? snprintf+0xda/0x120 [ 135.964763][ T8944] should_fail_ex+0x3b0/0x4e0 [ 135.969481][ T8944] _copy_to_user+0x31/0xb0 [ 135.973932][ T8944] simple_read_from_buffer+0xca/0x150 [ 135.979344][ T8944] proc_fail_nth_read+0x1e9/0x250 [ 135.984407][ T8944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.989991][ T8944] ? rw_verify_area+0x55e/0x6f0 [ 135.994878][ T8944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.000455][ T8944] vfs_read+0x1fc/0xb70 [ 136.004626][ T8944] ? __pfx___mutex_lock+0x10/0x10 [ 136.009658][ T8944] ? __pfx_vfs_read+0x10/0x10 [ 136.014336][ T8944] ? __fget_files+0x2a/0x410 [ 136.018923][ T8944] ? __fget_files+0x395/0x410 [ 136.023593][ T8944] ? __fget_files+0x2a/0x410 [ 136.028189][ T8944] ksys_read+0x18f/0x2b0 [ 136.032451][ T8944] ? __pfx_ksys_read+0x10/0x10 [ 136.037220][ T8944] ? do_syscall_64+0x100/0x230 [ 136.041997][ T8944] ? do_syscall_64+0xb6/0x230 [ 136.046674][ T8944] do_syscall_64+0xf3/0x230 [ 136.051182][ T8944] ? clear_bhb_loop+0x35/0x90 [ 136.055867][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.061790][ T8944] RIP: 0033:0x7f31e257e8ec [ 136.066206][ T8944] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 136.085826][ T8944] RSP: 002b:00007f31e3366050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.094245][ T8944] RAX: ffffffffffffffda RBX: 00007f31e2745fa0 RCX: 00007f31e257e8ec [ 136.102238][ T8944] RDX: 000000000000000f RSI: 00007f31e33660b0 RDI: 0000000000000006 [ 136.110227][ T8944] RBP: 00007f31e33660a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.118202][ T8944] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.126173][ T8944] R13: 0000000000000000 R14: 00007f31e2745fa0 R15: 00007ffe5c38fea8 [ 136.134160][ T8944] </TASK> [ 136.235908][ T5884] IPVS: starting estimator thread 0... [ 136.326948][ T8957] IPVS: using max 26 ests per chain, 62400 per kthread [ 136.529131][ T8975] __nla_validate_parse: 3 callbacks suppressed [ 136.529152][ T8975] netlink: 116 bytes leftover after parsing attributes in process `syz.3.949'. [ 136.816962][ T8980] xt_bpf: check failed: parse error [ 137.023923][ T8996] lo speed is unknown, defaulting to 1000 [ 137.083332][ T8998] lo speed is unknown, defaulting to 1000 [ 137.118186][ T8996] lo speed is unknown, defaulting to 1000 [ 137.188967][ T9002] netlink: 'syz.2.959': attribute type 2 has an invalid length. [ 137.275852][ T9007] netlink: 'syz.4.961': attribute type 12 has an invalid length. [ 137.332646][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 137.361632][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.370958][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.963'. [ 137.386051][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.396961][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.963'. [ 137.426728][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.434073][ T9010] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 137.434351][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.510793][ T8998] lo speed is unknown, defaulting to 1000 [ 138.050413][ T9041] netlink: 'syz.1.975': attribute type 12 has an invalid length. [ 138.222605][ T9056] netlink: 'syz.4.978': attribute type 12 has an invalid length. [ 138.332701][ T9059] netlink: 'syz.0.979': attribute type 12 has an invalid length. [ 138.785518][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 138.814463][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 138.856777][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 139.237641][ T9084] netlink: 'syz.0.990': attribute type 12 has an invalid length. [ 139.338037][ T9091] netlink: 'syz.1.991': attribute type 12 has an invalid length. [ 139.418048][ T9098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.641367][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 139.888192][ T9126] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 140.059033][ T9139] netlink: 'syz.0.1006': attribute type 12 has an invalid length. [ 140.075323][ T9138] netlink: 'syz.4.1007': attribute type 10 has an invalid length. [ 140.098026][ T9138] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 140.582984][ T9166] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 140.599865][ T9166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.616671][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 140.706606][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 140.760953][ T9173] lo speed is unknown, defaulting to 1000 [ 140.807157][ T9179] netlink: 'syz.3.1020': attribute type 12 has an invalid length. [ 140.815218][ T9173] lo speed is unknown, defaulting to 1000 [ 141.116190][ T9192] netlink: 'syz.3.1024': attribute type 12 has an invalid length. [ 141.184474][ T9196] FAULT_INJECTION: forcing a failure. [ 141.184474][ T9196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.220291][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.3.1024 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 141.231039][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.241102][ T9196] Call Trace: [ 141.244381][ T9196] <TASK> [ 141.247310][ T9196] dump_stack_lvl+0x241/0x360 [ 141.251994][ T9196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.257192][ T9196] ? __pfx__printk+0x10/0x10 [ 141.261784][ T9196] ? stack_depot_save_flags+0x29/0x830 [ 141.267243][ T9196] ? __pfx_lock_release+0x10/0x10 [ 141.272271][ T9196] should_fail_ex+0x3b0/0x4e0 [ 141.276947][ T9196] _copy_from_user+0x2f/0xc0 [ 141.281544][ T9196] arp_ioctl+0x142/0x530 [ 141.285788][ T9196] ? __pfx_arp_ioctl+0x10/0x10 [ 141.290568][ T9196] inet_ioctl+0x2b5/0x4f0 [ 141.294897][ T9196] ? tomoyo_path_number_perm+0x206/0x860 [ 141.300534][ T9196] ? __pfx_inet_ioctl+0x10/0x10 [ 141.305387][ T9196] ? tomoyo_path_number_perm+0x679/0x860 [ 141.311026][ T9196] ? __lock_acquire+0x1397/0x2100 [ 141.316051][ T9196] ? tomoyo_path_number_perm+0x206/0x860 [ 141.321692][ T9196] sock_do_ioctl+0x158/0x460 [ 141.326294][ T9196] ? __pfx_sock_do_ioctl+0x10/0x10 [ 141.331416][ T9196] sock_ioctl+0x626/0x8e0 [ 141.335770][ T9196] ? __pfx_sock_ioctl+0x10/0x10 [ 141.340619][ T9196] ? __fget_files+0x2a/0x410 [ 141.345206][ T9196] ? __fget_files+0x2a/0x410 [ 141.349795][ T9196] ? __pfx_sock_ioctl+0x10/0x10 [ 141.354646][ T9196] __se_sys_ioctl+0xf5/0x170 [ 141.359234][ T9196] do_syscall_64+0xf3/0x230 [ 141.363755][ T9196] ? clear_bhb_loop+0x35/0x90 [ 141.368432][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.374333][ T9196] RIP: 0033:0x7fcaee97fed9 [ 141.378747][ T9196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.398357][ T9196] RSP: 002b:00007fcaef79d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.406775][ T9196] RAX: ffffffffffffffda RBX: 00007fcaeeb46080 RCX: 00007fcaee97fed9 [ 141.414753][ T9196] RDX: 0000000020000180 RSI: 0000000000008955 RDI: 0000000000000007 [ 141.422726][ T9196] RBP: 00007fcaef79d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.430699][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.438666][ T9196] R13: 0000000000000000 R14: 00007fcaeeb46080 R15: 00007ffe643efe28 [ 141.446648][ T9196] </TASK> [ 141.963578][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.012960][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.092225][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.100755][ T9216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.113115][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.120359][ T9216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.304198][ T9229] netlink: 'syz.4.1037': attribute type 12 has an invalid length. [ 142.416433][ T9233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.473724][ T9237] FAULT_INJECTION: forcing a failure. [ 142.473724][ T9237] name failslab, interval 1, probability 0, space 0, times 0 [ 142.509176][ T9237] CPU: 0 UID: 0 PID: 9237 Comm: syz.4.1037 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 142.519919][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.529996][ T9237] Call Trace: [ 142.533274][ T9237] <TASK> [ 142.536203][ T9237] dump_stack_lvl+0x241/0x360 [ 142.540882][ T9237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.546079][ T9237] ? __pfx__printk+0x10/0x10 [ 142.550671][ T9237] should_fail_ex+0x3b0/0x4e0 [ 142.555342][ T9237] should_failslab+0xac/0x100 [ 142.560018][ T9237] ? dst_alloc+0x12b/0x190 [ 142.564430][ T9237] kmem_cache_alloc_noprof+0x70/0x380 [ 142.569830][ T9237] dst_alloc+0x12b/0x190 [ 142.574106][ T9237] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 142.580221][ T9237] ip_route_output_key_hash+0x193/0x2b0 [ 142.585793][ T9237] ? ip_route_output_key_hash+0xdf/0x2b0 [ 142.591436][ T9237] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 142.597503][ T9237] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 142.603392][ T9237] ? lockdep_hardirqs_on+0x99/0x150 [ 142.608595][ T9237] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.614494][ T9237] ip_route_output_flow+0x29/0x140 [ 142.619625][ T9237] arp_req_dev+0x1c9/0x4f0 [ 142.624045][ T9237] ? __pfx_arp_req_dev+0x10/0x10 [ 142.628986][ T9237] ? arp_ioctl+0x356/0x530 [ 142.633402][ T9237] arp_req_set+0x7c/0x670 [ 142.637731][ T9237] ? __pfx_arp_req_set+0x10/0x10 [ 142.642669][ T9237] ? __might_fault+0xc6/0x120 [ 142.647351][ T9237] arp_ioctl+0x365/0x530 [ 142.651595][ T9237] ? __pfx_arp_ioctl+0x10/0x10 [ 142.656368][ T9237] inet_ioctl+0x2b5/0x4f0 [ 142.660697][ T9237] ? tomoyo_path_number_perm+0x206/0x860 [ 142.666334][ T9237] ? __pfx_inet_ioctl+0x10/0x10 [ 142.671221][ T9237] ? tomoyo_path_number_perm+0x679/0x860 [ 142.676867][ T9237] ? __lock_acquire+0x1397/0x2100 [ 142.681894][ T9237] ? tomoyo_path_number_perm+0x206/0x860 [ 142.687534][ T9237] sock_do_ioctl+0x158/0x460 [ 142.692138][ T9237] ? __pfx_sock_do_ioctl+0x10/0x10 [ 142.697262][ T9237] sock_ioctl+0x626/0x8e0 [ 142.701596][ T9237] ? __pfx_sock_ioctl+0x10/0x10 [ 142.706444][ T9237] ? __fget_files+0x2a/0x410 [ 142.711033][ T9237] ? __fget_files+0x2a/0x410 [ 142.715627][ T9237] ? __pfx_sock_ioctl+0x10/0x10 [ 142.720499][ T9237] __se_sys_ioctl+0xf5/0x170 [ 142.725096][ T9237] do_syscall_64+0xf3/0x230 [ 142.729603][ T9237] ? clear_bhb_loop+0x35/0x90 [ 142.734281][ T9237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.740176][ T9237] RIP: 0033:0x7fbf3457fed9 [ 142.744588][ T9237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.764197][ T9237] RSP: 002b:00007fbf323d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.772620][ T9237] RAX: ffffffffffffffda RBX: 00007fbf34746080 RCX: 00007fbf3457fed9 [ 142.780590][ T9237] RDX: 0000000020000180 RSI: 0000000000008955 RDI: 0000000000000007 [ 142.788562][ T9237] RBP: 00007fbf323d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.796526][ T9237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.804496][ T9237] R13: 0000000000000000 R14: 00007fbf34746080 R15: 00007fff083cfb58 [ 142.812476][ T9237] </TASK> [ 142.918980][ T9233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.053845][ T9233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.078501][ T9253] netlink: 'syz.0.1045': attribute type 39 has an invalid length. [ 143.185095][ T9233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.224720][ T9262] __nla_validate_parse: 2 callbacks suppressed [ 143.224739][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 143.241928][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1047'. [ 143.260119][ T9262] netlink: 'syz.4.1047': attribute type 12 has an invalid length. [ 143.342930][ T9233] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.369251][ T9233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.409643][ T9233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.440431][ T9233] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.590018][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'. [ 144.193645][ T9296] infiniband syz1: set active [ 144.198499][ T9296] infiniband syz1: added team_slave_0 [ 144.204327][ T9296] syz1: rxe_create_cq: returned err = -12 [ 144.210704][ T9296] infiniband syz1: Couldn't create ib_mad CQ [ 144.217888][ T9296] infiniband syz1: Couldn't open port 1 [ 144.239022][ T9296] RDS/IB: syz1: added [ 144.244063][ T9296] smc: adding ib device syz1 with port count 1 [ 144.255729][ T9296] smc: ib device syz1 port 1 has pnetid [ 144.269830][ T9314] netlink: 'syz.1.1064': attribute type 12 has an invalid length. [ 144.410073][ T9317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.426738][ T9317] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 144.542233][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1067'. [ 144.793781][ T9335] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1070'. [ 144.924860][ T9337] lo speed is unknown, defaulting to 1000 [ 144.967956][ T9337] lo speed is unknown, defaulting to 1000 [ 145.649119][ T9358] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.937494][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1079'. [ 146.265976][ T9379] netlink: 'syz.0.1084': attribute type 33 has an invalid length. [ 146.581043][ T9398] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1089'. [ 146.687313][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1094'. [ 146.904685][ T9411] netlink: 'syz.3.1097': attribute type 12 has an invalid length. [ 146.991080][ T9414] lo speed is unknown, defaulting to 1000 [ 146.999999][ T9414] lo speed is unknown, defaulting to 1000 [ 147.174688][ T9418] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1099'. [ 147.520656][ T9431] FAULT_INJECTION: forcing a failure. [ 147.520656][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 147.538274][ T9430] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.547861][ T9430] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.556912][ T9430] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.565638][ T9430] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.577798][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.4.1103 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 147.588525][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.598606][ T9431] Call Trace: [ 147.601908][ T9431] <TASK> [ 147.604859][ T9431] dump_stack_lvl+0x241/0x360 [ 147.609568][ T9431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.614790][ T9431] ? __pfx__printk+0x10/0x10 [ 147.619409][ T9431] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 147.625422][ T9431] ? __pfx___might_resched+0x10/0x10 [ 147.630739][ T9431] should_fail_ex+0x3b0/0x4e0 [ 147.635440][ T9431] should_failslab+0xac/0x100 [ 147.640136][ T9431] kmem_cache_alloc_node_noprof+0x77/0x380 [ 147.645942][ T9431] ? __alloc_skb+0x1c3/0x440 [ 147.650532][ T9431] __alloc_skb+0x1c3/0x440 [ 147.654949][ T9431] ? __pfx___alloc_skb+0x10/0x10 [ 147.659896][ T9431] ? netlink_autobind+0xd6/0x2f0 [ 147.664830][ T9431] ? netlink_autobind+0x2b0/0x2f0 [ 147.669852][ T9431] netlink_sendmsg+0x638/0xcb0 [ 147.674620][ T9431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.679908][ T9431] ? aa_sock_msg_perm+0x91/0x160 [ 147.684849][ T9431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.690133][ T9431] __sock_sendmsg+0x221/0x270 [ 147.694813][ T9431] ____sys_sendmsg+0x52a/0x7e0 [ 147.699580][ T9431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.704865][ T9431] ? __fget_files+0x2a/0x410 [ 147.709455][ T9431] ? __fget_files+0x2a/0x410 [ 147.714049][ T9431] __sys_sendmsg+0x269/0x350 [ 147.718636][ T9431] ? __pfx_lock_release+0x10/0x10 [ 147.723673][ T9431] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.728790][ T9431] ? __pfx_vfs_write+0x10/0x10 [ 147.733575][ T9431] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.739906][ T9431] ? do_syscall_64+0x100/0x230 [ 147.744676][ T9431] ? do_syscall_64+0xb6/0x230 [ 147.749354][ T9431] do_syscall_64+0xf3/0x230 [ 147.753856][ T9431] ? clear_bhb_loop+0x35/0x90 [ 147.758529][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.764422][ T9431] RIP: 0033:0x7fbf3457fed9 [ 147.768834][ T9431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.788448][ T9431] RSP: 002b:00007fbf323f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.796860][ T9431] RAX: ffffffffffffffda RBX: 00007fbf34745fa0 RCX: 00007fbf3457fed9 [ 147.804827][ T9431] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 147.812794][ T9431] RBP: 00007fbf323f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.820758][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.828730][ T9431] R13: 0000000000000000 R14: 00007fbf34745fa0 R15: 00007fff083cfb58 [ 147.836713][ T9431] </TASK> [ 148.122961][ T9440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1108'. [ 148.539405][ T9465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.655038][ T9474] netlink: 'syz.1.1121': attribute type 21 has an invalid length. [ 148.670711][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1121'. [ 148.683104][ T9480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1123'. [ 149.214532][ T9509] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 149.242773][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 149.277985][ T9509] netlink: 'syz.3.1129': attribute type 12 has an invalid length. [ 149.346431][ T9519] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 149.498749][ T9522] vlan3: entered promiscuous mode [ 149.503863][ T9522] vlan3: entered allmulticast mode [ 149.504527][ T9526] Cannot find set identified by id 0 to match [ 149.530932][ T9522] xfrm0: entered allmulticast mode [ 149.544014][ T9522] xfrm0: entered promiscuous mode [ 149.562382][ T9522] team0: Port device vlan3 added [ 149.570783][ T9528] netlink: 'syz.1.1138': attribute type 12 has an invalid length. [ 149.594772][ T9526] pim6reg: entered allmulticast mode [ 149.621416][ T9531] pim6reg: left allmulticast mode [ 149.893990][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 150.239181][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 