last executing test programs: 3m19.657157877s ago: executing program 0 (id=3166): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8, 0x1}, {0x10, 0x40, 0x2}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="ddbe4c4bae793809a520", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f49460652bc9", @TCF_META_TYPE_VAR="dc01", @TCF_META_TYPE_VAR="0a5dca5a09395b", @TCF_META_TYPE_VAR='T']}]}}]}]}]}}]}, 0x80}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m19.53099191s ago: executing program 0 (id=3169): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 3m19.440826532s ago: executing program 0 (id=3173): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x96f3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8004}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2022) 3m18.540198255s ago: executing program 0 (id=3187): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="030003"], 0xe) 3m17.580474874s ago: executing program 0 (id=3203): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3m17.499724213s ago: executing program 0 (id=3205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 3m1.925849414s ago: executing program 32 (id=3205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2m27.006094478s ago: executing program 5 (id=4109): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r0, 0x1, 0x0, 0x31000000, 0x0) 2m26.967424662s ago: executing program 5 (id=4111): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x7, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x28}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x6, 0x81, 0x80, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x80, 0x7f}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xd, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x100}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0xb8}], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xc, 0x4, 0x4e}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0x1, 0x8}, {0x2, 0x2, 0xd, 0x8}], 0x10, 0xc, @void, @value}, 0x94) 2m26.884258334s ago: executing program 5 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x5865, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x28000) 2m26.761688009s ago: executing program 5 (id=4116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x81, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073116c00000000008510000002000000b7000000000000009500c2006a2000009500bc"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000020b0e454000000003902000008000300", @ANYRES32=0x0, @ANYBLOB="10005a800c0001800400020004"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020752500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000008000000b703000000eb00edc3d8e5fd6530650095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000acc7f8000100000000200000001008600"/42], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="a1"}, @NL80211_ATTR_IE={0x4}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@un=@abs, 0x80, 0x0}}], 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="10007d8005"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000022c0)={0x84, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x66, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x2, @val, @val, @val={0x3, 0x1, 0x9}, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x7}}, @void, @val={0x5, 0x3}, @val={0x25, 0x3, {0x0, 0xb6}}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x2, 0x4, 0x0, {0x1fc, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c782, 0x401, 0x7}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x1, 0xd, 0x41}}, @void}}]}, 0x84}}, 0x0) 2m26.704534674s ago: executing program 5 (id=4118): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff05050166eccceee66fc5547efb455629b610f0797e093eed419b0e9abc3af45a03320913b23bf72ca7cc0ea66b9c70745b055df7a3a07aaee7457458476bb02b8758aa0efd3e4d91085809240b40bf28f73f09cc19bfe7660379cf1ece817d59e951f5074f1de165b41c85c34c62cf96284abcf2698b62ef42e3e3298c9c3ec6204c2e03340bc70fb05c"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000280)="58250657aff9352b350500ddff736343d1787935", 0x14}], 0x1}}], 0x2, 0x4000040) 2m26.590060922s ago: executing program 5 (id=4120): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400090000e4ffffffffffff05"], 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}}}}}}}, 0x0) 2m12.288596713s ago: executing program 3 (id=4397): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r2, 0xfff) accept(r2, 0xfffffffffffffffd, &(0x7f0000000440)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x9403, 0x3002, 0x180, 0x2c0, 0x248, 0x3d8, 0x3d8, 0x248, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, [0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@hbh={{0x48}, {0x9, 0x2, 0x0, [0x0, 0xc4c0, 0x8, 0x3, 0xf1af, 0x1000, 0x0, 0x3ff, 0x5e, 0x1, 0x0, 0x3, 0x0, 0xa2, 0x3ff], 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xfeff, 0xfffffff7, 0x7ff, 'syz0\x00', 'syz0\x00', {0x100}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept4(r5, 0x0, &(0x7f0000000040), 0x80000) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xe, 0x6, "539165393126fe5b0125"}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x10}}, 0x74}}, 0x0) 2m11.591625904s ago: executing program 33 (id=4120): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400090000e4ffffffffffff05"], 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}}}}}}}, 0x0) 2m11.388489543s ago: executing program 3 (id=4419): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="1d3a681ff5176adc956f425f18bc6e4d8ea57c88e018f72e84e0af60de9245b8b80983501b703f9b", 0x28, 0xfc00000000000000, 0x0, 0x0) 2m11.197928568s ago: executing program 3 (id=4423): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r2}, 0x8) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 2m11.019400043s ago: executing program 3 (id=4428): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x60, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x4090) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x1c, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@generic="a4fe72bc49a2b43c04"]}, 0x1c}], 0x1}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, &(0x7f0000000000)=0x380000, r9, &(0x7f0000000040)=0xfbde, 0x2, 0x1) (async) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) (async) shutdown(r8, 0x1) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r11, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x30}}, 0x0) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r4, 0x4, 0x6, 0x5, 0x4, 0xf, @local, @mcast1, 0x20, 0x8, 0x4, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000600)={'sit0\x00', r4, 0x7, 0x700, 0x411a, 0x6, {{0x27, 0x4, 0x0, 0x4, 0x9c, 0x65, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast2, {[@generic={0x94, 0x12, "d50cf58b982e11b0dd392f54f67945e1"}, @rr={0x7, 0x7, 0xc5, [@loopback]}, @timestamp={0x44, 0x2c, 0x28, 0x0, 0x9, [0x5320, 0xf, 0x4, 0x100, 0x7, 0x4, 0x5, 0xfd, 0x100, 0x0]}, @noop, @lsrr={0x83, 0x17, 0x9, [@loopback, @local, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1]}, @timestamp={0x44, 0x28, 0xe0, 0x0, 0xd, [0x1, 0xf, 0x40, 0x8, 0x1, 0x2, 0x81, 0x9, 0x8000]}]}}}}}) (async) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="00005200060005000100000008000800", @ANYRES32], 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r12, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001000000801b130009ca4cb941000000000000000000", @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) 2m10.781856735s ago: executing program 3 (id=4431): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0058650401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 2m10.386992314s ago: executing program 3 (id=4438): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x590) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@mpls_getroute={0x5c, 0x1a, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c, 0x80, 0xb0, 0x0, 0xfe, 0x4, 0x0, 0x5, 0x1200}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x11}, @RTA_DST={0x8, 0x1, {0x9}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_DST={0x8, 0x1, {0x3ff, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x5, r7}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x28, 0xc, r8}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x7f, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0xff00, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}, "a8"}}}}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000300)=0x68) r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 1m55.323651143s ago: executing program 34 (id=4438): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x590) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@mpls_getroute={0x5c, 0x1a, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c, 0x80, 0xb0, 0x0, 0xfe, 0x4, 0x0, 0x5, 0x1200}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x11}, @RTA_DST={0x8, 0x1, {0x9}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_DST={0x8, 0x1, {0x3ff, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x5, r7}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x28, 0xc, r8}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x7f, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0xff00, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}, "a8"}}}}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000300)=0x68) r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 3.054195221s ago: executing program 1 (id=6188): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write(r0, &(0x7f0000000080)="0000000110", 0x5) 2.91078127s ago: executing program 1 (id=6191): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff05050166eccceee66fc5547efb455629b610f0797e093eed419b0e9abc3af45a03320913b23bf72ca7cc0ea66b9c70745b055df7a3a07aaee7457458476bb02b8758aa0efd3e4d91085809240b40bf28f73f09cc19bfe7"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1, 0x0, 0x0, 0x3f000000}}], 0x8, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x4000040) 2.752676822s ago: executing program 1 (id=6193): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 2.582726928s ago: executing program 1 (id=6196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000001fddbdf251c000000180001801400020069703665727370616e30f0ff000000000c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0xc04cc4aba9929115}, 0x0) 2.509952479s ago: executing program 1 (id=6199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0xfcff, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x14c}}, 0x4810) 2.428662548s ago: executing program 7 (id=6200): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f000000cc80)={0xffffffffffffffff}) splice(r1, &(0x7f000000ccc0)=0xffffffff, r0, 0x0, 0x5, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xa94, 0xfffff466, 0x0, 0x1000, 0x1, 0x1, '\x00', 0x0, r1, 0x3, 0x0, 0x4, 0x3, @void, @value, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010f0000000000371c010700000008000300", @ANYRES32], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000856c0000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x6, 0x0) (async) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x10}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x10}, &(0x7f0000000040)=0xc) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r6) (async) close(r6) 2.345990036s ago: executing program 1 (id=6202): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x2a, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000140)=0x7e8, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) listen(r1, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x3}}]}}]}, 0x38}}, 0x4000) socket$inet(0x2, 0x0, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@loopback, 0x4e22, 0x5, 0x4e22, 0xf35b, 0xa, 0x80, 0xa0, 0x4, r3, 0xee01}, {0x6, 0x7, 0x10000, 0x8898, 0xad, 0x6, 0x7436, 0x8000000000000001}, {0x4b48, 0x1, 0xa, 0x7f}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d2, 0x33}, 0x2, @in6=@mcast2, 0x3500, 0x4, 0x3, 0x40, 0x288, 0x6, 0x1567e14e}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001380)={0x4c, r8, 0xd5a51a87be5ff565, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80084}, 0x90) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r9, 0x10d, 0x95, &(0x7f0000000000), &(0x7f0000000080)=0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x0, 0xffffffff}, 0x10) r11 = socket(0x2, 0x80805, 0x0) sendmmsg(r11, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.297853775s ago: executing program 7 (id=6203): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x8001, 0xfffffffffffff800, 0x1}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r6, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000001780), 0x13}], 0x1, 0x0) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x80) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4, r4}, 0x10) 1.415115181s ago: executing program 2 (id=6215): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000002a00090000000000000000000400002c0c001a80080001"], 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x2c, 0x28, 0x107, 0x0, 0x0, {0x2}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='!])&\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x2c}}, 0x0) 1.300896659s ago: executing program 7 (id=6216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000e080005400000000f2c0000000b0a01080000000000000000010000000900020073797a32000000000900010073797a300000000014000000020a03"], 0xc4}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0400"}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x1ff003, 0x66, 0x7f, 0xf52e2733cd0fc3e, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r5, @void, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x15, 0xfffffff7, 0x4, 0x1, 0x200, '\x00', 0x0, r0, 0x4, 0x5, 0x3, 0x9, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x7f, 0x4, 0xf7, 0x24000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x7, 0x8}, 0xc) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x8000}, 0xc) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}}, 0x10) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x3ff, 0xb9f9629c8f7076c1}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r0, 0xf832, 0x6, 0xe}) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r14, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r14, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r14, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8484", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r14, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4008, r0}, 0x51) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffd75, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd7, &(0x7f0000000100)=""/215, 0x41100, 0x44, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x4, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r4, r6, r7, r8, r10, r11, r13, r10, r15], &(0x7f0000000640)=[{0x3, 0x2, 0x6, 0x4}], 0x10, 0xffff, @void, @value}, 0x94) 1.291158716s ago: executing program 4 (id=6217): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30316001c0000000200000000000200090040000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000030200000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 1.208184237s ago: executing program 2 (id=6219): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1, 0x0, 0x0, 0xfff0}, 0x0) 1.133957569s ago: executing program 7 (id=6220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9000000010000100000000fff00000000000000a"], 0x90}}, 0x0) 1.123160924s ago: executing program 4 (id=6221): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2a, 0x7f, 0x3, 0x5, 0x9, 0x3, 0x90, 0x67, 0x17, 0x40, 0x1, 0xfb, 0x7, 0x40}, 0xe) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x10060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000440)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000500)=0x90) 978.276003ms ago: executing program 6 (id=6222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6a0000000400004c04000000080000006f001000", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6a0000000400004c04000000080000006f001000", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$packet(0x11, 0x2, 0x300) (async) 977.786002ms ago: executing program 2 (id=6223): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e21, @private=0xa010101}, {0x6, @remote}, 0x8, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'netpci0\x00'}) (async) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e21, @private=0xa010101}, {0x6, @remote}, 0x8, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'netpci0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000003080)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71", 0x8b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0xf0, 0x43, 0xa0, 0xf0, 0x98, 0x290, 0x178, 0x178, 0x290, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0xff, 0x0, 'veth0_to_bond\x00', 'veth1_macvtap\x00'}, 0x12a, 0xd0, 0xf0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [], @ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x45}, 0x0, 0x3a08}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) socket$pptp(0x18, 0x1, 0x2) (async) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) r8 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0x2148, 0x17, 0x200, 0x70bd2b, 0x25dfdbfd, {0x10}, [@nested={0x1054, 0x8a, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x12, 0x11d, 0x0, 0x0, @str='veth1_macvtap\x00'}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x104, 0x0, 0x0, @pid=r8}, @typed={0x9, 0xdb, 0x0, 0x0, @str='\'\xbb\x88{\x00'}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r9}, @generic="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"]}, @nested={0x18, 0x113, 0x0, 0x1, [@typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @nested={0x10a5, 0xae, 0x0, 0x1, [@generic="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", @typed={0x8, 0x66, 0x0, 0x0, @u32=0x3}, @generic="f63a3cad635b7ccd757c408ecd87297e85efc88411f369fba07241f7455487c0fca59e9eb2f1b571ed2002c804f215bdcce9f1bfc1dbb60cd1fd93c2521ee3b8a195a81239d62c79b475088f3d842d3e7a6a019fe3092203afd63f6e0ee9373f7e7131a56a6c99ec154109e1a8fa5a8a321aa3b2638e800d2b7aaf9677400b3091", @typed={0x8, 0xbc, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x33, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0xcc, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x1}, @generic="44a507b901b40798a22e21258954f1d507fb"]}, 0x2148}, 0x1, 0x0, 0x0, 0x20000094}, 0x880) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r3, 0x32, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r3, 0x32, 0x1, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0]}, 0x40) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003080)=ANY=[@ANYBLOB="9c0200002300010000000000000000a98c0200800c0001"], 0x29c}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 955.447753ms ago: executing program 7 (id=6224): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x70000, 0x0) 852.553954ms ago: executing program 4 (id=6225): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x28, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 790.153629ms ago: executing program 6 (id=6226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x2000000, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x88}}, 0x0) 748.17893ms ago: executing program 2 (id=6227): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r3, 0x4, r4}, 0x10) 705.572649ms ago: executing program 6 (id=6228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffdac, &(0x7f0000000140)="5b030023e0f6f1", 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/181, 0xb5}], 0x1, 0x3, 0x7f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1dea0000", @ANYRES16=r7, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="11000700f149010980000202000000270a000000080009000cac0f0004000b00"], 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x7, @empty, 0x7}}, 0xb, 0x1}, 0x90) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x5, 0x6, [0x4, 0xdb02, 0x0, 0xe, 0x7, 0x7f]}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000540)={r13, 0x8}, &(0x7f00000005c0)=0x8) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000000)=r14) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x7, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 562.371308ms ago: executing program 4 (id=6229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x975}, {0x6, 