last executing test programs: 23.268402561s ago: executing program 0 (id=1018): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x5}, @in={0x2, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)="f0", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x57, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000040000008500000017000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "957a79bcb338d646", "41efb2ee27eea4b72da4eb3cbf353829", "d301912c", "3608573f69870e20"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) 22.292239068s ago: executing program 0 (id=1033): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000640)=""/139, 0x8b}], 0x8, &(0x7f0000000800)=""/210, 0xd2}, 0x51a12d93624c9fb5) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xfec0ffff00000000}}]}}}]}, 0x48}}, 0x0) 20.841417188s ago: executing program 0 (id=1045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00', {0x10000}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/248, 0x3}], 0x100000000000025b) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 19.846367858s ago: executing program 0 (id=1055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1e, 0x8000, 0x5, 0x8, 0x20, r0, 0xb, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x3100, 0x0, &(0x7f0000000380), 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) 19.510763145s ago: executing program 0 (id=1060): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x5}, @in={0x2, 0x0, @loopback}], 0x2c) sendto$inet6(r1, &(0x7f0000000240)="f0", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x57, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000040000008500000017000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "957a79bcb338d646", "41efb2ee27eea4b72da4eb3cbf353829", "d301912c", "3608573f69870e20"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) 18.482348824s ago: executing program 0 (id=1072): unshare(0x68040200) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x80000001}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x20000000, 0x4}, 0x48) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0x0) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)={0x14, r5, 0x1}, 0x14}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 16.414484634s ago: executing program 2 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11000000}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5495}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.257606715s ago: executing program 2 (id=1094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xbf}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) 16.152969057s ago: executing program 2 (id=1096): socket$kcm(0x29, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000800018004b140d1500002800800020000000000080001"], 0x30}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xeb5, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 15.844880548s ago: executing program 3 (id=1100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000082b00000008000300", @ANYRES32=r3, @ANYBLOB="04004600300051802c2c008004000400050002000000000011000100a7fd4531296b6353d1f3e088470000000800030001ac0f000a00340002020202020200000800270001000000080026006c09"], 0x6c}}, 0x0) 15.843620959s ago: executing program 2 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a698700000005000400000000110900020073797a3000000000240007800c00028008000140ffffffff0c000180080001400000000005001400ff00000005000500020000000500010006000000"], 0x6c}}, 0x0) 15.763453701s ago: executing program 3 (id=1103): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000035000100"/20], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000e40)={0x10c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffa7c}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x49}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8128}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4d2a1382}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd8000000}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf9e4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x20002801) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000002c0)=':)\\^[\'[\\(\x00', 0xa) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmmsg$alg(r3, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="436317f062ecf2bf127c2c2c88ad", 0xe}, {&(0x7f0000000380)='0', 0x1}], 0x2}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d00)=@bridge_setlink={0x10c, 0x13, 0x200, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x131}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0xdc99}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb4b7}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'batadv0\x00'}, {0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'team_slave_0\x00'}, {0x14, 0x35, 'wlan1\x00'}, {0x14, 0x35, 'bond_slave_1\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'pim6reg\x00'}, @IFLA_LINK={0x8}]}, 0x10c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pwritev(r3, &(0x7f0000000c80)=[{}, {&(0x7f0000000140)="bef23856b73c8d5431341394149f265db6d51569f9a9104cc7545b2293dc4bc74d4dddde63bdd6dab52c3a938862766408ab72fdb25a47af20f7c666deabdc22e489b4e55741d621807ec25ae1276286b0397f6ef1e3fafffffffffffffffb128f5c1e39d41aaaf3892cec87e946d8d28620e75a9c8f4a3e3ce6f9815e377d86c9b4e87ca578626c0427651f3d157145a6e1ed594b010dd91d018b0839bf8a67f866f9377956124fa81fcff17e04897c2c0b9f1517a3abaffebd0e52fea1a54798e289efd571dc26e94e7c573547982d57c6e3f60fe245f727b96f9d78082b21", 0xe0}, {&(0x7f00000003c0)="65f8e707e85502e51497658b0adfc99bf9a72d1181922786717388b71d25045c5542530e663fd45b178d67dc75c5104266a2c0e4dceed95a7a170404c11d1b365ca9c6ca7eea2ec1be2ad3029c052f31819c5817222f547a33c397df64bced16f1464929cb0f0ea2cd5fe895189aea4f73eb454dc3dd559fd04542440418dd1c28ca97f3dd7a5cfce9d1a4463caa570dc54745402e56cc749b8fded6d051ae4da8aa76308372035d23845742969eda576ea7f84b190f479d209f63a6fac1e044b7162c20bd0b06466bb71c090f8063f3389bceb8129458a2ded485c2477a7be945a69fea21e9d6e96e9e", 0xea}, {&(0x7f0000000b40)="e09e4af4144879311b6d920a23d72d996ce83d82daa02c118205aaa6a3290e0f1ece8733e39ff6f2f451d5af6e221c6b23f8b78b8db9227d76a53dd5c29b48e1a5d50af2df1afe36301dfb359bb31828fb408d0db84daf01707e81caaddc9339f68e2d798e3218d82a", 0x69}, {&(0x7f0000000bc0)="3d840466a01916a32223e4824fb49d42fcafd21ea239b1542253c3ef60dca72e02c8f8aada824346a9f55f0ea0269a928d75b344fae00e64c71d02ae86e8e1f484fbd5ceeb1dd74b62a0af7a21b0416679ae2da81bf7ad7b3b24781f1c9598d28b16e17dc36bedead11839a0a5f348ec11256bea029f66314f2968bed046b6cd792de7c234305ca1f7cbdf5218e80a357e7f2d", 0x93}], 0x5, 0x1, 0x556) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000640)="25da3fbf1f9edc0a3acb0040c35daedf9be3b2e87e2d22820cc253c5ee25a1d48fcf17ec8389014f3a56232829b73023eff1dd8cda6655ed8ae26b2ec889c8530ad34107af78997ff8f1eab3706b9ffbda2d4615d1dae4ba31d57f8fc51d6c938a873571831d20f55a915ffdfd0542de7bc3ab0002f226517a38693bcf617a272053c0aeaf7d19cc98d2a27e4701ea5734414e369b5f9d44ad325b42dab32f996c9e9cc75246c1423f81df8b25ad57486761d686d4f1dd2708e25847a51bed8f0c75b35fcf42a092c2cb4e43ad292d18a510a5442b279297ca941f1c81bc8e587b75091eea7488a8ddd900", 0xeb}, {&(0x7f0000000740)="19183a76b69ec9f70ceff5484a072554d19e680d3fd5cd5de6f38b71e97c38dcfbfeb108d14ea1659503c3a9697949ef7f37ce8c48aad085157785f2d7ea2b792f809e2ac9bf19950b9376c1c896b1e1d556274c4720e0e9cc95c2e5f9f895a4ff8d644c3ae3c793548758526b01b8752dbd16108af0dc9b59cfe9f394aa62c7", 0x80}, {&(0x7f00000007c0)="bc09d2c99b3f4f4ad5c42394dd6afecc92b5f1492bbd355f1d05c924647914116fc6abf4fd41f62238a3e7c08c060334506918ce8f3c18a0aa1b2de620efd9f07964e40c9374180eb31c6e69fc7da9f6b50980fd05744f2a6506dc9fe8b28c6a64e45a581b5cb0da5feceea65423eff9eac8bb704ce49d9d1000d6398bcb0ebb6eaea4eca3871c0080b8d58efac8939423bb5c3db318f5c5deb6e86eecac5ed522631f0a5cf84c22910aa164aaa0964aab33eb071b2e9f1aa66b9aa0a904fb087220ab", 0xc3}, {&(0x7f0000000900)="20860f26ce8717a80621244f141c09cc448b7f457820b76759a527a9c8e0e925c12809d53dc63d902468a40b5a82a49e8f5358922e5f6655c9a0c9f9091dfe1d66923db8", 0x44}, {&(0x7f0000000080)="9b4841", 0x3}, {&(0x7f0000000980)="cbea7aa66dfdeedac4005af0a91e90589f194717ca4bce52ecb884e8537775238d7c39e70cec13536087e1307b653af3b24a6eed203ae14a53b47a6126eae7022d88cfa96eb01a74acdbf96ca2b50c732356ef8793a1d53e1a0fd2df", 0x5c}], 0x6, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x12f0}, 0x40000c0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x4881, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {}, 0xa}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) 15.617371043s ago: executing program 2 (id=1105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="fc0000001a000700ab0925000900070081ab0700a90100001d4d369321000100ff0300000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e20000000082f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d37a3843d970f84d6b18613c8a", 0xfc) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000018000000240000002400000007000000050000000000000803000000020000000000000801000000000000000000000d0000000000006100005f00"], 0x0, 0x43}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x3}, 0x48) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x7, 0x0, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xcc, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0xa9, 0xc, "6b18e3848a68c055e602fb1fa7dffce0290572999db45af657374df232382a1f18d8615cfdf40447fb71aa0382c9f4b9d3dc45dac43a613773a08d4ecc3564ada88a8b8fb3686780584e1ecd083e1d533288806e7cf6f04783f4faf7a710996a442948025ce041446805052919c6be775d753055225fa0af625e66c3475a861eed90db3dda8433a68014812bf5e3982c284c245124460ed8675d3519b6e61980fcba7e9d50"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20018050}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000005000001c0012800b050000007036746e6c00000c00028008000600", @ANYRES32=r5, @ANYBLOB="0a000200ffffffffffff0000"], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@cgroup=r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001439) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)=0x4) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r9}], 0x1, 0x0, 0x0, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 15.585192234s ago: executing program 3 (id=1106): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="8000c6000a000200aaaaaaaaaabb00000600050001"], 0x30}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x57, '\x00', 0x0, r1, 0x3}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000040000008500000017000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$nfc_llcp(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x5d) 14.614447675s ago: executing program 3 (id=1111): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x20e4, 0x0, 0x2}}, 0x26) 14.417422364s ago: executing program 3 (id=1112): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in, 0x0, 0x1}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x900, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev}, 0x1c) 14.305490669s ago: executing program 3 (id=1113): socket$kcm(0x29, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x7400, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001ca650000000000001808"], 0x114}], 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xeb5, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14.006643487s ago: executing program 2 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x6c}}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1000}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x41}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5195c342}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0xa8}}, 0x4010) 3.826910035s ago: executing program 4 (id=1123): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) sendto$packet(r0, &(0x7f0000000240)="3f030e00030000002b001e0089e9aaa911e0c2310f0088471327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3", 0x37, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x4, 0x0, 0x6, @multicast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000eb1d95"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='page_pool_release\x00', r3}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x20000005) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, 0x0, 0x4801) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r7}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r8) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) 3.578403334s ago: executing program 4 (id=1124): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x8847, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}, 0x1, 0x0, 0xfeff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 3.164900618s ago: executing program 1 (id=1125): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x480}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.897463059s ago: executing program 4 (id=1126): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000100000000010000002800018014000400fe880000000000000000000000000001060001000a"], 0x3c}}, 0x4000000) 2.873460679s ago: executing program 1 (id=1127): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x20008000) syz_emit_ethernet(0x45, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100e50008000500aa521cd814000200776730"], 0x30}}, 0x0) 2.686931647s ago: executing program 4 (id=1128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x1a00, {{@in6=@private0, @in6=@loopback}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "bd"}}]}, 0x13c}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000680)="bc", 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/34, 0x22}], 0x1, &(0x7f0000000d40)=""/73, 0x49}}], 0x1, 0x2000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xdb, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x66d8, 0x3, 0x9, 0xe4, r3, 0x5, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0xe}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r8}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r11, 