last executing test programs: 3m8.385593022s ago: executing program 1 (id=161): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}, {0x4000000}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 3m8.240139283s ago: executing program 0 (id=162): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x10000, '\x00', r2, r3, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@remote, @remote, @bcast, @remote, @remote, @bcast, @default, @rose]}, &(0x7f0000000200)=0x48) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000240)=0x1, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000280)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80010}, 0x2000004) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x610002, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000440)="7f39de7ddc153a78bfb43cd3974278e76ebc741b302553a4a4dcbc91753fb8be5b60c23b9d6799465b430fb16ff2a255eb11d32e0990f033f534b3ba86", 0x3d) r9 = accept4$inet6(r6, 0x0, &(0x7f0000000480), 0x80800) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x0, 0x4e22, 0x0, 0x0, 0xc0, 0x40, 0x11, 0x0, 0xee00}, {0x5, 0x7, 0x7, 0xfff, 0x4, 0x7, 0xc28, 0x2}, {0x436365a4, 0x1ff, 0x8, 0x7}, 0xbd, 0x6e6bbe, 0x1}, {{@in=@loopback, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x3500, 0x4, 0x1, 0x40, 0x1, 0x7, 0x7}}, 0xe8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=r11, 0x4) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, r12, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4054) unshare(0x400) write(r4, &(0x7f0000000b40)="7ffc8475bc79597ea05b5ac50a31d573a0548ec716b415ffea695bc270b51ca229e79a1031e45e0cd324f4d7a75bf74f131d436f2e5b3dc31da5f15d1fec103a6f871e6e6f25881ef1104983c94c", 0x4e) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$ax25(0x3, 0x3, 0x1) r14 = socket(0x1f, 0x3, 0x3) getsockopt$WPAN_SECURITY(r14, 0x0, 0x1, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000c40)="e7d0f63c31c496bf8bcbb57ab2b1a319e5a9ad4712556fcbdb45cc8a70a62f3437888eeb0e2be2a11261ddb93bfa4947c33168c322816abfe65111f0986f21198e4f249bc4c3e60fb7ffb47c624c8b2b660b1eee81e36d045d346b662efdc72602c1fa6cc1f7e12e02e151174677", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000cc0)='find_free_extent\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 3m8.109502932s ago: executing program 1 (id=165): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x38, r1, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x38}}, 0x40004) 3m7.940049825s ago: executing program 2 (id=167): r0 = socket(0x10, 0x3, 0x0) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x101, 0xd, 0x8, 0x7, 0x1, @remote}, 0x10) r1 = socket(0x11, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="110000001a005f0414f9f4070009040081", 0x11) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x0, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {0x0, 0x0, 0x0, 0xffffffffffffff80}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 3m7.880378752s ago: executing program 1 (id=168): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x8c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x900000000000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x0, 0x2, 0x0, {0x1, 0xe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x6, 0x8}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xd4, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa, 0x70}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x81, 0x0, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x63c}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x23}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6a0a, 0x6, 0x6, 0x9, 0x6]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x53b}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0xf8, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x6}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d78ec0323d153052999d1ce374"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6503000000000000000000d44a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e83716af4e"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "00c40d00de"}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2e7dc1bd26"}, @NL80211_KEY_SEQ={0x12, 0x4, "3414104c2204742447d158343c9d"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a99b166829b56f338f44816d9a"}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "99bd6d9488ca"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3f2d7375229756943cf44b7dca"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x95}, 0x24008080) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001100)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @private, 0xff000000, 0x0, 0x0, 0x4, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0xc0, 0x16c}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @dev={0xac, 0x14, 0x14, 0x40}, @local, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x452) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x595, 0xffffe9d6, 0x1}}]}, 0x40}}, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r12, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0xb00000000065808, 0x0) read(r13, 0x0, 0x0) 3m7.782851802s ago: executing program 2 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)='pF', 0x2}, {&(0x7f0000000780)="78d290", 0x3}, {&(0x7f00000007c0)="5c6f9e4a2f56", 0x6}, {&(0x7f0000000940)="a8ed88ef", 0x4}, {&(0x7f0000000880)="e7", 0x1}, {&(0x7f0000000a00)="dcfc7b8e7369", 0x6}, {&(0x7f00000008c0)="d274", 0x2}], 0x7}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="fe740fceec1a0ca1a8fe77ce9c323e2fb0c88fb29f46c04968f440ada4ebb3749a024744c96de038c3fac35ec84b382e3c64dec34f733096075893328f80a7", 0x3f}, {&(0x7f0000000d00)="155484a79d6d4b007659d8a24b1e0dc8d258173231c0698305d294343dc556f1edf128e73b339f8860a5ae713e484e8556aef6659584ae3c6c6253e1059321793d", 0x41}, {&(0x7f0000000d80)="bc2af07e218c627885177c0cdc69eb52e5e78feb459dec19d145980e0ca8da71777b54af5c83d0cf08128ab3fe43b6310c4b9022b9761353b677ac3f44c86d8ac342864aadb040f539a51c5e639fdb43606319364a3d4982904ab97c907d376256253895586079b6644ddccd09b670748890ee14a04c3512cbebdd1cffa6dc2e8d257190780ce119ca8d27c66755320f9594f9e9f83bcf36c0ea", 0x9a}], 0x3}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001040)="d24659e872b34ce1581ba9ef852e3e3a30835072e26bcd9019028cc0a09fe7d8b4ceda78731baba8b2cfdaafc5892bedfecdae8ccce5a05948dc03326c1a6e3ee44fea15839575e372770f80c215b1b1f21c", 0x52}, {&(0x7f0000001100)="74faff4cef67ae7c4ac54405", 0xc}, {&(0x7f0000001140)="6bdba7c9", 0x4}, {&(0x7f00000011c0)="d6f49e83", 0x4}, {&(0x7f00000012c0)='\b2&', 0x3}, {&(0x7f0000001300)="5ebf12d667", 0x5}, {&(0x7f0000001380)='\b', 0x1}, {&(0x7f00000013c0)="dda62d5a1b50a483876cae862a3a0a1beda3e1e7a6b9287f60b557358e6d92e4", 0x20}], 0x8, &(0x7f0000001680)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x30}}], 0x3, 0x4008440) 3m7.737576705s ago: executing program 0 (id=171): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000000000300000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100140000000000010015"], 0x80}, 0x1, 0x7}, 0x0) 3m7.683045236s ago: executing program 2 (id=172): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x800000000000000}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 3m7.564283941s ago: executing program 1 (id=173): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0xf9, 0xde, 0x4, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x7, 0xf}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @loopback, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="cc7b2476d5798a59ee31c0ab1b8946c50b52925d3b2b87b1fe5b9ff57a3c47e1734c496d9c13604f79f53768ed2da8a564bdfe973ff05deac61e0713b27ddeaf1fe114e20b8a846a899d1bbecb6c8db3c227602e9959aeca83b15d32d2e32601a7540979500a59169b9c12aebbe94c9c8260c81abee970fed0091093e4edf152c0cc5c0b4fec85af660fefc1463ec3a087f106e4289fa694117ba057366245169571bb94ac77be7e9ce5f81f401c2c2a898286b7a929b2cf47e23482cc1c38d2fec7e1d8df7a68cdffa42e", 0xcb}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="e0000002ac1e0001000000001800000000000000000000000700000094040100820386001c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="7f0000017f00000100000000140000000000000000000000020000000e00000000000000140000000000000000000000020000000500000000000000"], 0x178}, 0x884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000040000000000001000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xd, &(0x7f00000020c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000300)=0x6, 0x4) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) 3m7.48565362s ago: executing program 0 (id=174): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m7.476156615s ago: executing program 0 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffffe4}, 0x0) 3m7.257398265s ago: executing program 2 (id=177): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 3m7.207259724s ago: executing program 2 (id=178): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="fffffffffffffff8b705000008000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m7.057407961s ago: executing program 0 (id=179): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000700)="604000010400000086b3d7a186dd", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp6(0xa, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000005c0)={0x0, 0x2710}, 0x10) splice(r3, 0x0, r6, 0x0, 0x7, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000021f0100"/20], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xa4}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00'}) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r12, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYRESHEX=r8, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r5, @ANYRESHEX=r11, @ANYRES8=r0], 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r11}, 0x38) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r11, &(0x7f0000000580), 0x0}, 0x20) 3m6.981503722s ago: executing program 1 (id=180): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000003000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 3m6.681888624s ago: executing program 2 (id=182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)='pF', 0x2}, {&(0x7f0000000780)="78d290", 0x3}, {&(0x7f00000007c0)="5c6f9e4a2f56", 0x6}, {&(0x7f0000000940)="a8ed88ef", 0x4}, {&(0x7f0000000880)="e7", 0x1}, {&(0x7f0000000a00)="dcfc7b8e7369", 0x6}, {&(0x7f00000008c0)="d274", 0x2}], 0x7}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="fe740fceec1a0ca1a8fe77ce9c323e2fb0c88fb29f46c04968f440ada4ebb3749a024744c96de038c3fac35ec84b382e3c64dec34f733096075893328f80a7", 0x3f}, {&(0x7f0000000d00)="155484a79d6d4b007659d8a24b1e0dc8d258173231c0698305d294343dc556f1edf128e73b339f8860a5ae713e484e8556aef6659584ae3c6c6253e1059321793d", 0x41}, {&(0x7f0000000d80)="bc2af07e218c627885177c0cdc69eb52e5e78feb459dec19d145980e0ca8da71777b54af5c83d0cf08128ab3fe43b6310c4b9022b9761353b677ac3f44c86d8ac342864aadb040f539a51c5e639fdb43606319364a3d4982904ab97c907d376256253895586079b6644ddccd09b670748890ee14a04c3512cbebdd1cffa6dc2e8d257190780ce119ca8d27c66755320f9594f9e9f83bcf36c0ea", 0x9a}], 0x3}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001040)="d24659e872b34ce1581ba9ef852e3e3a30835072e26bcd9019028cc0a09fe7d8b4ceda78731baba8b2cfdaafc5892bedfecdae8ccce5a05948dc03326c1a6e3ee44fea15839575e372770f80c215b1b1f21c", 0x52}, {&(0x7f0000001100)="74faff4cef67ae7c4ac54405", 0xc}, {&(0x7f0000001140)="6bdba7c9", 0x4}, {&(0x7f00000011c0)="d6f49e83", 0x4}, {&(0x7f00000012c0)='\b2&', 0x3}, {&(0x7f0000001300)="5ebf12d667", 0x5}, {&(0x7f0000001380)='\b', 0x1}, {&(0x7f00000013c0)="dda62d5a1b50a483876cae862a3a0a1beda3e1e7a6b9287f60b557358e6d92e4", 0x20}], 0x8, &(0x7f0000001680)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x30}}], 0x3, 0x4008440) 3m6.513837144s ago: executing program 32 (id=182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)='pF', 0x2}, {&(0x7f0000000780)="78d290", 0x3}, {&(0x7f00000007c0)="5c6f9e4a2f56", 0x6}, {&(0x7f0000000940)="a8ed88ef", 0x4}, {&(0x7f0000000880)="e7", 0x1}, {&(0x7f0000000a00)="dcfc7b8e7369", 0x6}, {&(0x7f00000008c0)="d274", 0x2}], 0x7}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="fe740fceec1a0ca1a8fe77ce9c323e2fb0c88fb29f46c04968f440ada4ebb3749a024744c96de038c3fac35ec84b382e3c64dec34f733096075893328f80a7", 0x3f}, {&(0x7f0000000d00)="155484a79d6d4b007659d8a24b1e0dc8d258173231c0698305d294343dc556f1edf128e73b339f8860a5ae713e484e8556aef6659584ae3c6c6253e1059321793d", 0x41}, {&(0x7f0000000d80)="bc2af07e218c627885177c0cdc69eb52e5e78feb459dec19d145980e0ca8da71777b54af5c83d0cf08128ab3fe43b6310c4b9022b9761353b677ac3f44c86d8ac342864aadb040f539a51c5e639fdb43606319364a3d4982904ab97c907d376256253895586079b6644ddccd09b670748890ee14a04c3512cbebdd1cffa6dc2e8d257190780ce119ca8d27c66755320f9594f9e9f83bcf36c0ea", 0x9a}], 0x3}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001040)="d24659e872b34ce1581ba9ef852e3e3a30835072e26bcd9019028cc0a09fe7d8b4ceda78731baba8b2cfdaafc5892bedfecdae8ccce5a05948dc03326c1a6e3ee44fea15839575e372770f80c215b1b1f21c", 0x52}, {&(0x7f0000001100)="74faff4cef67ae7c4ac54405", 0xc}, {&(0x7f0000001140)="6bdba7c9", 0x4}, {&(0x7f00000011c0)="d6f49e83", 0x4}, {&(0x7f00000012c0)='\b2&', 0x3}, {&(0x7f0000001300)="5ebf12d667", 0x5}, {&(0x7f0000001380)='\b', 0x1}, {&(0x7f00000013c0)="dda62d5a1b50a483876cae862a3a0a1beda3e1e7a6b9287f60b557358e6d92e4", 0x20}], 0x8, &(0x7f0000001680)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x30}}], 0x3, 0x4008440) 3m5.349466059s ago: executing program 0 (id=186): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0xffffffff}}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 3m5.085080986s ago: executing program 33 (id=186): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0xffffffff}}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 3m5.039383148s ago: executing program 1 (id=189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}}}, 0xb8}}, 0x0) 3m5.038835818s ago: executing program 34 (id=189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}}}, 0xb8}}, 0x0) 2.437349317s ago: executing program 4 (id=2713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = gettid() r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) syz_open_procfs$namespace(r4, &(0x7f0000000680)='ns/cgroup\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getqdisc={0x40, 0x26, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x4, 0xb}, {0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x904}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) close(0x3) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000380)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_emit_ethernet(0x4d, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x17, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, [{0x1, 0x0, "00d414ced4"}]}}}}}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'syzkaller1\x00', 'bond_slave_0\x00'}, 0x0, 0x118, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, [], [], 'veth0_macvtap\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x800) r9 = socket$kcm(0x21, 0x2, 0xa) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f00000003c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x18, {0xa, 0x0, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff006000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040055}, 0x2402c014) listen(r6, 0x87e6) 2.072264851s ago: executing program 5 (id=2723): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.951202588s ago: executing program 3 (id=2726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) shutdown(r3, 0x0) ppoll(&(0x7f0000000a40)=[{r3}], 0x1, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x1000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x10}, 0x4) 1.950855585s ago: executing program 5 (id=2727): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x2000000, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 1.785527299s ago: executing program 5 (id=2729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 1.593725904s ago: executing program 3 (id=2730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r2) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x100, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b00000000514000327bd7000fcdbdf2508000100000000000800030004000000080001000100000008000300030000080003000200000008000100020000000800030001000000080001000100000008000300000000000800010002000000080003000100000008000100000000000800030000000000080001000000000008000300020000000800010001000000080003000200000008000100000000000800030003000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4008101}, 0x11) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e40)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0xc8ec, 0x4, 0xa, 0x1, 0x0, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4bcf52d32e0400000000d40e7a0c1f7bff000000af000000000b4af975cda405", 0x20) close(0x3) 1.591354391s ago: executing program 5 (id=2740): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x890) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x14, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) accept$inet6(r3, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) 1.454392376s ago: executing program 7 (id=2731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)='pF', 0x2}, {&(0x7f0000000780)="78d290", 0x3}, {&(0x7f00000007c0)="5c6f9e4a2f56f726a8bb5a0b", 0xc}, {&(0x7f0000000940)="a8ed88ef", 0x4}, {&(0x7f0000000880)="e7", 0x1}, {&(0x7f0000000a00)="dcfc7b8e7369", 0x6}, {&(0x7f00000008c0)="d274", 0x2}], 0x7}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @broadcast}, 0x30, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="fe740fceec1a0ca1a8fe77ce9c323e2fb0c88fb29f46c04968f440ada4ebb3749a024744c96de038c3fac35ec84b382e3c64dec34f733096075893328f80a7", 0x3f}, {&(0x7f0000000d00)="155484a79d6d4b007659d8a24b1e0dc8d258173231c0698305d294343dc556f1edf128e73b339f8860a5ae713e484e8556aef6659584ae3c6c6253e1059321793d", 0x41}, {&(0x7f0000000d80)="bc2af07e218c627885177c0cdc69eb52e5e78feb459dec19d145980e0ca8da71777b54af5c83d0cf08128ab3fe43b6310c4b9022b9761353b677ac3f44c86d8ac342864aadb040f539a51c5e639fdb43606319364a3d4982904ab97c907d376256253895586079b6644ddccd09b670748890ee14a04c3512cbebdd1cffa6dc2e8d257190780ce119ca8d27c66755320f9594f9e9f83bcf36c0ea", 0x9a}], 0x3}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001040)="d24659e872b34ce1581ba9ef852e3e3a30835072e26bcd9019028cc0a09fe7d8b4ceda78731baba8b2cfdaafc5892bedfecdae8ccce5a05948dc03326c1a6e3ee44fea15839575e372770f80c215b1b1f21c", 0x52}, {&(0x7f0000001100)="74faff4cef67ae7c4ac54405", 0xc}, {&(0x7f0000001140)="6bdba7c9", 0x4}, {&(0x7f00000011c0)="d6f49e83", 0x4}, {&(0x7f00000012c0)='\b2&', 0x3}, {&(0x7f0000001300)="5ebf12d667", 0x5}, {&(0x7f0000001380)='\b', 0x1}, {&(0x7f00000013c0)="dda62d5a1b50a483876cae862a3a0a1beda3e1e7a6b9287f60b557358e6d92e4", 0x20}], 0x8, &(0x7f0000001680)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x30}}], 0x3, 0x4008440) 1.41431661s ago: executing program 6 (id=2732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085003f16a121f0678cbd3f9972000087"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@cgroup, 0xffffffffffffffff, 0x18, 0x10, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000dc0)="d0b4163e964573", 0x7, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r7, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x5c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1dc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x400c4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10044080}, 0x8000) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x5452, &(0x7f0000000000)) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 1.411089502s ago: executing program 4 (id=2733): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe) listen(r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000002240), &(0x7f0000002280)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x3bc, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x3ab, 0x0, 0x0, 0x1, [@nested={0x2b1, 0x9a, 0x0, 0x1, [@generic="5308f83cc4e1ce553dc5fb98ad8357f4826b7894a8c5cd41d4336738ef1f3ac8cf662ead3be11fbe534265cb63dd8720a824b413e5605931493cf7fbb17e1dd1ca193157435295a1fc0254a9987e1ba99f21193018019dcf0c83b958a9c2b9058b6a17e2277d4a969fc957166f2159304a4688dbc9bc24f6f30bc4278f2693881f9b9a30b753d614355d6ab9d91ce0b0070284b9c09c0413ada8ea2e31e9fc09edf482dc6e", @nested={0x206, 0x123, 0x0, 0x1, [@nested={0x4, 0x3f}, @generic="2f0f5b5549479686b9c3aaed62fa2794742194fc798e4df56c8fde2e11325869cbf7fe47ce4d51c35f740994688321cdb6a2e5827942c4c1ad92a5785328f18f49e5", @nested={0x4, 0x10d}, @generic="277016193feedeb412dbf018d98eaf744d09004451ac8398bd30c8765e3e7d8f745b43284715f79aea71c1e88f0bd7392171b86d8157742d03ed27e762ffd1a6c91245e2c60ac10359ea0b716eb4b6f7f48c234b24c28d987e0de04c359e9139c4803fb43e153270dc474cb18183e2195c23097173a11d85c46ef3d028a544fe359a3df69582d09fd9df211e1452939b9d40f7d71225956fc9", @nested={0x4, 0x3d}, @typed={0x8, 0xa3, 0x0, 0x0, @uid=r3}, @generic="3e2bd82ef951a26e91b97cd6cb37867f7cee7bfdfcb3491150b47a817488aec932fa0eef9411184cac730244b63d13dbfe664e447a232c4141061edd5815c740721db42e4fda806319a9c2e85c0181529ebdfbad0e905c", @typed={0xb9, 0xa7, 0x0, 0x0, @binary="e0f781bb9e102f54673d65d66db0b00e9e19a744f328bd62b568010a3d895562309f094b1d1a3d1e8aec905897b0070a1c380deb77f79be0cc885ada5341478424becb0194e66e617af6522f2f8ab27ce5616a3a0548bd85590276b70eabebcbda2461d000b36e4dd8d46540d5e276c7add0ae453d6110082b27333ed54d72356605699f0b056fc48aa713a6654aa96e2784f8762b6890cfea83d8b465d0ee932f3726aeca85a1593812062b9fe3d0101848b9de00"}]}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x3bc}], 0x1}, 0x0) 1.276335641s ago: executing program 7 (id=2734): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x2c, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000340)={'wg0\x00'}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x44, 0x66, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xffe6}, {0x8, 0xf}, {0x10, 0xf}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0xc2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 1.211735476s ago: executing program 4 (id=2735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x10000000, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 1.096662858s ago: executing program 3 (id=2736): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'rose0\x00', {0x5}, 0xb}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1.03351433s ago: executing program 5 (id=2737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000010900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c0002400000000000000001090001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) close(r2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="585ac6f03331a73de6fd60808961c273806a0c35952496a87701b20d71f94b33cfe12cb0ff7a6864443957ec1eef06146a87696e8c9a604ed6084f14069affbfc4d1d6465d807c664bfc8d8c32f4de8fa64d17082295bf0e8279858f1bcad99a2bea6192e1922493de15d75165f9a8c8e82cc15456dd15a6c5fab689695b7268e8a699ca02106b90e28b3bd297dedd4697a392760a4b5d7ca6b4337afa90792edf494722af6fc5d977", 0xa9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885630182700008"], 0xffdd) 1.032916081s ago: executing program 4 (id=2738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="1106000000000000000001000000080005ff80000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 952.983506ms ago: executing program 4 (id=2739): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000020001000000000000000000000000fb05000500000000000a000000000000000000000000000000000000000000000000000000000000000100140000000000010015"], 0x80}, 0x1, 0x7}, 0x0) 918.407738ms ago: executing program 6 (id=2741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = gettid() r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) syz_open_procfs$namespace(r4, &(0x7f0000000680)='ns/cgroup\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getqdisc={0x40, 0x26, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x4, 0xb}, {0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x904}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) close(0x3) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000380)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_emit_ethernet(0x4d, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x17, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, [{0x1, 0x0, "00d414ced4"}]}}}}}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'syzkaller1\x00', 'bond_slave_0\x00'}, 0x0, 0x118, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, [], [], 'veth0_macvtap\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x800) r9 = socket$kcm(0x21, 0x2, 0xa) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f00000003c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x18, {0xa, 0x0, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff006000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040055}, 0x2402c014) listen(r6, 0x87e6) 841.15081ms ago: executing program 4 (id=2742): r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) recvmmsg(r3, 0x0, 0x0, 0x10022, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000180)=ANY=[@ANYBLOB="aa8aaaaaaaaaaaaaaaaaaabb86dd6800ed00000000f1fb0000000000bbff02000000000000da1ccdd703e06d8f87009078000000000000000000080000000000001800d076c693"], 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getpeername$ax25(r5, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x4c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010700000000000000000500000008000300"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000380)) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000060000000030a01020000000000000000000000000900010073797a30000000000900030073797a3200000000280008800c00024000000000000000000c0001400000f500800000010c00024000000000000000060c000480080002401861807b24000000060a01040000000000000c000640000000000000000104000740140000001100011b00000000000000000000000a000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x481}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}]}, &(0x7f0000002100)=0x10) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x80003, 0x0) 835.287899ms ago: executing program 3 (id=2743): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000010000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x10) 767.234177ms ago: executing program 3 (id=2744): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff020000000000000000ffffff", @ANYRES32=0x0, @ANYBLOB="0080000004200000480012800b000100627269646765000038000280060027000001"], 0x68}}, 0x0) 496.27495ms ago: executing program 6 (id=2745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000024000100000000000000000000000000060004"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8004) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001880)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x8000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @empty, 0x0}, &(0x7f0000000080)=0xc) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_FLOW={0x8, 0xb, 0xfffffffd}]}, 0x34}}, 0x0) (async) sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x19}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="ca6840b6bcf374e5377a25", 0xb}, {&(0x7f0000000800)="67f596402044fbf6e88e3f6c24f9fa5f5d9389f7446ca3e4d6b2e20f1198754009a04fcdd6e6ba4338b1c59cedb15599f97783c439786bf6938a14263787ca4cfc0e168e81b94abb6d3d1eb2dc03503a27847c3b2ea7bbeac7c6ac32130c52a13496aeb69a02396a8290d6f1ec0c226fd635a21feec342b450542b671042f7b33783e4c66cfb98bc53aac094708de6cf035b20e6da3f4c0592c8277f02ac4cf2658a5ac08b4c7aad53b4f403fe6d6a4ba3f7c74a1ba589433f03129bc8bc5c2f87014047bb33c9f2ad65a98951ec114e6fdef9318046a6af9a5fbd013fd60f41337e3678da780c19c963c242ac", 0xed}, {&(0x7f0000000300)="656f3d8bc2bf88a076310175cbb016b385c690654483d3f893710e5b04af92000060dfc9054b485fb43c6767cb430d76dd12fe142c910046db4f38ee915e370d47688ec31ca79d4b66e8a92d15ead658b98814a8873a30fdeddb43340a64edda572e4c362aecbd4361f5b7632ee0e83c1d13a64cf21bf35fad2f5337bfc19713e7174c495cc5b65c446ac3ff662ddc1ad41d5d6efc2f14e30a7addeee5", 0x9d}, {&(0x7f0000003680)="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", 0x42c}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x80080c5) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x1, 0x7800, 0xd9, 0x1000, {{0x26, 0x4, 0x3, 0x1, 0x98, 0x66, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x8, 0xa1, 0x0, 0x5, [0x6]}, @generic={0x83, 0x11, "bb1478996b2a42c707fac28d235df8"}, @generic={0x7, 0xd, "9f28fe2dcd9f67cd31eae8"}, @lsrr={0x83, 0x1b, 0xe5, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2, @multicast1, @remote]}, @rr={0x7, 0x17, 0x46, [@broadcast, @loopback, @multicast2, @loopback, @loopback]}, @timestamp_prespec={0x44, 0x2c, 0x14, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xf}, {@multicast1, 0x2}, {@multicast1, 0xa9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x1f3d}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 362.561498ms ago: executing program 7 (id=2746): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe8880ffffff0000000000000000000100000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) 201.365899ms ago: executing program 6 (id=2747): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe) listen(r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000002240), &(0x7f0000002280)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x3bc, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x3ab, 0x0, 0x0, 0x1, [@nested={0x2b1, 0x9a, 0x0, 0x1, [@generic="5308f83cc4e1ce553dc5fb98ad8357f4826b7894a8c5cd41d4336738ef1f3ac8cf662ead3be11fbe534265cb63dd8720a824b413e5605931493cf7fbb17e1dd1ca193157435295a1fc0254a9987e1ba99f21193018019dcf0c83b958a9c2b9058b6a17e2277d4a969fc957166f2159304a4688dbc9bc24f6f30bc4278f2693881f9b9a30b753d614355d6ab9d91ce0b0070284b9c09c0413ada8ea2e31e9fc09edf482dc6e", @nested={0x206, 0x123, 0x0, 0x1, [@nested={0x4, 0x3f}, @generic="2f0f5b5549479686b9c3aaed62fa2794742194fc798e4df56c8fde2e11325869cbf7fe47ce4d51c35f740994688321cdb6a2e5827942c4c1ad92a5785328f18f49e5", @nested={0x4, 0x10d}, @generic="277016193feedeb412dbf018d98eaf744d09004451ac8398bd30c8765e3e7d8f745b43284715f79aea71c1e88f0bd7392171b86d8157742d03ed27e762ffd1a6c91245e2c60ac10359ea0b716eb4b6f7f48c234b24c28d987e0de04c359e9139c4803fb43e153270dc474cb18183e2195c23097173a11d85c46ef3d028a544fe359a3df69582d09fd9df211e1452939b9d40f7d71225956fc9", @nested={0x4, 0x3d}, @typed={0x8, 0xa3, 0x0, 0x0, @uid=r3}, @generic="3e2bd82ef951a26e91b97cd6cb37867f7cee7bfdfcb3491150b47a817488aec932fa0eef9411184cac730244b63d13dbfe664e447a232c4141061edd5815c740721db42e4fda806319a9c2e85c0181529ebdfbad0e905c", @typed={0xb9, 0xa7, 0x0, 0x0, @binary="e0f781bb9e102f54673d65d66db0b00e9e19a744f328bd62b568010a3d895562309f094b1d1a3d1e8aec905897b0070a1c380deb77f79be0cc885ada5341478424becb0194e66e617af6522f2f8ab27ce5616a3a0548bd85590276b70eabebcbda2461d000b36e4dd8d46540d5e276c7add0ae453d6110082b27333ed54d72356605699f0b056fc48aa713a6654aa96e2784f8762b6890cfea83d8b465d0ee932f3726aeca85a1593812062b9fe3d0101848b9de00"}]}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x3bc}], 0x1}, 0x0) 199.081427ms ago: executing program 3 (id=2748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000080010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = gettid() r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) syz_open_procfs$namespace(r4, &(0x7f0000000680)='ns/cgroup\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getqdisc={0x40, 0x26, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x6}, {0x4, 0xb}, {0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x904}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r7, 0x0, 0x7fffffffffffffff}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) close(0x3) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000380)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_emit_ethernet(0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2486dd6000000000173afffe80000000a14c19454f00000000000000000000bbff020000000000000000000000000001860090780000fdff00000000000000000100"], 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'syzkaller1\x00', 'bond_slave_0\x00'}, 0x0, 0x118, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, [], [], 'veth0_macvtap\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r10 = accept4(r8, 0x0, 0x0, 0x800) r11 = socket$kcm(0x21, 0x2, 0xa) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f00000003c0), 0x4) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x18, {0xa, 0x0, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 198.681592ms ago: executing program 7 (id=2749): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) 143.018886ms ago: executing program 6 (id=2750): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000180000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000004"], 0x48) 138.417602ms ago: executing program 7 (id=2751): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x3f}, 0x0) 109.048562ms ago: executing program 5 (id=2752): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001b00)={@local, 0x0, 0x0, 0x3, 0x11, 0x0, 0x2}, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000002b000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r2, 0x5d071000) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20400) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r9, r0, 0x3, 0x3) r10 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r7, 0x3, {0x0, 0x0, 0x3}}, 0x5d) syz_genetlink_get_family_id$mptcp(0x0, r10) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x8001, @local, 0xc}}, 0x24) sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000067afae3f00000000"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0x500}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) 1.201672ms ago: executing program 6 (id=2753): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000020bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085001f002b000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e024334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd617545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d36c309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 7 (id=2754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c0002800800074000000000050002000000000008000340000000000800064000000001080006400000000b"], 0x94}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="c9a10725469602538a233c85881fc1d24948909b04e8e24ee5fea4d47cae17743143ae968622253ba767e636a327d016f6bf3dd9cc1c0fa6fa958e1dd21a8d6cbf5f74f72986e57f5a052f188efc794d367675e75274c4e5af6915bc072111663317f36a34ce7510bb"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000900100000009de96b24109b4bd9a9a2c61996d60000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020027bd7802fbcbdf250b010000080003006fd1f824e4de1d89e8c1b4a57a49fb2820baf685596455677f4a6e9b051d7999a3a9fced784def758e581440e173167ca420ab5c98eb56b63f6d012a649c728281", @ANYRES32=r7, @ANYBLOB="0c009900ef0e00006800000028006e80040001000400010004000100040002000400020004000200040002000400010004000200"], 0x50}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) kernel console output (not intermixed with test programs): T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.147241][ T9897] R13: 0000000000000001 R14: 00007f4d14975fa0 R15: 00007ffe3fb69c58 [ 187.155224][ T9897] [ 187.587297][ T9919] bond4: entered promiscuous mode [ 187.608801][ T9919] bond4: entered allmulticast mode [ 187.634415][ T9919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.501453][ T9951] __nla_validate_parse: 6 callbacks suppressed [ 188.501475][ T9951] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1398'. [ 188.974056][ T9973] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1405'. [ 189.123903][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1409'. [ 189.267651][ T9990] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1411'. [ 189.589613][T10001] syz.5.1417: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 189.613264][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.5.1417 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 189.624054][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 189.634107][T10001] Call Trace: [ 189.637387][T10001] [ 189.640314][T10001] dump_stack_lvl+0x241/0x360 [ 189.644999][T10001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.650195][T10001] ? __pfx__printk+0x10/0x10 [ 189.654785][T10001] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 189.661380][T10001] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 189.668146][T10001] warn_alloc+0x278/0x410 [ 189.672534][T10001] ? __pfx_warn_alloc+0x10/0x10 [ 189.677804][T10001] ? nf_tables_newset+0x1770/0x2ee0 [ 189.683698][T10001] ? __get_vm_area_node+0x1c8/0x2d0 [ 189.688920][T10001] ? __get_vm_area_node+0x25c/0x2d0 [ 189.694136][T10001] __vmalloc_node_range_noprof+0x62f/0x1380 [ 189.700027][T10001] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 189.705759][T10001] ? rcu_is_watching+0x15/0xb0 [ 189.710641][T10001] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.716990][T10001] ? rcu_is_watching+0x15/0xb0 [ 189.721780][T10001] ? trace_kmalloc+0x1f/0xd0 [ 189.726371][T10001] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 189.731829][T10001] ? __kvmalloc_node_noprof+0x72/0x190 [ 189.737285][T10001] __kvmalloc_node_noprof+0x142/0x190 [ 189.742654][T10001] ? nf_tables_newset+0x1770/0x2ee0 [ 189.747848][T10001] nf_tables_newset+0x1770/0x2ee0 [ 189.752885][T10001] ? __pfx_nf_tables_newset+0x10/0x10 [ 189.758351][T10001] ? __pfx_lock_release+0x10/0x10 [ 189.763403][T10001] ? __nla_parse+0x40/0x60 [ 189.767831][T10001] nfnetlink_rcv+0x14e3/0x2ab0 [ 189.772603][T10001] ? __pfx_validate_chain+0x10/0x10 [ 189.777819][T10001] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.782935][T10001] ? __lock_acquire+0x1397/0x2100 [ 189.787977][T10001] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.793171][T10001] ? __pfx_lock_release+0x10/0x10 [ 189.798201][T10001] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.803416][T10001] netlink_unicast+0x7f6/0x990 [ 189.808326][T10001] ? __pfx_netlink_unicast+0x10/0x10 [ 189.813668][T10001] ? __virt_addr_valid+0x45f/0x530 [ 189.818847][T10001] ? __phys_addr_symbol+0x2f/0x70 [ 189.824147][T10001] ? __check_object_size+0x47a/0x730 [ 189.829449][T10001] netlink_sendmsg+0x8e4/0xcb0 [ 189.834229][T10001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.839510][T10001] ? aa_sock_msg_perm+0x91/0x160 [ 189.844443][T10001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.849724][T10001] __sock_sendmsg+0x221/0x270 [ 189.854407][T10001] ____sys_sendmsg+0x52a/0x7e0 [ 189.859197][T10001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.864798][T10001] ? __fget_files+0x2a/0x410 [ 189.869419][T10001] ? __fget_files+0x2a/0x410 [ 189.874124][T10001] __sys_sendmsg+0x269/0x350 [ 189.878738][T10001] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.883876][T10001] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.890210][T10001] ? do_syscall_64+0x100/0x230 [ 189.894974][T10001] ? do_syscall_64+0xb6/0x230 [ 189.899647][T10001] do_syscall_64+0xf3/0x230 [ 189.904146][T10001] ? clear_bhb_loop+0x35/0x90 [ 189.909263][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.915160][T10001] RIP: 0033:0x7f7d1ff85d19 [ 189.919641][T10001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.939787][T10001] RSP: 002b:00007f7d20dbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.948383][T10001] RAX: ffffffffffffffda RBX: 00007f7d20175fa0 RCX: 00007f7d1ff85d19 [ 