0x11, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0xd1}, 0x4008000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff283}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef27}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2f4, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x114, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}, {0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb3, 0x1, "af31903a90c53bdc7e350810ee051dd384d8ac460efa902e5feb7cdd1e8b49113e0d45096a6a10d1e94039ef994ebc83f66ca066718f4d9cf783717aa8bbc885cd27a992270974a81930a74b5b32912d1eeceb30e549fcaad109539f43c8e19fbc0db41f6ff8cc24d3489ebc8ae1a742e8e9a4f670308de9b4e4cc4448336fafa46552b13221ed79e8b834cdffa58bb84db91c23b7e6af5dbccffe452dd6182e2288ff13197542dcc0c8f2058cd3ee"}}, {0x4c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x48, 0x2, "2b5885865afba14c73eaf9c97e90f64d76e374b2cfa05fd1991a3cb46f4e61f8609bf094cee47912c2ffda13b09a3502e6fff9d2e8d2d236555d52d736e620db330d365f"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc8, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x28, 0x1, "6f4a93d4ea410a9ad4ec3cdf51edff1bd28655d6768d2a69d60c679216865258c4df6401"}}, {0x98, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x93, 0x2, "2310aea7b66bb70c2ed9e3ed39a1751d2fb8b74f8d93cf7f4ccc2c741b415e2d92f0c43968031357d67cdf7bbe6cf9cbb0523cf5163bbf99416edc21ea083b6e8e31d0ace1babb2a2f3724b80b116d5cfede08bc8c8ce4d7b3559f9864aeb67e12fc4b554c4e818fea903e4ac81cb48c421a710a8470660f5b0b5e936c233caf36e24df3a1cc2aa71a28880fc11354"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc8, 0x3, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x6f, 0x2, "c5fe78c8c3464d8c29f5cc13377f29b267e4f3c66eb1a7a9a3966248ab874f43c2ab6b1f9528f32ee4f36becba0c25225cc976166103311e7aa4c2f312d437a3a7424a6b22350e4b7e8975fad9b9809776728074e12f34772a88df34673dd1beb316fc54f5365aecf71b15"}}, {0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4c, 0x2, "c1df174a27fc3c921b007e2e7d5d6704e07d3aabc7f8d5286d20e7dcaf28258ab8fd272b9cce1a14a285d1d74eb4e58c54180c57ce6abf462f773f219bd88a299a5e0953824f8364"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x2f4}}, 0x140) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x4}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="fee4ae114585"}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x3032c721f7fc91) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x258, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "381c9982b34b828bb40fd1d20bb702b5bf4663f817b2f61f933853"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "79bbacb36654b2dcf3d85108677fb45726d1debee2298e18fe9e4b2b4cfd1271923b78cf"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf11a}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc68c}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf0, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xaa, 0xc5, "5928c972e70c98dd6de71c5de740f72e5538cb8100bf1fc1da7b1b95aab6409c797dce7fff5fc419da37437bb0e4e99d8cfed9bfefc31e973e657bf4cc65e28c57cb8bcb9d4815307debacebe0861bb6df00eb0be043d1a2d561ba69a74307d33049b529ac455649ab224221da8e42bfe5a2fb490a0acfef5f42ee553b7781bb52bad9c7b30da04e5ca1f1bb516c45e49861763c2c317af356416b383411ed5c0f474d2d463d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x401}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f00000010c0)={&(0x7f0000001000), 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x400c020) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x50, 0x1410, 0x20, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), r11) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001280), r6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r5) sendmsg$netlink(r5, &(0x7f0000001780)={&(0x7f0000001380), 0xc, &(0x7f00000016c0)=[{&(0x7f00000013c0)={0xb0, 0x24, 0x100, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x8}, @typed={0x98, 0x138, 0x0, 0x0, @binary="bdb963d056e41c8b0c077074ffb41354f449f8ef34ed4bc5159ceda54e559bbee81c48eba60146870dd42affcd40eddedbcc4e45858ba8ad960828ccd40d05a61df97cd97908ccd4e8ade3a1b74c5633b2ebd499766535ca34f649db9083f1dc9689a0ce23fb413330b7acb06990ca4064fb2761b353030968aa5fad00020f71b9fa1ec8b48b54cd1abc74c785c14cae5df3e2b8"}]}, 0xb0}, {&(0x7f0000001480)={0x20c, 0x16, 0x8, 0x70bd2d, 0x25dfdbff, "", [@nested={0xa3, 0x3c, 0x0, 0x1, [@generic="f860042e08a74611c964f71845685c4cabfc358b51661e6e6c51529b7824f457eb6351d6e539ae7126c3a4171402a54b9c9e33a3b864013be537b8a45ad308c7894cada8377f7f5c53f9f58cd4a1dc32622423ab6353d7960f5b231f9919b77338df1d868c66ce3d92b402b2d13239eb420b55405a5af9c375500d507a9fbfbec58ac68d66cbf962ff45d7598370dca712ab1a5ce93419a6783defa2860c10"]}, @nested={0x156, 0x55, 0x0, 0x1, [@generic="c2ca4b59683fa72156caf8c84356edb31a0dd56c203b9a5c076e4eb642a34595b12cf996f810c4b9055b82174d22a6beb0f8c783b8d5e60a60c76d77a0366d4718d6901e023b9cae6504f2", @typed={0x9, 0x4a, 0x0, 0x0, @str='/\x81+(\x00'}, @generic="8b28ceea857fa3a28dd78484c94a6003c173b8ee441ede2bc2b4a2189838b2f178d09fcfaa0a7118ab7960fd110fe191f9bcf85c4b5d201a4b9f01d32d4dedfc1a430a445a74bc40e78f4d55513dc0aa04cd45fba7879124201b64fc32963b376c6f2da100fc1a6909a37da2756e0d35535f26c983bbff6b15c8ddcef03f3beb83597e63084e40ee40293f78689036e7f53b891a", @typed={0xc, 0xaa, 0x0, 0x0, @u64=0x8}, @generic="33df1337006a862e2e2bf5f7968343cb8fe75c1bf2ace347f210961a8b4fa8ebb3aaa9d20f01dc99a1b33e24cf9978d9719ccd61f91d0bb03e56114807242749dea1775e41fd7dcfdf1cb0a25f2103f3dc18d2", @typed={0x8, 0x146, 0x0, 0x0, @fd=r13}]}]}, 0x20c}], 0x2, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20, 0xc801}, 0x400c4) 438.313309ms ago: executing program 6 (id=6230): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x14, 0x0, 0xb31}, 0x14}}, 0x0) 438.169239ms ago: executing program 2 (id=6231): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) (fail_nth: 2) 357.498548ms ago: executing program 4 (id=6232): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0, 0x3}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000131d000000000000000a54000000060a010400000000000000000200000028000480240001800c0001007061796c6f61640014000280080003400000000008000240000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) 132.332779ms ago: executing program 6 (id=6233): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 34.034636ms ago: executing program 4 (id=6234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xfffffffffffffe6a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe7cb7902709575f37538e486dd6317ce623ee1790e1790f7"], 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500010007000000090800130000ff52e8712a6d51b956000005000400000000000d000300686173683a6e657400"/84], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x3d8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x3a8, 0x2, [@TCA_FLOW_EMATCHES={0x3a4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x384, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8001}, {0x3, 0x6, 0xe, 0x200}}}, @TCF_EM_META={0xb4, 0x2, 0x0, 0x0, {{0xffff, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="a102fb", @TCF_META_TYPE_VAR="24affeffc03a7b60"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2800, 0x10}, {0x9, 0xf8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0xf8}, {0x3, 0x10}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="c5eb4035234d0d6756", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x3, 0x2}, {0x9, 0xee, 0x2}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="f08f556a5f1ab712dc7a", @TCF_META_TYPE_VAR="eaa23b9c1d85d8", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="72155059", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffa, 0x80}, {0x7, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="d4ca", @TCF_META_TYPE_VAR="c565", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="000af166"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x2, 0x2}, {0x2, 0x4}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x4, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x110, 0x2, 0x0, 0x0, {{0x8, 0x9, 0xcb88}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x28}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xbb, 0x5, "0ed3311ec959e362410fbf705356f6feaffeb90119e4ac7ea4c28b4bee6f6c0c3c7579ccd1c6ba60614ca916f3817cd06d7cd53e81c2488ee0c5b5359b1b9a09759ee0c961b98ba1a64adf650837078e231360cdd3f0a7af6074350691a3364fe05bf066325eec973b9fd6d17e00aa8b0c09b01e02c008e7fdff019ed1e4dd164fdd89aa759518424ca581e1f2d8aadcf15f5a3640bed6a0edc0837dc78c4ede36140e2d22532e1d630dfd42e397e640a995823770f660"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0xc4, 0x0, 0x6}, "dccd3b49a8b3a5564a04571fbebb12e7f7a87f4aa4c2b3e0f1264e6183290a6904490eab7cc7dc74eb84d7a40fab1657363d49b78ef645a71b7bf13ada8afc7c7ca6762b37be18c0cbc5b15c364f49428e60ae0b4e91b9c9f19e45d2d1540aa0fa36511c52195bc65b3c75"}}, @TCF_EM_META={0x6c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x7, 0x29, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xf}, {0x1, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x241, 0xff}, {0xef, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="fc43d4c24089", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffc, 0x5}, {0x8000, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xe4}, {0x0, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x7}, {{0x3, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x80, 0x0, 0x9b}, "c3d06c6dbc11c67e0288dde55fa49fc81c18f2f2f77034478395003959c4ac3496ef531b0277b4aed69fa9c9c1a45932a2d921fb2f6b1b129986384d6ba0b30271ff066167d1709c0344b7c75abdc6528acdd8b898eefe73b90a0efda013808141558555a5fbf6f8d65016a466"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x8000}, {0x1, 0xf, 0x4, 0x2, 0x7, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xfb, 0x2}, {0xcf, 0x4, 0x1}}}]}}]}]}]}}]}, 0x3d8}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000e6ff0000000000000000000000000000003300000000000d6352742a3badee0000000000000000", @ANYRES32=0x0, @ANYRES8=r10, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800) 32.914873ms ago: executing program 2 (id=6235): r0 = socket$tipc(0x1e, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYBLOB="bb8cd8bb84c99c63e47185fea832d80ae50ab863f2425a646feb83326e874adafa15d8dcf6f09c8d71f775077f098e03e117a2d165c532558cf8045c0f229eae6bc79f863ca664a7c7941e3ab540d2c59c9edb8703119622921d88a9a49c0604891a71c1d7371fd50f63c094661c00605b9190c209f401a6462111bb5a29f790bffe3d42e798dbd2bdcd01ae980f4d9e954f350a87fe3c20b1e8fe7f516abc2ffd8959479245f9a096bfc23b10f8ed32609ad9efae0b497acd505530ed0c568a48b665b37aa6fabb1d67c4fe02cae2d4e4eedfddd5e0d9ca2c0e19ab7c2b2dd55eaabd33ed15f99e276479cb4dd9", @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="5104525f8a5b7dbd98a94adf323f796ecfc4355171b61fb6785d1b8720fceba15691775bcd5beb0315776da90ecf937d044262152bef740f1368174d816f48223d32d2cbc88fc08db1e2045f35d3c798f0f3714cdb0422b3f586893ff0410f77f88e7d7d017f396d661dcb28e8ef86069a11c929d4b2186c88d33d3ca1d37f740b9c01053e075c5761ca1d52cd5beb92f7e8df7f826a425658846c2ceef3aeeb28a8c0b4d0b0ae", @ANYRESDEC=r0], 0x3c}}, 0x8094) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x22000010}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000091) 6.279449ms ago: executing program 7 (id=6236): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90a24fc600d00090009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001940)={0x2c, r3, 0x10b, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x88}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/174, 0xae}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000100)={'vlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0xffffffd1, 0x4, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90a24fc600d00090009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001780)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001940)={0x2c, r3, 0x10b, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x88}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) (async) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/174, 0xae}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000100)={'vlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0xffffffd1, 0x4, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) (async) 0s ago: executing program 6 (id=6237): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES64], 0x50}}, 0x24040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x80f96000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'ip6gretap0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c0}, 0x64000084) recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1}, 0x4000}], 0x1, 0x0, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x101000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xb000000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r8 = socket$netlink(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="076a3ab8c379fffa", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf25110000000800050007000000080005000d000000200001800800090039000000060004004e2200000c000700000000001700000044000280080004001c0400000800090007000000080006000200000006000f00feff0000080009000b00000005000d000100000006000e004e2200000800060003000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000880}, 0x8) kernel console output (not intermixed with test programs): ip6gretap1): failed to get link speed/duplex [ 371.504397][T17827] netlink: 'syz.4.4986': attribute type 2 has an invalid length. [ 371.517946][T17829] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4987'. [ 371.538005][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.668108][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.790195][ T69] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.855580][T17840] openvswitch: netlink: nsh attr 188 is out of range max 3 [ 371.909685][ T1102] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.047784][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.264131][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4996'. [ 372.308168][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.417998][ T5130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.579269][T17866] netlink: 'syz.4.5000': attribute type 2 has an invalid length. [ 372.596633][T17865] netlink: 'syz.2.5001': attribute type 4 has an invalid length. [ 372.676874][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5001'. [ 372.748972][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5001'. [ 373.053553][T17884] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 373.216275][T17890] tipc: Failed to obtain node identity [ 373.222455][T17890] tipc: Enabling of bearer rejected, failed to enable media [ 373.495294][T17903] netlink: 'syz.2.5010': attribute type 1 has an invalid length. [ 373.727011][T17910] af_packet: tpacket_rcv: packet too big, clamped from 65152 to 3952. macoff=96 [ 373.757061][T17912] lo: entered promiscuous mode [ 373.765564][T17912] lo: entered allmulticast mode [ 374.044594][T17922] netlink: 'syz.7.5019': attribute type 10 has an invalid length. [ 374.476917][T17943] lo: entered allmulticast mode [ 374.799535][T17961] netlink: 'syz.1.5034': attribute type 2 has an invalid length. [ 374.865058][T17967] netlink: 'syz.6.5036': attribute type 1 has an invalid length. [ 374.884993][T17967] netlink: 'syz.6.5036': attribute type 1 has an invalid length. [ 374.898044][T17967] netlink: 'syz.6.5036': attribute type 2 has an invalid length. [ 374.942829][T17973] x_tables: duplicate underflow at hook 1 [ 374.949628][T17973] IPVS: set_ctl: invalid protocol: 90 100.1.1.0:20003 [ 374.983833][T17974] netlink: 'syz.4.5038': attribute type 1 has an invalid length. [ 375.003883][T17974] lo: left allmulticast mode [ 375.165547][T17981] lo: entered promiscuous mode [ 375.547852][T18004] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 3, id = 0 [ 375.693239][ T5859] IPVS: starting estimator thread 0... [ 375.777157][T18010] lo: left promiscuous mode [ 375.786521][T18010] lo: left allmulticast mode [ 375.808033][T18013] IPVS: using max 18 ests per chain, 43200 per kthread [ 375.890930][T18025] FAULT_INJECTION: forcing a failure. [ 375.890930][T18025] name failslab, interval 1, probability 0, space 0, times 0 [ 375.915687][T18025] CPU: 1 UID: 0 PID: 18025 Comm: syz.4.5059 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 375.926507][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 375.936593][T18025] Call Trace: [ 375.939904][T18025] [ 375.942872][T18025] dump_stack_lvl+0x241/0x360 [ 375.947610][T18025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.952857][T18025] ? __pfx__printk+0x10/0x10 [ 375.957492][T18025] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 375.963513][T18025] ? __pfx___might_resched+0x10/0x10 [ 375.968849][T18025] should_fail_ex+0x3b0/0x4e0 [ 375.973577][T18025] should_failslab+0xac/0x100 [ 375.978298][T18025] ? __alloc_skb+0x1c3/0x440 [ 375.982939][T18025] kmem_cache_alloc_node_noprof+0x71/0x320 [ 375.988789][T18025] __alloc_skb+0x1c3/0x440 [ 375.993244][T18025] ? __pfx___alloc_skb+0x10/0x10 [ 375.998233][T18025] pfkey_sendmsg+0x1da/0x1050 [ 376.002957][T18025] ? __pfx___might_resched+0x10/0x10 [ 376.008318][T18025] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 376.013477][T18025] ? aa_sk_perm+0x96d/0xab0 [ 376.018007][T18025] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.022898][T18025] ? __pfx_lock_release+0x10/0x10 [ 376.028079][T18025] ? __import_iovec+0x590/0x870 [ 376.032979][T18025] ? aa_sock_msg_perm+0x91/0x160 [ 376.037966][T18025] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 376.043115][T18025] __sock_sendmsg+0x221/0x270 [ 376.047847][T18025] ____sys_sendmsg+0x52a/0x7e0 [ 376.052664][T18025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.058024][T18025] __sys_sendmsg+0x292/0x380 [ 376.062656][T18025] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.067820][T18025] ? __pfx_vfs_write+0x10/0x10 [ 376.072645][T18025] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.079019][T18025] ? do_syscall_64+0x100/0x230 [ 376.083827][T18025] ? do_syscall_64+0xb6/0x230 [ 376.088554][T18025] do_syscall_64+0xf3/0x230 [ 376.093095][T18025] ? clear_bhb_loop+0x35/0x90 [ 376.097815][T18025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.103739][T18025] RIP: 0033:0x7f608f97e719 [ 376.108181][T18025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.127819][T18025] RSP: 002b:00007f608ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.136268][T18025] RAX: ffffffffffffffda RBX: 00007f608fb35f80 RCX: 00007f608f97e719 [ 376.144271][T18025] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 376.152273][T18025] RBP: 00007f608ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.160297][T18025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.168307][T18025] R13: 0000000000000000 R14: 00007f608fb35f80 R15: 00007ffcf8455168 [ 376.176323][T18025] [ 376.207777][ C0] net_ratelimit: 32 callbacks suppressed [ 376.207801][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.453364][T18048] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.460901][T18048] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.481343][ T69] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.559333][T18051] FAULT_INJECTION: forcing a failure. [ 376.559333][T18051] name failslab, interval 1, probability 0, space 0, times 0 [ 376.599328][ T5130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.620375][T18051] CPU: 0 UID: 0 PID: 18051 Comm: syz.2.5070 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 376.631288][T18051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 376.641378][T18051] Call Trace: [ 376.644681][T18051] [ 376.647638][T18051] dump_stack_lvl+0x241/0x360 [ 376.652374][T18051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.657611][T18051] ? __pfx__printk+0x10/0x10 [ 376.662241][T18051] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 376.667751][T18051] ? __pfx___might_resched+0x10/0x10 [ 376.673173][T18051] should_fail_ex+0x3b0/0x4e0 [ 376.677889][T18051] should_failslab+0xac/0x100 [ 376.682623][T18051] ? nf_tables_commit+0xa05/0x91e0 [ 376.687771][T18051] __kmalloc_cache_noprof+0x6c/0x2c0 [ 376.693113][T18051] nf_tables_commit+0xa05/0x91e0 [ 376.698103][T18051] ? free_unref_page+0x6b4/0xf20 [ 376.703102][T18051] ? __folio_put+0x2c7/0x440 [ 376.707734][T18051] ? __pfx___folio_put+0x10/0x10 [ 376.708098][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.712697][T18051] ? __pfx_nf_tables_commit+0x10/0x10 [ 376.712727][T18051] ? free_large_kmalloc+0x105/0x1c0 [ 376.730679][T18051] ? nf_tables_newrule+0x23cc/0x2980 [ 376.735985][T18051] ? kfree+0x21c/0x440 [ 376.740069][T18051] ? nft_trans_rule_add+0x30f/0x430 [ 376.745285][T18051] ? nf_tables_newrule+0x2461/0x2980 [ 376.750601][T18051] ? __pfx_nf_tables_newrule+0x10/0x10 [ 376.756082][T18051] ? __nla_parse+0x40/0x60 [ 376.760517][T18051] nfnetlink_rcv+0xc77/0x2ab0 [ 376.765322][T18051] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 376.770485][T18051] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.775693][T18051] ? skb_clone+0x240/0x390 [ 376.780127][T18051] ? __pfx_lock_release+0x10/0x10 [ 376.785178][T18051] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.790388][T18051] netlink_unicast+0x7f6/0x990 [ 376.795169][T18051] ? __pfx_netlink_unicast+0x10/0x10 [ 376.800460][T18051] ? __virt_addr_valid+0x183/0x530 [ 376.805579][T18051] ? __check_object_size+0x48e/0x900 [ 376.810877][T18051] netlink_sendmsg+0x8e4/0xcb0 [ 376.815663][T18051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.820961][T18051] ? aa_sock_msg_perm+0x91/0x160 [ 376.825920][T18051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.831233][T18051] __sock_sendmsg+0x221/0x270 [ 376.835946][T18051] ____sys_sendmsg+0x52a/0x7e0 [ 376.840739][T18051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.846054][T18051] __sys_sendmsg+0x292/0x380 [ 376.850661][T18051] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.855805][T18051] ? __pfx_vfs_write+0x10/0x10 [ 376.860605][T18051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.866962][T18051] ? do_syscall_64+0x100/0x230 [ 376.871752][T18051] ? do_syscall_64+0xb6/0x230 [ 376.876451][T18051] do_syscall_64+0xf3/0x230 [ 376.880970][T18051] ? clear_bhb_loop+0x35/0x90 [ 376.885664][T18051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.891571][T18051] RIP: 0033:0x7f209c37e719 [ 376.895997][T18051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.915611][T18051] RSP: 002b:00007f209d224038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.924029][T18051] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37e719 [ 376.932005][T18051] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 376.939998][T18051] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000000 [ 376.947975][T18051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.955960][T18051] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 376.963962][T18051] [ 377.070535][T18065] __nla_validate_parse: 13 callbacks suppressed [ 377.070559][T18065] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.5074'. [ 377.089046][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.132513][T18065] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.5074'. [ 377.201571][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.225096][T18071] batman_adv: batadv0: Adding interface: dummy0 [ 377.247746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.258582][T18071] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.307839][T18071] batman_adv: batadv0: Interface activated: dummy0 [ 377.350904][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.364600][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5081'. [ 377.374221][T18084] lo: entered allmulticast mode [ 377.477873][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.588376][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.593637][T18096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.642932][T18098] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5086'. [ 377.952165][T18107] netlink: 'syz.2.5091': attribute type 9 has an invalid length. [ 377.966400][T18107] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.5091'. [ 378.047535][T18111] FAULT_INJECTION: forcing a failure. [ 378.047535][T18111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.077076][T18111] CPU: 1 UID: 0 PID: 18111 Comm: syz.4.5094 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 378.087897][T18111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 378.097990][T18111] Call Trace: [ 378.101297][T18111] [ 378.104242][T18111] dump_stack_lvl+0x241/0x360 [ 378.108942][T18111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.114155][T18111] ? __pfx__printk+0x10/0x10 [ 378.118787][T18111] ? __pfx_lock_release+0x10/0x10 [ 378.123839][T18111] should_fail_ex+0x3b0/0x4e0 [ 378.128528][T18111] _copy_from_iter+0x21f/0x1e70 [ 378.133394][T18111] ? __virt_addr_valid+0x183/0x530 [ 378.138515][T18111] ? __pfx_lock_release+0x10/0x10 [ 378.143561][T18111] ? __alloc_skb+0x28f/0x440 [ 378.148165][T18111] ? __pfx__copy_from_iter+0x10/0x10 [ 378.153463][T18111] ? __virt_addr_valid+0x183/0x530 [ 378.158583][T18111] ? __virt_addr_valid+0x183/0x530 [ 378.163703][T18111] ? __virt_addr_valid+0x45f/0x530 [ 378.168828][T18111] ? __check_object_size+0x48e/0x900 [ 378.174129][T18111] pfkey_sendmsg+0x235/0x1050 [ 378.178837][T18111] ? __pfx___might_resched+0x10/0x10 [ 378.184138][T18111] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 378.189262][T18111] ? aa_sk_perm+0x96d/0xab0 [ 378.193785][T18111] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.198649][T18111] ? __pfx_lock_release+0x10/0x10 [ 378.203697][T18111] ? __import_iovec+0x590/0x870 [ 378.208562][T18111] ? aa_sock_msg_perm+0x91/0x160 [ 378.213604][T18111] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 378.218729][T18111] __sock_sendmsg+0x221/0x270 [ 378.223438][T18111] ____sys_sendmsg+0x52a/0x7e0 [ 378.228218][T18111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.233524][T18111] __sys_sendmsg+0x292/0x380 [ 378.238127][T18111] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.243259][T18111] ? __pfx_vfs_write+0x10/0x10 [ 378.248056][T18111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.254400][T18111] ? do_syscall_64+0x100/0x230 [ 378.259177][T18111] ? do_syscall_64+0xb6/0x230 [ 378.263863][T18111] do_syscall_64+0xf3/0x230 [ 378.268379][T18111] ? clear_bhb_loop+0x35/0x90 [ 378.273068][T18111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.278968][T18111] RIP: 0033:0x7f608f97e719 [ 378.283403][T18111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.303021][T18111] RSP: 002b:00007f608ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.311448][T18111] RAX: ffffffffffffffda RBX: 00007f608fb35f80 RCX: 00007f608f97e719 [ 378.319426][T18111] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 378.327420][T18111] RBP: 00007f608ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.335405][T18111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.343375][T18111] R13: 0000000000000000 R14: 00007f608fb35f80 R15: 00007ffcf8455168 [ 378.351376][T18111] [ 378.382409][T18114] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5095'. [ 378.408282][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'. [ 378.628810][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5098'. [ 378.674902][T18129] vlan5: entered promiscuous mode [ 378.856190][T18142] tipc: Started in network mode [ 378.878689][T18142] tipc: Node identity -, cluster identity 4711 [ 378.895126][T18142] tipc: Enabling of bearer rejected, failed to enable media [ 378.985985][T18151] netlink: 'syz.4.5112': attribute type 3 has an invalid length. [ 379.026620][T18151] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5112'. [ 379.132803][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5114'. [ 379.158455][T18160] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.251681][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.984101][T18205] netlink: 'syz.2.5132': attribute type 1 has an invalid length. [ 380.076796][T18207] netlink: 'syz.6.5133': attribute type 2 has an invalid length. [ 380.408583][T18219] FAULT_INJECTION: forcing a failure. [ 380.408583][T18219] name failslab, interval 1, probability 0, space 0, times 0 [ 380.470383][T18219] CPU: 1 UID: 0 PID: 18219 Comm: syz.6.5138 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 380.481251][T18219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 380.491346][T18219] Call Trace: [ 380.494655][T18219] [ 380.497617][T18219] dump_stack_lvl+0x241/0x360 [ 380.502339][T18219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.507588][T18219] ? __pfx__printk+0x10/0x10 [ 380.512216][T18219] ? kmem_cache_free+0x1a2/0x420 [ 380.517191][T18219] ? ____sys_sendmsg+0x52a/0x7e0 [ 380.522148][T18219] ? do_syscall_64+0xf3/0x230 [ 380.526842][T18219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.532932][T18219] should_fail_ex+0x3b0/0x4e0 [ 380.537624][T18219] ? xfrm_state_alloc+0x22/0x2a0 [ 380.542589][T18219] should_failslab+0xac/0x100 [ 380.547274][T18219] ? xfrm_state_alloc+0x22/0x2a0 [ 380.552225][T18219] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 380.557639][T18219] xfrm_state_alloc+0x22/0x2a0 [ 380.562444][T18219] pfkey_add+0x6e2/0x3030 [ 380.566798][T18219] ? kasan_quarantine_put+0xa2/0x230 [ 380.572101][T18219] ? __pfx_pfkey_add+0x10/0x10 [ 380.576875][T18219] ? pfkey_broadcast+0x45/0x400 [ 380.581734][T18219] ? pfkey_broadcast+0x3e3/0x400 [ 380.586682][T18219] pfkey_sendmsg+0xbcc/0x1050 [ 380.591394][T18219] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 380.596525][T18219] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.601385][T18219] ? __pfx_lock_release+0x10/0x10 [ 380.606421][T18219] ? __import_iovec+0x590/0x870 [ 380.611282][T18219] ? aa_sock_msg_perm+0x91/0x160 [ 380.616323][T18219] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 380.621445][T18219] __sock_sendmsg+0x221/0x270 [ 380.626226][T18219] ____sys_sendmsg+0x52a/0x7e0 [ 380.631005][T18219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.636317][T18219] __sys_sendmsg+0x292/0x380 [ 380.640923][T18219] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.646049][T18219] ? __pfx_vfs_write+0x10/0x10 [ 380.650835][T18219] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.657174][T18219] ? do_syscall_64+0x100/0x230 [ 380.661952][T18219] ? do_syscall_64+0xb6/0x230 [ 380.666655][T18219] do_syscall_64+0xf3/0x230 [ 380.671188][T18219] ? clear_bhb_loop+0x35/0x90 [ 380.675876][T18219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.681777][T18219] RIP: 0033:0x7ff25957e719 [ 380.686205][T18219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.705831][T18219] RSP: 002b:00007ff25a296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.714249][T18219] RAX: ffffffffffffffda RBX: 00007ff259735f80 RCX: 00007ff25957e719 [ 380.722228][T18219] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 380.730204][T18219] RBP: 00007ff25a296090 R08: 0000000000000000 R09: 0000000000000000 [ 380.738205][T18219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.746177][T18219] R13: 0000000000000000 R14: 00007ff259735f80 R15: 00007fff09c56ee8 [ 380.754158][T18219] [ 380.790556][T18221] pimreg3: entered allmulticast mode [ 381.268156][ T5130] net_ratelimit: 29 callbacks suppressed [ 381.268177][ T5130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.407743][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.441496][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.479704][T18258] FAULT_INJECTION: forcing a failure. [ 381.479704][T18258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.510199][T18258] CPU: 0 UID: 0 PID: 18258 Comm: syz.2.5150 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 381.521021][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 381.531106][T18258] Call Trace: [ 381.534430][T18258] [ 381.537414][T18258] dump_stack_lvl+0x241/0x360 [ 381.542141][T18258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.547387][T18258] ? __pfx__printk+0x10/0x10 [ 381.552022][T18258] ? __pfx_lock_release+0x10/0x10 [ 381.557101][T18258] should_fail_ex+0x3b0/0x4e0 [ 381.561830][T18258] _copy_from_user+0x2f/0xc0 [ 381.566472][T18258] copy_msghdr_from_user+0xae/0x680 [ 381.571723][T18258] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 381.577595][T18258] __sys_sendmsg+0x22d/0x380 [ 381.582240][T18258] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.587425][T18258] ? __pfx_vfs_write+0x10/0x10 [ 381.592263][T18258] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.598650][T18258] ? do_syscall_64+0x100/0x230 [ 381.603483][T18258] ? do_syscall_64+0xb6/0x230 [ 381.608203][T18258] do_syscall_64+0xf3/0x230 [ 381.612748][T18258] ? clear_bhb_loop+0x35/0x90 [ 381.617463][T18258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.623398][T18258] RIP: 0033:0x7f209c37e719 [ 381.627846][T18258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.647492][T18258] RSP: 002b:00007f209d224038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.655949][T18258] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37e719 [ 381.663963][T18258] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 381.671967][T18258] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000000 [ 381.679967][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.687981][T18258] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 381.696082][T18258] [ 381.712204][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.842214][T18270] FAULT_INJECTION: forcing a failure. [ 381.842214][T18270] name failslab, interval 1, probability 0, space 0, times 0 [ 381.875497][T18269] netlink: 'syz.2.5154': attribute type 2 has an invalid length. [ 381.886803][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.899136][T18270] CPU: 0 UID: 0 PID: 18270 Comm: syz.4.5153 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 381.909940][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 381.920027][T18270] Call Trace: [ 381.923333][T18270] [ 381.926289][T18270] dump_stack_lvl+0x241/0x360 [ 381.931032][T18270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.936276][T18270] ? __pfx__printk+0x10/0x10 [ 381.940907][T18270] ? __kmalloc_noprof+0xb0/0x400 [ 381.945883][T18270] ? __pfx___might_resched+0x10/0x10 [ 381.951217][T18270] should_fail_ex+0x3b0/0x4e0 [ 381.955948][T18270] ? pfkey_add+0xf6f/0x3030 [ 381.960493][T18270] should_failslab+0xac/0x100 [ 381.965217][T18270] ? pfkey_add+0xf6f/0x3030 [ 381.969761][T18270] __kmalloc_noprof+0xd8/0x400 [ 381.974573][T18270] pfkey_add+0xf6f/0x3030 [ 381.978966][T18270] ? __pfx_pfkey_add+0x10/0x10 [ 381.983777][T18270] ? pfkey_broadcast+0x45/0x400 [ 381.988665][T18270] ? pfkey_broadcast+0x3e3/0x400 [ 381.993655][T18270] pfkey_sendmsg+0xbcc/0x1050 [ 381.998402][T18270] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 382.003570][T18270] ? __pfx_aa_sk_perm+0x10/0x10 [ 382.008457][T18270] ? __pfx_lock_release+0x10/0x10 [ 382.013516][T18270] ? __import_iovec+0x590/0x870 [ 382.018415][T18270] ? aa_sock_msg_perm+0x91/0x160 [ 382.023424][T18270] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 382.028568][T18270] __sock_sendmsg+0x221/0x270 [ 382.033292][T18270] ____sys_sendmsg+0x52a/0x7e0 [ 382.038108][T18270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.043459][T18270] __sys_sendmsg+0x292/0x380 [ 382.048088][T18270] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.053254][T18270] ? __pfx_vfs_write+0x10/0x10 [ 382.057806][ T5130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.058054][T18270] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.071757][T18270] ? do_syscall_64+0x100/0x230 [ 382.076566][T18270] ? do_syscall_64+0xb6/0x230 [ 382.081287][T18270] do_syscall_64+0xf3/0x230 [ 382.085829][T18270] ? clear_bhb_loop+0x35/0x90 [ 382.090548][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.096483][T18270] RIP: 0033:0x7f608f97e719 [ 382.100933][T18270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.120574][T18270] RSP: 002b:00007f608ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.129025][T18270] RAX: ffffffffffffffda RBX: 00007f608fb35f80 RCX: 00007f608f97e719 [ 382.137032][T18270] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 382.145041][T18270] RBP: 00007f608ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.153046][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.161054][T18270] R13: 0000000000000000 R14: 00007f608fb35f80 R15: 00007ffcf8455168 [ 382.169082][T18270] [ 382.194124][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.264291][T18283] veth0: entered promiscuous mode [ 382.269878][T18284] netlink: 'syz.6.5157': attribute type 21 has an invalid length. [ 382.287141][T18284] __nla_validate_parse: 9 callbacks suppressed [ 382.287161][T18284] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5157'. [ 382.347348][T18282] veth0: left promiscuous mode [ 382.367792][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.457908][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.478467][ T5130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.915653][T18324] FAULT_INJECTION: forcing a failure. [ 382.915653][T18324] name failslab, interval 1, probability 0, space 0, times 0 [ 382.922555][T18325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.977900][T18324] CPU: 0 UID: 0 PID: 18324 Comm: syz.6.5176 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 382.988736][T18324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 382.989819][T18327] lo: entered promiscuous mode [ 382.998809][T18324] Call Trace: [ 382.998823][T18324] [ 382.998834][T18324] dump_stack_lvl+0x241/0x360 [ 382.998872][T18324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.998902][T18324] ? __pfx__printk+0x10/0x10 [ 382.998930][T18324] ? __kmalloc_noprof+0xb0/0x400 [ 382.998962][T18324] ? __pfx___might_resched+0x10/0x10 [ 382.998998][T18324] should_fail_ex+0x3b0/0x4e0 [ 382.999026][T18324] ? pfkey_add+0x1453/0x3030 [ 383.044123][T18324] should_failslab+0xac/0x100 [ 383.048855][T18324] ? pfkey_add+0x1453/0x3030 [ 383.053490][T18324] __kmalloc_noprof+0xd8/0x400 [ 383.058326][T18324] pfkey_add+0x1453/0x3030 [ 383.062802][T18324] ? __pfx_pfkey_add+0x10/0x10 [ 383.067615][T18324] ? pfkey_broadcast+0x45/0x400 [ 383.072505][T18324] ? pfkey_broadcast+0x3e3/0x400 [ 383.077498][T18324] pfkey_sendmsg+0xbcc/0x1050 [ 383.082235][T18324] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 383.087431][T18324] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.092329][T18324] ? __pfx_lock_release+0x10/0x10 [ 383.097416][T18324] ? __import_iovec+0x590/0x870 [ 383.102337][T18324] ? aa_sock_msg_perm+0x91/0x160 [ 383.107324][T18324] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 383.112560][T18324] __sock_sendmsg+0x221/0x270 [ 383.117308][T18324] ____sys_sendmsg+0x52a/0x7e0 [ 383.122128][T18324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.127483][T18324] __sys_sendmsg+0x292/0x380 [ 383.132127][T18324] ? __pfx___sys_sendmsg+0x10/0x10 [ 383.137306][T18324] ? __pfx_vfs_write+0x10/0x10 [ 383.142139][T18324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.148519][T18324] ? do_syscall_64+0x100/0x230 [ 383.153337][T18324] ? do_syscall_64+0xb6/0x230 [ 383.158060][T18324] do_syscall_64+0xf3/0x230 [ 383.162605][T18324] ? clear_bhb_loop+0x35/0x90 [ 383.167334][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.173268][T18324] RIP: 0033:0x7ff25957e719 [ 383.174583][T18331] netlink: 'syz.4.5179': attribute type 21 has an invalid length. [ 383.177703][T18324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.177727][T18324] RSP: 002b:00007ff25a296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.177757][T18324] RAX: ffffffffffffffda RBX: 00007ff259735f80 RCX: 00007ff25957e719 [ 383.177776][T18324] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 383.177792][T18324] RBP: 00007ff25a296090 R08: 0000000000000000 R09: 0000000000000000 [ 383.177809][T18324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.177824][T18324] R13: 0000000000000000 R14: 00007ff259735f80 R15: 00007fff09c56ee8 [ 383.177859][T18324] [ 383.264871][T18331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5179'. [ 383.337357][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5178'. [ 383.361831][T18334] pim6reg: entered allmulticast mode [ 383.371533][T18334] pim6reg: left allmulticast mode [ 383.614403][T18344] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.5185'. [ 383.793761][T18357] netlink: 'syz.7.5189': attribute type 1 has an invalid length. [ 383.805830][T18360] FAULT_INJECTION: forcing a failure. [ 383.805830][T18360] name failslab, interval 1, probability 0, space 0, times 0 [ 383.861516][T18360] CPU: 1 UID: 0 PID: 18360 Comm: syz.1.5190 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 383.872362][T18360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 