150.313239][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 150.755057][ T9594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.245516][ T9619] netlink: 'syz.1.1171': attribute type 12 has an invalid length. [ 151.536666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.546012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.554431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.697547][ T6858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.890292][ T9657] netlink: 'syz.3.1179': attribute type 21 has an invalid length. [ 151.906546][ T9657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1179'. [ 152.054979][ T9665] syzkaller0: entered allmulticast mode [ 152.077286][ T9665] netlink: set zone limit has 4 unknown bytes [ 152.078695][ T9666] netlink: set zone limit has 4 unknown bytes [ 152.247493][ T9670] Cannot find set identified by id 0 to match [ 152.262606][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.285998][ T9670] pim6reg: entered allmulticast mode [ 152.308114][ T9670] pim6reg: left allmulticast mode [ 152.657553][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1195'. [ 152.937736][ T9690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1196'. [ 153.057521][ T9704] netlink: 'syz.4.1203': attribute type 12 has an invalid length. [ 153.296573][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.444554][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 153.458647][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.601235][ T9732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.938573][ T9746] netlink: 'syz.0.1218': attribute type 12 has an invalid length. [ 154.150887][ T9759] IPv6: sit1: Disabled Multicast RS [ 154.374123][ T9771] __nla_validate_parse: 1 callbacks suppressed [ 154.374144][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 154.569940][ T9781] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1233'. [ 154.584340][ T9782] bridge1: entered promiscuous mode [ 154.591678][ T9782] bridge1: entered allmulticast mode [ 154.603180][ T9785] netlink: 'syz.1.1234': attribute type 12 has an invalid length. [ 154.873959][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 154.993342][ T9799] netlink: 'syz.2.1240': attribute type 7 has an invalid length. [ 155.031024][ T9802] netlink: 'syz.1.1242': attribute type 12 has an invalid length. [ 155.105436][ T9806] netlink: 'syz.1.1242': attribute type 2 has an invalid length. [ 155.252053][ T9812] netlink: 'syz.0.1246': attribute type 12 has an invalid length. [ 155.332618][ T9819] FAULT_INJECTION: forcing a failure. [ 155.332618][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 155.345873][ T9819] CPU: 0 UID: 0 PID: 9819 Comm: syz.2.1249 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 155.356589][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.366675][ T9819] Call Trace: [ 155.369978][ T9819] <TASK> [ 155.372451][ T9821] FAULT_INJECTION: forcing a failure. [ 155.372451][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 155.372914][ T9819] dump_stack_lvl+0x241/0x360 [ 155.390225][ T9819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.395465][ T9819] ? __pfx__printk+0x10/0x10 [ 155.400105][ T9819] ? __pfx_lock_acquire+0x10/0x10 [ 155.405166][ T9819] should_fail_ex+0x3b0/0x4e0 [ 155.409883][ T9819] should_failslab+0xac/0x100 [ 155.414598][ T9819] __kmalloc_cache_noprof+0x70/0x390 [ 155.419909][ T9819] ? tipc_nametbl_lookup_group+0x7a9/0xc20 [ 155.425740][ T9819] tipc_nametbl_lookup_group+0x7a9/0xc20 [ 155.431402][ T9819] ? tipc_nametbl_lookup_group+0xb4/0xc20 [ 155.437251][ T9819] __tipc_sendmsg+0x1a2e/0x35e0 [ 155.442144][ T9819] ? __pfx___tipc_sendmsg+0x10/0x10 [ 155.447367][ T9819] ? validate_chain+0x11e/0x5920 [ 155.452324][ T9819] ? __pfx_validate_chain+0x10/0x10 [ 155.457529][ T9819] ? __pfx_validate_chain+0x10/0x10 [ 155.462729][ T9819] ? mark_lock+0x9a/0x360 [ 155.467061][ T9819] ? __lock_acquire+0x1397/0x2100 [ 155.472096][ T9819] ? mark_lock+0x9a/0x360 [ 155.476426][ T9819] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.482404][ T9819] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.488738][ T9819] ? __local_bh_enable_ip+0x168/0x200 [ 155.494113][ T9819] ? tipc_sendmsg+0x47/0x70 [ 155.498627][ T9819] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.504378][ T9819] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.509581][ T9819] ? __pfx_tipc_sendmsg+0x10/0x10 [ 155.514605][ T9819] tipc_sendmsg+0x55/0x70 [ 155.518942][ T9819] __sock_sendmsg+0x221/0x270 [ 155.523628][ T9819] ____sys_sendmsg+0x52a/0x7e0 [ 155.528399][ T9819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.533683][ T9819] ? __fget_files+0x2a/0x410 [ 155.538270][ T9819] ? __fget_files+0x2a/0x410 [ 155.542949][ T9819] __sys_sendmsg+0x269/0x350 [ 155.547540][ T9819] ? __pfx_lock_release+0x10/0x10 [ 155.552566][ T9819] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.557686][ T9819] ? __pfx_vfs_write+0x10/0x10 [ 155.562468][ T9819] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.568798][ T9819] ? do_syscall_64+0x100/0x230 [ 155.573566][ T9819] ? do_syscall_64+0xb6/0x230 [ 155.578248][ T9819] do_syscall_64+0xf3/0x230 [ 155.582751][ T9819] ? clear_bhb_loop+0x35/0x90 [ 155.587428][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.593339][ T9819] RIP: 0033:0x7f31e257fed9 [ 155.597758][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.617365][ T9819] RSP: 002b:00007f31e3345058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.625782][ T9819] RAX: ffffffffffffffda RBX: 00007f31e2746080 RCX: 00007f31e257fed9 [ 155.633757][ T9819] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 155.641729][ T9819] RBP: 00007f31e33450a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.649701][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.657675][ T9819] R13: 0000000000000001 R14: 00007f31e2746080 R15: 00007ffe5c38fea8 [ 155.665658][ T9819] </TASK> [ 155.677016][ T9821] CPU: 1 UID: 0 PID: 9821 