189.956368][T10001] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 189.964343][T10001] RBP: 00007f7d20001a20 R08: 0000000000000000 R09: 0000000000000000 [ 189.972513][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.980661][T10001] R13: 0000000000000000 R14: 00007f7d20175fa0 R15: 00007ffe2000b9c8 [ 189.988642][T10001] [ 190.021947][T10010] syzkaller1: entered promiscuous mode [ 190.027751][T10010] syzkaller1: entered allmulticast mode [ 190.036130][T10001] Mem-Info: [ 190.040542][T10001] active_anon:4944 inactive_anon:0 isolated_anon:0 [ 190.040542][T10001] active_file:1614 inactive_file:38309 isolated_file:0 [ 190.040542][T10001] unevictable:768 dirty:164 writeback:0 [ 190.040542][T10001] slab_reclaimable:11242 slab_unreclaimable:107983 [ 190.040542][T10001] mapped:28802 shmem:1474 pagetables:773 [ 190.040542][T10001] sec_pagetables:0 bounce:0 [ 190.040542][T10001] kernel_misc_reclaimable:0 [ 190.040542][T10001] free:1329561 free_pcp:1260 free_cma:0 [ 190.099668][T10001] Node 0 active_anon:19676kB inactive_anon:0kB active_file:6456kB inactive_file:153164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115208kB dirty:656kB writeback:0kB shmem:4360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12628kB pagetables:2992kB sec_pagetables:0kB all_unreclaimable? no [ 190.137510][T10001] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 190.208597][T10001] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.241729][T10001] lowmem_reserve[]: 0 2465 2466 0 0 [ 190.250145][T10001] Node 0 DMA32 free:1399336kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19444kB inactive_anon:0kB active_file:6456kB inactive_file:152332kB unevictable:1536kB writepending:672kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:1708kB local_pcp:620kB free_cma:0kB [ 190.343293][T10001] lowmem_reserve[]: 0 0 0 0 0 [ 190.348385][T10001] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 190.377716][T10021] batadv_slave_1: entered promiscuous mode [ 190.384209][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1423'. [ 190.393701][T10001] lowmem_reserve[]: 0 0 0 0 0 [ 190.431235][T10001] Node 1 Normal free:3907644kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.522252][T10028] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1427'. [ 190.544359][T10001] lowmem_reserve[]: 0 0 0 0 0 [ 190.549143][T10001] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.611926][T10001] Node 0 DMA32: 2*4kB (ME) 10*8kB (UE) 32*16kB (UM) 90*32kB (UME) 156*64kB (UME) 66*128kB (UM) 57*256kB (UM) 37*512kB (UM) 15*1024kB (UM) 8*2048kB (U) 320*4096kB (UME) = 1397912kB [ 190.674385][T10001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 190.709616][T10001] Node 1 Normal: 235*4kB (UE) 58*8kB (UME) 46*16kB (UME) 213*32kB (UME) 95*64kB (UME) 31*128kB (UME) 20*256kB (UME) 13*512kB (UM) 4*1024kB (UM) 5*2048kB (UE) 943*4096kB (M) = 3907644kB [ 190.789080][T10001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.814250][T10001] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.849741][T10001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.863855][T10001] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.882105][T10001] 41399 total pagecache pages [ 190.898051][T10001] 0 pages in swap cache [ 190.912448][T10001] Free swap = 124996kB [ 190.925795][T10001] Total swap = 124996kB [ 190.941010][T10001] 2097051 pages RAM [ 190.963226][T10001] 0 pages HighMem/MovableOnly [ 190.982905][T10001] 427012 pages reserved [ 191.003215][T10001] 0 pages cma reserved [ 191.043627][T10058] FAULT_INJECTION: forcing a failure. [ 191.043627][T10058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.048027][T10052] team0: Device ipvlan2 failed to register rx_handler [ 191.070498][T10058] CPU: 0 UID: 0 PID: 10058 Comm: syz.3.1439 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 191.082170][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 191.092257][T10058] Call Trace: [ 191.095553][T10058] [ 191.098500][T10058] dump_stack_lvl+0x241/0x360 [ 191.103198][T10058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.108408][T10058] ? __pfx__printk+0x10/0x10 [ 191.113019][T10058] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 191.119194][T10058] should_fail_ex+0x3b0/0x4e0 [ 191.123906][T10058] prepare_alloc_pages+0x1da/0x5b0 [ 191.129318][T10058] __alloc_pages_noprof+0x16f/0x710 [ 191.134537][T10058] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 191.140272][T10058] alloc_pages_mpol_noprof+0x3e8/0x680 [ 191.146004][T10058] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 191.152077][T10058] ? alloc_pages_noprof+0xef/0x170 [ 191.157192][T10058] get_free_pages_noprof+0xc/0x30 [ 191.162213][T10058] kasan_populate_vmalloc_pte+0x38/0xe0 [ 191.167764][T10058] __apply_to_page_range+0x806/0xde0 [ 191.173055][T10058] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 191.179302][T10058] ? __pfx___apply_to_page_range+0x10/0x10 [ 191.185111][T10058] ? do_raw_spin_unlock+0x13c/0x8b0 [ 191.190304][T10058] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 191.196257][T10058] alloc_vmap_area+0x1d4e/0x2400 [ 191.201425][T10058] ? __pfx_alloc_vmap_area+0x10/0x10 [ 191.206726][T10058] ? __kasan_kmalloc+0x98/0xb0 [ 191.211675][T10058] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 191.217655][T10058] ? __get_vm_area_node+0x132/0x2d0 [ 191.222853][T10058] ? dev_map_alloc+0x141/0x540 [ 191.227609][T10058] __get_vm_area_node+0x1c8/0x2d0 [ 191.232637][T10058] __vmalloc_node_range_noprof+0x344/0x1380 [ 191.238523][T10058] ? dev_map_alloc+0x141/0x540 [ 191.243338][T10058] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.250028][T10058] ? rcu_is_watching+0x15/0xb0 [ 191.255085][T10058] ? trace_kmalloc+0x1f/0xd0 [ 191.260214][T10058] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 191.265771][T10058] ? bpf_map_area_alloc+0x64/0x120 [ 191.270990][T10058] bpf_map_area_alloc+0xfc/0x120 [ 191.275931][T10058] ? dev_map_alloc+0x141/0x540 [ 191.280688][T10058] dev_map_alloc+0x141/0x540 [ 191.285269][T10058] ? ns_capable+0x8a/0xf0 [ 191.289607][T10058] map_create+0x946/0x11c0 [ 191.294079][T10058] __sys_bpf+0x6d1/0x810 [ 191.298398][T10058] ? __pfx___sys_bpf+0x10/0x10 [ 191.303568][T10058] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.309670][T10058] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.316188][T10058] ? do_syscall_64+0x100/0x230 [ 191.321001][T10058] __x64_sys_bpf+0x7c/0x90 [ 191.325448][T10058] do_syscall_64+0xf3/0x230 [ 191.329956][T10058] ? clear_bhb_loop+0x35/0x90 [ 191.334633][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.340520][T10058] RIP: 0033:0x7f4d14785d19 [ 191.344931][T10058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.364535][T10058] RSP: 002b:00007f4d15569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.372965][T10058] RAX: ffffffffffffffda RBX: 00007f4d14975fa0 RCX: 00007f4d14785d19 [ 191.380941][T10058] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 191.388907][T10058] RBP: 00007f4d15569090 R08: 0000000000000000 R09: 0000000000000000 [ 191.396872][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.404837][T10058] R13: 0000000000000001 R14: 00007f4d14975fa0 R15: 00007ffe3fb69c58 [ 191.412812][T10058] [ 191.989054][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 192.000047][T10076] nbd: couldn't find device at index -1 [ 192.025592][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 192.069093][T10079] gtp4: entered promiscuous mode [ 192.076007][T10079] gtp4: entered allmulticast mode [ 192.114563][T10084] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 192.185262][T10084] netlink: 'syz.6.1446': attribute type 13 has an invalid length. [ 192.221276][T10090] xt_cgroup: invalid path, errno=-2 [ 192.382395][T10097] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1453'. [ 192.420947][T10099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1455'. [ 192.659602][T10110] xt_CT: No such helper "syz0" [ 192.994588][T10132] bond5: entered promiscuous mode [ 192.999676][T10132] bond5: entered allmulticast mode [ 193.005517][T10132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.103536][T10136] FAULT_INJECTION: forcing a failure. [ 193.103536][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 193.137338][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.7.1471 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 193.148160][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 193.158326][T10136] Call Trace: [ 193.161636][T10136] [ 193.164612][T10136] dump_stack_lvl+0x241/0x360 [ 193.169564][T10136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.174802][T10136] ? __pfx__printk+0x10/0x10 [ 193.179514][T10136] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 193.185436][T10136] ? __pfx___might_resched+0x10/0x10 [ 193.190742][T10136] should_fail_ex+0x3b0/0x4e0 [ 193.195588][T10136] should_failslab+0xac/0x100 [ 193.200385][T10136] ? __get_vm_area_node+0x132/0x2d0 [ 193.206665][T10136] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 193.212628][T10136] __get_vm_area_node+0x132/0x2d0 [ 193.217698][T10136] __vmalloc_node_range_noprof+0x344/0x1380 [ 193.223735][T10136] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 193.229301][T10136] ? mark_lock+0x9a/0x360 [ 193.233671][T10136] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.240021][T10136] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 193.245584][T10136] __vmalloc_noprof+0x79/0x90 [ 193.250283][T10136] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 193.255844][T10136] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 193.261209][T10136] ? bpf_prog_alloc+0x28/0x1b0 [ 193.265963][T10136] bpf_prog_alloc+0x3a/0x1b0 [ 193.270556][T10136] bpf_prog_load+0x7f7/0x20f0 [ 193.275269][T10136] ? __pfx_bpf_prog_load+0x10/0x10 [ 193.280397][T10136] ? __pfx___might_resched+0x10/0x10 [ 193.285710][T10136] ? __might_fault+0xc6/0x120 [ 193.290398][T10136] __sys_bpf+0x4ee/0x810 [ 193.294644][T10136] ? __pfx___sys_bpf+0x10/0x10 [ 193.299414][T10136] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 193.305391][T10136] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.311716][T10136] ? do_syscall_64+0x100/0x230 [ 193.316477][T10136] __x64_sys_bpf+0x7c/0x90 [ 193.320892][T10136] do_syscall_64+0xf3/0x230 [ 193.325391][T10136] ? clear_bhb_loop+0x35/0x90 [ 193.330066][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.335956][T10136] RIP: 0033:0x7ff7af985d19 [ 193.340367][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.359972][T10136] RSP: 002b:00007ff7b06e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.368385][T10136] RAX: ffffffffffffffda RBX: 00007ff7afb75fa0 RCX: 00007ff7af985d19 [ 193.376352][T10136] RDX: 0000000000000094 RSI: 0000000020000840 RDI: 0000000000000005 [ 193.384318][T10136] RBP: 00007ff7b06e5090 R08: 0000000000000000 R09: 0000000000000000 [ 193.392284][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.400246][T10136] R13: 0000000000000000 R14: 00007ff7afb75fa0 R15: 00007ffc4a0a7478 [ 193.408223][T10136] [ 193.523531][T10147] __nla_validate_parse: 2 callbacks suppressed [ 193.523549][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1473'. [ 193.595784][T10147] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 193.598749][T10147] block (null): Could not allocate knbd recv work queue. [ 193.649728][T10147] nbd: failed to add new device [ 193.889259][T10166] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1479'. [ 194.006114][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 194.046895][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1481'. [ 194.062722][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 194.187577][T10173] gtp5: entered promiscuous mode [ 194.198909][T10173] gtp5: entered allmulticast mode [ 194.305613][T10186] netlink: 'syz.6.1486': attribute type 12 has an invalid length. [ 194.369886][T10188] xt_cgroup: invalid path, errno=-2 [ 194.398437][T10190] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1488'. [ 194.607088][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614356][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.802942][T10208] xt_CT: No such helper "syz0" [ 194.902783][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'. [ 194.923615][T10214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.936813][T10217] bond1: entered promiscuous mode [ 194.952584][T10217] bond1: entered allmulticast mode [ 194.959571][T10217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.988736][ T9943] block nbd64: NBD_DISCONNECT [ 195.056420][T10222] FAULT_INJECTION: forcing a failure. [ 195.056420][T10222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.070518][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.5.1502 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 195.081308][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 195.091377][T10222] Call Trace: [ 195.094671][T10222] [ 195.097621][T10222] dump_stack_lvl+0x241/0x360 [ 195.102679][T10222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.108280][T10222] ? __pfx__printk+0x10/0x10 [ 195.112898][T10222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 195.120112][T10222] should_fail_ex+0x3b0/0x4e0 [ 195.124822][T10222] prepare_alloc_pages+0x1da/0x5b0 [ 195.129975][T10222] __alloc_pages_noprof+0x16f/0x710 [ 195.135179][T10222] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 195.140906][T10222] alloc_pages_mpol_noprof+0x3e8/0x680 [ 195.146516][T10222] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 195.152723][T10222] ? alloc_pages_noprof+0xef/0x170 [ 195.157934][T10222] get_free_pages_noprof+0xc/0x30 [ 195.162965][T10222] kasan_populate_vmalloc_pte+0x38/0xe0 [ 195.168812][T10222] __apply_to_page_range+0x806/0xde0 [ 195.174106][T10222] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 195.180342][T10222] ? __pfx___apply_to_page_range+0x10/0x10 [ 195.186148][T10222] ? do_raw_spin_unlock+0x13c/0x8b0 [ 195.191337][T10222] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 195.196711][T10222] alloc_vmap_area+0x1d4e/0x2400 [ 195.201665][T10222] ? __pfx_alloc_vmap_area+0x10/0x10 [ 195.206951][T10222] ? __kasan_kmalloc+0x98/0xb0 [ 195.211720][T10222] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 195.217877][T10222] ? __get_vm_area_node+0x132/0x2d0 [ 195.223077][T10222] ? dev_map_alloc+0x141/0x540 [ 195.227842][T10222] __get_vm_area_node+0x1c8/0x2d0 [ 195.232897][T10222] __vmalloc_node_range_noprof+0x344/0x1380 [ 195.238797][T10222] ? dev_map_alloc+0x141/0x540 [ 195.243576][T10222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.249905][T10222] ? rcu_is_watching+0x15/0xb0 [ 195.254669][T10222] ? trace_kmalloc+0x1f/0xd0 [ 195.259256][T10222] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 195.264716][T10222] ? bpf_map_area_alloc+0x64/0x120 [ 195.269836][T10222] bpf_map_area_alloc+0xfc/0x120 [ 195.274774][T10222] ? dev_map_alloc+0x141/0x540 [ 195.279532][T10222] dev_map_alloc+0x141/0x540 [ 195.284116][T10222] ? ns_capable+0x8a/0xf0 [ 195.288450][T10222] map_create+0x946/0x11c0 [ 195.292868][T10222] __sys_bpf+0x6d1/0x810 [ 195.297109][T10222] ? __pfx___sys_bpf+0x10/0x10 [ 195.301876][T10222] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 195.307857][T10222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.314181][T10222] ? do_syscall_64+0x100/0x230 [ 195.318943][T10222] __x64_sys_bpf+0x7c/0x90 [ 195.323361][T10222] do_syscall_64+0xf3/0x230 [ 195.327863][T10222] ? clear_bhb_loop+0x35/0x90 [ 195.332554][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.338462][T10222] RIP: 0033:0x7f7d1ff85d19 [ 195.342873][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.362472][T10222] RSP: 002b:00007f7d20dbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.370886][T10222] RAX: ffffffffffffffda RBX: 00007f7d20175fa0 RCX: 00007f7d1ff85d19 [ 195.378854][T10222] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 195.386818][T10222] RBP: 00007f7d20dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 195.394784][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.402747][T10222] R13: 0000000000000001 R14: 00007f7d20175fa0 R15: 00007ffe2000b9c8 [ 195.410726][T10222] [ 195.487707][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 195.859174][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1510'. [ 195.897675][T10249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1509'. [ 197.414580][T10235] netlink: 'syz.5.1505': attribute type 21 has an invalid length. [ 197.609722][T10261] netlink: 'syz.3.1514': attribute type 12 has an invalid length. [ 198.713243][T10326] __nla_validate_parse: 4 callbacks suppressed [ 198.713264][T10326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1537'. [ 198.787708][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1539'. [ 198.835803][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1540'. [ 198.894024][T10334] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1541'. [ 199.094027][T10344] netlink: 'syz.4.1545': attribute type 29 has an invalid length. [ 199.110527][T10343] netlink: 'syz.3.1546': attribute type 12 has an invalid length. [ 199.118666][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 199.206006][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.276277][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1547'. [ 199.366131][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1551'. [ 199.467267][T10357] team0: Device ipvlan2 failed to register rx_handler [ 199.607010][T10363] bond2 (unregistering): Released all slaves [ 200.318901][T10380] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 200.407964][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1559'. [ 200.652658][T10396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.773397][T10400] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1564'. [ 201.086770][T10414] netlink: 'syz.5.1567': attribute type 12 has an invalid length. [ 201.234255][T10420] team0: Device ipvlan3 failed to register rx_handler [ 201.492751][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1574'. [ 201.689744][T10437] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 201.792685][T10445] netlink: 'syz.5.1578': attribute type 21 has an invalid length. [ 202.319225][T10470] netlink: 'syz.5.1591': attribute type 16 has an invalid length. [ 202.342222][T10470] netlink: 'syz.5.1591': attribute type 17 has an invalid length. [ 202.384486][T10476] xt_TCPMSS: Only works on TCP SYN packets [ 202.410985][T10475] xt_TCPMSS: Only works on TCP SYN packets [ 204.278429][T10493] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 204.361251][T10498] __nla_validate_parse: 3 callbacks suppressed [ 204.361272][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1602'. [ 204.642489][T10505] IPVS: persistence engine module ip_vs_pe_ not found [ 204.683022][T10510] bond5: entered promiscuous mode [ 204.717569][T10510] bond5: entered allmulticast mode [ 204.747973][T10510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.774099][T10516] netlink: 'syz.6.1608': attribute type 1 has an invalid length. [ 204.833548][T10521] FAULT_INJECTION: forcing a failure. [ 204.833548][T10521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.860135][T10521] CPU: 1 UID: 0 PID: 10521 Comm: syz.3.1609 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 204.871299][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 204.881376][T10521] Call Trace: [ 204.884677][T10521] [ 204.887630][T10521] dump_stack_lvl+0x241/0x360 [ 204.892332][T10521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.897543][T10521] ? __pfx__printk+0x10/0x10 [ 204.902324][T10521] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.908927][T10521] should_fail_ex+0x3b0/0x4e0 [ 204.913711][T10521] prepare_alloc_pages+0x1da/0x5b0 [ 