383.882447][T18360] Call Trace: [ 383.885762][T18360] [ 383.888722][T18360] dump_stack_lvl+0x241/0x360 [ 383.893450][T18360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.898695][T18360] ? __pfx__printk+0x10/0x10 [ 383.903328][T18360] ? __kmalloc_node_noprof+0xb7/0x440 [ 383.908756][T18360] ? __pfx___might_resched+0x10/0x10 [ 383.914089][T18360] should_fail_ex+0x3b0/0x4e0 [ 383.918822][T18360] should_failslab+0xac/0x100 [ 383.923540][T18360] __kmalloc_node_noprof+0xdf/0x440 [ 383.928778][T18360] ? crypto_create_tfm_node+0x88/0x3d0 [ 383.934377][T18360] crypto_create_tfm_node+0x88/0x3d0 [ 383.939710][T18360] crypto_alloc_tfm_node+0x161/0x360 [ 383.945050][T18360] esp_init_state+0x611/0x10b0 [ 383.949865][T18360] ? __pfx_esp_init_state+0x10/0x10 [ 383.955200][T18360] ? __xfrm_init_state+0x708/0xea0 [ 383.960345][T18360] ? __pfx_lock_release+0x10/0x10 [ 383.965426][T18360] __xfrm_init_state+0x9db/0xea0 [ 383.970438][T18360] xfrm_init_state+0x1f/0x80 [ 383.975039][T18360] pfkey_add+0x1dfe/0x3030 [ 383.979499][T18360] ? __pfx_pfkey_add+0x10/0x10 [ 383.984272][T18360] ? pfkey_broadcast+0x45/0x400 [ 383.989127][T18360] ? pfkey_broadcast+0x3e3/0x400 [ 383.994078][T18360] pfkey_sendmsg+0xbcc/0x1050 [ 383.998774][T18360] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 384.003907][T18360] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.008761][T18360] ? __pfx_lock_release+0x10/0x10 [ 384.013796][T18360] ? __import_iovec+0x590/0x870 [ 384.018657][T18360] ? aa_sock_msg_perm+0x91/0x160 [ 384.023606][T18360] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 384.028742][T18360] __sock_sendmsg+0x221/0x270 [ 384.033435][T18360] ____sys_sendmsg+0x52a/0x7e0 [ 384.038225][T18360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.043547][T18360] __sys_sendmsg+0x292/0x380 [ 384.048143][T18360] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.053267][T18360] ? __pfx_vfs_write+0x10/0x10 [ 384.058054][T18360] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.064395][T18360] ? do_syscall_64+0x100/0x230 [ 384.069168][T18360] ? do_syscall_64+0xb6/0x230 [ 384.073856][T18360] do_syscall_64+0xf3/0x230 [ 384.078372][T18360] ? clear_bhb_loop+0x35/0x90 [ 384.083075][T18360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.088977][T18360] RIP: 0033:0x7f8e93b7e719 [ 384.093393][T18360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.113091][T18360] RSP: 002b:00007f8e94a4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.121520][T18360] RAX: ffffffffffffffda RBX: 00007f8e93d35f80 RCX: 00007f8e93b7e719 [ 384.129502][T18360] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 384.137489][T18360] RBP: 00007f8e94a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 384.145473][T18360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.153453][T18360] R13: 0000000000000000 R14: 00007f8e93d35f80 R15: 00007ffc485c4bb8 [ 384.161455][T18360] [ 384.239273][T18369] netlink: 'syz.7.5195': attribute type 10 has an invalid length. [ 384.249712][T18369] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.256944][T18369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.264535][T18369] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.271742][T18369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.321994][T18369] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 384.468898][T18377] netlink: 'syz.7.5199': attribute type 2 has an invalid length. [ 384.516378][T18382] netlink: 284 bytes leftover after parsing attributes in process `syz.6.5200'. [ 384.578162][T18382] dvmrp0: entered allmulticast mode [ 384.722433][T18391] batadv0: entered promiscuous mode [ 384.773415][T18393] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5207'. [ 384.773741][T18391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.815177][ T1157] IPVS: starting estimator thread 0... [ 384.823835][T18391] tipc: Enabled bearer , priority 10 [ 384.838590][T18391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5206'. [ 384.933623][T18396] IPVS: using max 16 ests per chain, 38400 per kthread [ 385.034135][T18402] FAULT_INJECTION: forcing a failure. [ 385.034135][T18402] name failslab, interval 1, probability 0, space 0, times 0 [ 385.047054][T18402] CPU: 1 UID: 0 PID: 18402 Comm: syz.2.5211 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 385.057870][T18402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 385.067963][T18402] Call Trace: [ 385.071276][T18402] [ 385.074233][T18402] dump_stack_lvl+0x241/0x360 [ 385.078955][T18402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.084200][T18402] ? __pfx__printk+0x10/0x10 [ 385.088839][T18402] ? ref_tracker_alloc+0x332/0x490 [ 385.094000][T18402] should_fail_ex+0x3b0/0x4e0 [ 385.098808][T18402] ? skb_clone+0x20c/0x390 [ 385.103526][T18402] should_failslab+0xac/0x100 [ 385.108259][T18402] ? skb_clone+0x20c/0x390 [ 385.112717][T18402] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 385.118228][T18402] skb_clone+0x20c/0x390 [ 385.122522][T18402] __netlink_deliver_tap+0x3cc/0x7c0 [ 385.127864][T18402] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.133096][T18402] netlink_deliver_tap+0x19d/0x1b0 [ 385.138255][T18402] netlink_dump+0x851/0xd80 [ 385.142806][T18402] ? __pfx_netlink_dump+0x10/0x10 [ 385.147890][T18402] ? netlink_recvmsg+0x60a/0x11d0 [ 385.152945][T18402] ? kmem_cache_free+0x1a2/0x420 [ 385.157910][T18402] ? netlink_recvmsg+0x60a/0x11d0 [ 385.162971][T18402] netlink_recvmsg+0x6bb/0x11d0 [ 385.167846][T18402] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.173161][T18402] ? __pfx_aa_sk_perm+0x10/0x10 [ 385.178024][T18402] ? __fget_files+0x29/0x470 [ 385.182627][T18402] ? aa_sock_msg_perm+0x91/0x160 [ 385.187576][T18402] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 385.192878][T18402] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.198177][T18402] sock_recvmsg+0x22f/0x280 [ 385.202691][T18402] __sys_recvfrom+0x246/0x3d0 [ 385.207392][T18402] ? __pfx___sys_recvfrom+0x10/0x10 [ 385.212595][T18402] ? __mutex_unlock_slowpath+0x21d/0x750 [ 385.218258][T18402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 385.224267][T18402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 385.230610][T18402] __x64_sys_recvfrom+0xde/0x100 [ 385.235556][T18402] do_syscall_64+0xf3/0x230 [ 385.240063][T18402] ? clear_bhb_loop+0x35/0x90 [ 385.244753][T18402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.250658][T18402] RIP: 0033:0x7f209c3804e4 [ 385.255080][T18402] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 385.274699][T18402] RSP: 002b:00007f209d222ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 385.283130][T18402] RAX: ffffffffffffffda RBX: 00007f209d222fc0 RCX: 00007f209c3804e4 [ 385.291115][T18402] RDX: 0000000000001000 RSI: 00007f209d223010 RDI: 0000000000000003 [ 385.299095][T18402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.307075][T18402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 385.315060][T18402] R13: 00007f209d222f68 R14: 00007f209d223010 R15: 0000000000000000 [ 385.323056][T18402] [ 385.353209][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5214'. [ 385.437248][T18422] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5216'. [ 385.553867][T18422] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5216'. [ 385.933245][T18452] netlink: 'syz.1.5226': attribute type 1 has an invalid length. [ 385.993184][T18457] nbd: nbd0 already in use [ 386.118123][T18462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.134922][T18459] "syz.1.5228" (18459) uses obsolete ecb(arc4) skcipher [ 386.140569][T18462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.164177][T18462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.175209][T18462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.186187][T18462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.202177][T18462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.212906][T18462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.223679][T18462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.391153][ T53] net_ratelimit: 36 callbacks suppressed [ 386.391176][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.528951][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.607801][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.647957][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.797817][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.912931][T18499] team0: Port device vlan4 added [ 386.928430][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.957304][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.022252][T18512] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 387.030265][T18512] openvswitch: netlink: Actions may not be safe on all matching packets [ 387.048627][T18509] openvswitch: netlink: Unknown nsh attribute 0 [ 387.244884][T18522] netlink: 'syz.6.5251': attribute type 2 has an invalid length. [ 387.507083][T18542] __nla_validate_parse: 15 callbacks suppressed [ 387.507106][T18542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5261'. [ 387.598442][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5261'. [ 387.703219][T18548] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5262'. [ 388.220002][T18574] netlink: 'syz.2.5271': attribute type 21 has an invalid length. [ 388.269380][T18574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5271'. [ 388.404555][T18579] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5274'. [ 388.448899][T18579] netlink: 'syz.4.5274': attribute type 1 has an invalid length. [ 388.460396][T18583] netlink: 'syz.2.5275': attribute type 1 has an invalid length. [ 388.478162][T18585] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5276'. [ 388.486207][T18580] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5274'. [ 388.536431][T18580] netlink: 'syz.4.5274': attribute type 1 has an invalid length. [ 388.776934][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5280'. [ 388.798869][T18604] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5279'. [ 389.088361][ T5154] Bluetooth: hci7: command tx timeout [ 389.093907][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5284'. [ 389.154643][T18619] netlink: 'syz.4.5285': attribute type 21 has an invalid length. [ 389.819177][T18656] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.826463][T18656] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.848631][T18663] FAULT_INJECTION: forcing a failure. [ 389.848631][T18663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.907748][T18663] CPU: 0 UID: 0 PID: 18663 Comm: syz.4.5306 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 389.918620][T18663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 389.928719][T18663] Call Trace: [ 389.932025][T18663] [ 389.934990][T18663] dump_stack_lvl+0x241/0x360 [ 389.939719][T18663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.944962][T18663] ? __pfx__printk+0x10/0x10 [ 389.949588][T18663] ? snprintf+0xda/0x120 [ 389.953887][T18663] should_fail_ex+0x3b0/0x4e0 [ 389.958608][T18663] _copy_to_user+0x31/0xb0 [ 389.963065][T18663] simple_read_from_buffer+0xca/0x150 [ 389.968483][T18663] proc_fail_nth_read+0x1e9/0x250 [ 389.973554][T18663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.979146][T18663] ? rw_verify_area+0x55e/0x6f0 [ 389.984040][T18663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.989640][T18663] vfs_read+0x1fc/0xb70 [ 389.993852][T18663] ? fdget_pos+0x24e/0x320 [ 389.998328][T18663] ? __pfx_vfs_read+0x10/0x10 [ 390.003055][T18663] ? __fget_files+0x3f3/0x470 [ 390.007784][T18663] ? fdget_pos+0x24e/0x320 [ 390.012227][T18663] ksys_read+0x183/0x2b0 [ 390.016481][T18663] ? __pfx_ksys_read+0x10/0x10 [ 390.021254][T18663] ? do_syscall_64+0x100/0x230 [ 390.026042][T18663] ? do_syscall_64+0xb6/0x230 [ 390.030766][T18663] do_syscall_64+0xf3/0x230 [ 390.035288][T18663] ? clear_bhb_loop+0x35/0x90 [ 390.040008][T18663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.045914][T18663] RIP: 0033:0x7f608f97d15c [ 390.050344][T18663] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 390.069965][T18663] RSP: 002b:00007f608ddf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.078420][T18663] RAX: ffffffffffffffda RBX: 00007f608fb35f80 RCX: 00007f608f97d15c [ 390.086483][T18663] RDX: 000000000000000f RSI: 00007f608ddf60a0 RDI: 0000000000000004 [ 390.094482][T18663] RBP: 00007f608ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.102459][T18663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.110435][T18663] R13: 0000000000000000 R14: 00007f608fb35f80 R15: 00007ffcf8455168 [ 390.118447][T18663] [ 390.292029][T18677] x_tables: duplicate underflow at hook 3 [ 390.342768][T18683] netlink: 'syz.2.5313': attribute type 21 has an invalid length. [ 390.629100][T18696] netlink: 'syz.7.5319': attribute type 7 has an invalid length. [ 390.656931][T18696] netlink: 'syz.7.5319': attribute type 7 has an invalid length. [ 390.817908][T18712] siw: device registration error -23 [ 390.843307][T18711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.099831][T18726] tipc: Enabling of bearer rejected, already enabled [ 391.400155][ T2937] net_ratelimit: 45 callbacks suppressed [ 391.400176][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.539109][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.653938][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.687945][T18758] openvswitch: netlink: Unknown nsh attribute 0 [ 391.792536][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.807814][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.927876][ T2937] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.020330][T18781] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 392.037810][T18781] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 392.068846][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.127964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.211622][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.399302][T18804] FAULT_INJECTION: forcing a failure. [ 392.399302][T18804] name failslab, interval 1, probability 0, space 0, times 0 [ 392.417944][T18804] CPU: 0 UID: 0 PID: 18804 Comm: syz.7.5357 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 392.428791][T18804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 392.438918][T18804] Call Trace: [ 392.442259][T18804] [ 392.445220][T18804] dump_stack_lvl+0x241/0x360 [ 392.449945][T18804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.455185][T18804] ? __pfx__printk+0x10/0x10 [ 392.459822][T18804] ? __kmalloc_node_noprof+0xb7/0x440 [ 392.465248][T18804] ? __pfx___might_resched+0x10/0x10 [ 392.470602][T18804] should_fail_ex+0x3b0/0x4e0 [ 392.475391][T18804] should_failslab+0xac/0x100 [ 392.480090][T18804] __kmalloc_node_noprof+0xdf/0x440 [ 392.485302][T18804] ? crypto_create_tfm_node+0x88/0x3d0 [ 392.490790][T18804] crypto_create_tfm_node+0x88/0x3d0 [ 392.496094][T18804] crypto_spawn_tfm2+0x5c/0x90 [ 392.500869][T18804] lskcipher_init_tfm_simple+0x42/0x90 [ 392.506348][T18804] crypto_create_tfm_node+0x167/0x3d0 [ 392.511741][T18804] crypto_init_lskcipher_ops_sg+0x5b/0xe0 [ 392.517488][T18804] crypto_create_tfm_node+0x167/0x3d0 [ 392.522884][T18804] crypto_spawn_tfm2+0x5c/0x90 [ 392.527685][T18804] crypto_authenc_init_tfm+0x6a/0x220 [ 392.533100][T18804] crypto_create_tfm_node+0x167/0x3d0 [ 392.538516][T18804] crypto_spawn_tfm2+0x5c/0x90 [ 392.543306][T18804] aead_init_geniv+0x18e/0x260 [ 392.548112][T18804] crypto_create_tfm_node+0x167/0x3d0 [ 392.553521][T18804] crypto_alloc_tfm_node+0x161/0x360 [ 392.558893][T18804] esp_init_state+0x611/0x10b0 [ 392.563706][T18804] ? __pfx_esp_init_state+0x10/0x10 [ 392.568949][T18804] ? __xfrm_init_state+0x708/0xea0 [ 392.574079][T18804] ? __pfx_lock_release+0x10/0x10 [ 392.579139][T18804] __xfrm_init_state+0x9db/0xea0 [ 392.584096][T18804] xfrm_init_state+0x1f/0x80 [ 392.588693][T18804] pfkey_add+0x1dfe/0x3030 [ 392.593149][T18804] ? __pfx_pfkey_add+0x10/0x10 [ 392.597956][T18804] ? pfkey_broadcast+0x45/0x400 [ 392.602854][T18804] ? pfkey_broadcast+0x3e3/0x400 [ 392.607836][T18804] pfkey_sendmsg+0xbcc/0x1050 [ 392.612565][T18804] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 392.617725][T18804] ? __pfx_aa_sk_perm+0x10/0x10 [ 392.622616][T18804] ? __pfx_lock_release+0x10/0x10 [ 392.627659][T18804] ? __import_iovec+0x590/0x870 [ 392.632548][T18804] ? aa_sock_msg_perm+0x91/0x160 [ 392.637511][T18804] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 392.642643][T18804] __sock_sendmsg+0x221/0x270 [ 392.647346][T18804] ____sys_sendmsg+0x52a/0x7e0 [ 392.652130][T18804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.657444][T18804] __sys_sendmsg+0x292/0x380 [ 392.662052][T18804] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.667300][T18804] ? __pfx_vfs_write+0x10/0x10 [ 392.672109][T18804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.678461][T18804] ? do_syscall_64+0x100/0x230 [ 392.683242][T18804] ? do_syscall_64+0xb6/0x230 [ 392.687939][T18804] do_syscall_64+0xf3/0x230 [ 392.692460][T18804] ? clear_bhb_loop+0x35/0x90 [ 392.697161][T18804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.703068][T18804] RIP: 0033:0x7fcd15b7e719 [ 392.707497][T18804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.727114][T18804] RSP: 002b:00007fcd169c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.735556][T18804] RAX: ffffffffffffffda RBX: 00007fcd15d35f80 RCX: 00007fcd15b7e719 [ 392.743631][T18804] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 392.751617][T18804] RBP: 00007fcd169c8090 R08: 0000000000000000 R09: 0000000000000000 [ 392.759601][T18804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.767585][T18804] R13: 0000000000000000 R14: 00007fcd15d35f80 R15: 00007ffeb45c4e28 [ 392.775582][T18804] [ 392.874561][T18811] netlink: 'syz.7.5363': attribute type 21 has an invalid length. [ 392.908393][T18811] __nla_validate_parse: 20 callbacks suppressed [ 392.908414][T18811] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5363'. [ 393.154259][T18826] netlink: 'syz.4.5366': attribute type 1 has an invalid length. [ 393.172226][T18826] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5366'. [ 393.944696][T18848] FAULT_INJECTION: forcing a failure. [ 393.944696][T18848] name failslab, interval 1, probability 0, space 0, times 0 [ 393.958192][T18848] CPU: 0 UID: 0 PID: 18848 Comm: syz.6.5374 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 393.969006][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 393.979115][T18848] Call Trace: [ 393.982428][T18848] [ 393.985391][T18848] dump_stack_lvl+0x241/0x360 [ 393.990116][T18848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.995331][T18848] ? __pfx__printk+0x10/0x10 [ 393.999948][T18848] ? __kmalloc_noprof+0xb0/0x400 [ 394.004925][T18848] ? __pfx___might_resched+0x10/0x10 [ 394.010288][T18848] should_fail_ex+0x3b0/0x4e0 [ 394.014975][T18848] ? __crypto_alloc_tfmgfp+0x174/0x420 [ 394.020471][T18848] should_failslab+0xac/0x100 [ 394.025193][T18848] ? __crypto_alloc_tfmgfp+0x174/0x420 [ 394.030688][T18848] __kmalloc_noprof+0xd8/0x400 [ 394.035478][T18848] __crypto_alloc_tfmgfp+0x174/0x420 [ 394.040814][T18848] crypto_spawn_tfm+0x76/0xd0 [ 394.045530][T18848] lskcipher_init_tfm_simple2+0x4c/0x90 [ 394.051130][T18848] crypto_create_tfm_node+0x167/0x3d0 [ 394.056560][T18848] crypto_spawn_tfm2+0x5c/0x90 [ 394.061374][T18848] lskcipher_init_tfm_simple+0x42/0x90 [ 394.066889][T18848] crypto_create_tfm_node+0x167/0x3d0 [ 394.072306][T18848] crypto_init_lskcipher_ops_sg+0x5b/0xe0 [ 394.078061][T18848] crypto_create_tfm_node+0x167/0x3d0 [ 394.083487][T18848] crypto_spawn_tfm2+0x5c/0x90 [ 394.088316][T18848] crypto_authenc_init_tfm+0x6a/0x220 [ 394.093729][T18848] crypto_create_tfm_node+0x167/0x3d0 [ 394.099134][T18848] crypto_spawn_tfm2+0x5c/0x90 [ 394.103937][T18848] aead_init_geniv+0x18e/0x260 [ 394.108751][T18848] crypto_create_tfm_node+0x167/0x3d0 [ 394.114161][T18848] crypto_alloc_tfm_node+0x161/0x360 [ 394.119508][T18848] esp_init_state+0x611/0x10b0 [ 394.124335][T18848] ? __pfx_esp_init_state+0x10/0x10 [ 394.129581][T18848] ? __xfrm_init_state+0x708/0xea0 [ 394.134720][T18848] ? __pfx_lock_release+0x10/0x10 [ 394.139795][T18848] __xfrm_init_state+0x9db/0xea0 [ 394.144780][T18848] xfrm_init_state+0x1f/0x80 [ 394.149404][T18848] pfkey_add+0x1dfe/0x3030 [ 394.153863][T18848] ? __pfx_pfkey_add+0x10/0x10 [ 