Comm: syz.1.1250 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 155.687761][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.697849][ T9821] Call Trace: [ 155.701154][ T9821] <TASK> [ 155.704106][ T9821] dump_stack_lvl+0x241/0x360 [ 155.708822][ T9821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.714052][ T9821] ? __pfx__printk+0x10/0x10 [ 155.718675][ T9821] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 155.724702][ T9821] ? __pfx___might_resched+0x10/0x10 [ 155.730034][ T9821] should_fail_ex+0x3b0/0x4e0 [ 155.734756][ T9821] should_failslab+0xac/0x100 [ 155.739505][ T9821] kmem_cache_alloc_node_noprof+0x77/0x380 [ 155.745321][ T9821] ? __alloc_skb+0x1c3/0x440 [ 155.749913][ T9821] __alloc_skb+0x1c3/0x440 [ 155.754333][ T9821] ? __pfx___alloc_skb+0x10/0x10 [ 155.759275][ T9821] ? netlink_ack_tlv_len+0x6e/0x200 [ 155.764644][ T9821] netlink_ack+0x145/0xa50 [ 155.769057][ T9821] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 155.774427][ T9821] ? __pfx_nl80211_post_doit+0x10/0x10 [ 155.779887][ T9821] ? __pfx___might_resched+0x10/0x10 [ 155.785176][ T9821] netlink_rcv_skb+0x262/0x430 [ 155.789943][ T9821] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.794979][ T9821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.800273][ T9821] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 155.805746][ T9821] genl_rcv+0x28/0x40 [ 155.809734][ T9821] netlink_unicast+0x7f6/0x990 [ 155.814514][ T9821] ? __pfx_netlink_unicast+0x10/0x10 [ 155.819797][ T9821] ? __virt_addr_valid+0x183/0x530 [ 155.824913][ T9821] ? __check_object_size+0x48e/0x900 [ 155.830205][ T9821] netlink_sendmsg+0x8e4/0xcb0 [ 155.834975][ T9821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.840262][ T9821] ? aa_sock_msg_perm+0x91/0x160 [ 155.845201][ T9821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.850486][ T9821] __sock_sendmsg+0x221/0x270 [ 155.855167][ T9821] ____sys_sendmsg+0x52a/0x7e0 [ 155.859932][ T9821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.865212][ T9821] ? __fget_files+0x2a/0x410 [ 155.869800][ T9821] ? __fget_files+0x2a/0x410 [ 155.874392][ T9821] __sys_sendmsg+0x269/0x350 [ 155.878981][ T9821] ? __pfx_lock_release+0x10/0x10 [ 155.884004][ T9821] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.889121][ T9821] ? __pfx_vfs_write+0x10/0x10 [ 155.893902][ T9821] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.900252][ T9821] ? do_syscall_64+0x100/0x230 [ 155.905017][ T9821] ? do_syscall_64+0xb6/0x230 [ 155.909697][ T9821] do_syscall_64+0xf3/0x230 [ 155.914209][ T9821] ? clear_bhb_loop+0x35/0x90 [ 155.918894][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.924788][ T9821] RIP: 0033:0x7fb27f17fed9 [ 155.929204][ T9821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.948815][ T9821] RSP: 002b:00007fb27ff71058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.957234][ T9821] RAX: ffffffffffffffda RBX: 00007fb27f345fa0 RCX: 00007fb27f17fed9 [ 155.965202][ T9821] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 155.973174][ T9821] RBP: 00007fb27ff710a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.981145][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.989113][ T9821] R13: 0000000000000000 R14: 00007fb27f345fa0 R15: 00007ffdc8094828 [ 155.997096][ T9821] </TASK> [ 156.005652][ T5144] Bluetooth: hci2: command 0x0405 tx timeout [ 156.085951][ T9827] netlink: 'syz.1.1252': attribute type 12 has an invalid length. [ 156.560942][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 156.591460][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 156.642960][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1264'. [ 156.754778][ T9867] netlink: 'syz.3.1268': attribute type 12 has an invalid length. [ 156.939741][ T9875] netlink: 'syz.4.1269': attribute type 12 has an invalid length. [ 158.175618][ T9931] sctp: [Deprecated]: syz.3.1287 (pid 9931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.175618][ T9931] Use struct sctp_sack_info instead [ 158.903598][ T9958] sock: sock_timestamping_bind_phc: sock not bind to device [ 159.087287][ T9971] bond3: entered promiscuous mode [ 159.095613][ T9971] bond3: entered allmulticast mode [ 159.102181][ T9971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.733132][T10002] FAULT_INJECTION: forcing a failure. [ 159.733132][T10002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.747475][T10002] CPU: 1 UID: 0 PID: 10002 Comm: syz.1.1311 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 159.758277][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.768356][T10002] Call Trace: [ 159.771663][T10002] <TASK> [ 159.774610][T10002] dump_stack_lvl+0x241/0x360 [ 159.779330][T10002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.784569][T10002] ? __pfx__printk+0x10/0x10 [ 159.789191][T10002] ? __pfx_lock_release+0x10/0x10 [ 159.794228][T10002] should_fail_ex+0x3b0/0x4e0 [ 159.798898][T10002] _copy_from_user+0x2f/0xc0 [ 159.803493][T10002] __sys_bpf+0x1a4/0x810 [ 159.807748][T10002] ? __pfx___sys_bpf+0x10/0x10 [ 159.812546][T10002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.818558][T10002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.824909][T10002] ? do_syscall_64+0x100/0x230 [ 159.829696][T10002] __x64_sys_bpf+0x7c/0x90 [ 159.834140][T10002] do_syscall_64+0xf3/0x230 [ 159.838653][T10002] ? clear_bhb_loop+0x35/0x90 [ 159.843333][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.849231][T10002] RIP: 0033:0x7fb27f17fed9 [ 159.853641][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.873246][T10002] RSP: 002b:00007fb27ff71058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.881662][T10002] RAX: ffffffffffffffda RBX: 00007fb27f345fa0 RCX: 00007fb27f17fed9 [ 159.889634][T10002] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 159.897609][T10002] RBP: 00007fb27ff710a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.905577][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.913545][T10002] R13: 