204.918848][T10521] __alloc_pages_noprof+0x16f/0x710 [ 204.924057][T10521] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 204.929787][T10521] alloc_pages_mpol_noprof+0x3e8/0x680 [ 204.935248][T10521] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 204.941245][T10521] ? alloc_pages_noprof+0xef/0x170 [ 204.946366][T10521] get_free_pages_noprof+0xc/0x30 [ 204.951458][T10521] kasan_populate_vmalloc_pte+0x38/0xe0 [ 204.957047][T10521] __apply_to_page_range+0x806/0xde0 [ 204.962353][T10521] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 204.968622][T10521] ? __pfx___apply_to_page_range+0x10/0x10 [ 204.974441][T10521] ? do_raw_spin_unlock+0x13c/0x8b0 [ 204.979640][T10521] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 204.985015][T10521] alloc_vmap_area+0x1d4e/0x2400 [ 204.989967][T10521] ? __pfx_alloc_vmap_area+0x10/0x10 [ 204.996314][T10521] ? __kasan_kmalloc+0x98/0xb0 [ 205.001441][T10521] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 205.007426][T10521] ? __get_vm_area_node+0x132/0x2d0 [ 205.012629][T10521] ? dev_map_alloc+0x141/0x540 [ 205.017400][T10521] __get_vm_area_node+0x1c8/0x2d0 [ 205.022430][T10521] __vmalloc_node_range_noprof+0x344/0x1380 [ 205.028317][T10521] ? dev_map_alloc+0x141/0x540 [ 205.033100][T10521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.039790][T10521] ? rcu_is_watching+0x15/0xb0 [ 205.044560][T10521] ? trace_kmalloc+0x1f/0xd0 [ 205.049200][T10521] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 205.054674][T10521] ? bpf_map_area_alloc+0x64/0x120 [ 205.059789][T10521] bpf_map_area_alloc+0xfc/0x120 [ 205.064724][T10521] ? dev_map_alloc+0x141/0x540 [ 205.069481][T10521] dev_map_alloc+0x141/0x540 [ 205.074063][T10521] ? ns_capable+0x8a/0xf0 [ 205.078399][T10521] map_create+0x946/0x11c0 [ 205.082817][T10521] __sys_bpf+0x6d1/0x810 [ 205.087064][T10521] ? __pfx___sys_bpf+0x10/0x10 [ 205.091832][T10521] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 205.098289][T10521] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.104639][T10521] ? do_syscall_64+0x100/0x230 [ 205.109432][T10521] __x64_sys_bpf+0x7c/0x90 [ 205.113871][T10521] do_syscall_64+0xf3/0x230 [ 205.118381][T10521] ? clear_bhb_loop+0x35/0x90 [ 205.123150][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.129046][T10521] RIP: 0033:0x7f4d14785d19 [ 205.133459][T10521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.153058][T10521] RSP: 002b:00007f4d15569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.161598][T10521] RAX: ffffffffffffffda RBX: 00007f4d14975fa0 RCX: 00007f4d14785d19 [ 205.169760][T10521] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 205.177912][T10521] RBP: 00007f4d15569090 R08: 0000000000000000 R09: 0000000000000000 [ 205.185878][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.193844][T10521] R13: 0000000000000001 R14: 00007f4d14975fa0 R15: 00007ffe3fb69c58 [ 205.201818][T10521] [ 205.207472][T10523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1607'. [ 205.845446][T10566] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1622'. [ 206.039890][T10573] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1625'. [ 206.074840][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1625'. [ 206.074840][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1625'. [ 206.400250][T10598] xt_CT: No such helper "syz0" [ 206.819396][T10628] FAULT_INJECTION: forcing a failure. [ 206.819396][T10628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.826766][T10621] bond8: entered promiscuous mode [ 206.838848][T10621] bond8: entered allmulticast mode [ 206.846247][T10621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 206.852480][T10628] CPU: 0 UID: 0 PID: 10628 Comm: syz.6.1643 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 206.863627][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 206.873696][T10628] Call Trace: [ 206.876987][T10628] [ 206.879939][T10628] dump_stack_lvl+0x241/0x360 [ 206.884647][T10628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.889855][T10628] ? __pfx__printk+0x10/0x10 [ 206.894484][T10628] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.901402][T10628] should_fail_ex+0x3b0/0x4e0 [ 206.906284][T10628] prepare_alloc_pages+0x1da/0x5b0 [ 206.911700][T10628] __alloc_pages_noprof+0x16f/0x710 [ 206.916896][T10628] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 206.922615][T10628] alloc_pages_mpol_noprof+0x3e8/0x680 [ 206.928072][T10628] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 206.934046][T10628] ? alloc_pages_noprof+0xef/0x170 [ 206.939149][T10628] get_free_pages_noprof+0xc/0x30 [ 206.943712][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 206.944176][T10628] kasan_populate_vmalloc_pte+0x38/0xe0 [ 206.958999][T10628] __apply_to_page_range+0x806/0xde0 [ 206.964710][T10628] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 206.971276][T10628] ? __pfx___apply_to_page_range+0x10/0x10 [ 206.977085][T10628] ? do_raw_spin_unlock+0x13c/0x8b0 [ 206.982277][T10628] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 206.987744][T10628] alloc_vmap_area+0x1d4e/0x2400 [ 206.992691][T10628] ? __pfx_alloc_vmap_area+0x10/0x10 [ 206.997986][T10628] ? __kasan_kmalloc+0x98/0xb0 [ 207.004070][T10628] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 207.010216][T10628] ? __get_vm_area_node+0x132/0x2d0 [ 207.015635][T10628] ? dev_map_alloc+0x141/0x540 [ 207.020560][T10628] __get_vm_area_node+0x1c8/0x2d0 [ 207.025650][T10628] __vmalloc_node_range_noprof+0x344/0x1380 [ 207.027516][T10630] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1644'. [ 207.031550][T10628] ? dev_map_alloc+0x141/0x540 [ 207.031596][T10628] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.051614][T10628] ? rcu_is_watching+0x15/0xb0 [ 207.056501][T10628] ? trace_kmalloc+0x1f/0xd0 [ 207.061141][T10628] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 207.066687][T10628] ? bpf_map_area_alloc+0x64/0x120 [ 207.071918][T10628] bpf_map_area_alloc+0xfc/0x120 [ 207.077025][T10628] ? dev_map_alloc+0x141/0x540 [ 207.081818][T10628] dev_map_alloc+0x141/0x540 [ 207.086431][T10628] ? ns_capable+0x8a/0xf0 [ 207.090804][T10628] map_create+0x946/0x11c0 [ 207.095248][T10628] __sys_bpf+0x6d1/0x810 [ 207.099518][T10628] ? __pfx___sys_bpf+0x10/0x10 [ 207.104315][T10628] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.110397][T10628] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.116770][T10628] ? do_syscall_64+0x100/0x230 [ 207.121737][T10628] __x64_sys_bpf+0x7c/0x90 [ 207.126210][T10628] do_syscall_64+0xf3/0x230 [ 207.130743][T10628] ? clear_bhb_loop+0x35/0x90 [ 207.135447][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.141362][T10628] RIP: 0033:0x7f4694785d19 [ 207.145789][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.165576][T10628] RSP: 002b:00007f4695686038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.173994][T10628] RAX: ffffffffffffffda RBX: 00007f4694975fa0 RCX: 00007f4694785d19 [ 207.181962][T10628] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 207.189922][T10628] RBP: 00007f4695686090 R08: 0000000000000000 R09: 0000000000000000 [ 207.197888][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.205893][T10628] R13: 0000000000000001 R14: 00007f4694975fa0 R15: 00007ffca43bf048 [ 207.213874][T10628] [ 207.636508][T10650] gtp4: entered promiscuous mode [ 207.830271][T10659] netlink: 'syz.6.1657': attribute type 12 has an invalid length. [ 207.867178][T10661] ipvlan2: entered promiscuous mode [ 207.881987][T10661] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 207.899960][T10661] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.118401][T10676] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1664'. [ 208.173233][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1665'. [ 208.209816][T10682] lo speed is unknown, defaulting to 1000 [ 208.217029][T10682] lo speed is unknown, defaulting to 1000 [ 208.225036][T10682] lo speed is unknown, defaulting to 1000 [ 208.236753][T10682] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 208.253285][T10682] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 208.263453][T10687] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 208.277205][T10687] bridge0: entered allmulticast mode [ 208.288338][T10682] lo speed is unknown, defaulting to 1000 [ 208.298830][T10682] lo speed is unknown, defaulting to 1000 [ 208.306948][T10682] lo speed is unknown, defaulting to 1000 [ 208.318678][T10682] lo speed is unknown, defaulting to 1000 [ 208.327317][T10682] lo speed is unknown, defaulting to 1000 [ 208.551366][T10691] IPVS: persistence engine module ip_vs_pe_ not found [ 208.904129][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.929566][T10717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.192841][T10746] xt_cgroup: invalid path, errno=-2 [ 209.289846][T10749] xt_CT: No such helper "syz0" [ 209.449608][T10762] bond6: entered promiscuous mode [ 209.459326][T10762] bond6: entered allmulticast mode [ 209.468298][T10762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 209.511252][T10768] netlink: 'syz.3.1694': attribute type 12 has an invalid length. [ 209.670830][T10783] __nla_validate_parse: 1 callbacks suppressed [ 209.670850][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1699'. [ 209.739098][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1700'. [ 209.773671][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1701'. [ 209.952648][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1704'. [ 209.974207][T10803] netlink: 'syz.6.1706': attribute type 10 has an invalid length. [ 209.982405][T10801] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1704'. [ 210.153474][T10808] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.174791][T10808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.308947][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1711'. [ 210.747981][T10844] sctp: [Deprecated]: syz.7.1715 (pid 10844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.747981][T10844] Use struct sctp_sack_info instead [ 210.770774][T10844] netlink: 'syz.7.1715': attribute type 10 has an invalid length. [ 210.814428][T10847] xt_cgroup: invalid path, errno=-2 [ 211.205206][T10867] xt_CT: No such helper "syz0" [ 211.787085][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1723'. [ 212.057021][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 212.721886][T10844] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 212.732110][T10878] FAULT_INJECTION: forcing a failure. [ 212.732110][T10878] name failslab, interval 1, probability 0, space 0, times 0 [ 212.764780][T10878] CPU: 1 UID: 0 PID: 10878 Comm: syz.5.1719 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 212.775577][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 212.785652][T10878] Call Trace: [ 212.788952][T10878] [ 212.791897][T10878] dump_stack_lvl+0x241/0x360 [ 212.796605][T10878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.802798][T10878] ? __pfx__printk+0x10/0x10 [ 212.807691][T10878] ? __kmalloc_cache_noprof+0x48/0x390 [ 212.813609][T10878] ? __pfx___might_resched+0x10/0x10 [ 212.819550][T10878] ? tcx_link_attach+0xed/0x950 [ 212.824441][T10878] should_fail_ex+0x3b0/0x4e0 [ 212.829141][T10878] should_failslab+0xac/0x100 [ 212.833821][T10878] __kmalloc_cache_noprof+0x70/0x390 [ 212.839107][T10878] ? tcx_link_attach+0x158/0x950 [ 212.844049][T10878] tcx_link_attach+0x158/0x950 [ 212.848831][T10878] ? __pfx_tcx_link_attach+0x10/0x10 [ 212.854134][T10878] ? __fget_files+0x2a/0x410 [ 212.858728][T10878] ? __fget_files+0x2a/0x410 [ 212.863321][T10878] ? bpf_prog_attach_check_attach_type+0x1d6/0x4f0 [ 212.869833][T10878] link_create+0x360/0x870 [ 212.874259][T10878] __sys_bpf+0x4bc/0x810 [ 212.878499][T10878] ? __pfx___sys_bpf+0x10/0x10 [ 212.883264][T10878] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.889241][T10878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.895567][T10878] ? do_syscall_64+0x100/0x230 [ 212.900336][T10878] __x64_sys_bpf+0x7c/0x90 [ 212.904761][T10878] do_syscall_64+0xf3/0x230 [ 212.909266][T10878] ? clear_bhb_loop+0x35/0x90 [ 212.914238][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.920177][T10878] RIP: 0033:0x7f7d1ff85d19 [ 212.924703][T10878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.944484][T10878] RSP: 002b:00007f7d20d9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.952896][T10878] RAX: ffffffffffffffda RBX: 00007f7d20176080 RCX: 00007f7d1ff85d19 [ 212.961226][T10878] RDX: 0000000000000020 RSI: 0000000020000580 RDI: 000000000000001c [ 212.969411][T10878] RBP: 00007f7d20d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 212.977691][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.986020][T10878] R13: 0000000000000001 R14: 00007f7d20176080 R15: 00007ffe2000b9c8 [ 212.994004][T10878] [ 213.172510][T10900] trusted_key: syz.6.1729 sent an empty control message without MSG_MORE. [ 213.206551][T10905] netlink: 'syz.5.1726': attribute type 1 has an invalid length. [ 213.265486][T10905] 8021q: adding VLAN 0 to HW filter on device bond9 [ 213.291017][T10905] bond9: (slave bridge17): Enslaving as an active interface with a down link [ 213.343284][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1731'. [ 213.420030][T10908] batadv_slave_1: entered promiscuous mode [ 213.428007][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 213.528043][T10919] dvmrp8: entered allmulticast mode [ 213.532389][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 213.551920][T10921] gtp5: entered promiscuous mode [ 213.557892][T10921] gtp5: entered allmulticast mode [ 213.767109][T10937] netlink: 'syz.6.1742': attribute type 10 has an invalid length. [ 213.781122][T10935] bond10: entered promiscuous mode [ 213.788419][T10935] bond10: entered allmulticast mode [ 213.794284][T10935] 8021q: adding VLAN 0 to HW filter on device bond10 [ 214.450869][T10976] gtp2: entered promiscuous mode [ 214.473329][T10976] gtp2: entered allmulticast mode [ 214.675738][T10994] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 214.685710][T10992] __nla_validate_parse: 7 callbacks suppressed [ 214.685726][T10992] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1767'. [ 214.704150][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1770'. [ 214.713284][T10994] syz_tun: entered promiscuous mode [ 214.719270][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 214.799067][T11002] netlink: 'syz.5.1771': attribute type 10 has an invalid length. [ 214.808603][T11002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.828992][T11002] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 215.002783][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1773'. [ 215.179430][T11019] xt_CT: No such helper "syz0" [ 215.191112][T11023] vlan2: entered promiscuous mode [ 215.206833][T11023] vlan2: entered allmulticast mode [ 215.289115][T11029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1782'. [ 215.381519][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1783'. [ 215.489514][T11039] netlink: 'syz.4.1787': attribute type 12 has an invalid length. [ 215.596929][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1790'. [ 215.828281][T11061] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1794'. [ 215.892480][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 215.922934][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 215.936511][T11063] gtp5: entered promiscuous mode [ 215.941517][T11063] gtp5: entered allmulticast mode [ 216.130929][T11076] macvtap1: entered promiscuous mode [ 216.137837][T11076] team0: entered promiscuous mode [ 216.143011][T11076] team_slave_0: entered promiscuous mode [ 216.152396][T11076] team_slave_1: entered promiscuous mode [ 216.161704][T11076] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 216.175853][T11076] team0: Device macvtap1 is already an upper device of the team interface [ 216.191103][T11076] team0: left promiscuous mode [ 216.198661][T11076] team_slave_0: left promiscuous mode [ 216.208551][T11076] team_slave_1: left promiscuous mode [ 216.253824][T11082] team0: Device ipvlan2 failed to register rx_handler [ 216.408668][T11081] bridge0: left allmulticast mode [ 216.419302][T11081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.428175][T11081] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.439715][T11081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.458771][ T5914] lo speed is unknown, defaulting to 1000 [ 216.960778][T11108] xt_CT: No such helper "syz0" [ 217.117123][T11119] netlink: 'syz.5.1817': attribute type 12 has an invalid length. [ 217.381853][T11134] bond4: entered promiscuous mode [ 217.418742][T11134] bond4: entered allmulticast mode [ 217.430711][T11134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.667151][T11146] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.879372][T11152] team0: Device ipvlan2 failed to register rx_handler [ 218.169412][T11169] tipc: Started in network mode [ 218.183220][T11169] tipc: Node identity ffffffef, cluster identity 4711 [ 218.190329][T11169] tipc: Node number set to 4294967279 [ 218.256865][T11167] gtp5: entered promiscuous mode [ 218.261982][T11167] gtp5: entered allmulticast mode [ 218.657118][T11193] netlink: 'syz.7.1844': attribute type 10 has an invalid length. [ 218.708114][T11199] netlink: 'syz.7.1844': attribute type 10 has an invalid length. [ 218.882515][T11205] xt_CT: No such helper "syz0" [ 218.902534][T11193] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.920421][T11193] bond0: (slave team0): Enslaving as an active interface with an up link [ 219.011627][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.053861][T11198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.095903][T11199] bond0: (slave team0): Releasing backup interface [ 219.125789][T11199] bridge0: port 3(team0) entered blocking state [ 219.132111][T11199] bridge0: port 3(team0) entered disabled state [ 219.153867][T11199] team0: entered allmulticast mode [ 219.159584][T11199] team_slave_0: entered allmulticast mode [ 219.172435][T11199] team_slave_1: entered allmulticast mode [ 219.180971][T11199] team0: entered promiscuous mode [ 219.192312][T11199] team_slave_0: entered promiscuous mode [ 219.202256][T11199] team_slave_1: entered promiscuous mode [ 219.233751][T11200] tipc: MTU too low for tipc bearer [ 219.261666][T11218] netlink: 'syz.4.1852': attribute type 12 has an invalid length. [ 219.770690][T11244] team0: Device ipvlan2 failed to register rx_handler [ 219.934111][T11250] __nla_validate_parse: 8 callbacks suppressed [ 219.934163][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 219.986877][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 220.061453][T11250] gtp6: entered promiscuous mode [ 220.075054][T11250] gtp6: entered allmulticast mode [ 220.228360][T11257] netlink: 'syz.7.1866': attribute type 7 has an invalid length. [ 220.266390][T11257] netlink: 'syz.7.1866': attribute type 8 has an invalid length. [ 220.289071][T11257] netlink: 'syz.7.1866': attribute type 13 has an invalid length. [ 220.583476][T11271] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1871'. [ 220.639553][T11260] gtp0: left promiscuous mode [ 220.651973][T11260] gtp0: left allmulticast mode [ 220.663686][T11260] bond1: left promiscuous mode [ 220.675857][T11260] bond1: left allmulticast mode [ 220.691215][T11260] bond2: left promiscuous mode [ 220.702906][T11260] bond2: left allmulticast mode [ 220.718584][T11260] gtp1: left promiscuous mode [ 220.726734][T11260] gtp1: left allmulticast mode [ 220.732370][T11260] bond3: left promiscuous mode [ 220.738143][T11260] bond3: left allmulticast mode [ 220.749312][T11260] gtp2: left promiscuous mode [ 220.754837][T11260] gtp2: left allmulticast mode [ 