0x401}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x44) 2.282638431s ago: executing program 4 (id=1129): socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x3, 0xb, 0x8}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003042000"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.835227433s ago: executing program 1 (id=1130): unshare(0x8000400) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xfffffffe, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffe0f50506000000000000008500000005000000bf0900000000000055090100800004009500000000000000bf91000000000000b7020200000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xffc, &(0x7f0000001e40)=""/4092}, 0x90) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, &(0x7f0000000700)="0c268a", 0x3, 0x0, 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x1c, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.656168478s ago: executing program 4 (id=1131): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x9) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000b0000070000000900010073797a300000000014400000020a01010800000000000000000000858851f1980e16fb030000000000000000070000000900010073797a3000000000140000001000010000000000000000000084000a"], 0x7c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000100)='\t', 0x1, 0x200448c0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @loopback}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.56476878s ago: executing program 1 (id=1132): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x57, '\x00', 0x0, r1, 0x3}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000040000008500000017000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$nfc_llcp(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x5d) 580.706835ms ago: executing program 1 (id=1133): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}}]}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x1002, &(0x7f0000001900)=""/4098, 0x40f00, 0x4}, 0x90) r2 = socket$kcm(0x11, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) socket$inet(0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0x25, 0x148, 0x0, 0x60, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000580)={0x0, 0x0}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x4004010) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$sock(r2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000000)=0xa12, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x81, 0x1f, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000}, 0x8000, 0x0, 0x8000, 0x3}}) 0s ago: executing program 1 (id=1134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000240), 0x1e) bind$pptp(r2, &(0x7f0000000200), 0x1e) write(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='-'], 0x27) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x2, @loopback}}, 0x27c0}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) syz_emit_ethernet(0x8a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6010080000540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54e2"], 0x0) kernel console output (not intermixed with test programs): left promiscuous mode [ 105.067922][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 105.078797][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 105.437371][ T6366] warn_alloc: 5 callbacks suppressed [ 105.437390][ T6366] syz.1.369: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 105.497824][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.1.369 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 105.508470][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 105.518559][ T6366] Call Trace: [ 105.521858][ T6366] [ 105.524810][ T6366] dump_stack_lvl+0x241/0x360 [ 105.529519][ T6366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.534749][ T6366] ? __pfx__printk+0x10/0x10 [ 105.539384][ T6366] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 105.545916][ T6366] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 105.552463][ T6366] warn_alloc+0x278/0x410 [ 105.556835][ T6366] ? stack_depot_save_flags+0x29/0x830 [ 105.562338][ T6366] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 105.568438][ T6366] ? __pfx_warn_alloc+0x10/0x10 [ 105.573324][ T6366] ? kasan_save_track+0x3f/0x80 [ 105.578208][ T6366] ? __kasan_kmalloc+0x98/0xb0 [ 105.583000][ T6366] ? xsk_setsockopt+0x4ea/0x950 [ 105.587875][ T6366] ? do_sock_setsockopt+0x3af/0x720 [ 105.593130][ T6366] ? __sys_setsockopt+0x1ae/0x250 [ 105.598273][ T6366] ? __x64_sys_setsockopt+0xb5/0xd0 [ 105.603503][ T6366] ? do_syscall_64+0xf3/0x230 [ 105.608201][ T6366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.614309][ T6366] __vmalloc_node_range_noprof+0x126/0x1400 [ 105.620291][ T6366] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.626643][ T6366] ? __kasan_kmalloc+0x98/0xb0 [ 105.631426][ T6366] ? xskq_create+0x54/0x170 [ 105.635933][ T6366] vmalloc_user_noprof+0x74/0x80 [ 105.640888][ T6366] ? xskq_create+0xb6/0x170 [ 105.645397][ T6366] xskq_create+0xb6/0x170 [ 105.649728][ T6366] xsk_init_queue+0xa1/0x100 [ 105.654323][ T6366] xsk_setsockopt+0x4ea/0x950 [ 105.658999][ T6366] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.664189][ T6366] ? __pfx_lock_acquire+0x10/0x10 [ 105.669223][ T6366] ? aa_sock_opt_perm+0x79/0x120 [ 105.674209][ T6366] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 105.680199][ T6366] ? security_socket_setsockopt+0x87/0xb0 [ 105.685919][ T6366] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.691107][ T6366] do_sock_setsockopt+0x3af/0x720 [ 105.696133][ T6366] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.701675][ T6366] ? __fget_files+0x29/0x470 [ 105.706352][ T6366] ? __fget_files+0x3f6/0x470 [ 105.711050][ T6366] __sys_setsockopt+0x1ae/0x250 [ 105.715935][ T6366] __x64_sys_setsockopt+0xb5/0xd0 [ 105.720985][ T6366] do_syscall_64+0xf3/0x230 [ 105.725504][ T6366] ? clear_bhb_loop+0x35/0x90 [ 105.730187][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.736085][ T6366] RIP: 0033:0x7f324017cef9 [ 105.740495][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.760097][ T6366] RSP: 002b:00007f3240e9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.768505][ T6366] RAX: ffffffffffffffda RBX: 00007f3240335f80 RCX: 00007f324017cef9 [ 105.776470][ T6366] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 105.784444][ T6366] RBP: 00007f32401ef046 R08: 0000000000000004 R09: 0000000000000000 [ 105.792490][ T6366] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.800544][ T6366] R13: 0000000000000000 R14: 00007f3240335f80 R15: 00007ffd944da708 [ 105.808524][ T6366] [ 105.832530][ T6366] Mem-Info: [ 105.835698][ T6366] active_anon:4340 inactive_anon:0 isolated_anon:0 [ 105.835698][ T6366] active_file:1590 inactive_file:38189 isolated_file:0 [ 105.835698][ T6366] unevictable:768 dirty:355 writeback:0 [ 105.835698][ T6366] slab_reclaimable:8642 slab_unreclaimable:94414 [ 105.835698][ T6366] mapped:21149 shmem:1260 pagetables:768 [ 105.835698][ T6366] sec_pagetables:0 bounce:0 [ 105.835698][ T6366] kernel_misc_reclaimable:0 [ 105.835698][ T6366] free:1365644 free_pcp:218 free_cma:0 [ 105.895011][ T6366] Node 0 active_anon:17360kB inactive_anon:0kB active_file:6360kB inactive_file:152672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84696kB dirty:1420kB writeback:0kB shmem:3504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10128kB pagetables:3072kB sec_pagetables:0kB all_unreclaimable? no [ 105.937974][ T6366] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 105.955421][ T6369] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 105.996276][ T6366] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.030893][ T6366] lowmem_reserve[]: 0 2467 2468 0 0 [ 106.037869][ T6378] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 106.071508][ T6366] Node 0 DMA32 free:1492808kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:17324kB inactive_anon:0kB active_file:6360kB inactive_file:151852kB unevictable:1536kB writepending:1420kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:2024kB local_pcp:1512kB free_cma:0kB [ 106.103731][ T6378] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 106.174730][ T6366] lowmem_reserve[]: 0 0 0 0 0 [ 106.185604][ T6366] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 106.198663][ T6378] team0: Port device netdevsim0 added [ 106.241861][ T6366] lowmem_reserve[]: 0 0 0 0 0 [ 106.246842][ T6366] Node 1 Normal free:3951488kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.276179][ T6380] netlink: 'syz.4.375': attribute type 10 has an invalid length. [ 106.293884][ T6366] lowmem_reserve[]: 0 0 0 0 0 [ 106.365840][ T6366] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.423713][ T6366] Node 0 DMA32: 553*4kB (UME) 286*8kB (UME) 299*16kB (UME) 181*32kB (UME) 89*64kB (UME) 47*128kB (UME) 27*256kB (UME) 15*512kB (UM) 5*1024kB (UM) 5*2048kB (UM) 352*4096kB (UM) = 1498532kB [ 106.502290][ T6366] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 106.510637][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'. [ 106.516187][ T6366] Node 1 Normal: 4*4kB (UM) 8*8kB (UM) 9*16kB (UM) 9*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 7*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3951488kB [ 106.540366][ T6366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.550082][ T6366] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.577624][ T6390] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 106.598808][ T6366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.639570][ T6366] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.654798][ T6393] netlink: 512 bytes leftover after parsing attributes in process `syz.2.377'. [ 106.673218][ T6366] 41042 total pagecache pages [ 106.687549][ T6395] FAULT_INJECTION: forcing a failure. [ 106.687549][ T6395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.707801][ T6366] 0 pages in swap cache [ 106.712121][ T6366] Free swap = 124996kB [ 106.735159][ T6366] Total swap = 124996kB [ 106.740052][ T6366] 2097051 pages RAM [ 106.744153][ T6395] CPU: 1 UID: 0 PID: 6395 Comm: syz.4.381 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 106.754764][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 106.764836][ T6395] Call Trace: [ 106.768142][ T6395] [ 106.771087][ T6395] dump_stack_lvl+0x241/0x360 [ 106.775793][ T6395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.781018][ T6395] ? __pfx__printk+0x10/0x10 [ 106.785633][ T6395] ? __pfx_lock_release+0x10/0x10 [ 106.790692][ T6395] should_fail_ex+0x3b0/0x4e0 [ 106.795398][ T6395] _copy_from_iter+0x1f6/0x1960 [ 106.800250][ T6395] ? __virt_addr_valid+0x183/0x530 [ 106.805355][ T6395] ? __pfx_lock_release+0x10/0x10 [ 106.810395][ T6395] ? __pfx__copy_from_iter+0x10/0x10 [ 106.815672][ T6395] ? __virt_addr_valid+0x183/0x530 [ 106.820771][ T6395] ? __virt_addr_valid+0x183/0x530 [ 106.825869][ T6395] ? __virt_addr_valid+0x45f/0x530 [ 106.830970][ T6395] ? __check_object_size+0x49c/0x900 [ 106.836254][ T6395] tcp_sendmsg_locked+0x1c83/0x4e10 [ 106.841484][ T6395] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 106.847020][ T6395] ? __local_bh_enable_ip+0x168/0x200 [ 106.852389][ T6395] ? do_raw_spin_unlock+0x13c/0x8b0 [ 106.857588][ T6395] tcp_sendmsg+0x30/0x50 [ 106.861824][ T6395] __sock_sendmsg+0x1a6/0x270 [ 106.866497][ T6395] __sys_sendto+0x3a4/0x4f0 [ 106.870998][ T6395] ? __pfx___sys_sendto+0x10/0x10 [ 106.876124][ T6395] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.882104][ T6395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.888432][ T6395] __x64_sys_sendto+0xde/0x100 [ 106.893264][ T6395] do_syscall_64+0xf3/0x230 [ 106.897760][ T6395] ? clear_bhb_loop+0x35/0x90 [ 106.902441][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.908332][ T6395] RIP: 0033:0x7f82d357cef9 [ 106.912745][ T6395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.932601][ T6395] RSP: 002b:00007f82d4450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.941007][ T6395] RAX: ffffffffffffffda RBX: 00007f82d3735f80 RCX: 00007f82d357cef9 [ 106.948971][ T6395] RDX: 0000000000000017 RSI: 00000000200012c0 RDI: 0000000000000007 [ 106.957020][ T6395] RBP: 00007f82d4450090 R08: 0000000000000000 R09: 0000000000000000 [ 106.964980][ T6395] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 106.972952][ T6395] R13: 0000000000000000 R14: 00007f82d3735f80 R15: 00007ffd9aba29e8 [ 106.980928][ T6395] [ 106.998710][ T6366] 0 pages HighMem/MovableOnly [ 107.004605][ T6366] 426967 pages reserved [ 107.011102][ T6366] 0 pages cma reserved [ 107.666747][ T6426] dccp_close: ABORT with 120 bytes unread [ 108.077023][ T6451] netlink: 'syz.4.402': attribute type 33 has an invalid length. [ 108.177196][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.403'. [ 108.259392][ T6455] netlink: 830 bytes leftover after parsing attributes in process `syz.1.404'. [ 108.555406][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 108.667092][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 108.712089][ T6473] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 109.015231][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 109.254830][ T6496] netlink: 52 bytes leftover after parsing attributes in process `syz.3.417'. [ 109.329982][ T6496] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 110.623062][ T6513] netlink: 'syz.0.427': attribute type 29 has an invalid length. [ 110.660263][ T6513] netlink: 'syz.0.427': attribute type 29 has an invalid length. [ 110.673203][ T6513] netlink: 824 bytes leftover after parsing attributes in process `syz.0.427'. [ 110.737001][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 111.002834][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.433'. [ 111.191355][ T6540] netlink: 'syz.4.437': attribute type 10 has an invalid length. [ 111.296986][ T6543] xt_ipcomp: unknown flags B [ 111.348335][ T6545] netlink: 5 bytes leftover after parsing attributes in process `syz.2.441'. [ 111.398327][ T6547] FAULT_INJECTION: forcing a failure. [ 111.398327][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 111.411300][ T6547] CPU: 1 UID: 0 PID: 6547 Comm: syz.0.442 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 111.421894][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.431968][ T6547] Call Trace: [ 111.435236][ T6547] [ 111.438159][ T6547] dump_stack_lvl+0x241/0x360 [ 111.442837][ T6547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.448127][ T6547] ? __pfx__printk+0x10/0x10 [ 111.452720][ T6547] should_fail_ex+0x3b0/0x4e0 [ 111.457425][ T6547] ? radix_tree_node_alloc+0x8b/0x3c0 [ 111.462789][ T6547] should_failslab+0xac/0x100 [ 111.467464][ T6547] ? radix_tree_node_alloc+0x8b/0x3c0 [ 111.472855][ T6547] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 111.478255][ T6547] radix_tree_node_alloc+0x8b/0x3c0 [ 111.483478][ T6547] idr_get_free+0x296/0xab0 [ 111.487978][ T6547] idr_alloc_u32+0x195/0x330 [ 111.492565][ T6547] ? __pfx_idr_alloc_u32+0x10/0x10 [ 111.497685][ T6547] ? l2tp_tunnel_register+0x13e/0x1b20 [ 111.503138][ T6547] l2tp_tunnel_register+0x160/0x1b20 [ 111.508421][ T6547] ? lockdep_hardirqs_on+0x99/0x150 [ 111.513615][ T6547] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 111.519512][ T6547] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 111.525249][ T6547] ? __asan_memset+0x23/0x50 [ 111.529845][ T6547] ? lockdep_init_map_type+0xa1/0x910 [ 111.535217][ T6547] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 111.541022][ T6547] ? __kasan_kmalloc+0x98/0xb0 [ 111.545790][ T6547] ? l2tp_tunnel_create+0x258/0x400 [ 111.550993][ T6547] ? l2tp_tunnel_create+0x2d4/0x400 [ 111.556199][ T6547] pppol2tp_connect+0x925/0x1940 [ 111.561157][ T6547] ? aa_sk_perm+0x96d/0xab0 [ 111.565662][ T6547] ? __pfx_pppol2tp_connect+0x10/0x10 [ 111.571052][ T6547] ? vfs_write+0x7c4/0xc90 [ 111.575477][ T6547] ? __pfx_aa_sk_perm+0x10/0x10 [ 111.580337][ T6547] ? bpf_lsm_socket_connect+0x9/0x10 [ 111.585656][ T6547] ? security_socket_connect+0x87/0xb0 [ 111.591119][ T6547] __sys_connect+0x2df/0x310 [ 111.595729][ T6547] ? __pfx___sys_connect+0x10/0x10 [ 111.600855][ T6547] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.607178][ T6547] ? do_syscall_64+0x100/0x230 [ 111.611947][ T6547] __x64_sys_connect+0x7a/0x90 [ 111.616707][ T6547] do_syscall_64+0xf3/0x230 [ 111.621210][ T6547] ? clear_bhb_loop+0x35/0x90 [ 111.625895][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.631787][ T6547] RIP: 0033:0x7efd3c17cef9 [ 111.636220][ T6547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.655838][ T6547] RSP: 002b:00007efd3cf90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 111.664254][ T6547] RAX: ffffffffffffffda RBX: 00007efd3c335f80 RCX: 00007efd3c17cef9 [ 111.672224][ T6547] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000004 [ 111.680190][ T6547] RBP: 00007efd3cf90090 R08: 0000000000000000 R09: 0000000000000000 [ 111.688152][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.696121][ T6547] R13: 0000000000000000 R14: 00007efd3c335f80 R15: 00007ffd89bd30f8 [ 111.704098][ T6547] [ 111.744701][ T6551] netlink: 'syz.4.444': attribute type 10 has an invalid length. [ 111.920546][ T6557] FAULT_INJECTION: forcing a failure. [ 111.920546][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 111.998856][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.2.445 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 112.009493][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 112.019577][ T6557] Call Trace: [ 112.022874][ T6557] [ 112.025904][ T6557] dump_stack_lvl+0x241/0x360 [ 112.030610][ T6557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.035833][ T6557] ? __pfx__printk+0x10/0x10 [ 112.040446][ T6557] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 112.046447][ T6557] ? __pfx___might_resched+0x10/0x10 [ 112.051758][ T6557] should_fail_ex+0x3b0/0x4e0 [ 112.056473][ T6557] should_failslab+0xac/0x100 [ 112.061185][ T6557] ? __alloc_skb+0x1c3/0x440 [ 112.065792][ T6557] kmem_cache_alloc_node_noprof+0x71/0x320 [ 112.071604][ T6557] __alloc_skb+0x1c3/0x440 [ 112.076033][ T6557] ? __pfx___alloc_skb+0x10/0x10 [ 112.080967][ T6557] ? netlink_autobind+0xd6/0x2f0 [ 112.085986][ T6557] ? netlink_autobind+0x2b0/0x2f0 [ 112.091011][ T6557] netlink_sendmsg+0x638/0xcb0 [ 112.095787][ T6557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.101092][ T6557] ? aa_sock_msg_perm+0x91/0x160 [ 112.106041][ T6557] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 112.111332][ T6557] ? security_socket_sendmsg+0x87/0xb0 [ 112.116800][ T6557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.122080][ T6557] __sock_sendmsg+0x221/0x270 [ 112.126755][ T6557] __sys_sendto+0x3a4/0x4f0 [ 112.131267][ T6557] ? __pfx___sys_sendto+0x10/0x10 [ 112.136310][ T6557] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.142292][ T6557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.148638][ T6557] ? exc_page_fault+0x590/0x8c0 [ 112.153512][ T6557] __x64_sys_sendto+0xde/0x100 [ 112.158316][ T6557] do_syscall_64+0xf3/0x230 [ 112.162821][ T6557] ? clear_bhb_loop+0x35/0x90 [ 112.167502][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.173415][ T6557] RIP: 0033:0x7f683537ed8c [ 112.177841][ T6557] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 112.197448][ T6557] RSP: 002b:00007f68360b7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 112.205974][ T6557] RAX: ffffffffffffffda RBX: 00007f68360b7fc0 RCX: 00007f683537ed8c [ 112.213937][ T6557] RDX: 0000000000000020 RSI: 00007f68360b8010 RDI: 0000000000000005 [ 112.221901][ T6557] RBP: 0000000000000000 R08: 00007f68360b7f14 R09: 000000000000000c [ 112.229866][ T6557] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 112.237835][ T6557] R13: 00007f68360b7f68 R14: 00007f68360b8010 R15: 0000000000000000 [ 112.245816][ T6557] [ 112.298861][ T6563] bond0: entered promiscuous mode [ 112.309046][ T6563] bond_slave_0: entered promiscuous mode [ 112.336948][ T6563] bond_slave_1: entered promiscuous mode [ 112.362725][ T6570] bond0: left promiscuous mode [ 112.371073][ T6570] bond_slave_0: left promiscuous mode [ 112.377035][ T6570] bond_slave_1: left promiscuous mode [ 112.391157][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.411007][ T6570] team0: Port device bond0 added [ 112.467992][ T6572] syzkaller1: entered promiscuous mode [ 112.484445][ T6572] syzkaller1: entered allmulticast mode [ 112.559687][ T6580] 1ªX¹¦À: renamed from 60ªX¹¦À [ 112.566455][ T6580] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 112.713184][ T6585] netlink: 'syz.4.455': attribute type 10 has an invalid length. [ 113.378043][ T6600] __nla_validate_parse: 5 callbacks suppressed [ 113.378062][ T6600] netlink: 168 bytes leftover after parsing attributes in process `syz.1.459'. [ 113.436458][ T6600] netlink: 'syz.1.459': attribute type 2 has an invalid length. [ 113.456575][ T6600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.459'. [ 113.589007][ T6600] pim6reg1: entered promiscuous mode [ 113.594441][ T6600] pim6reg1: entered allmulticast mode [ 115.049814][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.470'. [ 115.278326][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 115.489350][ T6633] warn_alloc: 4 callbacks suppressed [ 115.489370][ T6633] syz.1.474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 115.553353][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.1.474 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 115.564017][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 115.574096][ T6633] Call Trace: [ 115.577389][ T6633] [ 115.580343][ T6633] dump_stack_lvl+0x241/0x360 [ 115.585046][ T6633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.590266][ T6633] ? __pfx__printk+0x10/0x10 [ 115.594888][ T6633] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 115.601331][ T6633] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 115.607873][ T6633] warn_alloc+0x278/0x410 [ 115.612246][ T6633] ? stack_depot_save_flags+0x29/0x830 [ 115.617728][ T6633] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 115.623828][ T6633] ? __pfx_warn_alloc+0x10/0x10 [ 115.628719][ T6633] ? kasan_save_track+0x3f/0x80 [ 115.633597][ T6633] ? __kasan_kmalloc+0x98/0xb0 [ 115.638385][ T6633] ? xsk_setsockopt+0x4ea/0x950 [ 115.643262][ T6633] ? do_sock_setsockopt+0x3af/0x720 [ 115.648484][ T6633] ? __sys_setsockopt+0x1ae/0x250 [ 115.653532][ T6633] ? __x64_sys_setsockopt+0xb5/0xd0 [ 115.658749][ T6633] ? do_syscall_64+0xf3/0x230 [ 115.663447][ T6633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.669551][ T6633] __vmalloc_node_range_noprof+0x126/0x1400 [ 115.675499][ T6633] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 115.681851][ T6633] ? __kasan_kmalloc+0x98/0xb0 [ 115.686729][ T6633] ? xskq_create+0x54/0x170 [ 115.691259][ T6633] vmalloc_user_noprof+0x74/0x80 [ 115.696217][ T6633] ? xskq_create+0xb6/0x170 [ 115.700741][ T6633] xskq_create+0xb6/0x170 [ 115.705093][ T6633] xsk_init_queue+0xa1/0x100 [ 115.709705][ T6633] xsk_setsockopt+0x4ea/0x950 [ 115.714406][ T6633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.719627][ T6633] ? __pfx_lock_acquire+0x10/0x10 [ 115.724673][ T6633] ? aa_sock_opt_perm+0x79/0x120 [ 115.729626][ T6633] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 115.735223][ T6633] ? security_socket_setsockopt+0x87/0xb0 [ 115.740969][ T6633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.746179][ T6633] do_sock_setsockopt+0x3af/0x720 [ 115.751233][ T6633] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 115.756792][ T6633] ? __fget_files+0x29/0x470 [ 115.761495][ T6633] ? __fget_files+0x3f6/0x470 [ 115.766214][ T6633] __sys_setsockopt+0x1ae/0x250 [ 115.771101][ T6633] __x64_sys_setsockopt+0xb5/0xd0 [ 115.776158][ T6633] do_syscall_64+0xf3/0x230 [ 115.780684][ T6633] ? clear_bhb_loop+0x35/0x90 [ 115.785386][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.791303][ T6633] RIP: 0033:0x7f324017cef9 [ 115.795730][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.815359][ T6633] RSP: 002b:00007f3240e9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.823818][ T6633] RAX: ffffffffffffffda RBX: 00007f3240335f80 RCX: 00007f324017cef9 [ 115.831807][ T6633] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 115.839790][ T6633] RBP: 00007f32401ef046 R08: 0000000000000004 R09: 0000000000000000 [ 115.847863][ T6633] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.855849][ T6633] R13: 0000000000000000 R14: 00007f3240335f80 R15: 00007ffd944da708 [ 115.863856][ T6633] [ 115.955484][ T6633] Mem-Info: [ 115.959161][ T6633] active_anon:9310 inactive_anon:0 isolated_anon:0 [ 115.959161][ T6633] active_file:1590 inactive_file:38193 isolated_file:0 [ 115.959161][ T6633] unevictable:768 dirty:391 writeback:0 [ 115.959161][ T6633] slab_reclaimable:8713 slab_unreclaimable:95039 [ 115.959161][ T6633] mapped:21160 shmem:1269 pagetables:784 [ 115.959161][ T6633] sec_pagetables:0 bounce:0 [ 115.959161][ T6633] kernel_misc_reclaimable:0 [ 115.959161][ T6633] free:1359769 free_pcp:505 free_cma:0 [ 116.004422][ T6633] Node 0 active_anon:37440kB inactive_anon:0kB active_file:6360kB inactive_file:152688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84640kB dirty:1564kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10052kB pagetables:3236kB sec_pagetables:0kB all_unreclaimable? no [ 116.037940][ T6633] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 116.057338][ T6638] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 116.068132][ T6633] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.068193][ T6633] lowmem_reserve[]: 0 2467 2468 0 0 [ 116.158910][ T6633] Node 0 DMA32 free:1470272kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:38104kB inactive_anon:0kB active_file:6360kB inactive_file:151868kB unevictable:1536kB writepending:1564kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:2508kB local_pcp:1052kB free_cma:0kB [ 116.189708][ T6633] lowmem_reserve[]: 0 0 0 0 0 [ 116.194905][ T6633] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 116.222763][ T6633] lowmem_reserve[]: 0 0 0 0 0 [ 116.227521][ T6633] Node 1 Normal free:3950980kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 116.249372][ T6639] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 116.257015][ T6633] lowmem_reserve[]: 0 0 0 0 0 [ 116.269925][ T6633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.282712][ T6633] Node 0 DMA32: 1*4kB (E) 93*8kB (UME) 252*16kB (UME) 28*32kB (UME) 14*64kB (UME) 15*128kB (UME) 11*256kB (UE) 7*512kB (UE) 3*1024kB (UM) 3*2048kB (M) 353*4096kB (UM) = 1469996kB [ 116.300688][ T6633] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 116.323697][ T6633] Node 1 Normal: 3*4kB (UM) 9*8kB (UM) 11*16kB (UM) 2*32kB (UM) 3*64kB (U) 7*128kB (U) 6*256kB (UM) 7*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3950980kB [ 116.357100][ T6633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.373297][ T6633] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.383571][ T6633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.393820][ T6633] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.426488][ T6633] 41004 total pagecache pages [ 116.433686][ T6633] 0 pages in swap cache [ 116.438002][ T6633] Free swap = 124996kB [ 116.447524][ T6633] Total swap = 124996kB [ 116.453441][ T6633] 2097051 pages RAM [ 116.457434][ T6633] 0 pages HighMem/MovableOnly [ 116.467517][ T6633] 426967 pages reserved [ 116.474278][ T6633] 0 pages cma reserved [ 116.770490][ T6645] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 116.812884][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.821509][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.878175][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.885460][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.893803][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.901702][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.962477][ T6645] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.818874][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 118.252581][ T6668] netlink: 168 bytes leftover after parsing attributes in process `syz.2.485'. [ 118.288725][ T6668] netlink: 'syz.2.485': attribute type 2 has an invalid length. [ 118.296406][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.485'. [ 118.705627][ T6673] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 119.029458][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 119.071112][ T6673] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 119.114520][ T6675] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 119.173753][ T6675] bond1 (unregistering): Released all slaves [ 119.307093][ T6673] dccp_v6_rcv: dropped packet with invalid checksum [ 119.900278][ T6693] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 120.462583][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 120.623124][ T6688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.818070][ T6725] netlink: 'syz.2.505': attribute type 33 has an invalid length. [ 120.975813][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.507'. [ 121.735234][ T6762] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 121.752278][ T6765] tipc: Enabling of bearer rejected, failed to enable media [ 121.838839][ T5254] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.089120][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.519'. [ 122.143746][ T6770] netlink: 180 bytes leftover after parsing attributes in process `syz.2.519'. [ 122.456911][ T6788] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 122.476698][ T6788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.527'. [ 123.060020][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 123.350954][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 123.395346][ T6813] bridge1: entered promiscuous mode [ 123.408194][ T6813] bridge1: entered allmulticast mode [ 123.422343][ T6807] netlink: 'syz.4.531': attribute type 12 has an invalid length. [ 123.429268][ T6809] netlink: 148 bytes leftover after parsing attributes in process `syz.4.531'. [ 123.467472][ T6807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.531'. [ 123.773770][ T6835] netlink: 'syz.2.541': attribute type 29 has an invalid length. [ 123.791133][ T6835] netlink: 'syz.2.541': attribute type 29 has an invalid length. [ 123.944256][ T6842] dvmrp0: entered allmulticast mode [ 124.504079][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 125.063044][ T6893] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 125.568903][ T6915] __nla_validate_parse: 2 callbacks suppressed [ 125.569031][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.574'. [ 125.585386][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 125.808025][ T6930] netlink: 52 bytes leftover after parsing attributes in process `syz.4.578'. [ 125.817554][ T6931] netlink: 52 bytes leftover after parsing attributes in process `syz.4.578'. [ 125.971368][ T6937] netlink: 'syz.4.579': attribute type 10 has an invalid length. [ 126.797827][ T6970] netlink: 140 bytes leftover after parsing attributes in process `syz.3.589'. [ 126.979015][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.591'. [ 127.111237][ T5288] IPVS: starting estimator thread 0... [ 127.143144][ T6981] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 127.148488][ T6986] FAULT_INJECTION: forcing a failure. [ 127.148488][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 127.187472][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.3.592 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 127.198110][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.208189][ T6986] Call Trace: [ 127.211485][ T6986] [ 127.214433][ T6986] dump_stack_lvl+0x241/0x360 [ 127.219145][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.224377][ T6986] ? __pfx__printk+0x10/0x10 [ 127.228996][ T6986] ? __kmalloc_noprof+0xb0/0x400 [ 127.233970][ T6986] ? __pfx___might_resched+0x10/0x10 [ 127.239304][ T6986] should_fail_ex+0x3b0/0x4e0 [ 127.244026][ T6986] ? sock_kmalloc+0xd7/0x160 [ 127.248649][ T6986] should_failslab+0xac/0x100 [ 127.253362][ T6986] ? sock_kmalloc+0xd7/0x160 [ 127.257983][ T6986] __kmalloc_noprof+0xd8/0x400 [ 127.262791][ T6986] sock_kmalloc+0xd7/0x160 [ 127.267310][ T6986] skcipher_recvmsg+0x5ff/0x1230 [ 127.272280][ T6986] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 127.277851][ T6986] ? aa_sock_msg_perm+0x91/0x160 [ 127.282820][ T6986] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 127.288129][ T6986] ? security_socket_recvmsg+0x90/0xb0 [ 127.293610][ T6986] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 127.295469][ T6984] IPVS: using max 20 ests per chain, 48000 per kthread [ 127.298994][ T6986] sock_recvmsg+0x22f/0x280 [ 127.299030][ T6986] ____sys_recvmsg+0x1db/0x470 [ 127.315161][ T6986] ? __pfx_____sys_recvmsg+0x10/0x10 [ 127.320506][ T6986] do_recvmmsg+0x474/0xae0 [ 127.324964][ T6986] ? __pfx_lock_release+0x10/0x10 [ 127.330034][ T6986] ? __pfx_do_recvmmsg+0x10/0x10 [ 127.335038][ T6986] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 127.340967][ T6986] ? ksys_write+0x23e/0x2c0 [ 127.345506][ T6986] ? __pfx_lock_release+0x10/0x10 [ 127.350570][ T6986] ? vfs_write+0x7c4/0xc90 [ 127.355013][ T6986] ? __mutex_unlock_slowpath+0x21d/0x750 [ 127.360681][ T6986] ? __fget_files+0x3f6/0x470 [ 127.365400][ T6986] __x64_sys_recvmmsg+0x199/0x250 [ 127.370449][ T6986] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 127.376028][ T6986] ? do_syscall_64+0x100/0x230 [ 127.380827][ T6986] ? do_syscall_64+0xb6/0x230 [ 127.385540][ T6986] do_syscall_64+0xf3/0x230 [ 127.390069][ T6986] ? clear_bhb_loop+0x35/0x90 [ 127.394781][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.400701][ T6986] RIP: 0033:0x7f8db337cef9 [ 127.405155][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.424794][ T6986] RSP: 002b:00007f8db4144038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.433252][ T6986] RAX: ffffffffffffffda RBX: 00007f8db3535f80 RCX: 00007f8db337cef9 [ 127.441258][ T6986] RDX: 0000000000000001 RSI: 0000000020001080 RDI: 0000000000000004 [ 127.441418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.449232][ T6986] RBP: 00007f8db4144090 R08: 0000000000000000 R09: 0000000000000000 [ 127.449247][ T6986] R10: 0000000000012100 R11: 0000000000000246 R12: 0000000000000001 [ 127.449257][ T6986] R13: 0000000000000000 R14: 00007f8db3535f80 R15: 00007ffd5714f9f8 [ 127.449292][ T6986] [ 131.587135][ T7005] warn_alloc: 1 callbacks suppressed [ 131.587153][ T7005] syz.3.600: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 131.662623][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.3.600 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 131.673265][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.683346][ T7005] Call Trace: [ 131.686646][ T7005] [ 131.689600][ T7005] dump_stack_lvl+0x241/0x360 [ 131.694305][ T7005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.699535][ T7005] ? __pfx__printk+0x10/0x10 [ 131.704162][ T7005] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 131.710684][ T7005] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 131.717216][ T7005] warn_alloc+0x278/0x410 [ 131.721556][ T7005] ? stack_depot_save_flags+0x29/0x830 [ 131.727035][ T7005] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 131.733201][ T7005] ? __pfx_warn_alloc+0x10/0x10 [ 131.738058][ T7005] ? kasan_save_track+0x3f/0x80 [ 131.742913][ T7005] ? __kasan_kmalloc+0x98/0xb0 [ 131.747680][ T7005] ? xsk_setsockopt+0x4ea/0x950 [ 131.752528][ T7005] ? do_sock_setsockopt+0x3af/0x720 [ 131.757724][ T7005] ? __sys_setsockopt+0x1ae/0x250 [ 131.762744][ T7005] ? __x64_sys_setsockopt+0xb5/0xd0 [ 131.767948][ T7005] ? do_syscall_64+0xf3/0x230 [ 131.772618][ T7005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.778697][ T7005] __vmalloc_node_range_noprof+0x126/0x1400 [ 131.784615][ T7005] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.790946][ T7005] ? __kasan_kmalloc+0x98/0xb0 [ 131.795715][ T7005] ? xskq_create+0x54/0x170 [ 131.800216][ T7005] vmalloc_user_noprof+0x74/0x80 [ 131.805168][ T7005] ? xskq_create+0xb6/0x170 [ 131.809686][ T7005] xskq_create+0xb6/0x170 [ 131.814022][ T7005] xsk_init_queue+0xa1/0x100 [ 131.818621][ T7005] xsk_setsockopt+0x4ea/0x950 [ 131.823316][ T7005] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.828511][ T7005] ? __pfx_lock_acquire+0x10/0x10 [ 131.833535][ T7005] ? aa_sock_opt_perm+0x79/0x120 [ 131.838471][ T7005] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 131.844011][ T7005] ? security_socket_setsockopt+0x87/0xb0 [ 131.849726][ T7005] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.854914][ T7005] do_sock_setsockopt+0x3af/0x720 [ 131.859940][ T7005] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 131.865486][ T7005] ? __fget_files+0x29/0x470 [ 131.870085][ T7005] ? __fget_files+0x3f6/0x470 [ 131.874766][ T7005] __sys_setsockopt+0x1ae/0x250 [ 131.879618][ T7005] __x64_sys_setsockopt+0xb5/0xd0 [ 131.884643][ T7005] do_syscall_64+0xf3/0x230 [ 131.889151][ T7005] ? clear_bhb_loop+0x35/0x90 [ 131.893829][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.899721][ T7005] RIP: 0033:0x7f8db337cef9 [ 131.904138][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.923750][ T7005] RSP: 002b:00007f8db4144038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.932172][ T7005] RAX: ffffffffffffffda RBX: 00007f8db3535f80 RCX: 00007f8db337cef9 [ 131.940163][ T7005] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 131.948157][ T7005] RBP: 00007f8db33ef046 R08: 0000000000000004 R09: 0000000000000000 [ 131.956138][ T7005] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.964127][ T7005] R13: 0000000000000000 R14: 00007f8db3535f80 R15: 00007ffd5714f9f8 [ 131.972131][ T7005] [ 132.060822][ T7019] netlink: 212 bytes leftover after parsing attributes in process `syz.1.605'. [ 132.078448][ T7005] Mem-Info: [ 132.083981][ T7005] active_anon:3990 inactive_anon:0 isolated_anon:0 [ 132.083981][ T7005] active_file:1671 inactive_file:38201 isolated_file:0 [ 132.083981][ T7005] unevictable:768 dirty:184 writeback:0 [ 132.083981][ T7005] slab_reclaimable:8689 slab_unreclaimable:95529 [ 132.083981][ T7005] mapped:21140 shmem:1224 pagetables:739 [ 132.083981][ T7005] sec_pagetables:0 bounce:0 [ 132.083981][ T7005] kernel_misc_reclaimable:0 [ 132.083981][ T7005] free:1365400 free_pcp:198 free_cma:0 [ 132.198763][ T7005] Node 0 active_anon:15860kB inactive_anon:0kB active_file:6684kB inactive_file:152720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84560kB dirty:736kB writeback:0kB shmem:3360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9928kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 132.326254][ T7005] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 132.334629][ T7028] netlink: 'syz.1.610': attribute type 5 has an invalid length. [ 132.391593][ T7005] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.460855][ T7005] lowmem_reserve[]: 0 2467 2468 0 0 [ 132.478505][ T7005] Node 0 DMA32 free:1495616kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:15816kB inactive_anon:0kB active_file:6684kB inactive_file:151912kB unevictable:1536kB writepending:816kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:780kB local_pcp:504kB free_cma:0kB [ 132.536988][ T7005] lowmem_reserve[]: 0 0 0 0 0 [ 132.554183][ T7005] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 132.589107][ T7005] lowmem_reserve[]: 0 0 0 0 0 [ 132.595837][ T7005] Node 1 Normal free:3951476kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.701006][ T7005] lowmem_reserve[]: 0 0 0 0 0 [ 132.732535][ T7005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.768798][ T7005] Node 0 DMA32: 36*4kB (ME) 177*8kB (UME) 145*16kB (UME) 254*32kB (UME) 154*64kB (UME) 70*128kB (UME) 33*256kB (UME) 14*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 351*4096kB (UM) = 1494376kB [ 132.854687][ T7005] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 132.898313][ T7005] Node 1 Normal: 3*4kB (UM) 9*8kB (UM) 10*16kB (UM) 8*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 7*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3951476kB [ 132.925413][ T7005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.955574][ T7005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.965792][ T7005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.016369][ T7005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.046924][ T7005] 41100 total pagecache pages [ 133.052218][ T7005] 0 pages in swap cache [ 133.056497][ T7005] Free swap = 124996kB [ 133.061580][ T7005] Total swap = 124996kB [ 133.065790][ T7005] 2097051 pages RAM [ 133.071275][ T7005] 0 pages HighMem/MovableOnly [ 133.076285][ T7005] 426967 pages reserved [ 133.082970][ T7005] 0 pages cma reserved [ 133.204166][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.323871][ T7062] netlink: 'syz.1.623': attribute type 2 has an invalid length. [ 133.415172][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 133.428800][ T7070] netlink: 5 bytes leftover after parsing attributes in process `syz.2.625'. [ 133.446881][ T7070] netlink: 5 bytes leftover after parsing attributes in process `syz.2.625'. [ 133.619023][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.626'. [ 134.003205][ T7095] FAULT_INJECTION: forcing a failure. [ 134.003205][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 134.024354][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.0.634 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 134.034992][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 134.045072][ T7095] Call Trace: [ 134.048472][ T7095] [ 134.051426][ T7095] dump_stack_lvl+0x241/0x360 [ 134.056130][ T7095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.061364][ T7095] ? __pfx__printk+0x10/0x10 [ 134.065990][ T7095] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 