394.158652][T18848] ? pfkey_broadcast+0x45/0x400 [ 394.163539][T18848] ? pfkey_broadcast+0x3e3/0x400 [ 394.168568][T18848] pfkey_sendmsg+0xbcc/0x1050 [ 394.173319][T18848] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 394.178476][T18848] ? __pfx_aa_sk_perm+0x10/0x10 [ 394.183362][T18848] ? __pfx_lock_release+0x10/0x10 [ 394.188429][T18848] ? __import_iovec+0x590/0x870 [ 394.193333][T18848] ? aa_sock_msg_perm+0x91/0x160 [ 394.198318][T18848] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 394.203461][T18848] __sock_sendmsg+0x221/0x270 [ 394.208194][T18848] ____sys_sendmsg+0x52a/0x7e0 [ 394.212998][T18848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.218342][T18848] __sys_sendmsg+0x292/0x380 [ 394.222978][T18848] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.228142][T18848] ? __pfx_vfs_write+0x10/0x10 [ 394.232950][T18848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 394.239306][T18848] ? do_syscall_64+0x100/0x230 [ 394.244115][T18848] ? do_syscall_64+0xb6/0x230 [ 394.248836][T18848] do_syscall_64+0xf3/0x230 [ 394.253365][T18848] ? clear_bhb_loop+0x35/0x90 [ 394.258080][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.264005][T18848] RIP: 0033:0x7ff25957e719 [ 394.268467][T18848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.288119][T18848] RSP: 002b:00007ff25a296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.296579][T18848] RAX: ffffffffffffffda RBX: 00007ff259735f80 RCX: 00007ff25957e719 [ 394.304587][T18848] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 394.312668][T18848] RBP: 00007ff25a296090 R08: 0000000000000000 R09: 0000000000000000 [ 394.320659][T18848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.328665][T18848] R13: 0000000000000000 R14: 00007ff259735f80 R15: 00007fff09c56ee8 [ 394.336676][T18848] [ 396.430996][ T69] net_ratelimit: 19 callbacks suppressed [ 396.431021][ T69] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.568943][T16787] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.678039][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.793126][ T53] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.903473][T18913] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5400'. [ 396.937889][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.017885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.059005][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.169315][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.318907][T16787] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.327717][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.784889][T18966] FAULT_INJECTION: forcing a failure. [ 397.784889][T18966] name failslab, interval 1, probability 0, space 0, times 0 [ 397.832562][T18966] CPU: 1 UID: 0 PID: 18966 Comm: syz.7.5414 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 397.843401][T18966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 397.853493][T18966] Call Trace: [ 397.856804][T18966] [ 397.859765][T18966] dump_stack_lvl+0x241/0x360 [ 397.864489][T18966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.869727][T18966] ? __pfx__printk+0x10/0x10 [ 397.874373][T18966] should_fail_ex+0x3b0/0x4e0 [ 397.879202][T18966] should_failslab+0xac/0x100 [ 397.883923][T18966] ? __alloc_skb+0x1c3/0x440 [ 397.888555][T18966] kmem_cache_alloc_node_noprof+0x71/0x320 [ 397.894422][T18966] __alloc_skb+0x1c3/0x440 [ 397.898885][T18966] ? __pfx___alloc_skb+0x10/0x10 [ 397.903866][T18966] ? km_report+0x1c0/0x240 [ 397.908323][T18966] ? copy_to_user_state_extra+0x136d/0x1c10 [ 397.914258][T18966] ? __pfx_lock_release+0x10/0x10 [ 397.919343][T18966] xfrm_alloc_compat+0x1b6/0x1690 [ 397.924434][T18966] ? xfrm_get_translator+0x19/0x240 [ 397.929667][T18966] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 397.935163][T18966] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 397.940304][T18966] xfrm_send_state_notify+0xb7f/0x1e00 [ 397.945803][T18966] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 397.951740][T18966] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 397.957663][T18966] km_state_notify+0x116/0x1f0 [ 397.962460][T18966] ? km_state_notify+0x26/0x1f0 [ 397.967348][T18966] pfkey_add+0x2111/0x3030 [ 397.971831][T18966] ? __pfx_pfkey_add+0x10/0x10 [ 397.976636][T18966] ? pfkey_broadcast+0x45/0x400 [ 397.981520][T18966] ? pfkey_broadcast+0x3e3/0x400 [ 397.986505][T18966] pfkey_sendmsg+0xbcc/0x1050 [ 397.991260][T18966] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 397.996438][T18966] ? __pfx_aa_sk_perm+0x10/0x10 [ 398.001328][T18966] ? __pfx_lock_release+0x10/0x10 [ 398.006390][T18966] ? __import_iovec+0x590/0x870 [ 398.011287][T18966] ? aa_sock_msg_perm+0x91/0x160 [ 398.016276][T18966] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 398.021442][T18966] __sock_sendmsg+0x221/0x270 [ 398.026173][T18966] ____sys_sendmsg+0x52a/0x7e0 [ 398.030983][T18966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.036336][T18966] __sys_sendmsg+0x292/0x380 [ 398.040972][T18966] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.046142][T18966] ? __pfx_vfs_write+0x10/0x10 [ 398.050975][T18966] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 398.057354][T18966] ? do_syscall_64+0x100/0x230 [ 398.062159][T18966] ? do_syscall_64+0xb6/0x230 [ 398.066886][T18966] do_syscall_64+0xf3/0x230 [ 398.071434][T18966] ? clear_bhb_loop+0x35/0x90 [ 398.076155][T18966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.082100][T18966] RIP: 0033:0x7fcd15b7e719 [ 398.086543][T18966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.106181][T18966] RSP: 002b:00007fcd169c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.114633][T18966] RAX: ffffffffffffffda RBX: 00007fcd15d35f80 RCX: 00007fcd15b7e719 [ 398.122638][T18966] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 398.130641][T18966] RBP: 00007fcd169c8090 R08: 0000000000000000 R09: 0000000000000000 [ 398.138649][T18966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.146651][T18966] R13: 0000000000000000 R14: 00007fcd15d35f80 R15: 00007ffeb45c4e28 [ 398.154702][T18966] [ 398.319484][T18988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.363325][T18990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.372961][T18990] bond0: (slave bond1): Enslaving as an active interface with an up link [ 398.496494][T18998] netlink: 'syz.1.5427': attribute type 1 has an invalid length. [ 398.528014][T18998] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.5427'. [ 398.956919][T19027] dvmrp1: entered allmulticast mode [ 398.962780][T19027] dvmrp0: left allmulticast mode [ 398.967974][T19027] dvmrp1: left allmulticast mode [ 399.024253][T19029] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.5439'. [ 399.063052][T19029] netlink: 'syz.4.5439': attribute type 1 has an invalid length. [ 399.072775][T19035] netlink: 'syz.1.5441': attribute type 2 has an invalid length. [ 399.081599][T19029] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5439'. [ 399.325580][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5446'. [ 399.339673][T19047] geneve2: entered promiscuous mode [ 399.576372][T19095] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5453'. [ 399.696243][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.738612][T19100] netlink: 'syz.4.5455': attribute type 2 has an invalid length. [ 400.471259][T19127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.527447][T19127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.551132][T19127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.628397][T19137] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5469'. [ 400.888440][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5475'. [ 400.899677][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.950841][T19153] sctp: [Deprecated]: syz.6.5477 (pid 19153) Use of int in max_burst socket option. [ 400.950841][T19153] Use struct sctp_assoc_value instead [ 400.958021][T19157] sctp: [Deprecated]: syz.4.5478 (pid 19157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.958021][T19157] Use struct sctp_sack_info instead [ 401.192021][T19170] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 401.487762][ C1] net_ratelimit: 38 callbacks suppressed [ 401.487786][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.528659][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.645437][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.797930][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.808626][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5493'. [ 401.830234][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5493'. [ 401.910772][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.910845][T19205] Cannot find add_set index 0 as target [ 402.040358][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.155238][T19220] netlink: 'syz.4.5501': attribute type 2 has an invalid length. [ 402.179692][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.288206][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.323494][T19230] openvswitch: netlink: Actions may not be safe on all matching packets [ 402.348808][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.378728][T19230] delete_channel: no stack [ 402.396543][T19232] vlan0: entered promiscuous mode [ 402.438979][T19232] ip6gretap0: entered promiscuous mode [ 402.591492][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5509'. [ 402.626402][T19243] netlink: 'syz.7.5509': attribute type 7 has an invalid length. [ 402.686269][T19248] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 402.808193][T19256] sctp: [Deprecated]: syz.1.5514 (pid 19256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.808193][T19256] Use struct sctp_sack_info instead [ 402.837187][T19256] sctp: [Deprecated]: syz.1.5514 (pid 19256) Use of int in max_burst socket option deprecated. [ 402.837187][T19256] Use struct sctp_assoc_value instead [ 402.919593][T19261] sctp: [Deprecated]: syz.1.5514 (pid 19261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.919593][T19261] Use struct sctp_sack_info instead [ 403.743154][T19282] __nla_validate_parse: 4 callbacks suppressed [ 403.743176][T19282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5524'. [ 403.824065][T19282] syz_tun: entered promiscuous mode [ 403.858830][T19282] syz_tun: left promiscuous mode [ 404.417063][T19314] bridge1: entered promiscuous mode [ 404.424787][T19314] bridge1: entered allmulticast mode [ 404.481736][T19314] team0: Port device bridge1 added [ 404.817640][T19332] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 404.844394][T19332] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 405.017251][T19336] netlink: 'syz.6.5543': attribute type 4 has an invalid length. [ 405.039329][T19339] netlink: 'syz.1.5545': attribute type 13 has an invalid length. [ 405.058442][T19339] veth0_macvtap: left promiscuous mode [ 405.066481][T19339] macvtap0: entered allmulticast mode [ 405.119956][T19339] macvtap0: refused to change device tx_queue_len [ 405.200709][T19344] FAULT_INJECTION: forcing a failure. [ 405.200709][T19344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.214749][T19344] CPU: 1 UID: 0 PID: 19344 Comm: syz.4.5546 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 405.225583][T19344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 405.235698][T19344] Call Trace: [ 405.239021][T19344] [ 405.241990][T19344] dump_stack_lvl+0x241/0x360 [ 405.246717][T19344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.251967][T19344] ? __pfx__printk+0x10/0x10 [ 405.256617][T19344] should_fail_ex+0x3b0/0x4e0 [ 405.261354][T19344] _copy_from_user+0x2f/0xc0 [ 405.266014][T19344] move_addr_to_kernel+0x82/0x150 [ 405.271092][T19344] __sys_sendto+0x29f/0x4f0 [ 405.275628][T19344] ? __pfx___sys_sendto+0x10/0x10 [ 405.280667][T19344] ? __mutex_unlock_slowpath+0x21d/0x750 [ 405.286336][T19344] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 405.292367][T19344] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 405.298716][T19344] __x64_sys_sendto+0xde/0x100 [ 405.303494][T19344] do_syscall_64+0xf3/0x230 [ 405.308007][T19344] ? clear_bhb_loop+0x35/0x90 [ 405.312699][T19344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.318609][T19344] RIP: 0033:0x7f608f97e719 [ 405.323038][T19344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.342659][T19344] RSP: 002b:00007f608ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 405.351087][T19344] RAX: ffffffffffffffda RBX: 00007f608fb35f80 RCX: 00007f608f97e719 [ 405.359073][T19344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 405.367050][T19344] RBP: 00007f608ddf6090 R08: 0000000020000040 R09: 0000000000000010 [ 405.375031][T19344] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 405.383011][T19344] R13: 0000000000000000 R14: 00007f608fb35f80 R15: 00007ffcf8455168 [ 405.391008][T19344] [ 405.646497][T19349] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5548'. [ 406.128603][T19370] FAULT_INJECTION: forcing a failure. [ 406.128603][T19370] name failslab, interval 1, probability 0, space 0, times 0 [ 406.189293][T19370] CPU: 0 UID: 0 PID: 19370 Comm: syz.2.5554 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 406.200142][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 406.210341][T19370] Call Trace: [ 406.213653][T19370] [ 406.216615][T19370] dump_stack_lvl+0x241/0x360 [ 406.221343][T19370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.226576][T19370] ? __pfx__printk+0x10/0x10 [ 406.231219][T19370] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 406.237242][T19370] ? __pfx___might_resched+0x10/0x10 [ 406.242577][T19370] should_fail_ex+0x3b0/0x4e0 [ 406.247294][T19370] should_failslab+0xac/0x100 [ 406.252007][T19370] ? __alloc_skb+0x1c3/0x440 [ 406.256631][T19370] kmem_cache_alloc_node_noprof+0x71/0x320 [ 406.262567][T19370] __alloc_skb+0x1c3/0x440 [ 406.267022][T19370] ? __pfx___alloc_skb+0x10/0x10 [ 406.272007][T19370] ? __mutex_trylock_common+0x183/0x2e0 [ 406.277589][T19370] netlink_dump+0x2cd/0xd80 [ 406.282136][T19370] ? trace_contention_end+0x3c/0x120 [ 406.287459][T19370] ? __pfx_netlink_dump+0x10/0x10 [ 406.292554][T19370] ? __pfx_lock_acquire+0x10/0x10 [ 406.297632][T19370] __netlink_dump_start+0x5a2/0x790 [ 406.302872][T19370] ? __pfx_inet_dump_fib+0x10/0x10 [ 406.308021][T19370] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 406.313011][T19370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.318526][T19370] ? __pfx_rtnl_dumpit+0x10/0x10 [ 406.323495][T19370] ? __pfx_inet_dump_fib+0x10/0x10 [ 406.328644][T19370] ? ref_tracker_free+0x643/0x7e0 [ 406.333707][T19370] netlink_rcv_skb+0x1e3/0x430 [ 406.338505][T19370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.344010][T19370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.349356][T19370] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.354592][T19370] netlink_unicast+0x7f6/0x990 [ 406.359398][T19370] ? __pfx_netlink_unicast+0x10/0x10 [ 406.364713][T19370] ? __virt_addr_valid+0x183/0x530 [ 406.369871][T19370] ? __check_object_size+0x48e/0x900 [ 406.375210][T19370] netlink_sendmsg+0x8e4/0xcb0 [ 406.380027][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.385346][T19370] ? __pfx_aa_file_perm+0x10/0x10 [ 406.390402][T19370] ? aa_sock_msg_perm+0x91/0x160 [ 406.395382][T19370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.400696][T19370] __sock_sendmsg+0x221/0x270 [ 406.405423][T19370] sock_write_iter+0x2d7/0x3f0 [ 406.410230][T19370] ? __pfx_sock_write_iter+0x10/0x10 [ 406.415575][T19370] ? bpf_lsm_file_permission+0x9/0x10 [ 406.421008][T19370] ? security_file_permission+0x74/0x280 [ 406.426696][T19370] vfs_write+0xaeb/0xd30 [ 406.430973][T19370] ? __pfx_sock_write_iter+0x10/0x10 [ 406.436293][T19370] ? __pfx_vfs_write+0x10/0x10 [ 406.441100][T19370] ? fdget_pos+0x19a/0x320 [ 406.445562][T19370] ksys_write+0x183/0x2b0 [ 406.449916][T19370] ? __pfx_ksys_write+0x10/0x10 [ 406.454815][T19370] ? do_syscall_64+0x100/0x230 [ 406.459628][T19370] ? do_syscall_64+0xb6/0x230 [ 406.464347][T19370] do_syscall_64+0xf3/0x230 [ 406.468890][T19370] ? clear_bhb_loop+0x35/0x90 [ 406.473634][T19370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.479557][T19370] RIP: 0033:0x7f209c37e719 [ 406.483998][T19370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.503645][T19370] RSP: 002b:00007f209d224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.512104][T19370] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37e719 [ 406.520108][T19370] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 406.528104][T19370] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000000 [ 406.536101][T19370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.544096][T19370] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 406.552118][T19370] [ 406.556918][ C0] net_ratelimit: 32 callbacks suppressed [ 406.556936][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.574573][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.687716][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.723385][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.752694][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5556'. [ 406.888173][T19372] delete_channel: no stack [ 406.917843][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.027795][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.149501][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.281696][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.414158][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.432108][T19394] Unknown options in mask 1f4 [ 407.493255][T19401] Unknown options in mask 1f4 [ 407.577779][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.779587][T19416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5572'. [ 408.201828][T19435] netlink: 'syz.2.5580': attribute type 2 has an invalid length. [ 408.736300][T19454] FAULT_INJECTION: forcing a failure. [ 408.736300][T19454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.761457][T19454] CPU: 1 UID: 0 PID: 19454 Comm: syz.2.5587 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 408.772286][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 408.782399][T19454] Call Trace: [ 408.785701][T19454] [ 408.788662][T19454] dump_stack_lvl+0x241/0x360 [ 408.793383][T19454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.798619][T19454] ? __pfx__printk+0x10/0x10 [ 408.803248][T19454] ? __pfx_lock_release+0x10/0x10 [ 408.808316][T19454] ? __lock_acquire+0x1384/0x2050 [ 408.813393][T19454] should_fail_ex+0x3b0/0x4e0 [ 408.818123][T19454] _copy_from_user+0x2f/0xc0 [ 408.822761][T19454] kstrtouint_from_user+0xc6/0x190 [ 408.827915][T19454] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 408.833676][T19454] ? __pfx_lock_acquire+0x10/0x10 [ 408.838752][T19454] proc_fail_nth_write+0xaa/0x2d0 [ 408.843820][T19454] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 408.849767][T19454] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 408.855466][T19454] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 408.861148][T19454] vfs_write+0x2a3/0xd30 [ 408.865428][T19454] ? fdget_pos+0x24e/0x320 [ 408.869883][T19454] ? __pfx_vfs_write+0x10/0x10 [ 408.874684][T19454] ? __fget_files+0x3f3/0x470 [ 408.879420][T19454] ? fdget_pos+0x24e/0x320 [ 408.883874][T19454] ksys_write+0x183/0x2b0 [ 408.888233][T19454] ? __pfx_ksys_write+0x10/0x10 [ 408.893115][T19454] ? do_syscall_64+0x100/0x230 [ 408.897920][T19454] ? do_syscall_64+0xb6/0x230 [ 408.902639][T19454] do_syscall_64+0xf3/0x230 [ 408.907175][T19454] ? clear_bhb_loop+0x35/0x90 [ 408.911893][T19454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.917826][T19454] RIP: 0033:0x7f209c37d1ff [ 408.922274][T19454] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 408.941914][T19454] RSP: 002b:00007f209d224030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 408.950364][T19454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f209c37d1ff [ 408.958363][T19454] RDX: 0000000000000001 RSI: 00007f209d2240a0 RDI: 0000000000000004 [ 408.966360][T19454] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000010 [ 408.974360][T19454] R10: 00000000200007fd R11: 0000000000000293 R12: 0000000000000001 [ 408.982383][T19454] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 408.990401][T19454] [ 409.381118][T19461] FAULT_INJECTION: forcing a failure. [ 409.381118][T19461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.398640][T19453] lo: entered promiscuous mode [ 409.430777][T19461] CPU: 1 UID: 0 PID: 19461 Comm: syz.2.5589 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 409.441598][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 409.451688][T19461] Call Trace: [ 409.454992][T19461] [ 409.457956][T19461] dump_stack_lvl+0x241/0x360 [ 409.462685][T19461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.467926][T19461] ? __pfx__printk+0x10/0x10 [ 409.472560][T19461] ? __pfx_lock_release+0x10/0x10 [ 409.477636][T19461] should_fail_ex+0x3b0/0x4e0 [ 409.482352][T19461] _copy_from_user+0x2f/0xc0 [ 409.486989][T19461] copy_msghdr_from_user+0xae/0x680 [ 409.492253][T19461] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 409.498145][T19461] __sys_sendmsg+0x22d/0x380 [ 409.502779][T19461] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.507942][T19461] ? __pfx_vfs_write+0x10/0x10 [ 409.512763][T19461] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.519136][T19461] ? do_syscall_64+0x100/0x230 [ 409.523941][T19461] ? do_syscall_64+0xb6/0x230 [ 409.528661][T19461] do_syscall_64+0xf3/0x230 [ 409.533210][T19461] ? clear_bhb_loop+0x35/0x90 [ 409.538027][T19461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.543973][T19461] RIP: 0033:0x7f209c37e719 [ 409.548431][T19461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.568087][T19461] RSP: 002b:00007f209d224038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.576541][T19461] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37e719 [ 409.584543][T19461] RDX: 00000000240040c0 RSI: 00000000200040c0 RDI: 0000000000000003 [ 409.592564][T19461] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000000 [ 409.600562][T19461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.608558][T19461] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 409.616576][T19461] [ 411.727980][ C0] net_ratelimit: 16 callbacks suppressed [ 411.728002][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.768544][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.879023][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.993771][T19499] ip_vti0: entered promiscuous mode [ 412.005056][T19499] vlan4: entered promiscuous mode [ 412.077475][T19499] ip_vti0: left promiscuous mode [ 412.116013][T19508] syz.7.5604[19508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.116130][T19508] syz.7.5604[19508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.128584][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.171881][T19508] syz.7.5604[19508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.208632][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.375812][T19520] netlink: 'syz.6.5609': attribute type 2 has an invalid length. [ 412.383691][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.429071][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5609'. [ 412.508343][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.516905][T19524] netlink: 'syz.6.5609': attribute type 2 has an invalid length. [ 412.627873][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.767801][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.781250][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.801341][T19547] syzkaller1: entered promiscuous mode [ 412.813052][T19547] syzkaller1: entered allmulticast mode [ 413.080876][T19556] netlink: 'syz.7.5624': attribute type 21 has an invalid length. [ 413.103061][T19556] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5624'. [ 413.416250][T19090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.435690][T19574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.442710][T19571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.484999][T19090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.530320][T19581] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 413.723561][T19592] netlink: 'syz.7.5637': attribute type 4 has an invalid length. [ 413.741490][T19592] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5637'. [ 413.890812][T19601] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5641'. [ 413.991280][T19607] netem: incorrect gi model size [ 413.996659][T19607] netem: change failed [ 414.012056][T19607] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5644'. [ 414.038805][T19607] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5644'. [ 414.656440][T19627] netlink: 'syz.6.5651': attribute type 21 has an invalid length. [ 414.677124][T19627] netlink: 'syz.6.5651': attribute type 20 has an invalid length. [ 414.701942][T19630] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5654'. [ 414.716856][T19627] IPv6: NLM_F_CREATE should be specified when creating new route [ 414.741626][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 414.825952][T19635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5655'. [ 414.958163][T19639] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5657'. [ 415.000283][T19638] netlink: 'syz.4.5656': attribute type 1 has an invalid length. [ 415.218671][T19645] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 415.813110][T19669] netlink: 'syz.1.5667': attribute type 2 has an invalid length. [ 416.141306][T19677] FAULT_INJECTION: forcing a failure. [ 416.141306][T19677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.188024][T19677] CPU: 0 UID: 0 PID: 19677 Comm: syz.6.5671 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 416.198880][T19677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 416.208979][T19677] Call Trace: [ 416.212282][T19677] [ 416.215240][T19677] dump_stack_lvl+0x241/0x360 [ 416.219961][T19677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.225193][T19677] ? __pfx__printk+0x10/0x10 [ 416.229832][T19677] ? __pfx_lock_release+0x10/0x10 [ 416.234899][T19677] should_fail_ex+0x3b0/0x4e0 [ 416.239609][T19677] _copy_from_user+0x2f/0xc0 [ 416.244237][T19677] copy_msghdr_from_user+0xae/0x680 [ 416.249480][T19677] ? __lock_acquire+0x1384/0x2050 [ 416.254545][T19677] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 416.260412][T19677] do_recvmmsg+0x3f9/0xad0 [ 416.264873][T19677] ? __pfx_do_recvmmsg+0x10/0x10 [ 416.269862][T19677] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 416.275802][T19677] ? ksys_write+0x229/0x2b0 [ 416.280341][T19677] ? __pfx_lock_release+0x10/0x10 [ 416.285429][T19677] ? vfs_write+0x730/0xd30 [ 416.289904][T19677] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.295937][T19677] __x64_sys_recvmmsg+0x199/0x250 [ 416.301009][T19677] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 416.306611][T19677] ? do_syscall_64+0x100/0x230 [ 416.311422][T19677] ? do_syscall_64+0xb6/0x230 [ 416.316144][T19677] do_syscall_64+0xf3/0x230 [ 416.320692][T19677] ? clear_bhb_loop+0x35/0x90 [ 416.325410][T19677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.331337][T19677] RIP: 0033:0x7ff25957e719 [ 416.335790][T19677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.355451][T19677] RSP: 002b:00007ff25a296038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 416.363926][T19677] RAX: ffffffffffffffda RBX: 00007ff259735f80 RCX: 00007ff25957e719 [ 416.371960][T19677] RDX: 0000000000000008 RSI: 0000000020002380 RDI: 0000000000000004 [ 416.379979][T19677] RBP: 00007ff25a296090 R08: 0000000000000000 R09: 0000000000000000 [ 416.387990][T19677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.395995][T19677] R13: 0000000000000000 R14: 00007ff259735f80 R15: 00007fff09c56ee8 [ 416.404022][T19677] [ 416.807535][T19690] net_ratelimit: 40 callbacks suppressed [ 416.807555][T19690] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 416.878238][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.927799][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.999834][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.118859][T19698] netlink: 'syz.1.5679': attribute type 2 has an invalid length. [ 417.153728][T19702] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 417.208121][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.327778][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.338535][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.468761][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.692181][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.849678][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.060579][T19727] FAULT_INJECTION: forcing a failure. [ 418.060579][T19727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.141452][T19727] CPU: 0 UID: 0 PID: 19727 Comm: syz.1.5689 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 418.152325][T19727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 418.162503][T19727] Call Trace: [ 418.165811][T19727] [ 418.168768][T19727] dump_stack_lvl+0x241/0x360 [ 418.173484][T19727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.178722][T19727] ? __pfx__printk+0x10/0x10 [ 418.183343][T19727] ? __pfx_lock_release+0x10/0x10 [ 418.188420][T19727] should_fail_ex+0x3b0/0x4e0 [ 418.193133][T19727] _copy_to_iter+0x21f/0x1e70 [ 418.197851][T19727] ? __virt_addr_valid+0x183/0x530 [ 418.203006][T19727] ? __pfx_lock_release+0x10/0x10 [ 418.208083][T19727] ? __pfx__copy_to_iter+0x10/0x10 [ 418.213235][T19727] ? validate_chain+0x11e/0x5920 [ 418.218227][T19727] ? __virt_addr_valid+0x183/0x530 [ 418.223386][T19727] ? __virt_addr_valid+0x183/0x530 [ 418.228555][T19727] ? __virt_addr_valid+0x45f/0x530 [ 418.233720][T19727] ? __phys_addr_symbol+0x2f/0x70 [ 418.238806][T19727] ? __check_object_size+0x48e/0x900 [ 418.244134][T19727] __skb_datagram_iter+0x107/0x900 [ 418.249290][T19727] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 418.254977][T19727] skb_copy_datagram_iter+0xd1/0x250 [ 418.260314][T19727] netlink_recvmsg+0x2d0/0x11d0 [ 418.265226][T19727] ? __pfx_netlink_recvmsg+0x10/0x10 [ 418.270560][T19727] ? __pfx_aa_sk_perm+0x10/0x10 [ 418.275460][T19727] ? __pfx___might_resched+0x10/0x10 [ 418.280805][T19727] ? aa_sock_msg_perm+0x91/0x160 [ 418.285807][T19727] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 418.291139][T19727] ? __pfx_netlink_recvmsg+0x10/0x10 [ 418.296461][T19727] sock_recvmsg+0x22f/0x280 [ 418.301005][T19727] ____sys_recvmsg+0x1c6/0x480 [ 418.305833][T19727] ? __pfx_____sys_recvmsg+0x10/0x10 [ 418.311186][T19727] do_recvmmsg+0x45e/0xad0 [ 418.315667][T19727] ? __pfx_do_recvmmsg+0x10/0x10 [ 418.320665][T19727] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 418.326611][T19727] ? ksys_write+0x229/0x2b0 [ 418.331179][T19727] ? __pfx_lock_release+0x10/0x10 [ 418.336309][T19727] ? vfs_write+0x730/0xd30 [ 418.340776][T19727] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.346819][T19727] __x64_sys_recvmmsg+0x199/0x250 [ 418.351903][T19727] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 418.357521][T19727] ? do_syscall_64+0x100/0x230 [ 418.362353][T19727] ? do_syscall_64+0xb6/0x230 [ 418.367085][T19727] do_syscall_64+0xf3/0x230 [ 418.371634][T19727] ? clear_bhb_loop+0x35/0x90 [ 418.376360][T19727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.382301][T19727] RIP: 0033:0x7f8e93b7e719 [ 418.386765][T19727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.406414][T19727] RSP: 002b:00007f8e94a4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.414858][T19727] RAX: ffffffffffffffda RBX: 00007f8e93d35f80 RCX: 00007f8e93b7e719 [ 418.422835][T19727] RDX: 0000000000000008 RSI: 0000000020002380 RDI: 0000000000000004 [ 418.430813][T19727] RBP: 00007f8e94a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 418.438797][T19727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.446777][T19727] R13: 0000000000000000 R14: 00007f8e93d35f80 R15: 00007ffc485c4bb8 [ 418.454859][T19727] [ 418.481764][T19735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.534757][T19737] FAULT_INJECTION: forcing a failure. [ 418.534757][T19737] name failslab, interval 1, probability 0, space 0, times 0 [ 418.566048][T19737] CPU: 0 UID: 0 PID: 19737 Comm: syz.2.5693 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 418.576871][T19737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 418.586956][T19737] Call Trace: [ 418.590255][T19737] [ 418.593210][T19737] dump_stack_lvl+0x241/0x360 [ 418.597935][T19737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.603170][T19737] ? __pfx__printk+0x10/0x10 [ 418.607805][T19737] ? fs_reclaim_acquire+0x93/0x130 [ 418.612944][T19737] ? __pfx___might_resched+0x10/0x10 [ 418.618273][T19737] should_fail_ex+0x3b0/0x4e0 [ 418.622979][T19737] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 418.628732][T19737] should_failslab+0xac/0x100 [ 418.633441][T19737] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 418.639202][T19737] __kmalloc_noprof+0xd8/0x400 [ 418.644017][T19737] tomoyo_realpath_from_path+0xcf/0x5e0 [ 418.649618][T19737] tomoyo_path_number_perm+0x23a/0x880 [ 418.655129][T19737] ? tomoyo_path_number_perm+0x208/0x880 [ 418.660802][T19737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 418.666853][T19737] ? __fget_files+0x29/0x470 [ 418.671480][T19737] ? __fget_files+0x3f3/0x470 [ 418.676200][T19737] security_file_ioctl+0xc6/0x2a0 [ 418.681256][T19737] __se_sys_ioctl+0x47/0x170 [ 418.685903][T19737] do_syscall_64+0xf3/0x230 [ 418.690440][T19737] ? clear_bhb_loop+0x35/0x90 [ 418.695154][T19737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.701095][T19737] RIP: 0033:0x7f209c37e719 [ 418.705540][T19737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.725288][T19737] RSP: 002b:00007f209d224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.733756][T19737] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37e719 [ 418.741765][T19737] RDX: 0000000020000240 RSI: 00000000000089f1 RDI: 0000000000000003 [ 418.749770][T19737] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000000 [ 418.757773][T19737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.765780][T19737] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 418.773805][T19737] [ 418.789343][T19084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.797225][T19084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.044827][T19737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 420.457257][T19779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.521603][T19783] __nla_validate_parse: 2 callbacks suppressed [ 420.521625][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5711'. [ 420.522258][T19781] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5709'. [ 420.529150][T19783] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5711'. [ 420.566574][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5711'. [ 420.852883][T19795] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5716'. [ 420.863932][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5716'. [ 420.873064][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5716'. [ 421.164164][T19810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5724'. [ 421.317965][T19817] nbd: device at index 2 is going down [ 421.387554][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5722'. [ 421.448636][T19808] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5722'. [ 421.589636][T19838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.631228][T19841] xt_limit: Overflow, try lower: 2147483649/128 [ 421.828286][T19855] syzkaller1: entered promiscuous mode [ 421.836073][T19855] syzkaller1: entered allmulticast mode [ 421.850073][T19090] net_ratelimit: 39 callbacks suppressed [ 421.850095][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.001128][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.127883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.148457][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.281486][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.302464][T19874] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 422.346535][T19878] netlink: 'syz.7.5747': attribute type 4 has an invalid length. [ 422.391739][T19881] IPv6: Can't replace route, no match found [ 422.392941][T19879] unsupported nlmsg_type 40 [ 422.409179][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.527783][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.539242][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.651689][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.111350][T19922] netlink: 'syz.4.5769': attribute type 2 has an invalid length. [ 423.127959][T19922] netlink: 'syz.4.5769': attribute type 8 has an invalid length. [ 423.707916][T19953] netlink: 'syz.2.5784': attribute type 1 has an invalid length. [ 423.752824][T19953] netlink: 'syz.2.5784': attribute type 30 has an invalid length. [ 423.788996][T19957] FAULT_INJECTION: forcing a failure. [ 423.788996][T19957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.815838][T19957] CPU: 0 UID: 0 PID: 19957 Comm: syz.1.5785 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 423.826661][T19957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 423.836751][T19957] Call Trace: [ 423.840076][T19957] [ 423.843031][T19957] dump_stack_lvl+0x241/0x360 [ 423.847748][T19957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.853005][T19957] ? __pfx__printk+0x10/0x10 [ 423.857631][T19957] ? __pfx_lock_release+0x10/0x10 [ 423.862718][T19957] should_fail_ex+0x3b0/0x4e0 [ 423.867433][T19957] _copy_from_iter+0x21f/0x1e70 [ 423.872328][T19957] ? __virt_addr_valid+0x183/0x530 [ 423.877501][T19957] ? __pfx_lock_release+0x10/0x10 [ 423.882564][T19957] ? __alloc_skb+0x28f/0x440 [ 423.887188][T19957] ? __pfx__copy_from_iter+0x10/0x10 [ 423.892513][T19957] ? __virt_addr_valid+0x183/0x530 [ 423.897657][T19957] ? __virt_addr_valid+0x183/0x530 [ 423.902822][T19957] ? __virt_addr_valid+0x45f/0x530 [ 423.907975][T19957] ? __check_object_size+0x48e/0x900 [ 423.913305][T19957] netlink_sendmsg+0x73d/0xcb0 [ 423.918121][T19957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.923441][T19957] ? aa_sock_msg_perm+0x91/0x160 [ 423.928417][T19957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.933737][T19957] __sock_sendmsg+0x221/0x270 [ 423.938472][T19957] ____sys_sendmsg+0x52a/0x7e0 [ 423.943281][T19957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.948623][T19957] __sys_sendmsg+0x292/0x380 [ 423.953260][T19957] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.958425][T19957] ? __pfx_vfs_write+0x10/0x10 [ 423.963246][T19957] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.969620][T19957] ? do_syscall_64+0x100/0x230 [ 423.974439][T19957] ? do_syscall_64+0xb6/0x230 [ 423.979168][T19957] do_syscall_64+0xf3/0x230 [ 423.983708][T19957] ? clear_bhb_loop+0x35/0x90 [ 423.988419][T19957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.994353][T19957] RIP: 0033:0x7f8e93b7e719 [ 423.998805][T19957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.018452][T19957] RSP: 002b:00007f8e94a4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.026929][T19957] RAX: ffffffffffffffda RBX: 00007f8e93d35f80 RCX: 00007f8e93b7e719 [ 424.034939][T19957] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 424.043028][T19957] RBP: 00007f8e94a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 424.051031][T19957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.059044][T19957] R13: 0000000000000000 R14: 00007f8e93d35f80 R15: 00007ffc485c4bb8 [ 424.067067][T19957] [ 424.110367][T19972] syzkaller1: entered promiscuous mode [ 424.136343][T19972] syzkaller1: entered allmulticast mode [ 424.169658][T19976] FAULT_INJECTION: forcing a failure. [ 424.169658][T19976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.228747][T19976] CPU: 0 UID: 0 PID: 19976 Comm: syz.6.5789 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 424.239587][T19976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 424.249677][T19976] Call Trace: [ 424.252988][T19976] [ 424.255949][T19976] dump_stack_lvl+0x241/0x360 [ 424.260667][T19976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.265900][T19976] ? __pfx__printk+0x10/0x10 [ 424.270530][T19976] ? __pfx_lock_release+0x10/0x10 [ 424.275617][T19976] should_fail_ex+0x3b0/0x4e0 [ 424.280339][T19976] _copy_from_iter+0x21f/0x1e70 [ 424.285241][T19976] ? __virt_addr_valid+0x183/0x530 [ 424.290390][T19976] ? skb_set_owner_w+0x238/0x3e0 [ 424.295367][T19976] ? __pfx_lock_release+0x10/0x10 [ 424.300433][T19976] ? __pfx__copy_from_iter+0x10/0x10 [ 424.305762][T19976] ? __pfx__copy_from_iter+0x10/0x10 [ 424.311094][T19976] ? page_copy_sane+0x154/0x260 [ 