220.762062][T11260] gtp3: left promiscuous mode [ 220.775996][T11260] gtp3: left allmulticast mode [ 220.781942][T11260] ip6gre1: left allmulticast mode [ 220.790161][T11260] bond4: left promiscuous mode [ 220.798813][T11260] bond4: left allmulticast mode [ 220.806728][T11260] gtp4: left promiscuous mode [ 220.811570][T11260] gtp4: left allmulticast mode [ 220.820948][T11260] gtp5: left promiscuous mode [ 220.840087][T11260] gtp5: left allmulticast mode [ 220.855136][T11260] gtp6: left promiscuous mode [ 220.864526][T11260] gtp6: left allmulticast mode [ 220.931272][T11279] netlink: 'syz.3.1875': attribute type 10 has an invalid length. [ 221.106974][T11287] netlink: 'syz.3.1879': attribute type 12 has an invalid length. [ 221.169286][ T5912] lo speed is unknown, defaulting to 1000 [ 221.241441][T11285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.275320][T11285] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.315005][T11285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.424345][ T6672] lo speed is unknown, defaulting to 1000 [ 221.639808][T11300] FAULT_INJECTION: forcing a failure. [ 221.639808][T11300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.661742][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.4.1885 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 221.672859][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 221.683201][T11300] Call Trace: [ 221.686519][T11300] [ 221.689459][T11300] dump_stack_lvl+0x241/0x360 [ 221.694166][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.699405][T11300] ? __pfx__printk+0x10/0x10 [ 221.704050][T11300] ? __pfx_lock_release+0x10/0x10 [ 221.709127][T11300] should_fail_ex+0x3b0/0x4e0 [ 221.713847][T11300] _copy_from_user+0x2f/0xc0 [ 221.718738][T11300] copy_msghdr_from_user+0xae/0x680 [ 221.723965][T11300] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 221.729785][T11300] ? __fget_files+0x2a/0x410 [ 221.734394][T11300] ? __fget_files+0x2a/0x410 [ 221.739004][T11300] __sys_sendmsg+0x209/0x350 [ 221.743611][T11300] ? __pfx_lock_release+0x10/0x10 [ 221.748696][T11300] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.753892][T11300] ? __pfx_vfs_write+0x10/0x10 [ 221.759457][T11300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.765817][T11300] ? do_syscall_64+0x100/0x230 [ 221.770636][T11300] ? do_syscall_64+0xb6/0x230 [ 221.775346][T11300] do_syscall_64+0xf3/0x230 [ 221.779877][T11300] ? clear_bhb_loop+0x35/0x90 [ 221.784579][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.790578][T11300] RIP: 0033:0x7fee79f85d19 [ 221.795060][T11300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.815409][T11300] RSP: 002b:00007fee7ad26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.823830][T11300] RAX: ffffffffffffffda RBX: 00007fee7a175fa0 RCX: 00007fee79f85d19 [ 221.831796][T11300] RDX: 0000000000000004 RSI: 0000000020000480 RDI: 0000000000000004 [ 221.839764][T11300] RBP: 00007fee7ad26090 R08: 0000000000000000 R09: 0000000000000000 [ 221.847744][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.855741][T11300] R13: 0000000000000000 R14: 00007fee7a175fa0 R15: 00007ffdf4e5dcb8 [ 221.863837][T11300] [ 221.942268][T11309] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1887'. [ 222.108890][T11314] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 222.128381][T11318] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1891'. [ 222.193044][T11314] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 222.478637][T11334] xt_CT: No such helper "syz0" [ 222.511260][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1895'. [ 222.645773][T11344] netlink: 'syz.7.1901': attribute type 10 has an invalid length. [ 222.705037][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1900'. [ 223.088772][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1904'. [ 223.512662][T11355] bond0 (unregistering): Released all slaves [ 223.562983][T11362] ip6gre1: entered allmulticast mode [ 223.818595][T11378] netlink: 'syz.5.1910': attribute type 12 has an invalid length. [ 223.890529][T11370] team0: Device ipvlan2 failed to register rx_handler [ 224.193927][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1917'. [ 224.481225][T11409] xt_CT: No such helper "syz0" [ 224.615634][T11417] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1926'. [ 224.707474][T11422] netlink: 'syz.7.1929': attribute type 10 has an invalid length. [ 225.191014][T11406] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 225.327809][T11457] team0: Device ipvlan3 failed to register rx_handler [ 225.454789][T11460] syz_tun: left promiscuous mode [ 225.485405][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.505760][T11460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.720888][T11466] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 225.743205][T11466] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 225.793841][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1941'. [ 225.899063][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1944'. [ 225.923278][T11473] IPVS: Unknown mcast interface: batadv0 [ 226.182125][T11483] bond5: entered promiscuous mode [ 226.187954][T11483] bond5: entered allmulticast mode [ 226.200241][T11483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.509883][T11503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1957'. [ 226.547753][T11507] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1960'. [ 226.919571][T11528] xt_cgroup: invalid path, errno=-2 [ 226.972286][T11529] team0: Device ipvlan3 failed to register rx_handler [ 226.985609][T11534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.174601][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1969'. [ 227.251362][T11546] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 227.382757][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1972'. [ 227.565136][T11561] FAULT_INJECTION: forcing a failure. [ 227.565136][T11561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.599280][T11561] CPU: 0 UID: 0 PID: 11561 Comm: syz.6.1977 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 227.610099][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 227.620182][T11561] Call Trace: [ 227.623476][T11561] [ 227.626417][T11561] dump_stack_lvl+0x241/0x360 [ 227.631328][T11561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.636914][T11561] ? __pfx__printk+0x10/0x10 [ 227.641569][T11561] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 227.647953][T11561] should_fail_ex+0x3b0/0x4e0 [ 227.652650][T11561] prepare_alloc_pages+0x1da/0x5b0 [ 227.658295][T11561] __alloc_pages_noprof+0x16f/0x710 [ 227.663500][T11561] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 227.669232][T11561] alloc_pages_mpol_noprof+0x3e8/0x680 [ 227.674691][T11561] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 227.680674][T11561] ? alloc_pages_noprof+0xef/0x170 [ 227.685789][T11561] get_free_pages_noprof+0xc/0x30 [ 227.690897][T11561] kasan_populate_vmalloc_pte+0x38/0xe0 [ 227.696437][T11561] __apply_to_page_range+0x806/0xde0 [ 227.701729][T11561] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 227.707991][T11561] ? __pfx___apply_to_page_range+0x10/0x10 [ 227.713807][T11561] ? do_raw_spin_unlock+0x13c/0x8b0 [ 227.719002][T11561] alloc_vmap_area+0x1d4e/0x2400 [ 227.723962][T11561] ? __pfx_alloc_vmap_area+0x10/0x10 [ 227.729251][T11561] ? __kasan_kmalloc+0x98/0xb0 [ 227.734014][T11561] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 227.740022][T11561] ? __get_vm_area_node+0x132/0x2d0 [ 227.746966][T11561] ? dev_map_alloc+0x141/0x540 [ 227.751753][T11561] __get_vm_area_node+0x1c8/0x2d0 [ 227.756834][T11561] __vmalloc_node_range_noprof+0x344/0x1380 [ 227.762751][T11561] ? dev_map_alloc+0x141/0x540 [ 227.767538][T11561] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 227.773862][T11561] ? rcu_is_watching+0x15/0xb0 [ 227.778630][T11561] ? trace_kmalloc+0x1f/0xd0 [ 227.783220][T11561] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 227.788697][T11561] ? bpf_map_area_alloc+0x64/0x120 [ 227.794003][T11561] bpf_map_area_alloc+0xfc/0x120 [ 227.799294][T11561] ? dev_map_alloc+0x141/0x540 [ 227.804855][T11561] dev_map_alloc+0x141/0x540 [ 227.809966][T11561] ? ns_capable+0x8a/0xf0 [ 227.814580][T11561] map_create+0x946/0x11c0 [ 227.819010][T11561] __sys_bpf+0x6d1/0x810 [ 227.823255][T11561] ? __pfx___sys_bpf+0x10/0x10 [ 227.828037][T11561] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 227.834344][T11561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.841060][T11561] ? do_syscall_64+0x100/0x230 [ 227.846056][T11561] __x64_sys_bpf+0x7c/0x90 [ 227.850576][T11561] do_syscall_64+0xf3/0x230 [ 227.855082][T11561] ? clear_bhb_loop+0x35/0x90 [ 227.860692][T11561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.866581][T11561] RIP: 0033:0x7f4694785d19 [ 227.870994][T11561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.891035][T11561] RSP: 002b:00007f4695686038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.901051][T11561] RAX: ffffffffffffffda RBX: 00007f4694975fa0 RCX: 00007f4694785d19 [ 227.909053][T11561] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 227.917027][T11561] RBP: 00007f4695686090 R08: 0000000000000000 R09: 0000000000000000 [ 227.924998][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.933414][T11561] R13: 0000000000000001 R14: 00007f4694975fa0 R15: 00007ffca43bf048 [ 227.942031][T11561] [ 228.022312][T11564] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.032629][T11564] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.068561][T11564] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.096099][T11564] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.096180][T11570] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1982'. [ 228.209760][T11576] netlink: 'syz.7.1984': attribute type 1 has an invalid length. [ 228.231730][T11566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.245108][T11566] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.255243][T11566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.685091][T11594] bond11: entered promiscuous mode [ 228.690260][T11594] bond11: entered allmulticast mode [ 228.716582][T11594] 8021q: adding VLAN 0 to HW filter on device bond11 [ 228.876066][T11607] team0: Device ipvlan3 failed to register rx_handler [ 228.891848][T11609] FAULT_INJECTION: forcing a failure. [ 228.891848][T11609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.910759][T11609] CPU: 0 UID: 0 PID: 11609 Comm: syz.4.1995 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 228.921547][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 228.931615][T11609] Call Trace: [ 228.934905][T11609] [ 228.937842][T11609] dump_stack_lvl+0x241/0x360 [ 228.942540][T11609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.947756][T11609] ? __pfx__printk+0x10/0x10 [ 228.952363][T11609] ? __pfx_lock_release+0x10/0x10 [ 228.957407][T11609] should_fail_ex+0x3b0/0x4e0 [ 228.962111][T11609] _copy_from_iter+0x1e9/0x1c20 [ 228.966983][T11609] ? __virt_addr_valid+0x183/0x530 [ 228.972136][T11609] ? __alloc_skb+0x28f/0x440 [ 228.976742][T11609] ? __pfx__copy_from_iter+0x10/0x10 [ 228.982050][T11609] ? __virt_addr_valid+0x183/0x530 [ 228.987176][T11609] ? __virt_addr_valid+0x183/0x530 [ 228.992306][T11609] ? __virt_addr_valid+0x45f/0x530 [ 228.997433][T11609] ? __phys_addr_symbol+0x2f/0x70 [ 229.002471][T11609] ? __check_object_size+0x47a/0x730 [ 229.007774][T11609] netlink_sendmsg+0x73d/0xcb0 [ 229.012566][T11609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.017875][T11609] ? aa_sock_msg_perm+0x91/0x160 [ 229.022832][T11609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.028130][T11609] __sock_sendmsg+0x221/0x270 [ 229.032828][T11609] ____sys_sendmsg+0x52a/0x7e0 [ 229.037621][T11609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.042918][T11609] ? __fget_files+0x2a/0x410 [ 229.047530][T11609] ? __fget_files+0x2a/0x410 [ 229.052144][T11609] __sys_sendmsg+0x269/0x350 [ 229.056747][T11609] ? __pfx_lock_release+0x10/0x10 [ 229.061793][T11609] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.066936][T11609] ? __pfx_vfs_write+0x10/0x10 [ 229.071734][T11609] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.078080][T11609] ? do_syscall_64+0x100/0x230 [ 229.082863][T11609] ? do_syscall_64+0xb6/0x230 [ 229.087554][T11609] do_syscall_64+0xf3/0x230 [ 229.092067][T11609] ? clear_bhb_loop+0x35/0x90 [ 229.096760][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.102665][T11609] RIP: 0033:0x7fee79f85d19 [ 229.107091][T11609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.126710][T11609] RSP: 002b:00007fee7ad26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.135144][T11609] RAX: ffffffffffffffda RBX: 00007fee7a175fa0 RCX: 00007fee79f85d19 [ 229.143128][T11609] RDX: 0000000000000004 RSI: 0000000020000480 RDI: 0000000000000004 [ 229.151109][T11609] RBP: 00007fee7ad26090 R08: 0000000000000000 R09: 0000000000000000 [ 229.159089][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.167071][T11609] R13: 0000000000000000 R14: 00007fee7a175fa0 R15: 00007ffdf4e5dcb8 [ 229.175072][T11609] [ 229.402763][T11621] netlink: 'syz.4.1998': attribute type 12 has an invalid length. [ 229.667336][T11633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.725124][T11633] netlink: 'syz.3.2003': attribute type 13 has an invalid length. [ 229.749625][T11633] macvtap0: entered promiscuous mode [ 229.783702][T11633] macvtap0: refused to change device tx_queue_len [ 229.815440][T11642] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2005'. [ 229.909252][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2008'. [ 229.998351][T11652] xt_cgroup: invalid path, errno=-2 [ 230.134434][T11663] xt_ipcomp: unknown flags 12 [ 230.162304][T11660] xt_CT: No such helper "syz0" [ 230.370067][T11679] netlink: 'syz.6.2019': attribute type 10 has an invalid length. [ 230.419069][T11680] team0: Device ipvlan2 failed to register rx_handler [ 230.865883][T11705] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2028'. [ 230.977622][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.994931][T11702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.204933][T11716] FAULT_INJECTION: forcing a failure. [ 231.204933][T11716] name failslab, interval 1, probability 0, space 0, times 0 [ 231.223591][T11716] CPU: 1 UID: 0 PID: 11716 Comm: syz.4.2034 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 231.234387][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 231.244459][T11716] Call Trace: [ 231.247756][T11716] [ 231.250704][T11716] dump_stack_lvl+0x241/0x360 [ 231.255414][T11716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.260640][T11716] ? __pfx__printk+0x10/0x10 [ 231.265258][T11716] ? __kmalloc_noprof+0xb5/0x4c0 [ 231.270222][T11716] ? __pfx___might_resched+0x10/0x10 [ 231.275532][T11716] ? aa_get_newest_label+0xff/0x6f0 [ 231.280757][T11716] should_fail_ex+0x3b0/0x4e0 [ 231.285646][T11716] should_failslab+0xac/0x100 [ 231.290395][T11716] __kmalloc_noprof+0xdd/0x4c0 [ 231.295929][T11716] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 231.302454][T11716] ? apparmor_capable+0x13b/0x1b0 [ 231.307773][T11716] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 231.313865][T11716] genl_rcv_msg+0x802/0xec0 [ 231.318812][T11716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.323867][T11716] ? __pfx_lock_acquire+0x10/0x10 [ 231.328888][T11716] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 231.334728][T11716] ? __pfx___might_resched+0x10/0x10 [ 231.341495][T11716] netlink_rcv_skb+0x1e3/0x430 [ 231.346461][T11716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.351513][T11716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.357098][T11716] genl_rcv+0x28/0x40 [ 231.361098][T11716] netlink_unicast+0x7f6/0x990 [ 231.365877][T11716] ? __pfx_netlink_unicast+0x10/0x10 [ 231.371159][T11716] ? __virt_addr_valid+0x45f/0x530 [ 231.376268][T11716] ? __phys_addr_symbol+0x2f/0x70 [ 231.381404][T11716] ? __check_object_size+0x47a/0x730 [ 231.386943][T11716] netlink_sendmsg+0x8e4/0xcb0 [ 231.391927][T11716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.397873][T11716] ? aa_sock_msg_perm+0x91/0x160 [ 231.402956][T11716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.408253][T11716] __sock_sendmsg+0x221/0x270 [ 231.412964][T11716] ____sys_sendmsg+0x52a/0x7e0 [ 231.417751][T11716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.423029][T11716] ? __fget_files+0x2a/0x410 [ 231.427625][T11716] ? __fget_files+0x2a/0x410 [ 231.432219][T11716] __sys_sendmsg+0x269/0x350 [ 231.436810][T11716] ? __pfx_lock_release+0x10/0x10 [ 231.441840][T11716] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.447079][T11716] ? __pfx_vfs_write+0x10/0x10 [ 231.451857][T11716] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.458182][T11716] ? do_syscall_64+0x100/0x230 [ 231.462963][T11716] ? do_syscall_64+0xb6/0x230 [ 231.467647][T11716] do_syscall_64+0xf3/0x230 [ 231.472236][T11716] ? clear_bhb_loop+0x35/0x90 [ 231.477148][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.484115][T11716] RIP: 0033:0x7fee79f85d19 [ 231.488703][T11716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.508761][T11716] RSP: 002b:00007fee7ad26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.517180][T11716] RAX: ffffffffffffffda RBX: 00007fee7a175fa0 RCX: 00007fee79f85d19 [ 231.525208][T11716] RDX: 0000000000000004 RSI: 0000000020000480 RDI: 0000000000000004 [ 231.534396][T11716] RBP: 00007fee7ad26090 R08: 0000000000000000 R09: 0000000000000000 [ 231.543146][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.553031][T11716] R13: 0000000000000000 R14: 00007fee7a175fa0 R15: 00007ffdf4e5dcb8 [ 231.561013][T11716] [ 231.926165][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2041'. [ 231.956156][T11735] netlink: 'syz.7.2039': attribute type 8 has an invalid length. [ 231.967876][T11739] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 232.054549][T11735] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 232.148833][T11750] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 232.208376][T11754] xt_cgroup: invalid path, errno=-2 [ 232.364465][T11760] netlink: 'syz.3.2048': attribute type 10 has an invalid length. [ 232.430915][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 232.468647][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 232.498830][T11762] gtp7: entered promiscuous mode [ 232.514638][T11762] gtp7: entered allmulticast mode [ 232.765695][T11782] pim6reg1: entered promiscuous mode [ 232.771156][T11782] pim6reg1: entered allmulticast mode [ 232.847247][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2058'. [ 232.931932][T11789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2061'. [ 233.141947][T11804] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2068'. [ 233.216125][T11806] bond12: entered promiscuous mode [ 233.221295][T11806] bond12: entered allmulticast mode [ 233.238774][T11806] 8021q: adding VLAN 0 to HW filter on device bond12 [ 233.311643][T11809] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2069'. [ 233.334352][T11815] netlink: 'syz.4.2071': attribute type 12 has an invalid length. [ 233.363689][T11817] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2073'. [ 233.376217][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2072'. [ 233.466226][T11820] FAULT_INJECTION: forcing a failure. [ 233.466226][T11820] name failslab, interval 1, probability 0, space 0, times 0 [ 233.482437][T11822] ip6gretap0: entered promiscuous mode [ 233.493666][T11822] macsec2: entered promiscuous mode [ 233.501329][T11822] macsec2: entered allmulticast mode [ 233.508019][T11822] ip6gretap0: entered allmulticast mode [ 233.515104][T11820] CPU: 0 UID: 0 