0000000000000000 R14: 00007fb27f345fa0 R15: 00007ffdc8094828 [ 159.921527][T10002] </TASK> [ 160.020797][T10008] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 160.035318][T10008] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 160.093247][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 160.195940][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1318'. [ 160.394692][T10035] FAULT_INJECTION: forcing a failure. [ 160.394692][T10035] name failslab, interval 1, probability 0, space 0, times 0 [ 160.428966][T10035] CPU: 1 UID: 0 PID: 10035 Comm: syz.3.1323 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 160.439798][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.449883][T10035] Call Trace: [ 160.453180][T10035] <TASK> [ 160.456125][T10035] dump_stack_lvl+0x241/0x360 [ 160.460835][T10035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.466186][T10035] ? __pfx__printk+0x10/0x10 [ 160.470812][T10035] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 160.477004][T10035] ? kernel_text_address+0xa7/0xe0 [ 160.482147][T10035] ? __kernel_text_address+0xd/0x40 [ 160.487373][T10035] should_fail_ex+0x3b0/0x4e0 [ 160.492077][T10035] should_failslab+0xac/0x100 [ 160.496785][T10035] kmem_cache_alloc_node_noprof+0x77/0x380 [ 160.502614][T10035] ? __alloc_skb+0x1c3/0x440 [ 160.507210][T10035] ? stack_trace_save+0x118/0x1d0 [ 160.512240][T10035] __alloc_skb+0x1c3/0x440 [ 160.516667][T10035] ? __pfx___alloc_skb+0x10/0x10 [ 160.521602][T10035] ? __lock_acquire+0x1397/0x2100 [ 160.526630][T10035] __pskb_copy_fclone+0xb1/0x10c0 [ 160.531658][T10035] ? __asan_memset+0x23/0x50 [ 160.536247][T10035] ? lockdep_init_map_type+0xa1/0x910 [ 160.541633][T10035] tipc_msg_reassemble+0x1be/0x590 [ 160.546744][T10035] ? __pfx_tipc_msg_reassemble+0x10/0x10 [ 160.552412][T10035] ? __raw_spin_lock_init+0x45/0x100 [ 160.557701][T10035] tipc_mcast_xmit+0x24c/0x19c0 [ 160.562582][T10035] ? __might_fault+0xc6/0x120 [ 160.567258][T10035] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 160.572543][T10035] ? _copy_from_iter+0x377/0x1e70 [ 160.577566][T10035] ? kmem_cache_alloc_node_noprof+0x22c/0x380 [ 160.583637][T10035] ? __build_skb_around+0x245/0x3d0 [ 160.588838][T10035] ? __alloc_skb+0x2d5/0x440 [ 160.593421][T10035] ? __pfx__copy_from_iter+0x10/0x10 [ 160.598710][T10035] ? __pfx___alloc_skb+0x10/0x10 [ 160.603646][T10035] ? tipc_msg_build+0x42a/0x1070 [ 160.608576][T10035] ? __check_object_size+0x98/0x900 [ 160.613780][T10035] ? tipc_msg_build+0x4b3/0x1070 [ 160.618719][T10035] ? __pfx_lock_release+0x10/0x10 [ 160.623756][T10035] tipc_send_group_bcast+0x8bd/0xbd0 [ 160.629058][T10035] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 160.634873][T10035] ? tipc_dest_list_purge+0x158/0x190 [ 160.640246][T10035] ? __pfx_woken_wake_function+0x10/0x10 [ 160.645890][T10035] __tipc_sendmsg+0x24bd/0x35e0 [ 160.650757][T10035] ? __pfx___tipc_sendmsg+0x10/0x10 [ 160.655961][T10035] ? validate_chain+0x11e/0x5920 [ 160.660924][T10035] ? __pfx_validate_chain+0x10/0x10 [ 160.666135][T10035] ? __pfx_validate_chain+0x10/0x10 [ 160.671334][T10035] ? mark_lock+0x9a/0x360 [ 160.675665][T10035] ? __lock_acquire+0x1397/0x2100 [ 160.680703][T10035] ? mark_lock+0x9a/0x360 [ 160.685033][T10035] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 160.691011][T10035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.697346][T10035] ? __local_bh_enable_ip+0x168/0x200 [ 160.702721][T10035] ? tipc_sendmsg+0x47/0x70 [ 160.707224][T10035] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.712943][T10035] ? do_raw_spin_unlock+0x13c/0x8b0 [ 160.718146][T10035] ? __pfx_tipc_sendmsg+0x10/0x10 [ 160.723170][T10035] tipc_sendmsg+0x55/0x70 [ 160.727500][T10035] __sock_sendmsg+0x221/0x270 [ 160.732179][T10035] ____sys_sendmsg+0x52a/0x7e0 [ 160.736950][T10035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.742231][T10035] ? __fget_files+0x2a/0x410 [ 160.746822][T10035] ? __fget_files+0x2a/0x410 [ 160.751411][T10035] __sys_sendmsg+0x269/0x350 [ 160.755999][T10035] ? __pfx_lock_release+0x10/0x10 [ 160.761024][T10035] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.766144][T10035] ? __pfx_vfs_write+0x10/0x10 [ 160.770926][T10035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.777252][T10035] ? do_syscall_64+0x100/0x230 [ 160.782024][T10035] ? do_syscall_64+0xb6/0x230 [ 160.786706][T10035] do_syscall_64+0xf3/0x230 [ 160.791212][T10035] ? clear_bhb_loop+0x35/0x90 [ 160.795886][T10035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.801781][T10035] RIP: 0033:0x7fcaee97fed9 [ 160.806195][T10035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.825795][T10035] RSP: 002b:00007fcaef79d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.834210][T10035] RAX: ffffffffffffffda RBX: 00007fcaeeb46080 RCX: 00007fcaee97fed9 [ 160.842179][T10035] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 160.850148][T10035] RBP: 00007fcaef79d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 160.858117][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.866082][T10035] R13: 0000000000000001 R14: 00007fcaeeb46080 R15: 00007ffe643efe28 [ 160.874060][T10035] </TASK> [ 161.468493][T10065] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 161.641622][T10076] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 161.729394][T10085] ax25_connect(): syz.3.1342 uses autobind, please contact jreuter@yaina.de [ 161.781577][T10081] netlink: 'syz.4.1341': attribute type 11 has an invalid length. [ 161.816005][T10090] netlink: 'syz.4.1341': attribute type 11 has an invalid length. [ 161.858309][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.865833][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.876824][T10096] bridge0: entered allmulticast mode [ 161.925950][T10100] netlink: 'syz.4.1347': attribute type 4 has an invalid length. [ 161.941262][T10103] bridge_slave_1: left allmulticast mode [ 161.953255][T10103] bridge_slave_1: left promiscuous mode [ 161.972817][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.047228][T10103] bridge_slave_0: left allmulticast mode [ 162.053073][T10103] bridge_slave_0: left promiscuous mode [ 162.059383][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.961236][T10147] erspan1: entered promiscuous mode [ 162.969023][T10147] erspan1: entered allmulticast mode [ 163.420300][T10169] FAULT_INJECTION: forcing a failure. [ 163.420300][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 163.433068][T10169] CPU: 1 UID: 0 PID: 10169 Comm: syz.0.1367 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 163.443863][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.453953][T10169] Call Trace: [ 163.457254][T10169] <TASK> [ 163.460184][T10169] dump_stack_lvl+0x241/0x360 [ 163.464866][T10169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.470068][T10169] ? __pfx__printk+0x10/0x10 [ 163.474665][T10169] ? __pfx_lock_acquire+0x10/0x10 [ 163.479697][T10169] should_fail_ex+0x3b0/0x4e0 [ 163.484377][T10169] should_failslab+0xac/0x100 [ 163.489059][T10169] __kmalloc_cache_noprof+0x70/0x390 [ 163.494347][T10169] ? tipc_nametbl_lookup_mcast_sockets+0x62f/0xd70 [ 163.500860][T10169] tipc_nametbl_lookup_mcast_sockets+0x62f/0xd70 [ 163.507191][T10169] ? tipc_nametbl_lookup_mcast_sockets+0x56/0xd70 [ 163.513624][T10169] tipc_sk_mcast_rcv+0x6ce/0x1400 [ 163.518665][T10169] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 163.524142][T10169] ? __raw_spin_lock_init+0x45/0x100 [ 163.529431][T10169] tipc_mcast_xmit+0x12ad/0x19c0 [ 163.534378][T10169] ? __might_fault+0xc6/0x120 [ 163.539054][T10169] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 163.544341][T10169] ? _copy_from_iter+0x377/0x1e70 [ 163.549364][T10169] ? kmem_cache_alloc_node_noprof+0x22c/0x380 [ 163.555438][T10169] ? __build_skb_around+0x245/0x3d0 [ 163.560644][T10169] ? __alloc_skb+0x2d5/0x440 [ 163.565229][T10169] ? __pfx__copy_from_iter+0x10/0x10 [ 163.570520][T10169] ? __pfx___alloc_skb+0x10/0x10 [ 163.575458][T10169] ? tipc_msg_build+0x42a/0x1070 [ 163.580390][T10169] ? __check_object_size+0x98/0x900 [ 163.585596][T10169] ? tipc_msg_build+0x4b3/0x1070 [ 163.590537][T10169] ? __pfx_lock_release+0x10/0x10 [ 163.595577][T10169] tipc_send_group_bcast+0x8bd/0xbd0 [ 163.600879][T10169] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 163.606703][T10169] ? tipc_dest_list_purge+0x158/0x190 [ 163.612080][T10169] ? __pfx_woken_wake_function+0x10/0x10 [ 163.617725][T10169] __tipc_sendmsg+0x24bd/0x35e0 [ 163.622589][T10169] ? __pfx___tipc_sendmsg+0x10/0x10 [ 163.627794][T10169] ? validate_chain+0x11e/0x5920 [ 163.632736][T10169] ? __pfx_validate_chain+0x10/0x10 [ 163.637934][T10169] ? __pfx_validate_chain+0x10/0x10 [ 163.643141][T10169] ? mark_lock+0x9a/0x360 [ 163.647473][T10169] ? __lock_acquire+0x1397/0x2100 [ 163.652511][T10169] ? mark_lock+0x9a/0x360 [ 163.656842][T10169] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.662823][T10169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.669155][T10169] ? __local_bh_enable_ip+0x168/0x200 [ 163.674537][T10169] ? tipc_sendmsg+0x47/0x70 [ 163.679069][T10169] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 163.684787][T10169] ? do_raw_spin_unlock+0x13c/0x8b0 [ 163.689988][T10169] ? __pfx_tipc_sendmsg+0x10/0x10 [ 163.695016][T10169] tipc_sendmsg+0x55/0x70 [ 163.699356][T10169] __sock_sendmsg+0x221/0x270 [ 163.704040][T10169] ____sys_sendmsg+0x52a/0x7e0 [ 163.708810][T10169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.714103][T10169] ? __fget_files+0x2a/0x410 [ 163.718695][T10169] ? __fget_files+0x2a/0x410 [ 163.723291][T10169] __sys_sendmsg+0x269/0x350 [ 163.727889][T10169] ? __pfx_lock_release+0x10/0x10 [ 163.732913][T10169] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.738038][T10169] ? __pfx_vfs_write+0x10/0x10 [ 163.742825][T10169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.749153][T10169] ? do_syscall_64+0x100/0x230 [ 163.753924][T10169] ? do_syscall_64+0xb6/0x230 [ 163.758617][T10169] do_syscall_64+0xf3/0x230 [ 163.763123][T10169] ? clear_bhb_loop+0x35/0x90 [ 163.767803][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.773701][T10169] RIP: 0033:0x7fc01c97fed9 [ 163.778115][T10169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.797720][T10169] RSP: 002b:00007fc01d788058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.806136][T10169] RAX: ffffffffffffffda RBX: 00007fc01cb46080 RCX: 00007fc01c97fed9 [ 163.814111][T10169] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 163.822081][T10169] RBP: 00007fc01d7880a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.830051][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.838020][T10169] R13: 0000000000000001 R14: 00007fc01cb46080 R15: 00007fff3a665c08 [ 163.846001][T10169] </TASK> [ 163.975948][T10176] netlink: 'syz.1.1370': attribute type 12 has an invalid length. [ 164.002097][T10179] FAULT_INJECTION: forcing a failure. [ 164.002097][T10179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.021804][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.4.1373 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 164.032638][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.042741][T10179] Call Trace: [ 164.046039][T10179] <TASK> [ 164.048985][T10179] dump_stack_lvl+0x241/0x360 [ 164.053745][T10179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.058983][T10179] ? __pfx__printk+0x10/0x10 [ 164.063611][T10179] ? __pfx_lock_release+0x10/0x10 [ 164.068679][T10179] ? rcu_is_watching+0x15/0xb0 [ 164.073476][T10179] should_fail_ex+0x3b0/0x4e0 [ 164.078200][T10179] _copy_from_user+0x2f/0xc0 [ 164.082826][T10179] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 164.088052][T10179] map_update_elem+0x4d0/0x6f0 [ 164.092850][T10179] __sys_bpf+0x76f/0x810 [ 164.097132][T10179] ? __pfx___sys_bpf+0x10/0x10 [ 