424.316018][T19976] copy_page_from_iter+0x7a/0x100 [ 424.321090][T19976] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 424.326966][T19976] tun_get_user+0xec3/0x47e0 [ 424.331612][T19976] ? __lock_acquire+0x1384/0x2050 [ 424.336684][T19976] ? __pfx_tun_get_user+0x10/0x10 [ 424.341880][T19976] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 424.347377][T19976] ? tun_get+0x1e/0x2f0 [ 424.351576][T19976] ? __pfx_lock_release+0x10/0x10 [ 424.356663][T19976] ? tun_get+0x1e/0x2f0 [ 424.360861][T19976] ? tun_get+0x27d/0x2f0 [ 424.364155][T19978] netlink: 'syz.1.5791': attribute type 4 has an invalid length. [ 424.365126][T19976] tun_chr_write_iter+0x10d/0x1f0 [ 424.377888][T19976] vfs_write+0xaeb/0xd30 [ 424.382163][T19976] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 424.387756][T19976] ? __pfx_vfs_write+0x10/0x10 [ 424.392559][T19976] ? fdget_pos+0x19a/0x320 [ 424.397006][T19976] ksys_write+0x183/0x2b0 [ 424.401373][T19976] ? __pfx_ksys_write+0x10/0x10 [ 424.406276][T19976] ? do_syscall_64+0x100/0x230 [ 424.406847][T19982] xt_ipcomp: unknown flags B [ 424.411062][T19976] ? do_syscall_64+0xb6/0x230 [ 424.411096][T19976] do_syscall_64+0xf3/0x230 [ 424.411124][T19976] ? clear_bhb_loop+0x35/0x90 [ 424.411156][T19976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.411182][T19976] RIP: 0033:0x7ff25957e719 [ 424.411222][T19976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.411243][T19976] RSP: 002b:00007ff2579f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 424.411270][T19976] RAX: ffffffffffffffda RBX: 00007ff259736058 RCX: 00007ff25957e719 [ 424.411289][T19976] RDX: 000000000000fdef RSI: 0000000020000140 RDI: 0000000000000003 [ 424.411305][T19976] RBP: 00007ff2579f6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.411321][T19976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.411336][T19976] R13: 0000000000000001 R14: 00007ff259736058 R15: 00007fff09c56ee8 [ 424.411368][T19976] [ 425.029592][T20016] vlan1: entered promiscuous mode [ 425.069317][T20005] vlan1: left promiscuous mode [ 425.521004][T20040] sctp: [Deprecated]: syz.2.5815 (pid 20040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.521004][T20040] Use struct sctp_sack_info instead [ 425.555674][T20038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.564528][T20042] netlink: 'syz.7.5817': attribute type 6 has an invalid length. [ 426.407488][T20091] __nla_validate_parse: 18 callbacks suppressed [ 426.407521][T20091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5832'. [ 426.801092][T20109] netlink: 'syz.7.5842': attribute type 21 has an invalid length. [ 426.819711][T20109] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5842'. [ 426.927577][T20114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.934951][T20114] IPv6: NLM_F_CREATE should be set when creating new route [ 426.942280][T20114] IPv6: NLM_F_CREATE should be set when creating new route [ 426.989938][T20118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.008734][T19087] net_ratelimit: 43 callbacks suppressed [ 427.008760][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.171753][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.311779][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.337715][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.387153][T20141] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5852'. [ 427.420836][T20141] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5852'. [ 427.468980][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.579359][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.688874][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.727796][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.798485][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.873137][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5858'. [ 427.884480][T20176] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.5861'. [ 427.908655][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.916331][T20176] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.5861'. [ 427.964588][T20179] syzkaller1: entered promiscuous mode [ 427.974593][T20179] syzkaller1: entered allmulticast mode [ 428.463033][T20209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5871'. [ 428.784824][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5875'. [ 428.969391][T20232] hsr0: entered promiscuous mode [ 429.332063][T20251] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.5884'. [ 429.352815][T20255] netlink: 'syz.4.5886': attribute type 1 has an invalid length. [ 429.365432][T20252] netlink: 'syz.2.5887': attribute type 1 has an invalid length. [ 429.714647][T20268] x_tables: duplicate underflow at hook 1 [ 429.913803][T20285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.953550][T20289] FAULT_INJECTION: forcing a failure. [ 429.953550][T20289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.981783][T20289] CPU: 0 UID: 0 PID: 20289 Comm: syz.2.5902 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 429.992629][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 430.002727][T20289] Call Trace: [ 430.006051][T20289] [ 430.009020][T20289] dump_stack_lvl+0x241/0x360 [ 430.013745][T20289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.019017][T20289] ? __pfx__printk+0x10/0x10 [ 430.023668][T20289] ? snprintf+0xda/0x120 [ 430.027957][T20289] should_fail_ex+0x3b0/0x4e0 [ 430.032681][T20289] _copy_to_user+0x31/0xb0 [ 430.037155][T20289] simple_read_from_buffer+0xca/0x150 [ 430.042594][T20289] proc_fail_nth_read+0x1e9/0x250 [ 430.047678][T20289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.053292][T20289] ? rw_verify_area+0x55e/0x6f0 [ 430.058195][T20289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.063787][T20289] vfs_read+0x1fc/0xb70 [ 430.067990][T20289] ? fdget_pos+0x24e/0x320 [ 430.072455][T20289] ? __pfx_vfs_read+0x10/0x10 [ 430.077180][T20289] ? __fget_files+0x3f3/0x470 [ 430.081903][T20289] ? fdget_pos+0x24e/0x320 [ 430.086348][T20289] ksys_read+0x183/0x2b0 [ 430.090608][T20289] ? __pfx_ksys_read+0x10/0x10 [ 430.095395][T20289] ? do_syscall_64+0x100/0x230 [ 430.100197][T20289] ? do_syscall_64+0xb6/0x230 [ 430.104895][T20289] do_syscall_64+0xf3/0x230 [ 430.109410][T20289] ? clear_bhb_loop+0x35/0x90 [ 430.114118][T20289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.120026][T20289] RIP: 0033:0x7f209c37d15c [ 430.124459][T20289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 430.144128][T20289] RSP: 002b:00007f209d224030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.152583][T20289] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37d15c [ 430.160588][T20289] RDX: 000000000000000f RSI: 00007f209d2240a0 RDI: 0000000000000004 [ 430.168611][T20289] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000000 [ 430.176616][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.184617][T20289] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 430.192609][T20289] [ 430.734718][T20328] netlink: 'syz.1.5917': attribute type 21 has an invalid length. [ 431.693345][T20369] netlink: 'syz.4.5928': attribute type 2 has an invalid length. [ 431.776436][T20368] netem: change failed [ 431.824213][T20378] lo speed is unknown, defaulting to 1000 [ 431.843955][T20378] lo speed is unknown, defaulting to 1000 [ 431.851834][T20378] lo speed is unknown, defaulting to 1000 [ 431.892326][T20376] __nla_validate_parse: 11 callbacks suppressed [ 431.892349][T20376] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.5932'. [ 431.893504][T20378] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 431.990060][T20378] lo speed is unknown, defaulting to 1000 [ 432.010202][T20378] lo speed is unknown, defaulting to 1000 [ 432.022058][T20378] lo speed is unknown, defaulting to 1000 [ 432.032610][T19088] net_ratelimit: 41 callbacks suppressed [ 432.032632][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.042209][T20383] vxcan1: tx address claim with dest, not broadcast [ 432.057500][T20378] lo speed is unknown, defaulting to 1000 [ 432.065193][T20378] lo speed is unknown, defaulting to 1000 [ 432.093905][T20378] lo speed is unknown, defaulting to 1000 [ 432.116718][T20378] lo speed is unknown, defaulting to 1000 [ 432.124281][T20378] lo speed is unknown, defaulting to 1000 [ 432.159347][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.278959][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.398671][T19082] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.468929][T20400] bond0: (slave bridge0): Releasing backup interface [ 432.507547][T20400] batman_adv: batadv0: Interface deactivated: dummy0 [ 432.514474][T20400] batman_adv: batadv0: Removing interface: dummy0 [ 432.525962][T20400] bridge_slave_0: left allmulticast mode [ 432.541815][T20400] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.579238][T20400] bridge_slave_1: left allmulticast mode [ 432.584949][T20400] bridge_slave_1: left promiscuous mode [ 432.601633][T20400] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.649208][T20400] bond0: (slave bond_slave_0): Releasing backup interface [ 432.674927][T20400] bond0: (slave bond_slave_1): Releasing backup interface [ 432.687865][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.733129][T20412] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5944'. [ 432.800522][T20400] team0: Port device team_slave_0 removed [ 432.880648][T20400] team0: Port device team_slave_1 removed [ 432.887311][T20400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.895257][T20400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.911646][T20400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.920107][T20400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.927720][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.956100][T20408] wg2: entered promiscuous mode [ 432.982452][T20408] team0: Port device wg2 added [ 433.081705][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.218712][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.279353][T20404] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 433.360111][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.468460][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.498849][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5957'. [ 433.598186][T20456] netlink: 'syz.1.5950': attribute type 25 has an invalid length. [ 433.694557][T20464] sctp: [Deprecated]: syz.6.5961 (pid 20464) Use of int in max_burst socket option deprecated. [ 433.694557][T20464] Use struct sctp_assoc_value instead [ 433.873043][T20476] FAULT_INJECTION: forcing a failure. [ 433.873043][T20476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.920883][T20476] CPU: 1 UID: 0 PID: 20476 Comm: syz.2.5964 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 433.931746][T20476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 433.941856][T20476] Call Trace: [ 433.945179][T20476] [ 433.948138][T20476] dump_stack_lvl+0x241/0x360 [ 433.950162][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5965'. [ 433.952849][T20476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.952887][T20476] ? __pfx__printk+0x10/0x10 [ 433.971581][T20476] ? __pfx_lock_release+0x10/0x10 [ 433.976677][T20476] should_fail_ex+0x3b0/0x4e0 [ 433.981406][T20476] _copy_from_iter+0x21f/0x1e70 [ 433.986310][T20476] ? __virt_addr_valid+0x183/0x530 [ 433.991506][T20476] ? __pfx_lock_release+0x10/0x10 [ 433.996602][T20476] ? __alloc_skb+0x28f/0x440 [ 434.001244][T20476] ? __pfx__copy_from_iter+0x10/0x10 [ 434.006590][T20476] ? __virt_addr_valid+0x183/0x530 [ 434.011764][T20476] ? __virt_addr_valid+0x183/0x530 [ 434.016920][T20476] ? __virt_addr_valid+0x45f/0x530 [ 434.022106][T20476] ? __check_object_size+0x48e/0x900 [ 434.027440][T20476] netlink_sendmsg+0x73d/0xcb0 [ 434.032257][T20476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.037589][T20476] ? aa_sock_msg_perm+0x91/0x160 [ 434.042575][T20476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.047906][T20476] __sock_sendmsg+0x221/0x270 [ 434.052645][T20476] ____sys_sendmsg+0x52a/0x7e0 [ 434.057479][T20476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.062824][T20476] __sys_sendmsg+0x292/0x380 [ 434.067463][T20476] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.067553][T20479] sctp: [Deprecated]: syz.4.5965 (pid 20479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.067553][T20479] Use struct sctp_sack_info instead [ 434.072608][T20476] ? __pfx_vfs_write+0x10/0x10 [ 434.072670][T20476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.100144][T20476] ? do_syscall_64+0x100/0x230 [ 434.104968][T20476] ? do_syscall_64+0xb6/0x230 [ 434.109699][T20476] do_syscall_64+0xf3/0x230 [ 434.114253][T20476] ? clear_bhb_loop+0x35/0x90 [ 434.118990][T20476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.124940][T20476] RIP: 0033:0x7f209c37e719 [ 434.129392][T20476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.149043][T20476] RSP: 002b:00007f209d224038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.157494][T20476] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37e719 [ 434.165488][T20476] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 434.173577][T20476] RBP: 00007f209d224090 R08: 0000000000000000 R09: 0000000000000000 [ 434.181561][T20476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.189543][T20476] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 434.197545][T20476] [ 434.217307][T20430] lo speed is unknown, defaulting to 1000 [ 434.225981][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 434.245273][T20485] team0: left allmulticast mode [ 434.253274][T20485] bridge0: port 1(team0) entered disabled state [ 434.566026][T20503] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5972'. [ 434.596556][T20504] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5972'. [ 434.696414][T20506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.807792][T20515] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5975'. [ 435.061666][T20517] can: request_module (can-proto-0) failed. [ 435.079624][T20517] netlink: 'syz.4.5977': attribute type 9 has an invalid length. [ 435.101837][T20517] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.5977'. [ 435.290909][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'. [ 435.467331][T20537] netlink: 'syz.2.5985': attribute type 1 has an invalid length. [ 435.484880][T20537] netlink: 'syz.2.5985': attribute type 4 has an invalid length. [ 435.505446][T20536] bridge_slave_0: Device is already in use. [ 435.574789][T20543] netlink: 'syz.6.5982': attribute type 1 has an invalid length. [ 437.068387][T19083] net_ratelimit: 35 callbacks suppressed [ 437.068410][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.187788][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.298151][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.327832][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.408713][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.518698][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.638417][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.648870][ T5849] Bluetooth: hci5: command 0x0405 tx timeout [ 437.748234][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.858431][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.887963][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.690381][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.178173][T19084] net_ratelimit: 46 callbacks suppressed [ 442.178198][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.298371][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.407959][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.527782][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.528395][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.658769][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.768327][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.879224][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.988418][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.087830][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.189884][T19087] net_ratelimit: 44 callbacks suppressed [ 447.189910][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.247871][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.308630][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.428135][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.537965][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.658462][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.727766][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.768266][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.878236][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.988196][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.299109][T19062] net_ratelimit: 46 callbacks suppressed [ 452.299135][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.428187][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.447837][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.537841][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.649537][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.758630][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.868115][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.927730][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.978772][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.088716][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.308345][T19088] net_ratelimit: 45 callbacks suppressed [ 457.308370][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.427930][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.539563][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.647855][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.649618][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.768272][T19090] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.836712][T20558] __nla_validate_parse: 3 callbacks suppressed [ 457.836733][T20558] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5991'. [ 457.898564][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.012574][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.127735][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.168267][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.773413][T20611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6010'. [ 458.788266][T20611] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 458.821286][T20611] bond2: entered promiscuous mode [ 458.826618][T20611] bond2: entered allmulticast mode [ 458.876442][T20611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.902610][T20613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6012'. [ 458.922473][T20621] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6014'. [ 459.043818][T20621] ip6gre1: entered allmulticast mode [ 459.212744][T20641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6020'. [ 459.222644][T20641] netlink: 'syz.6.6020': attribute type 7 has an invalid length. [ 459.230660][T20641] netlink: 'syz.6.6020': attribute type 8 has an invalid length. [ 459.245264][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6020'. [ 459.364499][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6020'. [ 459.957382][T20682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6035'. [ 460.198507][T20694] netlink: 'syz.2.6038': attribute type 10 has an invalid length. [ 460.283123][T20694] batadv0: left promiscuous mode [ 460.323401][T20694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.340095][T20694] team0: Port device batadv0 added [ 460.363016][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6043'. [ 460.376398][T20706] netlink: 'syz.1.6044': attribute type 1 has an invalid length. [ 460.418113][T20706] netlink: 'syz.1.6044': attribute type 3 has an invalid length. [ 460.444243][T20706] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6044'. [ 460.455228][T20706] NCSI netlink: No device for ifindex 0 [ 460.735206][T20727] netlink: 'syz.2.6053': attribute type 1 has an invalid length. [ 460.904975][T20740] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 461.025403][T20749] No such timeout policy "syz0" [ 461.093287][T20748] netlink: 'syz.6.6060': attribute type 1 has an invalid length. [ 461.106788][T20748] netlink: 'syz.6.6060': attribute type 1 has an invalid length. [ 461.115363][T20748] netlink: 'syz.6.6060': attribute type 2 has an