PID: 11820 Comm: syz.6.2074 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 233.526787][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 233.536957][T11820] Call Trace: [ 233.540247][T11820] [ 233.543197][T11820] dump_stack_lvl+0x241/0x360 [ 233.547900][T11820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.553128][T11820] ? __pfx__printk+0x10/0x10 [ 233.557746][T11820] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 233.563768][T11820] ? __pfx___might_resched+0x10/0x10 [ 233.569171][T11820] should_fail_ex+0x3b0/0x4e0 [ 233.573995][T11820] should_failslab+0xac/0x100 [ 233.578993][T11820] kmem_cache_alloc_node_noprof+0x77/0x380 [ 233.586059][T11820] ? __alloc_skb+0x1c3/0x440 [ 233.590669][T11820] __alloc_skb+0x1c3/0x440 [ 233.595091][T11820] ? __pfx___alloc_skb+0x10/0x10 [ 233.600026][T11820] ? netlink_ack_tlv_len+0x6e/0x200 [ 233.605220][T11820] netlink_ack+0x145/0xa50 [ 233.609635][T11820] ? __pfx___might_resched+0x10/0x10 [ 233.615044][T11820] netlink_rcv_skb+0x262/0x430 [ 233.619846][T11820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.624881][T11820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.630370][T11820] genl_rcv+0x28/0x40 [ 233.634358][T11820] netlink_unicast+0x7f6/0x990 [ 233.639840][T11820] ? __pfx_netlink_unicast+0x10/0x10 [ 233.645130][T11820] ? __virt_addr_valid+0x45f/0x530 [ 233.650258][T11820] ? __phys_addr_symbol+0x2f/0x70 [ 233.655845][T11820] ? __check_object_size+0x47a/0x730 [ 233.662388][T11820] netlink_sendmsg+0x8e4/0xcb0 [ 233.667260][T11820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.672611][T11820] ? aa_sock_msg_perm+0x91/0x160 [ 233.678423][T11820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.683751][T11820] __sock_sendmsg+0x221/0x270 [ 233.689390][T11820] ____sys_sendmsg+0x52a/0x7e0 [ 233.694156][T11820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.699434][T11820] ? __fget_files+0x2a/0x410 [ 233.704027][T11820] ? __fget_files+0x2a/0x410 [ 233.708734][T11820] __sys_sendmsg+0x269/0x350 [ 233.713340][T11820] ? __pfx_lock_release+0x10/0x10 [ 233.718585][T11820] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.723710][T11820] ? __pfx_vfs_write+0x10/0x10 [ 233.728501][T11820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.734934][T11820] ? do_syscall_64+0x100/0x230 [ 233.739783][T11820] ? do_syscall_64+0xb6/0x230 [ 233.744460][T11820] do_syscall_64+0xf3/0x230 [ 233.748958][T11820] ? clear_bhb_loop+0x35/0x90 [ 233.753632][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.759527][T11820] RIP: 0033:0x7f4694785d19 [ 233.763943][T11820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.783557][T11820] RSP: 002b:00007f4695686038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.792250][T11820] RAX: ffffffffffffffda RBX: 00007f4694975fa0 RCX: 00007f4694785d19 [ 233.800223][T11820] RDX: 0000000000000004 RSI: 0000000020000480 RDI: 0000000000000004 [ 233.808190][T11820] RBP: 00007f4695686090 R08: 0000000000000000 R09: 0000000000000000 [ 233.816352][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.824350][T11820] R13: 0000000000000000 R14: 00007f4694975fa0 R15: 00007ffca43bf048 [ 233.832705][T11820] [ 234.252500][T11849] nbd: socks must be embedded in a SOCK_ITEM attr [ 234.387122][T11856] xt_cgroup: invalid path, errno=-2 [ 234.473657][T11858] xt_CT: No such helper "syz0" [ 234.590633][T11865] gretap1: entered allmulticast mode [ 234.602568][T11868] netlink: 'syz.3.2093': attribute type 10 has an invalid length. [ 234.620937][T11865] bridge0: port 2(gretap1) entered blocking state [ 234.629603][T11865] bridge0: port 2(gretap1) entered disabled state [ 234.638899][T11865] gretap1: entered promiscuous mode [ 234.645867][T11865] bridge0: port 2(gretap1) entered blocking state [ 234.652723][T11865] bridge0: port 2(gretap1) entered forwarding state [ 234.672499][T11866] team0: left allmulticast mode [ 234.679225][T11866] team0: left promiscuous mode [ 234.684906][T11866] bridge0: port 1(team0) entered disabled state [ 234.697266][T11866] bond0: (slave batadv0): Releasing backup interface [ 234.708778][T11866] bond9: (slave bridge17): Releasing active interface [ 234.728602][T11866] gretap1: left promiscuous mode [ 234.735691][T11866] bridge0: port 2(gretap1) entered disabled state [ 235.089298][T11891] gtp8: entered promiscuous mode [ 235.113302][T11891] gtp8: entered allmulticast mode [ 235.387915][T11915] netlink: 'syz.6.2112': attribute type 4 has an invalid length. [ 235.409582][T11915] netlink: 'syz.6.2112': attribute type 4 has an invalid length. [ 235.436741][T11919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.690360][T11932] bond5: entered promiscuous mode [ 235.696213][T11932] bond5: entered allmulticast mode [ 235.702285][T11932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.995003][T11947] __nla_validate_parse: 13 callbacks suppressed [ 235.995025][T11947] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2124'. [ 236.020276][T11949] netlink: 'syz.6.2125': attribute type 12 has an invalid length. [ 236.213859][T11953] netlink: 'syz.7.2127': attribute type 1 has an invalid length. [ 236.235971][T11953] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2127'. [ 236.291390][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2128'. [ 236.501940][T11973] xt_hashlimit: max too large, truncated to 1048576 [ 236.579530][T11979] xt_cgroup: invalid path, errno=-2 [ 236.586297][T11976] xt_CT: No such helper "syz0" [ 236.789006][T11992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2141'. [ 236.836023][T11995] netlink: 'syz.7.2143': attribute type 10 has an invalid length. [ 236.849640][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2142'. [ 236.997815][T12001] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2147'. [ 237.134318][T12009] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2150'. [ 237.164357][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2150'. [ 237.229326][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2153'. [ 237.253720][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 237.389898][T12017] gtp9: entered promiscuous mode [ 237.396518][T12017] gtp9: entered allmulticast mode [ 237.605807][T12031] lo speed is unknown, defaulting to 1000 [ 237.657070][T12032] lo speed is unknown, defaulting to 1000 [ 238.038608][T12053] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 238.072242][T12058] SET target dimension over the limit! [ 238.132731][T12057] bond0: entered promiscuous mode [ 238.139666][T12057] bond0: entered allmulticast mode [ 238.145403][T12057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.377088][T12073] FAULT_INJECTION: forcing a failure. [ 238.377088][T12073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.392234][T12073] CPU: 0 UID: 0 PID: 12073 Comm: syz.4.2174 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 238.403356][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 238.413559][T12073] Call Trace: [ 238.417128][T12073] [ 238.420086][T12073] dump_stack_lvl+0x241/0x360 [ 238.424802][T12073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.430027][T12073] ? __pfx__printk+0x10/0x10 [ 238.434655][T12073] ? snprintf+0xda/0x120 [ 238.439293][T12073] should_fail_ex+0x3b0/0x4e0 [ 238.444006][T12073] _copy_to_user+0x31/0xb0 [ 238.448450][T12073] simple_read_from_buffer+0xca/0x150 [ 238.453843][T12073] proc_fail_nth_read+0x1e9/0x250 [ 238.458897][T12073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.464559][T12073] ? rw_verify_area+0x55e/0x6f0 [ 238.469423][T12073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.475011][T12073] vfs_read+0x1fc/0xb70 [ 238.479566][T12073] ? __pfx___mutex_lock+0x10/0x10 [ 238.484651][T12073] ? __pfx_vfs_read+0x10/0x10 [ 238.489335][T12073] ? __fget_files+0x2a/0x410 [ 238.493999][T12073] ? __fget_files+0x395/0x410 [ 238.498857][T12073] ? __fget_files+0x2a/0x410 [ 238.503454][T12073] ksys_read+0x18f/0x2b0 [ 238.507697][T12073] ? __pfx_ksys_read+0x10/0x10 [ 238.512472][T12073] ? do_syscall_64+0x100/0x230 [ 238.517267][T12073] ? do_syscall_64+0xb6/0x230 [ 238.522080][T12073] do_syscall_64+0xf3/0x230 [ 238.526609][T12073] ? clear_bhb_loop+0x35/0x90 [ 238.531308][T12073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.537197][T12073] RIP: 0033:0x7fee79f8472c [ 238.541612][T12073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.561649][T12073] RSP: 002b:00007fee7ad26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.570167][T12073] RAX: ffffffffffffffda RBX: 00007fee7a175fa0 RCX: 00007fee79f8472c [ 238.578138][T12073] RDX: 000000000000000f RSI: 00007fee7ad260a0 RDI: 0000000000000003 [ 238.586559][T12073] RBP: 00007fee7ad26090 R08: 0000000000000000 R09: 0000000000000000 [ 238.595009][T12073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.602989][T12073] R13: 0000000000000000 R14: 00007fee7a175fa0 R15: 00007ffdf4e5dcb8 [ 238.610980][T12073] [ 238.652023][T12078] netlink: 'syz.6.2176': attribute type 12 has an invalid length. [ 238.841198][T12088] batman_adv: batadv0: Adding interface: gretap2 [ 238.863247][T12088] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.920988][T12088] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 239.078925][T12098] netlink: 'syz.7.2184': attribute type 4 has an invalid length. [ 239.139969][T12100] xt_CT: No such helper "syz0" [ 239.247581][T12107] xt_cgroup: invalid path, errno=-2 [ 239.307462][T12111] FAULT_INJECTION: forcing a failure. [ 239.307462][T12111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.329226][T12111] CPU: 0 UID: 0 PID: 12111 Comm: syz.3.2191 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 239.340021][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 239.350091][T12111] Call Trace: [ 239.353385][T12111] [ 239.356325][T12111] dump_stack_lvl+0x241/0x360 [ 239.361001][T12111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.366195][T12111] ? __pfx__printk+0x10/0x10 [ 239.370778][T12111] ? __pfx_lock_release+0x10/0x10 [ 239.375796][T12111] should_fail_ex+0x3b0/0x4e0 [ 239.380471][T12111] _copy_from_user+0x2f/0xc0 [ 239.385077][T12111] copy_msghdr_from_user+0xae/0x680 [ 239.390307][T12111] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 239.396136][T12111] ? __fget_files+0x2a/0x410 [ 239.400746][T12111] ? __fget_files+0x2a/0x410 [ 239.405365][T12111] __sys_sendmsg+0x209/0x350 [ 239.409972][T12111] ? __pfx_lock_release+0x10/0x10 [ 239.415016][T12111] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.420160][T12111] ? __pfx_vfs_write+0x10/0x10 [ 239.424967][T12111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.431321][T12111] ? do_syscall_64+0x100/0x230 [ 239.436104][T12111] ? do_syscall_64+0xb6/0x230 [ 239.440787][T12111] do_syscall_64+0xf3/0x230 [ 239.445304][T12111] ? clear_bhb_loop+0x35/0x90 [ 239.449991][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.455889][T12111] RIP: 0033:0x7f4d14785d19 [ 239.460422][T12111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.480148][T12111] RSP: 002b:00007f4d15569038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.488583][T12111] RAX: ffffffffffffffda RBX: 00007f4d14975fa0 RCX: 00007f4d14785d19 [ 239.497734][T12111] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 239.506258][T12111] RBP: 00007f4d15569090 R08: 0000000000000000 R09: 0000000000000000 [ 239.515036][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.523010][T12111] R13: 0000000000000000 R14: 00007f4d14975fa0 R15: 00007ffe3fb69c58 [ 239.530988][T12111] [ 239.576974][T12116] netlink: 'syz.4.2190': attribute type 11 has an invalid length. [ 239.603260][T12116] netlink: 'syz.4.2190': attribute type 5 has an invalid length. [ 239.640361][T12124] Bluetooth: MGMT ver 1.23 [ 239.647084][T12125] netlink: 'syz.7.2195': attribute type 10 has an invalid length. [ 240.420955][T12150] netlink: 'syz.5.2206': attribute type 15 has an invalid length. [ 240.606889][T12154] gtp6: entered promiscuous mode [ 240.632572][T12154] gtp6: entered allmulticast mode [ 240.870296][T12165] bridge13: entered promiscuous mode [ 240.875980][T12165] bridge13: entered allmulticast mode [ 240.894802][T12165] team0: Port device bridge13 added [ 240.922508][T12172] netlink: 'syz.6.2209': attribute type 10 has an invalid length. [ 241.042064][T12179] __nla_validate_parse: 11 callbacks suppressed [ 241.042081][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2216'. [ 241.108819][T12185] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2220'. [ 241.233891][T12189] bond6: entered promiscuous mode [ 241.240419][T12189] bond6: entered allmulticast mode [ 241.253955][T12189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.389889][T12198] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2226'. [ 241.579439][T12208] netlink: 'syz.7.2229': attribute type 12 has an invalid length. [ 241.602099][T12207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.862341][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2235'. [ 242.539451][T12235] netlink: 'syz.6.2237': attribute type 8 has an invalid length. [ 242.561271][T12239] xt_cgroup: invalid path, errno=-2 [ 242.574751][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 242.581669][T12235] ipt_rpfilter: unknown options [ 242.611744][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2240'. [ 242.627817][T12237] xt_CT: No such helper "syz0" [ 242.642378][T12245] sock: sock_timestamping_bind_phc: sock not bind to device [ 242.800793][T12254] netlink: 'syz.3.2245': attribute type 10 has an invalid length. [ 242.813275][T12251] FAULT_INJECTION: forcing a failure. [ 242.813275][T12251] name failslab, interval 1, probability 0, space 0, times 0 [ 242.841951][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2242'. [ 242.851241][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.6.2244 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 242.863432][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 242.873552][T12251] Call Trace: [ 242.877585][T12251] [ 242.880573][T12251] dump_stack_lvl+0x241/0x360 [ 242.885289][T12251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.890524][T12251] ? __pfx__printk+0x10/0x10 [ 242.895145][T12251] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 242.901152][T12251] ? __pfx___might_resched+0x10/0x10 [ 242.906941][T12251] should_fail_ex+0x3b0/0x4e0 [ 242.912085][T12251] should_failslab+0xac/0x100 [ 242.916918][T12251] kmem_cache_alloc_node_noprof+0x77/0x380 [ 242.922808][T12251] ? __alloc_skb+0x1c3/0x440 [ 242.928433][T12251] __alloc_skb+0x1c3/0x440 [ 242.932882][T12251] ? __pfx___alloc_skb+0x10/0x10 [ 242.937844][T12251] ? netlink_autobind+0xd6/0x2f0 [ 242.942804][T12251] ? netlink_autobind+0x2b0/0x2f0 [ 242.947858][T12251] netlink_sendmsg+0x638/0xcb0 [ 242.952654][T12251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.957965][T12251] ? aa_sock_msg_perm+0x91/0x160 [ 242.962927][T12251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.968232][T12251] __sock_sendmsg+0x221/0x270 [ 242.972938][T12251] ____sys_sendmsg+0x52a/0x7e0 [ 242.977736][T12251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.983043][T12251] ? __fget_files+0x2a/0x410 [ 242.987658][T12251] ? __fget_files+0x2a/0x410 [ 242.992277][T12251] __sys_sendmsg+0x269/0x350 [ 242.996889][T12251] ? __pfx_lock_release+0x10/0x10 [ 243.001942][T12251] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.007087][T12251] ? __pfx_vfs_write+0x10/0x10 [ 243.010446][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2248'. [ 243.011862][T12251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.027173][T12251] do_syscall_64+0xf3/0x230 [ 243.031696][T12251] ? clear_bhb_loop+0x35/0x90 [ 243.036397][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.042316][T12251] RIP: 0033:0x7f4694785d19 [ 243.046756][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.066385][T12251] RSP: 002b:00007f4695686038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.074826][T12251] RAX: ffffffffffffffda RBX: 00007f4694975fa0 RCX: 00007f4694785d19 [ 243.082820][T12251] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 243.090809][T12251] RBP: 00007f4695686090 R08: 0000000000000000 R09: 0000000000000000 [ 243.098799][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.106787][T12251] R13: 0000000000000000 R14: 00007f4694975fa0 R15: 00007ffca43bf048 [ 243.114790][T12251] [ 243.517437][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2261'. [ 243.527659][T12294] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2259'. [ 243.544049][T12293] gtp3: entered promiscuous mode [ 243.550243][T12293] gtp3: entered allmulticast mode [ 243.902948][T12308] netlink: 'syz.7.2268': attribute type 4 has an invalid length. [ 244.010011][T12319] bond7: entered promiscuous mode [ 244.021418][T12319] bond7: entered allmulticast mode [ 244.032653][T12319] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.270262][T12339] netlink: 'syz.5.2277': attribute type 32 has an invalid length. [ 244.324501][T12342] sctp: [Deprecated]: syz.3.2280 (pid 12342) Use of int in maxseg socket option. [ 244.324501][T12342] Use struct sctp_assoc_value instead [ 244.451332][T12347] netlink: 'syz.4.2282': attribute type 12 has an invalid length. [ 245.010258][T12387] xt_cgroup: invalid path, errno=-2 [ 245.152823][T12395] netlink: 'syz.5.2292': attribute type 10 has an invalid length. [ 245.166127][T12389] xt_CT: No such helper "syz0" [ 245.173779][T12395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.198622][T12395] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 245.589348][T12427] --map-set only usable from mangle table [ 245.652279][T12424] pim6reg1: entered promiscuous mode [ 245.684720][T12424] pim6reg1: entered allmulticast mode [ 245.934171][T12446] gtp4: entered promiscuous mode [ 245.939995][T12446] gtp4: entered allmulticast mode [ 246.057490][T12455] __nla_validate_parse: 14 callbacks suppressed [ 246.057510][T12455] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2314'. [ 246.256566][T12463] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2319'. [ 246.328743][T12468] bridge10: entered promiscuous mode [ 246.336058][T12468] bridge10: entered allmulticast mode [ 246.420222][T12473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2324'. [ 246.502596][T12476] bond6: entered promiscuous mode [ 246.509086][T12476] bond6: entered allmulticast mode [ 246.514579][T12476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.577637][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2323'. [ 246.685420][T12487] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 246.935275][T12500] netlink: 'syz.4.2333': attribute type 12 has an invalid length. [ 247.030583][T12507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2335'. [ 247.124221][T12512] xt_CT: No such helper "snmp" [ 247.132907][T12512] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2337'. [ 247.246509][T12520] xt_cgroup: invalid path, errno=-2 [ 247.270934][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2339'. [ 247.339196][T12524] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2341'. [ 247.388761][T12528] xt_CT: No such helper "syz0" [ 247.457965][T12534] netlink: 'syz.5.2345': attribute type 10 has an invalid length. [ 247.570633][T12538] bond0: (slave batadv0): Releasing backup interface [ 247.581278][T12538] batman_adv: batadv0: Removing interface: gretap2 [ 247.583680][T12540] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2348'. [ 247.622188][T12538] netlink: 'syz.5.2347': attribute type 10 has an invalid length. [ 247.633244][T12538] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2347'. [ 247.642244][T12538] team0: entered promiscuous mode [ 247.649515][T12538] bridge0: port 1(team0) entered blocking state [ 247.656342][T12538] bridge0: port 1(team0) entered disabled state [ 