164.101940][T10179] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.107952][T10179] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.114311][T10179] ? do_syscall_64+0x100/0x230 [ 164.119121][T10179] __x64_sys_bpf+0x7c/0x90 [ 164.123596][T10179] do_syscall_64+0xf3/0x230 [ 164.128179][T10179] ? clear_bhb_loop+0x35/0x90 [ 164.132863][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.138872][T10179] RIP: 0033:0x7fbf3457fed9 [ 164.143307][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.162940][T10179] RSP: 002b:00007fbf323f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.171380][T10179] RAX: ffffffffffffffda RBX: 00007fbf34745fa0 RCX: 00007fbf3457fed9 [ 164.179360][T10179] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 164.187332][T10179] RBP: 00007fbf323f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.195299][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.203263][T10179] R13: 0000000000000000 R14: 00007fbf34745fa0 R15: 00007fff083cfb58 [ 164.211244][T10179] </TASK> [ 164.708038][T10218] [ 164.710405][T10218] ============================================ [ 164.716541][T10218] WARNING: possible recursive locking detected [ 164.722672][T10218] 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 Not tainted [ 164.729753][T10218] -------------------------------------------- [ 164.735876][T10218] syz.3.1387/10218 is trying to acquire lock: [ 164.741919][T10218] ffff88805ce42200 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 164.750773][T10218] [ 164.750773][T10218] but task is already holding lock: [ 164.758118][T10218] ffff88805ce42200 (&trie->lock){..-.}-{3:3}, at: trie_update_elem+0xc8/0xc00 [ 164.766971][T10218] [ 164.766971][T10218] other info that might help us debug this: [ 164.775009][T10218] Possible unsafe locking scenario: [ 164.775009][T10218] [ 164.782436][T10218] CPU0 [ 164.785696][T10218] ---- [ 164.788956][T10218] lock(&trie->lock); [ 164.793007][T10218] lock(&trie->lock); [ 164.797070][T10218] [ 164.797070][T10218] *** DEADLOCK *** [ 164.797070][T10218] [ 164.805192][T10218] May be due to missing lock nesting notation [ 164.805192][T10218] [ 164.813494][T10218] 3 locks held by syz.3.1387/10218: [ 164.818671][T10218] #0: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_map_update_value+0x433/0x5c0 [ 164.828574][T10218] #1: ffff88805ce42200 (&trie->lock){..-.}-{3:3}, at: trie_update_elem+0xc8/0xc00 [ 164.837872][T10218] #2: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540 [ 164.847244][T10218] [ 164.847244][T10218] stack backtrace: [ 164.853111][T10218] CPU: 1 UID: 0 PID: 10218 Comm: syz.3.1387 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 164.863847][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.873883][T10218] Call Trace: [ 164.877169][T10218] <TASK> [ 164.880086][T10218] dump_stack_lvl+0x241/0x360 [ 164.884751][T10218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.889932][T10218] ? __pfx__printk+0x10/0x10 [ 164.894505][T10218] ? lockdep_unlock+0x16a/0x300 [ 164.899339][T10218] print_deadlock_bug+0x483/0x620 [ 164.904348][T10218] validate_chain+0x15e2/0x5920 [ 164.909188][T10218] ? preempt_count_add+0x93/0x190 [ 164.914218][T10218] ? mark_lock+0x9a/0x360 [ 164.918550][T10218] ? __pfx_validate_chain+0x10/0x10 [ 164.923732][T10218] ? __lock_acquire+0x1397/0x2100 [ 164.928741][T10218] ? mark_lock+0x9a/0x360 [ 164.933070][T10218] ? validate_chain+0x11e/0x5920 [ 164.937995][T10218] ? __pfx_validate_chain+0x10/0x10 [ 164.943180][T10218] ? mark_lock+0x9a/0x360 [ 164.947534][T10218] __lock_acquire+0x1397/0x2100 [ 164.952370][T10218] lock_acquire+0x1ed/0x550 [ 164.956855][T10218] ? trie_delete_elem+0x96/0x6a0 [ 164.961779][T10218] ? __pfx_lock_acquire+0x10/0x10 [ 164.966803][T10218] ? __lock_acquire+0x1397/0x2100 [ 164.971831][T10218] _raw_spin_lock_irqsave+0xd5/0x120 [ 164.977100][T10218] ? trie_delete_elem+0x96/0x6a0 [ 164.982021][T10218] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 164.987898][T10218] ? __pfx_lock_acquire+0x10/0x10 [ 164.992904][T10218] trie_delete_elem+0x96/0x6a0 [ 164.997652][T10218] ? __pfx___cant_migrate+0x10/0x10 [ 165.002832][T10218] ? bpf_trace_run2+0x1fc/0x540 [ 165.007667][T10218] bpf_prog_6f5f05285f674219+0x43/0x4c [ 165.013106][T10218] bpf_trace_run2+0x2ec/0x540 [ 165.017797][T10218] ? __pfx_bpf_trace_run2+0x10/0x10 [ 165.022980][T10218] ? trie_update_elem+0x26c/0xc00 [ 165.027987][T10218] ? percpu_ref_put+0x1f/0x250 [ 165.032728][T10218] ? trie_update_elem+0x26c/0xc00 [ 165.037738][T10218] ? trie_update_elem+0x26c/0xc00 [ 165.042766][T10218] kfree+0x382/0x430 [ 165.046646][T10218] ? bpf_map_kmalloc_node+0x147/0x1c0 [ 165.052011][T10218] trie_update_elem+0x26c/0xc00 [ 165.056846][T10218] ? __pfx___might_resched+0x10/0x10 [ 165.062111][T10218] ? __pfx_bpf_obj_pin_uptrs+0x10/0x10 [ 165.067552][T10218] bpf_map_update_value+0x533/0x5c0 [ 165.072737][T10218] map_update_elem+0x51a/0x6f0 [ 165.077500][T10218] __sys_bpf+0x76f/0x810 [ 165.081721][T10218] ? __pfx___sys_bpf+0x10/0x10 [ 165.086470][T10218] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 165.092447][T10218] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.098757][T10218] ? do_syscall_64+0x100/0x230 [ 165.103515][T10218] __x64_sys_bpf+0x7c/0x90 [ 165.107919][T10218] do_syscall_64+0xf3/0x230 [ 165.112408][T10218] ? clear_bhb_loop+0x35/0x90 [ 165.117066][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.122942][T10218] RIP: 0033:0x7fcaee97fed9 [ 165.127375][T10218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.147017][T10218] RSP: 002b:00007fcaef7be058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.155420][T10218] RAX: ffffffffffffffda RBX: 00007fcaeeb45fa0 RCX: 00007fcaee97fed9 [ 165.163375][T10218] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 165.171333][T10218] RBP: 00007fcaef7be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.179309][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.187278][T10218] R13: 0000000000000000 R14: 00007fcaeeb45fa0 R15: 00007ffe643efe28 [ 165.195241][T10218] </TASK>