invalid length. [ 461.297523][T20758] x_tables: duplicate underflow at hook 1 [ 461.426274][T20758] delete_channel: no stack [ 461.723115][T20772] pim6reg: entered allmulticast mode [ 461.744699][T20772] pim6reg: left allmulticast mode [ 462.031524][T20782] tipc: Enabling of bearer rejected, already enabled [ 462.069998][T20782] nbd: nbd0 already in use [ 462.389384][T19088] net_ratelimit: 38 callbacks suppressed [ 462.389410][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.519671][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.535518][T20804] netlink: 'syz.4.6080': attribute type 2 has an invalid length. [ 462.629498][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.780400][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.847810][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.874870][T20812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.901921][T20819] __nla_validate_parse: 105 callbacks suppressed [ 462.901937][T20819] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6085'. [ 462.919048][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.028281][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.104128][T20826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6089'. [ 463.137999][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.211537][T20830] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6091'. [ 463.221836][T20830] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 463.248376][T19062] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.551250][T20848] xt_TCPMSS: Only works on TCP SYN packets [ 463.756546][T20859] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6100'. [ 464.204526][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6107'. [ 464.480381][T20899] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6112'. [ 464.669810][T20909] validate_nla: 2 callbacks suppressed [ 464.669832][T20909] netlink: 'syz.6.6116': attribute type 21 has an invalid length. [ 464.706196][T20909] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6116'. [ 464.935104][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6120'. [ 464.972068][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6120'. [ 465.501575][T20941] netlink: 'syz.2.6128': attribute type 21 has an invalid length. [ 465.524593][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6128'. [ 466.040882][T20973] netlink: 'syz.1.6141': attribute type 1 has an invalid length. [ 466.237793][T20992] : renamed from bond0 (while UP) [ 467.084590][T21040] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 467.408903][T19088] net_ratelimit: 43 callbacks suppressed [ 467.408969][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.487834][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.571610][T19088] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.708183][T19084] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.818637][T16788] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.949008][T19083] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.002246][T21083] netlink: 'syz.6.6180': attribute type 2 has an invalid length. [ 468.057763][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.078405][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.143502][T21087] netlink: 'syz.7.6182': attribute type 1 has an invalid length. [ 468.218719][T19087] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.378387][T16788] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.485684][T21107] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 468.887245][T21126] __nla_validate_parse: 11 callbacks suppressed [ 468.887267][T21126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6197'. [ 469.168641][T21145] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 469.406175][T21155] netlink: 'syz.6.6207': attribute type 21 has an invalid length. [ 469.435412][T21155] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6207'. [ 469.580130][T21161] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.844491][T21172] netlink: 4352 bytes leftover after parsing attributes in process `syz.2.6214'. [ 469.988734][T21174] netlink: 'syz.2.6215': attribute type 1 has an invalid length. [ 469.998335][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6215'. [ 470.235020][T21182] netlink: 'syz.2.6219': attribute type 21 has an invalid length. [ 470.274480][T21182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6219'. [ 470.322184][T21188] netlink: 124 bytes leftover after parsing attributes in process `syz.7.6220'. [ 470.463777][T21193] xt_connbytes: Forcing CT accounting to be enabled [ 470.492920][T21193] --map-set only usable from mangle table [ 470.512960][T21193] netlink: 636 bytes leftover after parsing attributes in process `syz.2.6223'. [ 470.735462][T21206] netlink: 'syz.6.6228': attribute type 1 has an invalid length. [ 470.749244][T21206] netlink: 512 bytes leftover after parsing attributes in process `syz.6.6228'. [ 470.985961][T21213] FAULT_INJECTION: forcing a failure. [ 470.985961][T21213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.026293][T21213] CPU: 0 UID: 0 PID: 21213 Comm: syz.2.6231 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 471.037133][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 471.047229][T21213] Call Trace: [ 471.050546][T21213] [ 471.053504][T21213] dump_stack_lvl+0x241/0x360 [ 471.058224][T21213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.063464][T21213] ? __pfx__printk+0x10/0x10 [ 471.068101][T21213] should_fail_ex+0x3b0/0x4e0 [ 471.072855][T21213] _copy_from_user+0x2f/0xc0 [ 471.077489][T21213] sctp_setsockopt+0xcc/0x11c0 [ 471.082292][T21213] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 471.088243][T21213] do_sock_setsockopt+0x3af/0x720 [ 471.093317][T21213] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 471.098897][T21213] ? __fget_files+0x29/0x470 [ 471.103535][T21213] ? __fget_files+0x3f3/0x470 [ 471.108252][T21213] ? __fget_files+0x29/0x470 [ 471.112885][T21213] __sys_setsockopt+0x1a2/0x250 [ 471.117775][T21213] __x64_sys_setsockopt+0xb5/0xd0 [ 471.122829][T21213] do_syscall_64+0xf3/0x230 [ 471.127357][T21213] ? clear_bhb_loop+0x35/0x90 [ 471.132058][T21213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.137965][T21213] RIP: 0033:0x7f209c37e719 [ 471.142388][T21213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.162015][T21213] RSP: 002b:00007f209d224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 471.170467][T21213] RAX: ffffffffffffffda RBX: 00007f209c535f80 RCX: 00007f209c37e719 [ 471.178445][T21213] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000003 [ 471.186430][T21213] RBP: 00007f209d224090 R08: 0000000000000020 R09: 0000000000000000 [ 471.194412][T21213] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 471.202391][T21213] R13: 0000000000000000 R14: 00007f209c535f80 R15: 00007ffdf3c9bec8 [ 471.210402][T21213] [ 471.278904][T21217] netlink: 'syz.6.6233': attribute type 21 has an invalid length. [ 471.292749][T21217] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6233'. [ 471.408987][ T30] INFO: task syz.5.4120:15639 blocked for more than 143 seconds. [ 471.416786][ T30] Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 471.447304][T21219] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6234'. [ 471.448351][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.470782][ T30] task:syz.5.4120 state:D stack:26400 pid:15639 tgid:15638 ppid:13862 flags:0x00000004 [ 471.504904][T21224] netlink: 'syz.7.6236': attribute type 1 has an invalid length. [ 471.524030][T21224] netlink: 'syz.7.6236': attribute type 1 has an invalid length. [ 471.537775][ T30] Call Trace: [ 471.541116][ T30] [ 471.544076][ T30] __schedule+0x184f/0x4c30 [ 471.549005][ T30] ? __pfx___schedule+0x10/0x10 [ 471.553904][ T30] ? __pfx_lock_release+0x10/0x10 [ 471.559178][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 471.564685][ T30] ? schedule+0x90/0x320 [ 471.569393][ T30] schedule+0x14b/0x320 [ 471.573600][ T30] schedule_preempt_disabled+0x13/0x30 [ 471.579459][ T30] __mutex_lock+0x6a7/0xd70 [ 471.584458][ T30] ? __mutex_lock+0x52a/0xd70 [ 471.589257][ T30] ? nfsd_nl_version_get_doit+0x181/0x790 [ 471.595053][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 471.600193][ T30] ? genlmsg_put+0x145/0x2e0 [ 471.604824][ T30] nfsd_nl_version_get_doit+0x181/0x790 [ 471.610862][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 471.615594][ T30] ? __asan_memcpy+0x40/0x70 [ 471.616018][T21225] syzkaller1: entered promiscuous mode [ 471.620242][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 471.620280][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 471.620314][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 471.620350][ T30] genl_rcv_msg+0xb14/0xec0 [ 471.620381][ T30] ? mark_lock+0x9a/0x360 [ 471.620414][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.620473][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 471.620507][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 471.620540][ T30] ? __pfx___might_resched+0x10/0x10 [ 471.620583][ T30] netlink_rcv_skb+0x1e3/0x430 [ 471.620612][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.620647][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.620690][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 471.620733][ T30] genl_rcv+0x28/0x40 [ 471.620763][ T30] netlink_unicast+0x7f6/0x990 [ 471.620814][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 471.620835][ T30] ? __virt_addr_valid+0x183/0x530 [ 471.620862][ T30] ? __check_object_size+0x48e/0x900 [ 471.620895][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 471.620933][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.620965][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 471.620999][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.621024][ T30] __sock_sendmsg+0x221/0x270 [ 471.632741][T21226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 471.637416][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 471.637464][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.671644][T21225] syzkaller1: entered allmulticast mode [ 471.677660][ T30] __sys_sendmsg+0x292/0x380 [ 471.772614][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.777871][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.784267][ T30] ? do_syscall_64+0x100/0x230 [ 471.789663][ T30] ? do_syscall_64+0xb6/0x230 [ 471.794392][ T30] do_syscall_64+0xf3/0x230 [ 471.799240][ T30] ? clear_bhb_loop+0x35/0x90 [ 471.803969][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.810041][ T30] RIP: 0033:0x7ffac217e719 [ 471.814490][ T30] RSP: 002b:00007ffac2f52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.823353][ T30] RAX: ffffffffffffffda RBX: 00007ffac2335f80 RCX: 00007ffac217e719 [ 471.831521][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 471.839746][ T30] RBP: 00007ffac21f175e R08: 0000000000000000 R09: 0000000000000000 [ 471.848098][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.858557][ T30] R13: 0000000000000000 R14: 00007ffac2335f80 R15: 00007ffd163d9788 [ 471.866573][ T30] [ 471.869775][ T30] [ 471.869775][ T30] Showing all locks held in the system: [ 471.877521][ T30] 1 lock held by khungtaskd/30: [ 471.882961][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 471.893722][ T30] 2 locks held by udevd/5217: [ 471.899061][ T30] 2 locks held by getty/5605: [ 471.903779][ T30] #0: ffff888030e620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 471.913845][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 471.924610][ T30] 2 locks held by syz.0.3205/13303: [ 471.929927][ T30] #0: ffffffff8fd39690 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 471.938294][ T30] #1: ffffffff8ec19268 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 471.948908][ T30] 2 locks held by syz.5.4120/15639: [ 471.954128][ T30] #0: ffffffff8fd39690 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 471.962454][ T30] #1: ffffffff8ec19268 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790 [ 471.972711][ T30] 2 locks held by kworker/u8:13/16788: [ 471.978494][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 471.990319][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 472.003305][ T30] 1 lock held by syz-executor/17099: [ 472.008941][ T30] 2 locks held by kworker/u8:20/19062: [ 472.014428][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.026222][ T30] #1: ffffc900189f7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.038814][ T30] 2 locks held by kworker/u8:35/19082: [ 472.044321][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.056268][ T30] #1: ffffc90017ab7d00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.067377][ T30] 2 locks held by kworker/u8:37/19084: [ 472.073166][ T30] 2 locks held by kworker/u8:41/19088: [ 472.078731][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.090578][ T30] #1: ffffc90018a07d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.102054][ T30] 2 locks held by syz.6.6237/21227: [ 472.107289][ T30] #0: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 472.116711][ T30] #1: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 472.128071][ T30] [ 472.130454][ T30] ============================================= [ 472.130454][ T30] [ 472.139019][ T30] NMI backtrace for cpu 0 [ 472.143375][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 472.153933][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 472.164018][ T30] Call Trace: [ 472.167301][ T30] [ 472.170244][ T30] dump_stack_lvl+0x241/0x360 [ 472.174937][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.180145][ T30] ? __pfx__printk+0x10/0x10 [ 472.184750][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 472.189713][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.195184][ T30] ? _printk+0xd5/0x120 [ 472.199350][ T30] ? __pfx__printk+0x10/0x10 [ 472.203949][ T30] ? __wake_up_klogd+0xcc/0x110 [ 472.208854][ T30] ? __pfx__printk+0x10/0x10 [ 472.213455][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 472.218506][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.224513][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 472.230516][ T30] watchdog+0xff4/0x1040 [ 472.234772][ T30] ? watchdog+0x1ea/0x1040 [ 472.239209][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.243929][ T30] kthread+0x2f0/0x390 [ 472.248009][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.252701][ T30] ? __pfx_kthread+0x10/0x10 [ 472.257292][ T30] ret_from_fork+0x4b/0x80 [ 472.261723][ T30] ? __pfx_kthread+0x10/0x10 [ 472.266343][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.271134][ T30] [ 472.275082][ T30] Sending NMI from CPU 0 to CPUs 1: [ 472.280868][ C1] NMI backtrace for cpu 1 [ 472.280881][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 472.280900][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 472.280910][ C1] RIP: 0010:unwind_next_frame+0x84f/0x22d0 [ 472.280942][ C1] Code: 8b 03 48 89 04 24 48 8d 5a 01 48 89 d0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 90 16 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 84 80 02 00 00 89 d9 80 e1 07 38 c1 0f 8c 73 02 00 00 be [ 472.280956][ C1] RSP: 0018:ffffc900001e74d0 EFLAGS: 00000a03 [ 472.280972][ C1] RAX: 0000000000000000 RBX: ffffffff90a2172d RCX: ffffffff902cffc0 [ 472.280985][ C1] RDX: ffffffff90a2172c RSI: ffffffff90a2172c RDI: 0000000000000001 [ 472.280997][ C1] RBP: ffffc900001e7650 R08: 0000000000000001 R09: 0000000000000000 [ 472.281007][ C1] R10: ffffc900001e7650 R11: fffff5200003cecc R12: dffffc0000000000 [ 472.281020][ C1] R13: ffffc900001e7600 R14: ffffc900001e7638 R15: ffffffff90a21730 [ 472.281033][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 472.281047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.281059][ C1] CR2: 00007efc86984440 CR3: 0000000049ce4000 CR4: 00000000003526f0 [ 472.281074][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.281084][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.281095][ C1] Call Trace: [ 472.281101][ C1] [ 472.281107][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 472.281132][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 472.281160][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.281200][ C1] ? nmi_handle+0x2a/0x5a0 [ 472.281227][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 472.281252][ C1] ? nmi_handle+0x14f/0x5a0 [ 472.281270][ C1] ? nmi_handle+0x2a/0x5a0 [ 472.281289][ C1] ? unwind_next_frame+0x84f/0x22d0 [ 472.281316][ C1] ? default_do_nmi+0x63/0x160 [ 472.281344][ C1] ? exc_nmi+0x123/0x1f0 [ 472.281370][ C1] ? end_repeat_nmi+0xf/0x53 [ 472.281399][ C1] ? unwind_next_frame+0x84f/0x22d0 [ 472.281427][ C1] ? unwind_next_frame+0x84f/0x22d0 [ 472.281456][ C1] ? unwind_next_frame+0x84f/0x22d0 [ 472.281484][ C1] [ 472.281490][ C1] [ 472.281503][ C1] ? arch_stack_walk+0xe5/0x150 [ 472.281526][ C1] __unwind_start+0x59a/0x740 [ 472.281544][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.281567][ C1] arch_stack_walk+0xe5/0x150 [ 472.281588][ C1] ? arch_stack_walk+0xe5/0x150 [ 472.281609][ C1] stack_trace_save+0x118/0x1d0 [ 472.281631][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 472.281654][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.281685][ C1] kasan_save_track+0x3f/0x80 [ 472.281733][ C1] kasan_save_free_info+0x40/0x50 [ 472.281767][ C1] __kasan_slab_free+0x59/0x70 [ 472.281786][ C1] ? rcu_core+0xaaa/0x17a0 [ 472.281804][ C1] kmem_cache_free+0x1a2/0x420 [ 472.281829][ C1] ? rcu_core+0xaaa/0x17a0 [ 472.281846][ C1] ? rcu_core+0xa37/0x17a0 [ 472.281863][ C1] ? __pfx_mt_free_rcu+0x10/0x10 [ 472.281885][ C1] rcu_core+0xaaa/0x17a0 [ 472.281911][ C1] ? __pfx_rcu_core+0x10/0x10 [ 472.281932][ C1] ? rcu_qs+0xf1/0x190 [ 472.281949][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 472.281965][ C1] ? sched_clock_cpu+0x76/0x490 [ 472.281991][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.282019][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.282052][ C1] handle_softirqs+0x2c5/0x980 [ 472.282079][ C1] ? run_ksoftirqd+0xca/0x130 [ 472.282107][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 472.282136][ C1] run_ksoftirqd+0xca/0x130 [ 472.282161][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 472.282193][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 472.282218][ C1] smpboot_thread_fn+0x544/0xa30 [ 472.282243][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 472.282272][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 472.282297][ C1] kthread+0x2f0/0x390 [ 472.282314][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 472.282338][ C1] ? __pfx_kthread+0x10/0x10 [ 472.282356][ C1] ret_from_fork+0x4b/0x80 [ 472.282382][ C1] ? __pfx_kthread+0x10/0x10 [ 472.282410][ C1] ret_from_fork_asm+0x1a/0x30 [ 472.282442][ C1] [ 472.282894][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 472.694936][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00193-g73af53d82076 #0 [ 472.705441][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 472.715512][ T30] Call Trace: [ 472.718804][ T30] [ 472.721743][ T30] dump_stack_lvl+0x241/0x360 [ 472.726437][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.731655][ T30] ? __pfx__printk+0x10/0x10 [ 472.736252][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.742268][ T30] ? vscnprintf+0x5d/0x90 [ 472.746612][ T30] panic+0x349/0x880 [ 472.750533][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 472.756720][ T30] ? __pfx_panic+0x10/0x10 [ 472.761143][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 472.766540][ T30] ? __irq_work_queue_local+0x137/0x410 [ 472.772100][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 472.777487][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 472.783657][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 472.789861][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 472.796033][ T30] watchdog+0x1033/0x1040 [ 472.800392][ T30] ? watchdog+0x1ea/0x1040 [ 472.804821][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.809504][ T30] kthread+0x2f0/0x390 [ 472.813586][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.818284][ T30] ? __pfx_kthread+0x10/0x10 [ 472.822881][ T30] ret_from_fork+0x4b/0x80 [ 472.827305][ T30] ? __pfx_kthread+0x10/0x10 [ 472.831897][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.836682][ T30] [ 472.840037][ T30] Kernel Offset: disabled [ 472.844388][ T30] Rebooting in 86400 seconds..