247.663259][T12538] team0: entered allmulticast mode [ 247.700169][T12538] tun0: tun_chr_ioctl cmd 1074025677 [ 247.706059][T12538] tun0: linktype set to 823 [ 247.719757][T12545] netlink: 'syz.7.2350': attribute type 1 has an invalid length. [ 248.285202][ T5145] Bluetooth: hci3: command 0x0405 tx timeout [ 248.523449][T12577] gtp10: entered promiscuous mode [ 248.528865][T12577] gtp10: entered allmulticast mode [ 248.740566][T12600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.770544][T12600] netlink: 'syz.3.2368': attribute type 10 has an invalid length. [ 248.839459][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.341427][T12600] team0: Port device wlan1 removed [ 250.360720][T12604] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 250.403236][T12604] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 250.552642][T12618] FAULT_INJECTION: forcing a failure. [ 250.552642][T12618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.575475][T12616] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 250.588327][T12618] CPU: 1 UID: 0 PID: 12618 Comm: syz.4.2370 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 250.599122][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 250.609210][T12618] Call Trace: [ 250.612507][T12618] [ 250.615456][T12618] dump_stack_lvl+0x241/0x360 [ 250.620297][T12618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.625584][T12618] ? __pfx__printk+0x10/0x10 [ 250.630213][T12618] ? __pfx_lock_release+0x10/0x10 [ 250.635414][T12618] should_fail_ex+0x3b0/0x4e0 [ 250.640407][T12618] _copy_from_iter+0x1e9/0x1c20 [ 250.645291][T12618] ? __virt_addr_valid+0x183/0x530 [ 250.650449][T12618] ? __alloc_skb+0x28f/0x440 [ 250.655059][T12618] ? __pfx__copy_from_iter+0x10/0x10 [ 250.660365][T12618] ? __virt_addr_valid+0x183/0x530 [ 250.665496][T12618] ? __virt_addr_valid+0x183/0x530 [ 250.670630][T12618] ? __virt_addr_valid+0x45f/0x530 [ 250.675764][T12618] ? __phys_addr_symbol+0x2f/0x70 [ 250.680814][T12618] ? __check_object_size+0x47a/0x730 [ 250.686320][T12618] netlink_sendmsg+0x73d/0xcb0 [ 250.691161][T12618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.696838][T12618] ? aa_sock_msg_perm+0x91/0x160 [ 250.701810][T12618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.707147][T12618] __sock_sendmsg+0x221/0x270 [ 250.712132][T12618] ____sys_sendmsg+0x52a/0x7e0 [ 250.717012][T12618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.722324][T12618] ? __fget_files+0x2a/0x410 [ 250.726944][T12618] ? __fget_files+0x2a/0x410 [ 250.731649][T12618] __sys_sendmsg+0x269/0x350 [ 250.735744][T12623] bond8: entered promiscuous mode [ 250.736769][T12618] ? __pfx_lock_release+0x10/0x10 [ 250.741914][T12623] bond8: entered allmulticast mode [ 250.747127][T12618] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.747215][T12618] ? __pfx_vfs_write+0x10/0x10 [ 250.747251][T12618] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.747277][T12618] ? do_syscall_64+0x100/0x230 [ 250.747297][T12618] ? do_syscall_64+0xb6/0x230 [ 250.747318][T12618] do_syscall_64+0xf3/0x230 [ 250.747344][T12618] ? clear_bhb_loop+0x35/0x90 [ 250.747366][T12618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.747384][T12618] RIP: 0033:0x7fee79f85d19 [ 250.747402][T12618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.756621][T12623] 8021q: adding VLAN 0 to HW filter on device bond8 [ 250.757815][T12618] RSP: 002b:00007fee7ad05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.832749][T12618] RAX: ffffffffffffffda RBX: 00007fee7a176080 RCX: 00007fee79f85d19 [ 250.840732][T12618] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 250.848701][T12618] RBP: 00007fee7ad05090 R08: 0000000000000000 R09: 0000000000000000 [ 250.856678][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.864669][T12618] R13: 0000000000000000 R14: 00007fee7a176080 R15: 00007ffdf4e5dcb8 [ 250.872676][T12618] [ 251.112876][T12652] netlink: 'syz.5.2384': attribute type 12 has an invalid length. [ 251.182621][T12659] __nla_validate_parse: 14 callbacks suppressed [ 251.182638][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2387'. [ 251.555147][T12676] xt_cgroup: invalid path, errno=-2 [ 251.573907][T12677] xt_CT: No such helper "syz0" [ 251.636699][T12682] netlink: 'syz.7.2396': attribute type 10 has an invalid length. [ 251.672757][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2398'. [ 251.985353][T12701] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 252.008748][T12701] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 252.061602][T12707] bond0 (unregistering): Released all slaves [ 252.127698][T12715] netlink: 'syz.3.2410': attribute type 1 has an invalid length. [ 252.152438][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'. [ 252.197897][T12707] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2407'. [ 252.332700][T12728] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2412'. [ 252.516584][T12737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2416'. [ 252.545844][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2417'. [ 252.585568][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2417'. [ 252.657298][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2421'. [ 252.681919][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2421'. [ 252.695022][T12749] gtp6: entered promiscuous mode [ 252.700016][T12749] gtp6: entered allmulticast mode [ 252.830853][T12761] bond7: entered promiscuous mode [ 252.840681][T12761] bond7: entered allmulticast mode [ 252.848018][T12761] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.251932][T12788] netlink: 'syz.7.2437': attribute type 12 has an invalid length. [ 253.274425][T12789] lo speed is unknown, defaulting to 1000 [ 253.407819][T12800] FAULT_INJECTION: forcing a failure. [ 253.407819][T12800] name failslab, interval 1, probability 0, space 0, times 0 [ 253.421342][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.3.2440 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 253.432141][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 253.442203][T12800] Call Trace: [ 253.445486][T12800] [ 253.448412][T12800] dump_stack_lvl+0x241/0x360 [ 253.453101][T12800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.458300][T12800] ? __pfx__printk+0x10/0x10 [ 253.462899][T12800] should_fail_ex+0x3b0/0x4e0 [ 253.467580][T12800] should_failslab+0xac/0x100 [ 253.472340][T12800] ? skb_clone+0x20c/0x390 [ 253.476908][T12800] kmem_cache_alloc_noprof+0x70/0x380 [ 253.482404][T12800] skb_clone+0x20c/0x390 [ 253.486665][T12800] __netlink_deliver_tap+0x3cc/0x7f0 [ 253.492022][T12800] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.498209][T12800] netlink_deliver_tap+0x19d/0x1b0 [ 253.503324][T12800] netlink_unicast+0x7c4/0x990 [ 253.508093][T12800] ? __pfx_netlink_unicast+0x10/0x10 [ 253.513380][T12800] ? __virt_addr_valid+0x45f/0x530 [ 253.518507][T12800] ? __phys_addr_symbol+0x2f/0x70 [ 253.523813][T12800] ? __check_object_size+0x47a/0x730 [ 253.529332][T12800] netlink_sendmsg+0x8e4/0xcb0 [ 253.534172][T12800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.539726][T12800] ? aa_sock_msg_perm+0x91/0x160 [ 253.544801][T12800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.550090][T12800] __sock_sendmsg+0x221/0x270 [ 253.554772][T12800] ____sys_sendmsg+0x52a/0x7e0 [ 253.559539][T12800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.564818][T12800] ? __fget_files+0x2a/0x410 [ 253.569420][T12800] ? __fget_files+0x2a/0x410 [ 253.574652][T12800] __sys_sendmsg+0x269/0x350 [ 253.579423][T12800] ? __pfx_lock_release+0x10/0x10 [ 253.584495][T12800] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.589675][T12800] ? __pfx_vfs_write+0x10/0x10 [ 253.594481][T12800] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.600827][T12800] ? do_syscall_64+0x100/0x230 [ 253.605590][T12800] ? do_syscall_64+0xb6/0x230 [ 253.610263][T12800] do_syscall_64+0xf3/0x230 [ 253.614763][T12800] ? clear_bhb_loop+0x35/0x90 [ 253.619438][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.625534][T12800] RIP: 0033:0x7f4d14785d19 [ 253.630750][T12800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.652021][T12800] RSP: 002b:00007f4d15569038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.660440][T12800] RAX: ffffffffffffffda RBX: 00007f4d14975fa0 RCX: 00007f4d14785d19 [ 253.668669][T12800] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 253.676899][T12800] RBP: 00007f4d15569090 R08: 0000000000000000 R09: 0000000000000000 [ 253.685253][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.693231][T12800] R13: 0000000000000000 R14: 00007f4d14975fa0 R15: 00007ffe3fb69c58 [ 253.701210][T12800] [ 254.114597][T12826] xt_cgroup: invalid path, errno=-2 [ 254.146480][T12823] xt_CT: No such helper "syz0" [ 254.247032][T12830] netlink: 'syz.4.2450': attribute type 10 has an invalid length. [ 254.530665][T12850] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.539787][T12850] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.548820][T12850] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.151228][T12887] gtp5: entered promiscuous mode [ 255.178032][T12887] gtp5: entered allmulticast mode [ 255.500513][T12902] bond9: entered promiscuous mode [ 255.508981][T12902] bond9: entered allmulticast mode [ 255.514482][T12902] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.664151][T12914] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.675934][T12914] bridge31: entered promiscuous mode [ 255.681821][T12914] bridge31: entered allmulticast mode [ 255.991364][T12926] netlink: 'syz.6.2489': attribute type 12 has an invalid length. [ 256.267236][T12940] FAULT_INJECTION: forcing a failure. [ 256.267236][T12940] name failslab, interval 1, probability 0, space 0, times 0 [ 256.283168][T12940] CPU: 0 UID: 0 PID: 12940 Comm: syz.5.2492 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 256.295176][T12940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 256.310803][T12940] Call Trace: [ 256.314656][T12940] [ 256.317723][T12940] dump_stack_lvl+0x241/0x360 [ 256.322812][T12940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.328943][T12940] ? __pfx__printk+0x10/0x10 [ 256.335555][T12940] should_fail_ex+0x3b0/0x4e0 [ 256.340234][T12940] should_failslab+0xac/0x100 [ 256.344911][T12940] ? skb_clone+0x20c/0x390 [ 256.349319][T12940] kmem_cache_alloc_noprof+0x70/0x380 [ 256.354950][T12940] skb_clone+0x20c/0x390 [ 256.359192][T12940] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 256.365495][T12940] dev_queue_xmit_nit+0x249/0xca0 [ 256.371649][T12940] ? dev_queue_xmit_nit+0x2b/0xca0 [ 256.377722][T12940] ? validate_xmit_skb+0x9b8/0xff0 [ 256.383561][T12940] dev_hard_start_xmit+0x15f/0x7d0 [ 256.389841][T12940] ? __pfx_validate_xmit_skb+0x10/0x10 [ 256.396948][T12940] __dev_queue_xmit+0x1b73/0x3f50 [ 256.403905][T12940] ? kasan_save_track+0x51/0x80 [ 256.408783][T12940] ? ____sys_sendmsg+0x52a/0x7e0 [ 256.413746][T12940] ? __dev_queue_xmit+0x2f4/0x3f50 [ 256.418875][T12940] ? __pfx___dev_queue_xmit+0x10/0x10 [ 256.424248][T12940] ? __copy_skb_header+0x437/0x5b0 [ 256.429534][T12940] ? __asan_memcpy+0x40/0x70 [ 256.435108][T12940] ? skb_clone+0x240/0x390 [ 256.442250][T12940] __netlink_deliver_tap+0x56b/0x7f0 [ 256.450030][T12940] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.461443][T12940] netlink_deliver_tap+0x19d/0x1b0 [ 256.469900][T12940] netlink_unicast+0x7c4/0x990 [ 256.475058][T12940] ? __pfx_netlink_unicast+0x10/0x10 [ 256.480377][T12940] ? __virt_addr_valid+0x45f/0x530 [ 256.485504][T12940] ? __phys_addr_symbol+0x2f/0x70 [ 256.491132][T12940] ? __check_object_size+0x47a/0x730 [ 256.498242][T12940] netlink_sendmsg+0x8e4/0xcb0 [ 256.504363][T12940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.511325][T12940] ? aa_sock_msg_perm+0x91/0x160 [ 256.516280][T12940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.522293][T12940] __sock_sendmsg+0x221/0x270 [ 256.527172][T12940] ____sys_sendmsg+0x52a/0x7e0 [ 256.532655][T12940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.537954][T12940] ? __fget_files+0x2a/0x410 [ 256.542542][T12940] ? __fget_files+0x2a/0x410 [ 256.547153][T12940] __sys_sendmsg+0x269/0x350 [ 256.551766][T12940] ? __pfx_lock_release+0x10/0x10 [ 256.557186][T12940] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.562826][T12940] ? __pfx_vfs_write+0x10/0x10 [ 256.569580][T12940] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.576022][T12940] ? do_syscall_64+0x100/0x230 [ 256.581241][T12940] ? do_syscall_64+0xb6/0x230 [ 256.586218][T12940] do_syscall_64+0xf3/0x230 [ 256.592222][T12940] ? clear_bhb_loop+0x35/0x90 [ 256.598640][T12940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.604530][T12940] RIP: 0033:0x7f7d1ff85d19 [ 256.608938][T12940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.630515][T12940] RSP: 002b:00007f7d20d9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.640388][T12940] RAX: ffffffffffffffda RBX: 00007f7d20176080 RCX: 00007f7d1ff85d19 [ 256.648862][T12940] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 256.657902][T12940] RBP: 00007f7d20d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 256.667620][T12940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.675700][T12940] R13: 0000000000000000 R14: 00007f7d20176080 R15: 00007ffe2000b9c8 [ 256.684566][T12940] [ 256.838627][T12956] xt_cgroup: invalid path, errno=-2 [ 256.858773][T12958] netlink: 'syz.7.2499': attribute type 11 has an invalid length. [ 256.882998][T12953] xt_CT: No such helper "syz0" [ 257.045196][T12970] netlink: 'syz.3.2504': attribute type 10 has an invalid length. [ 257.114171][T12972] __nla_validate_parse: 20 callbacks suppressed [ 257.114189][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2502'. [ 257.401957][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2515'. [ 257.471451][T12998] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 257.503228][T12998] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 257.629739][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2518'. [ 257.735939][T13016] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2523'. [ 257.878524][T13019] netlink: 'syz.3.2524': attribute type 2 has an invalid length. [ 257.888374][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2525'. [ 257.921422][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2525'. [ 257.955472][T13022] gtp7: entered promiscuous mode [ 257.964024][T13022] gtp7: entered allmulticast mode [ 258.016270][T13029] bond0: entered promiscuous mode [ 258.026272][T13029] bond0: entered allmulticast mode [ 258.032882][T13029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.045531][T13030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2524'. [ 258.112474][T13036] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2531'. [ 258.257067][T13043] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2534'. [ 258.326289][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2536'. [ 258.551549][T13062] netlink: 'syz.7.2541': attribute type 12 has an invalid length. [ 258.664954][T13068] netlink: 'syz.7.2543': attribute type 1 has an invalid length. [ 258.740535][T13068] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.957280][T13082] xt_CT: No such helper "syz0" [ 259.071155][T13089] xt_cgroup: invalid path, errno=-2 [ 259.209954][T13098] netlink: 'syz.6.2554': attribute type 10 has an invalid length. [ 259.260899][T13101] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 259.718064][T13129] lo speed is unknown, defaulting to 1000 [ 260.413336][T13151] dummy0: entered promiscuous mode [ 260.436574][T13151] dummy0: left promiscuous mode [ 260.770936][T13163] bond10: entered promiscuous mode [ 260.776735][T13163] bond10: entered allmulticast mode [ 260.782753][T13163] 8021q: adding VLAN 0 to HW filter on device bond10 [ 260.799295][T13170] gtp8: entered promiscuous mode [ 260.819570][T13170] gtp8: entered allmulticast mode [ 260.890090][T13176] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 261.097317][T13189] netlink: 'syz.7.2591': attribute type 12 has an invalid length. [ 261.553644][T13214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.963862][T13226] xt_cgroup: invalid path, errno=-2 [ 262.001214][T13228] netlink: 'syz.4.2604': attribute type 10 has an invalid length. [ 262.159309][T13234] netlink: 'syz.4.2608': attribute type 4 has an invalid length. [ 262.535066][T13259] __nla_validate_parse: 18 callbacks suppressed [ 262.535087][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2617'. [ 262.595793][T13259] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.604663][T13259] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.613514][T13259] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.622241][T13259] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.693746][T13271] xt_hashlimit: max too large, truncated to 1048576 [ 262.751454][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2622'. [ 262.865995][T13283] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2625'. [ 263.138366][T13292] bond9: entered promiscuous mode [ 263.146931][T13292] bond9: entered allmulticast mode [ 263.164104][T13292] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.234183][T13302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2632'. [ 263.271617][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 263.281846][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 263.296385][T13308] gtp11: entered promiscuous mode [ 263.301509][T13308] gtp11: entered allmulticast mode [ 263.398143][T13316] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2635'. [ 263.521334][T13323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2637'. [ 263.545357][T13325] netlink: 'syz.7.2640': attribute type 21 has an invalid length. [ 263.569564][T13327] netlink: 'syz.3.2641': attribute type 12 has an invalid length. [ 263.582569][T13325] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2640'. [ 263.595171][T13325] netlink: 'syz.7.2640': attribute type 5 has an invalid length. [ 263.603709][T13325] netlink: 'syz.7.2640': attribute type 6 has an invalid length. [ 263.611459][T13325] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2640'. [ 263.627101][T13331] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 263.739538][T13336] pim6reg: left allmulticast mode [ 263.962151][T13349] sctp: [Deprecated]: syz.4.2649 (pid 13349) Use of int in max_burst socket option deprecated. [ 263.962151][T13349] Use struct sctp_assoc_value instead [ 263.983639][T13346] xt_CT: No such helper "syz0" [ 264.112860][T13360] xt_cgroup: invalid path, errno=-2 [ 264.215488][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022327800: rx timeout, send abort [ 264.226730][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022327800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 264.282593][T13366] netlink: 'syz.7.2654': attribute type 10 has an invalid length. [ 264.385286][T13370] netlink: 'syz.3.2655': attribute type 10 has an invalid length. [ 264.405930][T13370] team0: Port device wlan1 added [ 264.827772][T13400] FAULT_INJECTION: forcing a failure. [ 264.827772][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 264.841056][T13400] CPU: 0 UID: 0 PID: 13400 Comm: syz.6.2669 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 264.852011][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 264.862186][T13400] Call Trace: [ 264.865493][T13400] [ 264.868447][T13400] dump_stack_lvl+0x241/0x360 [ 264.873215][T13400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.878408][T13400] ? __pfx__printk+0x10/0x10 [ 264.882996][T13400] ? ref_tracker_alloc+0x332/0x490 [ 264.888103][T13400] should_fail_ex+0x3b0/0x4e0 [ 264.892777][T13400] should_failslab+0xac/0x100 [ 264.897474][T13400] ? skb_clone+0x20c/0x390 [ 264.902042][T13400] kmem_cache_alloc_noprof+0x70/0x380 [ 264.907491][T13400] skb_clone+0x20c/0x390 [ 264.911853][T13400] __netlink_deliver_tap+0x3cc/0x7f0 [ 264.917192][T13400] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.922783][T13400] netlink_deliver_tap+0x19d/0x1b0 [ 264.928195][T13400] __netlink_sendskb+0x60/0xd0 [ 264.932979][T13400] netlink_dump+0x9f0/0xe10 [ 264.937481][T13400] ? __pfx_netlink_dump+0x10/0x10 [ 264.942502][T13400] ? __inet_diag_dump_start+0x8c9/0xa50 [ 264.948051][T13400] __netlink_dump_start+0x5a2/0x790 [ 264.953257][T13400] inet_diag_rcv_msg_compat+0x209/0x4e0 [ 264.958894][T13400] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 264.965232][T13400] ? sock_diag_rcv_msg+0xca/0x5f0 [ 264.970436][T13400] ? __pfx_lock_release+0x10/0x10 [ 264.975678][T13400] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 264.982349][T13400] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 264.988330][T13400] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 264.993969][T13400] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 265.000038][T13400] sock_diag_rcv_msg+0x3dc/0x5f0 [ 265.005152][T13400] netlink_rcv_skb+0x1e3/0x430 [ 265.010009][T13400] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 265.015487][T13400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.020831][T13400] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.026045][T13400] netlink_unicast+0x7f6/0x990 [ 265.030820][T13400] ? __pfx_netlink_unicast+0x10/0x10 [ 265.036108][T13400] ? __virt_addr_valid+0x45f/0x530 [ 265.041215][T13400] ? __phys_addr_symbol+0x2f/0x70 [ 265.046242][T13400] ? __check_object_size+0x47a/0x730 [ 265.051541][T13400] netlink_sendmsg+0x8e4/0xcb0 [ 265.056332][T13400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.063028][T13400] ? aa_sock_msg_perm+0x91/0x160 [ 265.068177][T13400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.073660][T13400] __sock_sendmsg+0x221/0x270 [ 265.078358][T13400] ____sys_sendmsg+0x52a/0x7e0 [ 265.083122][T13400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.088402][T13400] ? __fget_files+0x2a/0x410 [ 265.093261][T13400] ? __fget_files+0x2a/0x410 [ 265.098236][T13400] __sys_sendmsg+0x269/0x350 [ 265.102965][T13400] ? __pfx_lock_release+0x10/0x10 [ 265.108168][T13400] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.113292][T13400] ? __pfx_vfs_write+0x10/0x10 [ 265.118160][T13400] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.124568][T13400] ? do_syscall_64+0x100/0x230 [ 265.129325][T13400] ? do_syscall_64+0xb6/0x230 [ 265.133998][T13400] do_syscall_64+0xf3/0x230 [ 265.138496][T13400] ? clear_bhb_loop+0x35/0x90 [ 265.143176][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.149072][T13400] RIP: 0033:0x7f4694785d19 [ 265.153571][T13400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.173347][T13400] RSP: 002b:00007f4695686038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.181844][T13400] RAX: ffffffffffffffda RBX: 00007f4694975fa0 RCX: 00007f4694785d19 [ 265.189807][T13400] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 265.197771][T13400] RBP: 00007f4695686090 R08: 0000000000000000 R09: 0000000000000000 [ 265.205738][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.213792][T13400] R13: 0000000000000000 R14: 00007f4694975fa0 R15: 00007ffca43bf048 [ 265.221770][T13400] [ 265.485813][T13418] team0: Device ipvlan2 failed to register rx_handler [ 266.063467][T13438] nbd: device at index 64 is going down [ 266.160848][T13440] vlan3: entered promiscuous mode [ 266.178394][T13440] gretap0: entered promiscuous mode [ 266.190860][T13440] vlan3: entered allmulticast mode [ 266.212555][T13440] gretap0: entered allmulticast mode [ 266.233693][T13444] netlink: 'syz.7.2683': attribute type 12 has an invalid length. [ 266.244012][T13440] gretap0: left allmulticast mode [ 266.249077][T13440] gretap0: left promiscuous mode [ 266.369818][T13451] netlink: 'syz.4.2687': attribute type 30 has an invalid length. [ 266.516946][T13457] gtp6: entered promiscuous mode [ 266.521964][T13457] gtp6: entered allmulticast mode [ 266.545413][T13461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.591516][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 266.786876][T13474] xt_hashlimit: max too large, truncated to 1048576 [ 267.165009][T13494] validate_nla: 2 callbacks suppressed [ 267.165031][T13494] netlink: 'syz.3.2701': attribute type 12 has an invalid length. [ 267.375266][T13496] vlan2: entered promiscuous mode [ 267.380350][T13496] gretap0: entered promiscuous mode [ 267.385843][T13496] vlan2: entered allmulticast mode [ 267.390980][T13496] gretap0: entered allmulticast mode [ 267.407525][T13496] gretap0: left allmulticast mode [ 267.413866][T13496] gretap0: left promiscuous mode [ 267.466700][T13504] netlink: 'syz.7.2704': attribute type 10 has an invalid length. [ 267.556487][T13509] xt_hashlimit: max too large, truncated to 1048576 [ 267.972684][T13529] __nla_validate_parse: 16 callbacks suppressed [ 267.972706][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2711'. [ 268.157981][T13536] netlink: 892 bytes leftover after parsing attributes in process `syz.3.2714'. [ 268.321443][T13545] xt_cgroup: invalid path, errno=-2 [ 268.407337][T13549] netlink: 'syz.3.2720': attribute type 10 has an invalid length. [ 268.656737][T13568] FAULT_INJECTION: forcing a failure. [ 268.656737][T13568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.678937][T13568] CPU: 1 UID: 0 PID: 13568 Comm: syz.7.2728 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 268.690751][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 268.702014][T13568] Call Trace: [ 268.705335][T13568] [ 268.708315][T13568] dump_stack_lvl+0x241/0x360 [ 268.713200][T13568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.718437][T13568] ? __pfx__printk+0x10/0x10 [ 268.723059][T13568] should_fail_ex+0x3b0/0x4e0 [ 268.727766][T13568] prepare_alloc_pages+0x1da/0x5b0 [ 268.732905][T13568] __alloc_pages_noprof+0x16f/0x710 [ 268.738139][T13568] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 268.743987][T13568] alloc_pages_mpol_noprof+0x3e8/0x680 [ 268.749656][T13568] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 268.755775][T13568] ? alloc_pages_noprof+0xef/0x170 [ 268.761195][T13568] get_free_pages_noprof+0xc/0x30 [ 268.766253][T13568] kasan_populate_vmalloc_pte+0x38/0xe0 [ 268.771823][T13568] __apply_to_page_range+0x806/0xde0 [ 268.777142][T13568] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 268.783542][T13568] ? __pfx___apply_to_page_range+0x10/0x10 [ 268.789393][T13568] ? do_raw_spin_unlock+0x13c/0x8b0 [ 268.795150][T13568] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 268.800690][T13568] alloc_vmap_area+0x1d4e/0x2400 [ 268.805682][T13568] ? __pfx_alloc_vmap_area+0x10/0x10 [ 268.811002][T13568] ? __kasan_kmalloc+0x98/0xb0 [ 268.816320][T13568] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 268.822327][T13568] ? __get_vm_area_node+0x132/0x2d0 [ 268.827556][T13568] ? dev_map_alloc+0x141/0x540 [ 268.832512][T13568] __get_vm_area_node+0x1c8/0x2d0 [ 268.837924][T13568] __vmalloc_node_range_noprof+0x344/0x1380 [ 268.844636][T13568] ? dev_map_alloc+0x141/0x540 [ 268.849458][T13568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.856464][T13568] ? rcu_is_watching+0x15/0xb0 [ 268.861309][T13568] ? trace_kmalloc+0x1f/0xd0 [ 268.865921][T13568] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 268.871406][T13568] ? bpf_map_area_alloc+0x64/0x120 [ 268.876543][T13568] bpf_map_area_alloc+0xfc/0x120 [ 268.882066][T13568] ? dev_map_alloc+0x141/0x540 [ 268.887344][T13568] dev_map_alloc+0x141/0x540 [ 268.893699][T13568] ? ns_capable+0x8a/0xf0 [ 268.899883][T13568] map_create+0x946/0x11c0 [ 268.904371][T13568] __sys_bpf+0x6d1/0x810 [ 268.910501][T13568] ? __pfx___sys_bpf+0x10/0x10 [ 268.915913][T13568] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 268.921923][T13568] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 268.928275][T13568] ? do_syscall_64+0x100/0x230 [ 268.933066][T13568] __x64_sys_bpf+0x7c/0x90 [ 268.938476][T13568] do_syscall_64+0xf3/0x230 [ 268.944280][T13568] ? clear_bhb_loop+0x35/0x90 [ 268.949182][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.956165][T13568] RIP: 0033:0x7ff7af985d19 [ 268.960718][T13568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.980353][T13568] RSP: 002b:00007ff7b06e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.988792][T13568] RAX: ffffffffffffffda RBX: 00007ff7afb75fa0 RCX: 00007ff7af985d19 [ 268.997539][T13568] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 269.005687][T13568] RBP: 00007ff7b06e5090 R08: 0000000000000000 R09: 0000000000000000 [ 269.013994][T13568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.022010][T13568] R13: 0000000000000001 R14: 00007ff7afb75fa0 R15: 00007ffc4a0a7478 [ 269.030019][T13568] [ 269.144609][T13582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2730'. [ 269.146599][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2740'. [ 269.248709][T13581] xt_l2tp: v2 doesn't support IP mode [ 269.255540][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2732'. [ 269.729799][T13605] hsr0: left promiscuous mode [ 269.739990][T13605] gtp0: left promiscuous mode [ 269.748204][T13605] gtp0: left allmulticast mode [ 269.754201][T13618] FAULT_INJECTION: forcing a failure. [ 269.754201][T13618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.756754][T13605] bond1: left promiscuous mode [ 269.778266][T13605] bond1: left allmulticast mode [ 269.788855][T13605] gtp1: left promiscuous mode [ 269.792198][T13618] CPU: 1 UID: 0 PID: 13618 Comm: syz.6.2741 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 269.800155][T13605] gtp1: left allmulticast mode [ 269.804294][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 269.804310][T13618] Call Trace: [ 269.804318][T13618] [ 269.804327][T13618] dump_stack_lvl+0x241/0x360 [ 269.804358][T13618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.804383][T13618] ? __pfx__printk+0x10/0x10 [ 269.804411][T13618] ? snprintf+0xda/0x120 [ 269.804444][T13618] should_fail_ex+0x3b0/0x4e0 [ 269.811720][T13605] gtp2: left promiscuous mode [ 269.820693][T13618] _copy_to_user+0x31/0xb0 [ 269.820727][T13618] simple_read_from_buffer+0xca/0x150 [ 269.820751][T13618] proc_fail_nth_read+0x1e9/0x250 [ 269.820776][T13618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.820800][T13618] ? rw_verify_area+0x55e/0x6f0 [ 269.820817][T13618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.820839][T13618] vfs_read+0x1fc/0xb70 [ 269.820862][T13618] ? __pfx___mutex_lock+0x10/0x10 [ 269.820883][T13618] ? __pfx_vfs_read+0x10/0x10 [ 269.820904][T13618] ? __fget_files+0x2a/0x410 [ 269.820927][T13618] ? __fget_files+0x395/0x410 [ 269.820945][T13618] ? __fget_files+0x2a/0x410 [ 269.830136][T13605] gtp2: left allmulticast mode [ 269.833407][T13618] ksys_read+0x18f/0x2b0 [ 269.833447][T13618] ? __pfx_ksys_read+0x10/0x10 [ 269.833464][T13618] ? trace_sys_enter+0x74/0x120 [ 269.833487][T13618] ? rcu_is_watching+0x15/0xb0 [ 269.833511][T13618] ? trace_sys_enter+0x25/0x120 [ 269.833535][T13618] do_syscall_64+0xf3/0x230 [ 269.833556][T13618] ? clear_bhb_loop+0x35/0x90 [ 269.833580][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.833599][T13618] RIP: 0033:0x7f469478472c [ 269.833619][T13618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 269.833635][T13618] RSP: 002b:00007f4695665030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.833657][T13618] RAX: ffffffffffffffda RBX: 00007f4694976080 RCX: 00007f469478472c [ 269.833672][T13618] RDX: 000000000000000f RSI: 00007f46956650a0 RDI: 000000000000000c [ 269.833685][T13618] RBP: 00007f4695665090 R08: 0000000000000000 R09: 0000000000000000 [ 269.833699][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.833711][T13618] R13: 0000000000000000 R14: 00007f4694976080 R15: 00007ffca43bf048 [ 269.833741][T13618] [ 269.846243][T13621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2744'. [ 269.874330][T13605] bond2: left promiscuous mode [ 269.893837][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2742'. [ 269.895913][T13605] bond2: left allmulticast mode [ 270.075919][T13605] bond3: left promiscuous mode [ 270.081169][T13605] bond3: left allmulticast mode [ 270.092691][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2745'. [ 270.102533][T13605] bond4: left promiscuous mode [ 270.109288][T13605] bond4: left allmulticast mode [ 270.114636][T13605] bond5: left promiscuous mode [ 270.119737][T13605] bond5: left allmulticast mode [ 270.125252][T13605] bond8: left promiscuous mode [ 270.130186][T13605] bond8: left allmulticast mode [ 270.135766][T13605] gtp4: left promiscuous mode [ 270.140884][T13605] gtp5: left promiscuous mode [ 270.145763][T13605] gtp5: left allmulticast mode [ 270.157827][T13605] bond10: left promiscuous mode [ 270.163435][T13605] bond10: left allmulticast mode [ 270.170155][T13605] bond11: left promiscuous mode [ 270.181556][T13605] bond11: left allmulticast mode [ 270.189928][T13605] bond12: left promiscuous mode [ 270.195882][T13605] bond12: left allmulticast mode [ 270.203682][T13605] gretap1: left allmulticast mode [ 270.212101][T13605] gtp6: left promiscuous mode [ 270.221217][T13605] gtp6: left allmulticast mode [ 270.229990][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'. [ 270.571745][T13652] netlink: 'syz.5.2752': attribute type 10 has an invalid length. [ 270.600557][T13652] ieee802154 phy0 wpan0: entered promiscuous mode [ 270.619866][T13652] bond0: (slave wpan0): Enslaving as an active interface with an up link [ 270.643655][ T8] ================================================================== [ 270.651825][ T8] BUG: KASAN: null-ptr-deref in mac802154_header_create+0x13f/0xa50 [ 270.659845][ T8] Write of size 4 at addr 000000000000004c by task kworker/0:0/8 [ 270.667566][ T8] [ 270.669883][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 270.680502][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 270.690912][ T8] Workqueue: mld mld_ifc_work [ 270.695607][ T8] Call Trace: [ 270.698887][ T8] [ 270.702801][ T8] dump_stack_lvl+0x241/0x360 [ 270.707482][ T8] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.712675][ T8] ? __pfx__printk+0x10/0x10 [ 270.717265][ T8] ? _printk+0xd5/0x120 [ 270.721415][ T8] print_report+0xe8/0x550 [ 270.727990][ T8] ? __virt_addr_valid+0x58/0x530 [ 270.733320][ T8] ? mac802154_header_create+0x13f/0xa50 [ 270.739133][ T8] kasan_report+0x143/0x180 [ 270.744415][ T8] ? mac802154_header_create+0x13f/0xa50 [ 270.750302][ T8] kasan_check_range+0x282/0x290 [ 270.755345][ T8] mac802154_header_create+0x13f/0xa50 [ 270.760800][ T8] ? __pfx_mac802154_header_create+0x10/0x10 [ 270.766770][ T8] ? neigh_connected_output+0x1d5/0x450 [ 270.772308][ T8] ? read_seqbegin+0x157/0x2b0 [ 270.777063][ T8] ? lockdep_hardirqs_on+0x99/0x150 [ 270.782256][ T8] ? read_seqbegin+0x208/0x2b0 [ 270.787031][ T8] ? ___neigh_create+0x1d6f/0x2320 [ 270.792283][ T8] ? __pfx_mac802154_header_create+0x10/0x10 [ 270.798360][ T8] neigh_connected_output+0x27f/0x450 [ 270.804348][ T8] ip6_finish_output2+0x12c7/0x17b0 [ 270.809548][ T8] ? ip6_mtu+0x81/0x3f0 [ 270.813696][ T8] ? ip6_finish_output2+0x63a/0x17b0 [ 270.819005][ T8] ? __pfx_ip6_finish_output2+0x10/0x10 [ 270.824563][ T8] ? ip6_mtu+0x81/0x3f0 [ 270.828711][ T8] ip6_finish_output+0x41e/0x840 [ 270.833641][ T8] NF_HOOK+0x9e/0x430 [ 270.837617][ T8] ? NF_HOOK+0xfa/0x430 [ 270.841855][ T8] ? __pfx_NF_HOOK+0x10/0x10 [ 270.846456][ T8] ? __pfx_dst_output+0x10/0x10 [ 270.851484][ T8] ? icmp6_dst_alloc+0x3aa/0x420 [ 270.856436][ T8] mld_sendpack+0x843/0xdb0 [ 270.861123][ T8] ? __pfx_mld_newpack+0x10/0x10 [ 270.866149][ T8] ? mld_sendpack+0x1e8/0xdb0 [ 270.870819][ T8] ? __pfx_mld_sendpack+0x10/0x10 [ 270.876014][ T8] mld_ifc_work+0x7d9/0xd90 [ 270.880508][ T8] ? process_scheduled_works+0x976/0x1840 [ 270.886236][ T8] process_scheduled_works+0xa66/0x1840 [ 270.891901][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.898437][ T8] ? assign_work+0x364/0x3d0 [ 270.903141][ T8] worker_thread+0x870/0xd30 [ 270.907869][ T8] ? __kthread_parkme+0x169/0x1d0 [ 270.913185][ T8] ? __pfx_worker_thread+0x10/0x10 [ 270.918666][ T8] kthread+0x2f0/0x390 [ 270.922910][ T8] ? __pfx_worker_thread+0x10/0x10 [ 270.928014][ T8] ? __pfx_kthread+0x10/0x10 [ 270.932596][ T8] ret_from_fork+0x4b/0x80 [ 270.937002][ T8] ? __pfx_kthread+0x10/0x10 [ 270.941582][ T8] ret_from_fork_asm+0x1a/0x30 [ 270.946338][ T8] [ 270.949346][ T8] ================================================================== [ 270.984776][ T8] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 270.992004][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 271.002510][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 271.013100][ T8] Workqueue: mld mld_ifc_work [ 271.017892][ T8] Call Trace: [ 271.021533][ T8] [ 271.024488][ T8] dump_stack_lvl+0x241/0x360 [ 271.029402][ T8] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.034625][ T8] ? __pfx__printk+0x10/0x10 [ 271.039234][ T8] ? preempt_schedule+0xe1/0xf0 [ 271.044103][ T8] ? vscnprintf+0x5d/0x90 [ 271.048448][ T8] panic+0x349/0x880 [ 271.052360][ T8] ? check_panic_on_warn+0x21/0xb0 [ 271.057478][ T8] ? __pfx_panic+0x10/0x10 [ 271.062024][ T8] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 271.068221][ T8] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.074556][ T8] ? print_report+0xe8/0x550 [ 271.079148][ T8] check_panic_on_warn+0x86/0xb0 [ 271.084088][ T8] ? mac802154_header_create+0x13f/0xa50 [ 271.089723][ T8] end_report+0x77/0x160 [ 271.093977][ T8] kasan_report+0x154/0x180 [ 271.098486][ T8] ? mac802154_header_create+0x13f/0xa50 [ 271.104110][ T8] kasan_check_range+0x282/0x290 [ 271.109057][ T8] mac802154_header_create+0x13f/0xa50 [ 271.114539][ T8] ? __pfx_mac802154_header_create+0x10/0x10 [ 271.120543][ T8] ? neigh_connected_output+0x1d5/0x450 [ 271.126138][ T8] ? read_seqbegin+0x157/0x2b0 [ 271.130909][ T8] ? lockdep_hardirqs_on+0x99/0x150 [ 271.136091][ T8] ? read_seqbegin+0x208/0x2b0 [ 271.140843][ T8] ? ___neigh_create+0x1d6f/0x2320 [ 271.145940][ T8] ? __pfx_mac802154_header_create+0x10/0x10 [ 271.151939][ T8] neigh_connected_output+0x27f/0x450 [ 271.157366][ T8] ip6_finish_output2+0x12c7/0x17b0 [ 271.162612][ T8] ? ip6_mtu+0x81/0x3f0 [ 271.166863][ T8] ? ip6_finish_output2+0x63a/0x17b0 [ 271.172177][ T8] ? __pfx_ip6_finish_output2+0x10/0x10 [ 271.177833][ T8] ? ip6_mtu+0x81/0x3f0 [ 271.182004][ T8] ip6_finish_output+0x41e/0x840 [ 271.186956][ T8] NF_HOOK+0x9e/0x430 [ 271.190927][ T8] ? NF_HOOK+0xfa/0x430 [ 271.195080][ T8] ? __pfx_NF_HOOK+0x10/0x10 [ 271.199772][ T8] ? __pfx_dst_output+0x10/0x10 [ 271.204611][ T8] ? icmp6_dst_alloc+0x3aa/0x420 [ 271.209537][ T8] mld_sendpack+0x843/0xdb0 [ 271.214389][ T8] ? __pfx_mld_newpack+0x10/0x10 [ 271.219353][ T8] ? mld_sendpack+0x1e8/0xdb0 [ 271.224039][ T8] ? __pfx_mld_sendpack+0x10/0x10 [ 271.229072][ T8] mld_ifc_work+0x7d9/0xd90 [ 271.233579][ T8] ? process_scheduled_works+0x976/0x1840 [ 271.239294][ T8] process_scheduled_works+0xa66/0x1840 [ 271.244866][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 271.250865][ T8] ? assign_work+0x364/0x3d0 [ 271.255832][ T8] worker_thread+0x870/0xd30 [ 271.260668][ T8] ? __kthread_parkme+0x169/0x1d0 [ 271.265729][ T8] ? __pfx_worker_thread+0x10/0x10 [ 271.270867][ T8] kthread+0x2f0/0x390 [ 271.275017][ T8] ? __pfx_worker_thread+0x10/0x10 [ 271.280147][ T8] ? __pfx_kthread+0x10/0x10 [ 271.284755][ T8] ret_from_fork+0x4b/0x80 [ 271.289189][ T8] ? __pfx_kthread+0x10/0x10 [ 271.293804][ T8] ret_from_fork_asm+0x1a/0x30 [ 271.298582][ T8] [ 271.301853][ T8] Kernel Offset: disabled [ 271.306165][ T8] Rebooting in 86400 seconds..