134.072000][ T7095] ? __pfx___might_resched+0x10/0x10 [ 134.077334][ T7095] should_fail_ex+0x3b0/0x4e0 [ 134.082049][ T7095] should_failslab+0xac/0x100 [ 134.086760][ T7095] ? __alloc_skb+0x1c3/0x440 [ 134.091383][ T7095] kmem_cache_alloc_node_noprof+0x71/0x320 [ 134.097227][ T7095] __alloc_skb+0x1c3/0x440 [ 134.101678][ T7095] ? __pfx___alloc_skb+0x10/0x10 [ 134.106635][ T7095] ? is_bpf_text_address+0x285/0x2a0 [ 134.111960][ T7095] alloc_skb_with_frags+0xc3/0x770 [ 134.117100][ T7095] ? arch_stack_walk+0x16d/0x1b0 [ 134.122154][ T7095] sock_alloc_send_pskb+0x91a/0xa60 [ 134.127481][ T7095] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 134.133228][ T7095] ? kasan_save_track+0x51/0x80 [ 134.137817][ T7098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.138086][ T7095] ? kasan_save_track+0x3f/0x80 [ 134.138115][ T7095] ? __kasan_kmalloc+0x98/0xb0 [ 134.157615][ T7095] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 134.163184][ T7095] ? ip_setup_cork+0x53f/0x8b0 [ 134.167981][ T7095] ? ip_make_skb+0x138/0x420 [ 134.172596][ T7095] ? udp_sendmsg+0x1bef/0x2a60 [ 134.177385][ T7095] ? __sock_sendmsg+0x1a6/0x270 [ 134.182249][ T7095] ? ____sys_sendmsg+0x525/0x7d0 [ 134.187224][ T7095] ? do_syscall_64+0xf3/0x230 [ 134.191913][ T7095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.198007][ T7095] __ip_append_data+0x2c55/0x40b0 [ 134.203081][ T7095] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.208664][ T7095] ? __kasan_kmalloc+0x98/0xb0 [ 134.213460][ T7095] ? ip_setup_cork+0x53f/0x8b0 [ 134.218244][ T7095] ? __pfx___ip_append_data+0x10/0x10 [ 134.223644][ T7095] ? ip_setup_cork+0x4ae/0x8b0 [ 134.228431][ T7095] ip_make_skb+0x198/0x420 [ 134.232876][ T7095] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.238444][ T7095] ? __pfx_ip_make_skb+0x10/0x10 [ 134.243419][ T7095] udp_sendmsg+0x1bef/0x2a60 [ 134.248052][ T7095] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.253622][ T7095] ? __pfx_udp_sendmsg+0x10/0x10 [ 134.258586][ T7095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.264941][ T7095] ? __local_bh_enable_ip+0x168/0x200 [ 134.270346][ T7095] ? inet_sendmsg+0x16b/0x390 [ 134.275039][ T7095] ? do_raw_spin_unlock+0x13c/0x8b0 [ 134.280262][ T7095] ? inet_sendmsg+0x2ba/0x390 [ 134.284969][ T7095] __sock_sendmsg+0x1a6/0x270 [ 134.289667][ T7095] ____sys_sendmsg+0x525/0x7d0 [ 134.294466][ T7095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.299791][ T7095] __sys_sendmsg+0x2b0/0x3a0 [ 134.304403][ T7095] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.309583][ T7095] ? vfs_write+0x7c4/0xc90 [ 134.314057][ T7095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.320411][ T7095] ? do_syscall_64+0x100/0x230 [ 134.325203][ T7095] ? do_syscall_64+0xb6/0x230 [ 134.326928][ T7104] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 134.329921][ T7095] do_syscall_64+0xf3/0x230 [ 134.329949][ T7095] ? clear_bhb_loop+0x35/0x90 [ 134.329975][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.329996][ T7095] RIP: 0033:0x7efd3c17cef9 [ 134.330013][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.330027][ T7095] RSP: 002b:00007efd3cf90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.330047][ T7095] RAX: ffffffffffffffda RBX: 00007efd3c335f80 RCX: 00007efd3c17cef9 [ 134.330061][ T7095] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000007 [ 134.330072][ T7095] RBP: 00007efd3cf90090 R08: 0000000000000000 R09: 0000000000000000 [ 134.342528][ T7104] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 134.346947][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.404089][ T7105] xt_connbytes: Forcing CT accounting to be enabled [ 134.409145][ T7095] R13: 0000000000000000 R14: 00007efd3c335f80 R15: 00007ffd89bd30f8 [ 134.409183][ T7095] [ 134.510239][ T7104] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 134.523910][ T7107] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 134.563143][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'. [ 135.139478][ T7138] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 135.165344][ T7138] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.195391][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.654'. [ 135.325043][ T7148] FAULT_INJECTION: forcing a failure. [ 135.325043][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 135.378939][ T7148] CPU: 1 UID: 0 PID: 7148 Comm: syz.3.657 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 135.389676][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 135.399844][ T7148] Call Trace: [ 135.403138][ T7148] [ 135.406089][ T7148] dump_stack_lvl+0x241/0x360 [ 135.410812][ T7148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.416037][ T7148] ? __pfx__printk+0x10/0x10 [ 135.420691][ T7148] ? __kmalloc_noprof+0xb0/0x400 [ 135.425644][ T7148] ? __pfx___might_resched+0x10/0x10 [ 135.430934][ T7148] ? __mutex_lock+0x2ef/0xd70 [ 135.435608][ T7148] should_fail_ex+0x3b0/0x4e0 [ 135.440304][ T7148] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 135.446593][ T7148] should_failslab+0xac/0x100 [ 135.451279][ T7148] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 135.457524][ T7148] __kmalloc_noprof+0xd8/0x400 [ 135.462307][ T7148] ? __asan_memcpy+0x40/0x70 [ 135.466919][ T7148] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 135.473005][ T7148] ? dev_hard_start_xmit+0x773/0x7e0 [ 135.478299][ T7148] genl_rcv_msg+0x802/0xec0 [ 135.482801][ T7148] ? mark_lock+0x9a/0x350 [ 135.487140][ T7148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.492184][ T7148] ? __pfx_lock_acquire+0x10/0x10 [ 135.497277][ T7148] ? __pfx_ctrl_getfamily+0x10/0x10 [ 135.502499][ T7148] ? __pfx___might_resched+0x10/0x10 [ 135.507817][ T7148] netlink_rcv_skb+0x1e3/0x430 [ 135.512677][ T7148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.517705][ T7148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.523002][ T7148] ? __netlink_deliver_tap+0x77e/0x7c0 [ 135.528472][ T7148] genl_rcv+0x28/0x40 [ 135.532448][ T7148] netlink_unicast+0x7f6/0x990 [ 135.537217][ T7148] ? __pfx_netlink_unicast+0x10/0x10 [ 135.542502][ T7148] ? __virt_addr_valid+0x183/0x530 [ 135.547631][ T7148] ? __check_object_size+0x49c/0x900 [ 135.552924][ T7148] ? bpf_lsm_netlink_send+0x9/0x10 [ 135.558043][ T7148] netlink_sendmsg+0x8e4/0xcb0 [ 135.562822][ T7148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.568129][ T7148] ? aa_sock_msg_perm+0x91/0x160 [ 135.573080][ T7148] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 135.578370][ T7148] ? security_socket_sendmsg+0x87/0xb0 [ 135.584011][ T7148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.589296][ T7148] __sock_sendmsg+0x221/0x270 [ 135.593984][ T7148] __sys_sendto+0x3a4/0x4f0 [ 135.598486][ T7148] ? __pfx___sys_sendto+0x10/0x10 [ 135.603525][ T7148] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.609517][ T7148] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.615923][ T7148] ? exc_page_fault+0x590/0x8c0 [ 135.620767][ T7148] __x64_sys_sendto+0xde/0x100 [ 135.625525][ T7148] do_syscall_64+0xf3/0x230 [ 135.630023][ T7148] ? clear_bhb_loop+0x35/0x90 [ 135.634697][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.640587][ T7148] RIP: 0033:0x7f8db337ed8c [ 135.644994][ T7148] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 135.664654][ T7148] RSP: 002b:00007f8db4142ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 135.673077][ T7148] RAX: ffffffffffffffda RBX: 00007f8db4142fc0 RCX: 00007f8db337ed8c [ 135.681232][ T7148] RDX: 0000000000000020 RSI: 00007f8db4143010 RDI: 0000000000000005 [ 135.689207][ T7148] RBP: 0000000000000000 R08: 00007f8db4142f14 R09: 000000000000000c [ 135.697171][ T7148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 135.705153][ T7148] R13: 00007f8db4142f68 R14: 00007f8db4143010 R15: 0000000000000000 [ 135.713142][ T7148] [ 136.447824][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 137.179440][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 137.629202][ T7208] netlink: 'syz.2.679': attribute type 10 has an invalid length. [ 137.657432][ T7208] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 137.746114][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 137.856178][ T7220] FAULT_INJECTION: forcing a failure. [ 137.856178][ T7220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.909997][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.683'. [ 137.943171][ T7213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.948679][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.1.685 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 137.960382][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 137.971761][ T7220] Call Trace: [ 137.975065][ T7220] [ 137.978008][ T7220] dump_stack_lvl+0x241/0x360 [ 137.982706][ T7220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.987930][ T7220] ? __pfx__printk+0x10/0x10 [ 137.992551][ T7220] ? __pfx_lock_release+0x10/0x10 [ 137.997621][ T7220] should_fail_ex+0x3b0/0x4e0 [ 138.002336][ T7220] _copy_from_iter+0x1f6/0x1960 [ 138.007223][ T7220] ? __virt_addr_valid+0x183/0x530 [ 138.012351][ T7220] ? __pfx_lock_release+0x10/0x10 [ 138.017405][ T7220] ? __alloc_skb+0x28f/0x440 [ 138.022023][ T7220] ? __pfx__copy_from_iter+0x10/0x10 [ 138.027342][ T7220] ? __virt_addr_valid+0x183/0x530 [ 138.032476][ T7220] ? __virt_addr_valid+0x183/0x530 [ 138.037610][ T7220] ? __virt_addr_valid+0x45f/0x530 [ 138.042743][ T7220] ? __check_object_size+0x49c/0x900 [ 138.048146][ T7220] netlink_sendmsg+0x73d/0xcb0 [ 138.052940][ T7220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.058225][ T7220] ? __import_iovec+0x536/0x820 [ 138.063073][ T7220] ? aa_sock_msg_perm+0x91/0x160 [ 138.068010][ T7220] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.073291][ T7220] ? security_socket_sendmsg+0x87/0xb0 [ 138.078853][ T7220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.084128][ T7220] __sock_sendmsg+0x221/0x270 [ 138.088796][ T7220] ____sys_sendmsg+0x525/0x7d0 [ 138.093559][ T7220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.098847][ T7220] __sys_sendmsg+0x2b0/0x3a0 [ 138.103430][ T7220] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.108531][ T7220] ? vfs_write+0x7c4/0xc90 [ 138.112966][ T7220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.119289][ T7220] ? do_syscall_64+0x100/0x230 [ 138.124049][ T7220] ? do_syscall_64+0xb6/0x230 [ 138.128732][ T7220] do_syscall_64+0xf3/0x230 [ 138.133247][ T7220] ? clear_bhb_loop+0x35/0x90 [ 138.137939][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.143835][ T7220] RIP: 0033:0x7f324017cef9 [ 138.148262][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.167974][ T7220] RSP: 002b:00007f3240e9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.176379][ T7220] RAX: ffffffffffffffda RBX: 00007f3240335f80 RCX: 00007f324017cef9 [ 138.184340][ T7220] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 138.192405][ T7220] RBP: 00007f3240e9a090 R08: 0000000000000000 R09: 0000000000000000 [ 138.200366][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.208323][ T7220] R13: 0000000000000000 R14: 00007f3240335f80 R15: 00007ffd944da708 [ 138.216301][ T7220] [ 138.632728][ T7218] bond1 (unregistering): Released all slaves [ 138.719109][ T7227] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 138.737025][ T7227] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.782898][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 138.808727][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 138.829179][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 139.319118][ T7255] netlink: 'syz.3.697': attribute type 10 has an invalid length. [ 139.326907][ T7255] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 139.420318][ T7255] team0: Port device netdevsim0 added [ 139.452934][ T7261] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 139.491060][ T7261] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.839429][ T7274] netlink: 3 bytes leftover after parsing attributes in process `syz.1.706'. [ 139.864730][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 139.894679][ T7274] netlink: 3 bytes leftover after parsing attributes in process `syz.1.706'. [ 139.964691][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 140.590372][ T7312] FAULT_INJECTION: forcing a failure. [ 140.590372][ T7312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.609133][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.4.721 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 140.619776][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 140.629857][ T7312] Call Trace: [ 140.633160][ T7312] [ 140.636103][ T7312] dump_stack_lvl+0x241/0x360 [ 140.640845][ T7312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.646149][ T7312] ? __pfx__printk+0x10/0x10 [ 140.650867][ T7312] ? __pfx_lock_release+0x10/0x10 [ 140.655927][ T7312] ? vfs_write+0x7c4/0xc90 [ 140.660348][ T7312] should_fail_ex+0x3b0/0x4e0 [ 140.665024][ T7312] _copy_from_user+0x2f/0xe0 [ 140.669621][ T7312] __sys_bpf+0x1a4/0x810 [ 140.673976][ T7312] ? __pfx___sys_bpf+0x10/0x10 [ 140.678756][ T7312] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.684748][ T7312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.691088][ T7312] ? do_syscall_64+0x100/0x230 [ 140.695872][ T7312] __x64_sys_bpf+0x7c/0x90 [ 140.700319][ T7312] do_syscall_64+0xf3/0x230 [ 140.704847][ T7312] ? clear_bhb_loop+0x35/0x90 [ 140.709527][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.715434][ T7312] RIP: 0033:0x7f82d357cef9 [ 140.719851][ T7312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.739566][ T7312] RSP: 002b:00007f82d4450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.747978][ T7312] RAX: ffffffffffffffda RBX: 00007f82d3735f80 RCX: 00007f82d357cef9 [ 140.755945][ T7312] RDX: 0000000000000080 RSI: 0000000020000140 RDI: 0000000000000005 [ 140.763911][ T7312] RBP: 00007f82d4450090 R08: 0000000000000000 R09: 0000000000000000 [ 140.771873][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.779840][ T7312] R13: 0000000000000001 R14: 00007f82d3735f80 R15: 00007ffd9aba29e8 [ 140.787812][ T7312] [ 141.287733][ T7327] wg2: entered promiscuous mode [ 141.303167][ T7327] wg2: entered allmulticast mode [ 141.317689][ T7328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.409388][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.436723][ T7328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.315873][ T7363] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 142.394059][ T7363] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 142.948538][ T7385] __nla_validate_parse: 5 callbacks suppressed [ 142.968851][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 143.175015][ T7389] warn_alloc: 5 callbacks suppressed [ 143.175033][ T7389] syz.4.748: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 143.248161][ T7389] CPU: 1 UID: 0 PID: 7389 Comm: syz.4.748 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 143.258811][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 143.268893][ T7389] Call Trace: [ 143.272191][ T7389] [ 143.275134][ T7389] dump_stack_lvl+0x241/0x360 [ 143.276949][ T7392] netlink: 5 bytes leftover after parsing attributes in process `syz.2.749'. [ 143.279822][ T7389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.279854][ T7389] ? __pfx__printk+0x10/0x10 [ 143.298424][ T7389] ? __rcu_read_unlock+0xa1/0x110 [ 143.303485][ T7389] warn_alloc+0x278/0x410 [ 143.307846][ T7389] ? stack_depot_save_flags+0x29/0x830 [ 143.313333][ T7389] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 143.319440][ T7389] ? __pfx_warn_alloc+0x10/0x10 [ 143.324324][ T7389] ? kasan_save_track+0x3f/0x80 [ 143.329204][ T7389] ? __kasan_kmalloc+0x98/0xb0 [ 143.334004][ T7389] ? xsk_setsockopt+0x4ea/0x950 [ 143.337264][ T7392] netlink: 5 bytes leftover after parsing attributes in process `syz.2.749'. [ 143.338938][ T7389] ? do_sock_setsockopt+0x3af/0x720 [ 143.338967][ T7389] ? __sys_setsockopt+0x1ae/0x250 [ 143.338987][ T7389] ? __x64_sys_setsockopt+0xb5/0xd0 [ 143.339007][ T7389] ? do_syscall_64+0xf3/0x230 [ 143.367793][ T7389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.373876][ T7389] __vmalloc_node_range_noprof+0x126/0x1400 [ 143.379788][ T7389] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.386111][ T7389] ? __kasan_kmalloc+0x98/0xb0 [ 143.390872][ T7389] ? xskq_create+0x54/0x170 [ 143.395378][ T7389] vmalloc_user_noprof+0x74/0x80 [ 143.400308][ T7389] ? xskq_create+0xb6/0x170 [ 143.404806][ T7389] xskq_create+0xb6/0x170 [ 143.409131][ T7389] xsk_init_queue+0xa1/0x100 [ 143.413718][ T7389] xsk_setsockopt+0x4ea/0x950 [ 143.418391][ T7389] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.423587][ T7389] ? __pfx_lock_acquire+0x10/0x10 [ 143.428609][ T7389] ? aa_sock_opt_perm+0x79/0x120 [ 143.433542][ T7389] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 143.439084][ T7389] ? security_socket_setsockopt+0x87/0xb0 [ 143.444804][ T7389] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.450005][ T7389] do_sock_setsockopt+0x3af/0x720 [ 143.455075][ T7389] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.460632][ T7389] ? __fget_files+0x29/0x470 [ 143.465222][ T7389] ? __fget_files+0x3f6/0x470 [ 143.469903][ T7389] __sys_setsockopt+0x1ae/0x250 [ 143.474751][ T7389] __x64_sys_setsockopt+0xb5/0xd0 [ 143.479771][ T7389] do_syscall_64+0xf3/0x230 [ 143.484268][ T7389] ? clear_bhb_loop+0x35/0x90 [ 143.488946][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.494838][ T7389] RIP: 0033:0x7f82d357cef9 [ 143.499248][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.518846][ T7389] RSP: 002b:00007f82d4450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.527257][ T7389] RAX: ffffffffffffffda RBX: 00007f82d3735f80 RCX: 00007f82d357cef9 [ 143.535220][ T7389] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 143.543181][ T7389] RBP: 00007f82d35ef046 R08: 0000000000000004 R09: 0000000000000000 [ 143.551147][ T7389] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.559112][ T7389] R13: 0000000000000000 R14: 00007f82d3735f80 R15: 00007ffd9aba29e8 [ 143.567109][ T7389] [ 143.612017][ T7389] Mem-Info: [ 143.615401][ T7389] active_anon:5466 inactive_anon:0 isolated_anon:0 [ 143.615401][ T7389] active_file:1671 inactive_file:38208 isolated_file:0 [ 143.615401][ T7389] unevictable:768 dirty:294 writeback:0 [ 143.615401][ T7389] slab_reclaimable:8807 slab_unreclaimable:94575 [ 143.615401][ T7389] mapped:21193 shmem:1234 pagetables:754 [ 143.615401][ T7389] sec_pagetables:0 bounce:0 [ 143.615401][ T7389] kernel_misc_reclaimable:0 [ 143.615401][ T7389] free:1361318 free_pcp:453 free_cma:0 [ 143.662506][ T7389] Node 0 active_anon:22164kB inactive_anon:0kB active_file:6684kB inactive_file:152748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84772kB dirty:1176kB writeback:0kB shmem:3400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10052kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no [ 143.686095][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.750'. [ 143.699508][ T7389] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 143.757172][ T7389] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.826306][ T7389] lowmem_reserve[]: 0 2467 2468 0 0 [ 143.885827][ T7389] Node 0 DMA32 free:1478712kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:22328kB inactive_anon:0kB active_file:6684kB inactive_file:151928kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:1780kB local_pcp:1072kB free_cma:0kB [ 144.011066][ T7389] lowmem_reserve[]: 0 0 0 0 0 [ 144.015864][ T7389] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 144.088833][ T7389] lowmem_reserve[]: 0 0 0 0 0 [ 144.093691][ T7389] Node 1 Normal free:3951476kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.128770][ T7389] lowmem_reserve[]: 0 0 0 0 0 [ 144.137036][ T7389] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.193332][ T7389] Node 0 DMA32: 60*4kB (UME) 18*8kB (ME) 142*16kB (UE) 78*32kB (UE) 48*64kB (UME) 64*128kB (UME) 36*256kB (UME) 14*512kB (UME) 3*1024kB (M) 2*2048kB (M) 349*4096kB (UM) = 1469472kB [ 144.212494][ T7389] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 144.225855][ T7389] Node 1 Normal: 3*4kB (UM) 9*8kB (UM) 10*16kB (UM) 8*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 7*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3951476kB [ 144.249230][ T7407] netlink: 'syz.3.754': attribute type 10 has an invalid length. [ 144.257208][ T7389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.291477][ T7389] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.320307][ T7389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.350010][ T7389] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.366850][ T7389] 41116 total pagecache pages [ 144.392117][ T7389] 0 pages in swap cache [ 144.402343][ T7389] Free swap = 124996kB [ 144.416686][ T7389] Total swap = 124996kB [ 144.432137][ T7389] 2097051 pages RAM [ 144.453393][ T7389] 0 pages HighMem/MovableOnly [ 144.468767][ T7389] 426967 pages reserved [ 144.472968][ T7389] 0 pages cma reserved [ 144.905852][ T7420] netlink: 'syz.4.760': attribute type 2 has an invalid length. [ 144.933961][ T7425] netlink: 104 bytes leftover after parsing attributes in process `syz.3.762'. [ 145.216409][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 146.415871][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 146.469511][ T7448] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 146.481906][ T7448] bond1: (slave vcan1): Error -95 calling set_mac_address [ 146.530063][ T7467] netlink: 76 bytes leftover after parsing attributes in process `syz.3.769'. [ 147.042499][ T7487] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 147.072777][ T7488] netlink: 168 bytes leftover after parsing attributes in process `syz.1.780'. [ 147.098770][ T7488] netlink: 'syz.1.780': attribute type 2 has an invalid length. [ 147.106446][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.1.780'. [ 147.615495][ T7511] FAULT_INJECTION: forcing a failure. [ 147.615495][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 147.643639][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.0.789 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 147.654282][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 147.664357][ T7511] Call Trace: [ 147.667653][ T7511] [ 147.670598][ T7511] dump_stack_lvl+0x241/0x360 [ 147.675305][ T7511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.680529][ T7511] ? __pfx__printk+0x10/0x10 [ 147.685141][ T7511] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 147.691157][ T7511] ? __pfx___might_resched+0x10/0x10 [ 147.696472][ T7511] should_fail_ex+0x3b0/0x4e0 [ 147.701182][ T7511] should_failslab+0xac/0x100 [ 147.705896][ T7511] ? __alloc_skb+0x1c3/0x440 [ 147.710518][ T7511] kmem_cache_alloc_node_noprof+0x71/0x320 [ 147.716349][ T7511] __alloc_skb+0x1c3/0x440 [ 147.720776][ T7511] ? __pfx___alloc_skb+0x10/0x10 [ 147.725712][ T7511] ? netlink_autobind+0xd6/0x2f0 [ 147.730643][ T7511] ? netlink_autobind+0x2b0/0x2f0 [ 147.735659][ T7511] netlink_sendmsg+0x638/0xcb0 [ 147.740430][ T7511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.745793][ T7511] ? __import_iovec+0x536/0x820 [ 147.750638][ T7511] ? aa_sock_msg_perm+0x91/0x160 [ 147.755572][ T7511] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 147.760863][ T7511] ? security_socket_sendmsg+0x87/0xb0 [ 147.766337][ T7511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.771614][ T7511] __sock_sendmsg+0x221/0x270 [ 147.776286][ T7511] ____sys_sendmsg+0x525/0x7d0 [ 147.781050][ T7511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.786339][ T7511] __sys_sendmsg+0x2b0/0x3a0 [ 147.790927][ T7511] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.796033][ T7511] ? vfs_write+0x7c4/0xc90 [ 147.800470][ T7511] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.806791][ T7511] ? do_syscall_64+0x100/0x230 [ 147.811551][ T7511] ? do_syscall_64+0xb6/0x230 [ 147.816226][ T7511] do_syscall_64+0xf3/0x230 [ 147.820723][ T7511] ? clear_bhb_loop+0x35/0x90 [ 147.825398][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.831289][ T7511] RIP: 0033:0x7efd3c17cef9 [ 147.835693][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.855292][ T7511] RSP: 002b:00007efd3cf90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.863703][ T7511] RAX: ffffffffffffffda RBX: 00007efd3c335f80 RCX: 00007efd3c17cef9 [ 147.871666][ T7511] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 147.879627][ T7511] RBP: 00007efd3cf90090 R08: 0000000000000000 R09: 0000000000000000 [ 147.887597][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.895554][ T7511] R13: 0000000000000000 R14: 00007efd3c335f80 R15: 00007ffd89bd30f8 [ 147.903528][ T7511] [ 148.121255][ T7523] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 148.265455][ T7525] __nla_validate_parse: 3 callbacks suppressed [ 148.265474][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.792'. [ 148.339629][ T7527] netlink: 168 bytes leftover after parsing attributes in process `syz.4.793'. [ 148.370995][ T7527] netlink: 'syz.4.793': attribute type 2 has an invalid length. [ 148.381131][ T7527] netlink: 60 bytes leftover after parsing attributes in process `syz.4.793'. [ 148.512909][ T7531] netlink: 144 bytes leftover after parsing attributes in process `syz.1.794'. [ 149.192068][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.805'. [ 149.399245][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 149.421184][ T7562] netlink: 'syz.1.807': attribute type 10 has an invalid length. [ 149.438781][ T7562] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 149.481677][ T7562] team0: Port device netdevsim0 removed [ 149.504273][ T7562] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.622675][ T7571] netlink: 'syz.3.809': attribute type 1 has an invalid length. [ 149.635957][ T7571] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.809'. [ 150.236696][ T7579] openvswitch: netlink: Duplicate key (type 3). [ 150.494838][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 150.495758][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 150.669467][ T7591] netlink: 4156 bytes leftover after parsing attributes in process `syz.3.818'. [ 150.803822][ T7598] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 150.838880][ T7602] FAULT_INJECTION: forcing a failure. [ 150.838880][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.878682][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.4.820 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 150.889331][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 150.899405][ T7602] Call Trace: [ 150.902701][ T7602] [ 150.905652][ T7602] dump_stack_lvl+0x241/0x360 [ 150.910359][ T7602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.915587][ T7602] ? __pfx__printk+0x10/0x10 [ 150.920212][ T7602] ? __pfx_lock_release+0x10/0x10 [ 150.925272][ T7602] should_fail_ex+0x3b0/0x4e0 [ 150.929980][ T7602] _copy_from_user+0x2f/0xe0 [ 150.934596][ T7602] copy_msghdr_from_user+0xae/0x680 [ 150.939874][ T7602] ? __pfx___might_resched+0x10/0x10 [ 150.945179][ T7602] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 150.950991][ T7602] ? __might_fault+0xaa/0x120 [ 150.955759][ T7602] do_recvmmsg+0x40f/0xae0 [ 150.960181][ T7602] ? __pfx_lock_release+0x10/0x10 [ 150.965206][ T7602] ? __pfx_do_recvmmsg+0x10/0x10 [ 150.970160][ T7602] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 150.976054][ T7602] ? ksys_write+0x23e/0x2c0 [ 150.980547][ T7602] ? __pfx_lock_release+0x10/0x10 [ 150.985581][ T7602] ? vfs_write+0x7c4/0xc90 [ 150.989996][ T7602] ? __mutex_unlock_slowpath+0x21d/0x750 [ 150.995657][ T7602] ? __fget_files+0x3f6/0x470 [ 151.000357][ T7602] __x64_sys_recvmmsg+0x199/0x250 [ 151.005405][ T7602] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.011011][ T7602] ? do_syscall_64+0x100/0x230 [ 151.015893][ T7602] ? do_syscall_64+0xb6/0x230 [ 151.020587][ T7602] do_syscall_64+0xf3/0x230 [ 151.025088][ T7602] ? clear_bhb_loop+0x35/0x90 [ 151.029771][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.035666][ T7602] RIP: 0033:0x7f82d357cef9 [ 151.040080][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.059700][ T7602] RSP: 002b:00007f82d442f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.068113][ T7602] RAX: ffffffffffffffda RBX: 00007f82d3736058 RCX: 00007f82d357cef9 [ 151.076076][ T7602] RDX: 00000000000f4240 RSI: 0000000020000a80 RDI: 0000000000000003 [ 151.084125][ T7602] RBP: 00007f82d442f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.092091][ T7602] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 151.100057][ T7602] R13: 0000000000000001 R14: 00007f82d3736058 R15: 00007ffd9aba29e8 [ 151.108035][ T7602] [ 151.427396][ T7614] xt_l2tp: wrong L2TP version: 6 [ 151.440383][ T7614] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 153.371944][ T7668] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 153.614354][ T7677] xt_TCPMSS: Only works on TCP SYN packets [ 154.161657][ T7699] xt_HMARK: spi-set and port-set can't be combined [ 154.181336][ T7700] Bluetooth: hci3: service_discovery: expected 1988 bytes, got 7 bytes [ 154.191044][ T7699] netlink: 'syz.1.860': attribute type 2 has an invalid length. [ 154.194638][ T7700] __nla_validate_parse: 6 callbacks suppressed [ 154.194653][ T7700] netlink: 96 bytes leftover after parsing attributes in process `syz.4.861'. [ 154.257275][ T7699] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 154.475395][ T7711] netlink: 168 bytes leftover after parsing attributes in process `syz.0.866'. [ 154.499415][ T7711] netlink: 'syz.0.866': attribute type 2 has an invalid length. [ 154.542087][ T7711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'. [ 154.670066][ T7721] netlink: 168 bytes leftover after parsing attributes in process `syz.3.870'. [ 154.689810][ T7721] netlink: 'syz.3.870': attribute type 2 has an invalid length. [ 154.723870][ T7721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.870'. [ 154.926596][ T7734] FAULT_INJECTION: forcing a failure. [ 154.926596][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 154.955727][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.0.876 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 154.966379][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 154.976630][ T7734] Call Trace: [ 154.979928][ T7734] [ 154.982888][ T7734] dump_stack_lvl+0x241/0x360 [ 154.987569][ T7734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.992768][ T7734] ? __pfx__printk+0x10/0x10 [ 154.997400][ T7734] should_fail_ex+0x3b0/0x4e0 [ 155.002123][ T7734] should_failslab+0xac/0x100 [ 155.006832][ T7734] ? sctp_add_bind_addr+0x89/0x3a0 [ 155.011979][ T7734] __kmalloc_cache_noprof+0x6c/0x2c0 [ 155.017299][ T7734] sctp_add_bind_addr+0x89/0x3a0 [ 155.022274][ T7734] sctp_copy_local_addr_list+0x311/0x500 [ 155.027940][ T7734] ? sctp_copy_local_addr_list+0xab/0x500 [ 155.029485][ T7741] raw_sendmsg: syz.2.875 forgot to set AF_INET. Fix it! [ 155.033674][ T7734] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 155.041080][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.877'. [ 155.046759][ T7734] ? sctp_v6_is_any+0x60/0x70 [ 155.060306][ T7734] sctp_bind_addr_copy+0xad/0x3b0 [ 155.065377][ T7734] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 155.071744][ T7734] sctp_connect_new_asoc+0x2f3/0x6c0 [ 155.077066][ T7734] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 155.082900][ T7734] ? sctp_sendmsg+0xbb9/0x3520 [ 155.087700][ T7734] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 155.093278][ T7734] ? security_sctp_bind_connect+0x90/0xb0 [ 155.099034][ T7734] sctp_sendmsg+0x219a/0x3520 [ 155.103768][ T7734] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.108845][ T7734] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.113739][ T7734] ? inet_sendmsg+0x330/0x390 [ 155.118456][ T7734] __sock_sendmsg+0x1a6/0x270 [ 155.123171][ T7734] __sys_sendto+0x3a4/0x4f0 [ 155.127719][ T7734] ? __pfx___sys_sendto+0x10/0x10 [ 155.132817][ T7734] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.138841][ T7734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.145213][ T7734] __x64_sys_sendto+0xde/0x100 [ 155.150014][ T7734] do_syscall_64+0xf3/0x230 [ 155.154586][ T7734] ? clear_bhb_loop+0x35/0x90 [ 155.159291][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.165245][ T7734] RIP: 0033:0x7efd3c17cef9 [ 155.169684][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.189404][ T7734] RSP: 002b:00007efd3cf90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 155.197850][ T7734] RAX: ffffffffffffffda RBX: 00007efd3c335f80 RCX: 00007efd3c17cef9 [ 155.205841][ T7734] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000005 [ 155.213820][ T7734] RBP: 00007efd3cf90090 R08: 0000000020000040 R09: 000000000000001c [ 155.221786][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.229747][ T7734] R13: 0000000000000000 R14: 00007efd3c335f80 R15: 00007ffd89bd30f8 [ 155.237748][ T7734] [ 155.269143][ T7735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.875'. [ 155.646948][ T7762] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 156.442796][ T7799] netlink: 168 bytes leftover after parsing attributes in process `syz.0.897'. [ 156.479030][ T7799] netlink: 'syz.0.897': attribute type 2 has an invalid length. [ 156.516338][ T7799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.897'. [ 156.586984][ T7806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.900'. [ 156.782772][ T7814] warn_alloc: 2 callbacks suppressed [ 156.782791][ T7814] syz.4.903: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 156.839659][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.4.903 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 156.850317][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 156.860388][ T7814] Call Trace: [ 156.863671][ T7814] [ 156.866590][ T7814] dump_stack_lvl+0x241/0x360 [ 156.871287][ T7814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.876487][ T7814] ? __pfx__printk+0x10/0x10 [ 156.881072][ T7814] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 156.887476][ T7814] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 156.893970][ T7814] warn_alloc+0x278/0x410 [ 156.898328][ T7814] ? stack_depot_save_flags+0x29/0x830 [ 156.903792][ T7814] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 156.909886][ T7814] ? __pfx_warn_alloc+0x10/0x10 [ 156.914769][ T7814] ? kasan_save_track+0x3f/0x80 [ 156.919724][ T7814] ? __kasan_kmalloc+0x98/0xb0 [ 156.924515][ T7814] ? xsk_setsockopt+0x4ea/0x950 [ 156.929358][ T7814] ? do_sock_setsockopt+0x3af/0x720 [ 156.934546][ T7814] ? __sys_setsockopt+0x1ae/0x250 [ 156.939560][ T7814] ? __x64_sys_setsockopt+0xb5/0xd0 [ 156.944750][ T7814] ? do_syscall_64+0xf3/0x230 [ 156.949433][ T7814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.955529][ T7814] __vmalloc_node_range_noprof+0x126/0x1400 [ 156.961447][ T7814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.967773][ T7814] ? __kasan_kmalloc+0x98/0xb0 [ 156.972543][ T7814] ? xskq_create+0x54/0x170 [ 156.977044][ T7814] vmalloc_user_noprof+0x74/0x80 [ 156.981998][ T7814] ? xskq_create+0xb6/0x170 [ 156.986496][ T7814] xskq_create+0xb6/0x170 [ 156.990912][ T7814] xsk_init_queue+0xa1/0x100 [ 156.995495][ T7814] xsk_setsockopt+0x4ea/0x950 [ 157.000191][ T7814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.005383][ T7814] ? __pfx_lock_acquire+0x10/0x10 [ 157.010406][ T7814] ? aa_sock_opt_perm+0x79/0x120 [ 157.015339][ T7814] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 157.020878][ T7814] ? security_socket_setsockopt+0x87/0xb0 [ 157.026595][ T7814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.031785][ T7814] do_sock_setsockopt+0x3af/0x720 [ 157.036984][ T7814] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 157.042520][ T7814] ? __fget_files+0x29/0x470 [ 157.047104][ T7814] ? __fget_files+0x3f6/0x470 [ 157.051783][ T7814] __sys_setsockopt+0x1ae/0x250 [ 157.056631][ T7814] __x64_sys_setsockopt+0xb5/0xd0 [ 157.061647][ T7814] do_syscall_64+0xf3/0x230 [ 157.066143][ T7814] ? clear_bhb_loop+0x35/0x90 [ 157.070821][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.076709][ T7814] RIP: 0033:0x7f82d357cef9 [ 157.081120][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.100716][ T7814] RSP: 002b:00007f82d4450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.109123][ T7814] RAX: ffffffffffffffda RBX: 00007f82d3735f80 RCX: 00007f82d357cef9 [ 157.117086][ T7814] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 157.125045][ T7814] RBP: 00007f82d35ef046 R08: 0000000000000004 R09: 0000000000000000 [ 157.133009][ T7814] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.140968][ T7814] R13: 0000000000000000 R14: 00007f82d3735f80 R15: 00007ffd9aba29e8 [ 157.148943][ T7814] [ 157.192607][ T7814] Mem-Info: [ 157.200405][ T7814] active_anon:4021 inactive_anon:0 isolated_anon:0 [ 157.200405][ T7814] active_file:1671 inactive_file:38212 isolated_file:0 [ 157.200405][ T7814] unevictable:768 dirty:206 writeback:0 [ 157.200405][ T7814] slab_reclaimable:8778 slab_unreclaimable:96038 [ 157.200405][ T7814] mapped:21693 shmem:1244 pagetables:715 [ 157.200405][ T7814] sec_pagetables:0 bounce:0 [ 157.200405][ T7814] kernel_misc_reclaimable:0 [ 157.200405][ T7814] free:1354465 free_pcp:590 free_cma:0 [ 157.307882][ T7814] Node 0 active_anon:15972kB inactive_anon:0kB active_file:6684kB inactive_file:152764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86780kB dirty:824kB writeback:0kB shmem:3440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10248kB pagetables:2972kB sec_pagetables:0kB all_unreclaimable? no [ 157.343766][ T7814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 157.450334][ T7814] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.523373][ T7814] lowmem_reserve[]: 0 2467 2468 0 0 [ 157.562746][ T7814] Node 0 DMA32 free:1453120kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:16036kB inactive_anon:0kB active_file:6684kB inactive_file:151944kB unevictable:1536kB writepending:824kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:2028kB local_pcp:1492kB free_cma:0kB [ 157.624422][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 157.636307][ T7814] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 157.690195][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 157.694991][ T7814] Node 1 Normal free:3950972kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 157.749906][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 157.754703][ T7814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.770346][ T7844] FAULT_INJECTION: forcing a failure. [ 157.770346][ T7844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.808362][ T7844] CPU: 0 UID: 0 PID: 7844 Comm: syz.2.912 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 157.814118][ T7814] Node 0 [ 157.818996][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 157.819043][ T7844] Call Trace: [ 157.819052][ T7844] [ 157.819061][ T7844] dump_stack_lvl+0x241/0x360 [ 157.819092][ T7844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.819112][ T7844] ? __pfx__printk+0x10/0x10 [ 157.819135][ T7844] ? __pfx_lock_release+0x10/0x10 [ 157.819167][ T7844] should_fail_ex+0x3b0/0x4e0 [ 157.819206][ T7844] _copy_to_iter+0x1f6/0x1960 [ 157.819226][ T7844] ? __virt_addr_valid+0x183/0x530 [ 157.819247][ T7844] ? __pfx_lock_release+0x10/0x10 [ 157.819270][ T7844] ? __might_fault+0xaa/0x120 [ 157.819294][ T7844] ? __might_fault+0xc6/0x120 [ 157.819321][ T7844] ? _copy_to_iter+0x26b/0x1960 [ 157.819341][ T7844] ? __pfx__copy_to_iter+0x10/0x10 [ 157.819365][ T7844] ? __virt_addr_valid+0x183/0x530 [ 157.819382][ T7844] ? __virt_addr_valid+0x183/0x530 [ 157.830263][ T7814] DMA32: [ 157.832350][ T7844] ? __virt_addr_valid+0x45f/0x530 [ 157.835623][ T7814] 294*4kB [ 157.838539][ T7844] ? __phys_addr_symbol+0x2f/0x70 [ 157.863696][ T7814] (UME) [ 157.867737][ T7844] ? __check_object_size+0x49c/0x900 [ 157.867778][ T7844] __skb_datagram_iter+0x112/0x890 [ 157.879849][ T7814] 304*8kB [ 157.882615][ T7844] ? __virt_addr_valid+0x183/0x530 [ 157.897602][ T7814] (UME) [ 157.902304][ T7844] ? __virt_addr_valid+0x45f/0x530 [ 157.902329][ T7844] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 157.902355][ T7844] ? __phys_addr_symbol+0x2f/0x70 [ 157.902371][ T7844] ? __check_object_size+0x49c/0x900 [ 157.902398][ T7844] __skb_datagram_iter+0x65e/0x890 [ 157.902424][ T7844] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 157.902454][ T7844] skb_copy_datagram_iter+0xd1/0x250 [ 157.935595][ T7814] 465*16kB [ 157.936907][ T7844] tipc_recvmsg+0x7ec/0x13c0 [ 157.936957][ T7844] ? __pfx_tipc_recvmsg+0x10/0x10 [ 157.936990][ T7844] ? __pfx___might_resched+0x10/0x10 [ 157.961826][ T7814] (UME) [ 157.963690][ T7844] ? aa_sock_msg_perm+0x91/0x160 [ 157.972385][ T7847] netlink: 'syz.0.914': attribute type 2 has an invalid length. [ 157.974068][ T7844] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 157.988719][ T7814] 138*32kB [ 157.992649][ T7844] ? security_socket_recvmsg+0x90/0xb0 [ 157.992681][ T7844] ? __pfx_tipc_recvmsg+0x10/0x10 [ 158.037392][ T7844] sock_recvmsg+0x22f/0x280 [ 158.041903][ T7844] ____sys_recvmsg+0x1db/0x470 [ 158.046675][ T7844] ? __pfx_____sys_recvmsg+0x10/0x10 [ 158.051976][ T7844] do_recvmmsg+0x474/0xae0 [ 158.056393][ T7844] ? __pfx_lock_release+0x10/0x10 [ 158.061416][ T7844] ? __pfx_do_recvmmsg+0x10/0x10 [ 158.066390][ T7844] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 158.072308][ T7844] ? ksys_write+0x23e/0x2c0 [ 158.076824][ T7844] ? __pfx_lock_release+0x10/0x10 [ 158.081861][ T7844] ? vfs_write+0x7c4/0xc90 [ 158.086297][ T7844] ? __mutex_unlock_slowpath+0x21d/0x750 [ 158.091940][ T7844] ? __fget_files+0x3f6/0x470 [ 158.096627][ T7844] __x64_sys_recvmmsg+0x199/0x250 [ 158.101661][ T7844] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 158.107209][ T7844] ? do_syscall_64+0x100/0x230 [ 158.111974][ T7844] ? do_syscall_64+0xb6/0x230 [ 158.116644][ T7844] do_syscall_64+0xf3/0x230 [ 158.121160][ T7844] ? clear_bhb_loop+0x35/0x90 [ 158.125991][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.131888][ T7844] RIP: 0033:0x7f683537cef9 [ 158.136317][ T7844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.156188][ T7844] RSP: 002b:00007f68360b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 158.164604][ T7844] RAX: ffffffffffffffda RBX: 00007f6835535f80 RCX: 00007f683537cef9 [ 158.172609][ T7844] RDX: 0000000000000001 RSI: 0000000020002dc0 RDI: 0000000000000003 [ 158.180665][ T7844] RBP: 00007f68360b9090 R08: 0000000000000000 R09: 0000000000000000 [ 158.188628][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.196588][ T7844] R13: 0000000000000000 R14: 00007f6835535f80 R15: 00007fff2dc414b8 [ 158.204570][ T7844] [ 158.218926][ T7814] (UME) 103*64kB (UME) 75*128kB (UME) 40*256kB (UME) 18*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 340*4096kB (UM) = 1453992kB [ 158.248238][ T7814] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 158.271285][ T7814] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 6*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 7*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3951224kB [ 158.305358][ T7814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.323782][ T7814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.340354][ T7814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.383728][ T7814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.397302][ T7814] 41131 total pagecache pages [ 158.403632][ T7814] 0 pages in swap cache [ 158.421077][ T7814] Free swap = 124996kB [ 158.439197][ T7814] Total swap = 124996kB [ 158.443474][ T7814] 2097051 pages RAM [ 158.447410][ T7814] 0 pages HighMem/MovableOnly [ 158.461832][ T7814] 426967 pages reserved [ 158.466587][ T7814] 0 pages cma reserved [ 158.493341][ T7859] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 158.831338][ T7875] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 159.051016][ T2584] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 159.208890][ T7898] netlink: 'syz.4.931': attribute type 10 has an invalid length. [ 159.246347][ T7900] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 159.282785][ T7900] batman_adv: batadv0: Adding interface: team0 [ 159.308852][ T7900] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.353638][ T7900] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 159.373379][ T7905] __nla_validate_parse: 5 callbacks suppressed [ 159.373399][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'. [ 159.403918][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.933'. [ 159.836273][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.943'. [ 160.066474][ T7938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.946'. [ 160.265733][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.947'. [ 160.305320][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.947'. [ 160.321831][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.944'. [ 160.728288][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 160.783564][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 160.818408][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 161.004077][ T7972] FAULT_INJECTION: forcing a failure. [ 161.004077][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 161.017343][ T7972] CPU: 1 UID: 0 PID: 7972 Comm: syz.2.956 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 161.027960][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 161.038052][ T7972] Call Trace: [ 161.041343][ T7972] [ 161.044293][ T7972] dump_stack_lvl+0x241/0x360 [ 161.049086][ T7972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.054311][ T7972] ? __pfx__printk+0x10/0x10 [ 161.058934][ T7972] ? __pfx_lock_acquire+0x10/0x10 [ 161.063996][ T7972] should_fail_ex+0x3b0/0x4e0 [ 161.068714][ T7972] ? __sigqueue_alloc+0x42e/0x540 [ 161.073898][ T7972] should_failslab+0xac/0x100 [ 161.078601][ T7972] ? __sigqueue_alloc+0x42e/0x540 [ 161.083649][ T7972] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 161.089062][ T7972] __sigqueue_alloc+0x42e/0x540 [ 161.093955][ T7972] __send_signal_locked+0x22f/0xdc0 [ 161.099186][ T7972] ? __lock_task_sighand+0x29/0x2d0 [ 161.104397][ T7972] group_send_sig_info+0x292/0x310 [ 161.109504][ T7972] ? __pfx_group_send_sig_info+0x10/0x10 [ 161.115124][ T7972] ? __pfx_lock_release+0x10/0x10 [ 161.120159][ T7972] bpf_send_signal_common+0x2dd/0x430 [ 161.125530][ T7972] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 161.131425][ T7972] ? bpf_trace_run10+0x330/0x680 [ 161.136383][ T7972] bpf_send_signal+0x19/0x30 [ 161.140964][ T7972] bpf_prog_c3f41664225ce077+0x22/0x29 [ 161.146407][ T7972] bpf_trace_run10+0x420/0x680 [ 161.151271][ T7972] ? __pfx_bpf_trace_run10+0x10/0x10 [ 161.156576][ T7972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 161.162561][ T7972] ? bpf_map_alloc_percpu+0xdc/0x1d0 [ 161.167847][ T7972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.173812][ T7972] ? bpf_map_alloc_percpu+0xdc/0x1d0 [ 161.179084][ T7972] __bpf_trace_percpu_alloc_percpu+0x4e/0x70 [ 161.185050][ T7972] ? bpf_map_alloc_percpu+0xdc/0x1d0 [ 161.190328][ T7972] pcpu_alloc_noprof+0x1519/0x16e0 [ 161.195453][ T7972] bpf_map_alloc_percpu+0xdc/0x1d0 [ 161.200551][ T7972] prealloc_init+0x244/0x840 [ 161.205136][ T7972] htab_map_alloc+0x86e/0xe70 [ 161.209806][ T7972] map_create+0x90c/0x1200 [ 161.214205][ T7972] ? security_bpf+0x87/0xb0 [ 161.218690][ T7972] __sys_bpf+0x6d1/0x810 [ 161.222918][ T7972] ? __pfx___sys_bpf+0x10/0x10 [ 161.227675][ T7972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 161.233665][ T7972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.240002][ T7972] ? do_syscall_64+0x100/0x230 [ 161.244807][ T7972] __x64_sys_bpf+0x7c/0x90 [ 161.249307][ T7972] do_syscall_64+0xf3/0x230 [ 161.253808][ T7972] ? clear_bhb_loop+0x35/0x90 [ 161.258476][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.264352][ T7972] RIP: 0033:0x7f683537cef9 [ 161.268838][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.288444][ T7972] RSP: 002b:00007f68360b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.296841][ T7972] RAX: ffffffffffffffda RBX: 00007f6835535f80 RCX: 00007f683537cef9 [ 161.304795][ T7972] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000000 [ 161.312747][ T7972] RBP: 00007f68360b9090 R08: 0000000000000000 R09: 0000000000000000 [ 161.320783][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.328732][ T7972] R13: 0000000000000000 R14: 00007f6835535f80 R15: 00007fff2dc414b8 [ 161.336697][ T7972] [ 161.649944][ T7989] netlink: 'syz.0.964': attribute type 2 has an invalid length. [ 161.879288][ T7997] tipc: Started in network mode [ 161.888764][ T7997] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 161.911385][ T7997] tipc: Enabled bearer , priority 10 [ 162.278951][ T8017] netlink: 'syz.2.977': attribute type 2 has an invalid length. [ 162.534904][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.549079][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.569172][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.034189][ T5288] tipc: Node number set to 4269801491 [ 163.427230][ T8057] netlink: 'syz.1.992': attribute type 2 has an invalid length. [ 163.541416][ T8059] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 163.622773][ T2584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.655882][ T2584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.065965][ T8086] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 164.089437][ T8085] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 164.137478][ T8085] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 164.176222][ T8085] bridge0: port 3(syz_tun) entered blocking state [ 164.207938][ T8085] bridge0: port 3(syz_tun) entered disabled state [ 164.224175][ T8085] syz_tun: entered allmulticast mode [ 164.224755][ T8095] FAULT_INJECTION: forcing a failure. [ 164.224755][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 164.236430][ T8085] syz_tun: entered promiscuous mode [ 164.256960][ T8085] bridge0: port 3(syz_tun) entered blocking state [ 164.263599][ T8085] bridge0: port 3(syz_tun) entered forwarding state [ 164.279229][ T8086] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 164.282532][ T8095] CPU: 1 UID: 0 PID: 8095 Comm: syz.3.1007 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 164.297759][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 164.307834][ T8095] Call Trace: [ 164.311136][ T8095] [ 164.314083][ T8095] dump_stack_lvl+0x241/0x360 [ 164.318788][ T8095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.324011][ T8095] ? __pfx__printk+0x10/0x10 [ 164.328620][ T8095] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 164.334620][ T8095] ? __pfx___might_resched+0x10/0x10 [ 164.339937][ T8095] should_fail_ex+0x3b0/0x4e0 [ 164.344646][ T8095] should_failslab+0xac/0x100 [ 164.349329][ T8095] ? __alloc_skb+0x1c3/0x440 [ 164.353910][ T8095] kmem_cache_alloc_node_noprof+0x71/0x320 [ 164.359731][ T8095] __alloc_skb+0x1c3/0x440 [ 164.364167][ T8095] ? __pfx___alloc_skb+0x10/0x10 [ 164.369101][ T8095] ? netlink_ack_tlv_len+0x6e/0x200 [ 164.374290][ T8095] netlink_ack+0x13f/0xa30 [ 164.378694][ T8095] ? __pfx_lock_acquire+0x10/0x10 [ 164.383710][ T8095] ? __pfx_ctrl_getfamily+0x10/0x10 [ 164.388937][ T8095] netlink_rcv_skb+0x262/0x430 [ 164.393693][ T8095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.398717][ T8095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.404002][ T8095] ? __netlink_deliver_tap+0x77e/0x7c0 [ 164.409552][ T8095] genl_rcv+0x28/0x40 [ 164.413527][ T8095] netlink_unicast+0x7f6/0x990 [ 164.418291][ T8095] ? __pfx_netlink_unicast+0x10/0x10 [ 164.423655][ T8095] ? __virt_addr_valid+0x183/0x530 [ 164.428864][ T8095] ? __check_object_size+0x49c/0x900 [ 164.434178][ T8095] ? bpf_lsm_netlink_send+0x9/0x10 [ 164.439297][ T8095] netlink_sendmsg+0x8e4/0xcb0 [ 164.444072][ T8095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.449398][ T8095] ? aa_sock_msg_perm+0x91/0x160 [ 164.454358][ T8095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 164.459646][ T8095] ? security_socket_sendmsg+0x87/0xb0 [ 164.465126][ T8095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.470431][ T8095] __sock_sendmsg+0x221/0x270 [ 164.475204][ T8095] __sys_sendto+0x3a4/0x4f0 [ 164.479713][ T8095] ? __pfx___sys_sendto+0x10/0x10 [ 164.484838][ T8095] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.490825][ T8095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.497192][ T8095] ? exc_page_fault+0x590/0x8c0 [ 164.502053][ T8095] __x64_sys_sendto+0xde/0x100 [ 164.506821][ T8095] do_syscall_64+0xf3/0x230 [ 164.511321][ T8095] ? clear_bhb_loop+0x35/0x90 [ 164.515999][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.521887][ T8095] RIP: 0033:0x7f8db337ed8c [ 164.526295][ T8095] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 164.545899][ T8095] RSP: 002b:00007f8db4142ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 164.554312][ T8095] RAX: ffffffffffffffda RBX: 00007f8db4142fc0 RCX: 00007f8db337ed8c [ 164.562296][ T8095] RDX: 0000000000000020 RSI: 00007f8db4143010 RDI: 0000000000000005 [ 164.570267][ T8095] RBP: 0000000000000000 R08: 00007f8db4142f14 R09: 000000000000000c [ 164.578234][ T8095] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 164.586201][ T8095] R13: 00007f8db4142f68 R14: 00007f8db4143010 R15: 0000000000000000 [ 164.594187][ T8095] [ 164.861787][ T8102] __nla_validate_parse: 16 callbacks suppressed [ 164.861807][ T8102] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1010'. [ 164.897148][ T8102] netlink: 'syz.3.1010': attribute type 2 has an invalid length. [ 164.914530][ T8102] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1010'. [ 164.998419][ T8107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1013'. [ 165.012420][ T8108] netlink: 'syz.2.1011': attribute type 33 has an invalid length. [ 165.215927][ T8118] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'. [ 165.732364][ T8141] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1026'. [ 165.747275][ T8141] netlink: 'syz.2.1026': attribute type 2 has an invalid length. [ 165.756720][ T8141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1026'. [ 166.624909][ T8172] netlink: 'syz.1.1035': attribute type 29 has an invalid length. [ 166.651653][ T8172] netlink: 'syz.1.1035': attribute type 29 has an invalid length. [ 166.799883][ T8150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1030'. [ 167.270703][ T8188] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1041'. [ 167.292130][ T8188] netlink: 'syz.2.1041': attribute type 2 has an invalid length. [ 167.309740][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1041'. [ 167.597423][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'. [ 168.081329][ T8217] warn_alloc: 3 callbacks suppressed [ 168.081347][ T8217] syz.4.1049: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 168.128338][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.4.1049 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 168.139172][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 168.149263][ T8217] Call Trace: [ 168.152566][ T8217] [ 168.155523][ T8217] dump_stack_lvl+0x241/0x360 [ 168.160240][ T8217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.165476][ T8217] ? __pfx__printk+0x10/0x10 [ 168.170158][ T8217] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 168.176608][ T8217] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 168.183174][ T8217] warn_alloc+0x278/0x410 [ 168.187556][ T8217] ? stack_depot_save_flags+0x29/0x830 [ 168.193039][ T8217] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 168.199139][ T8217] ? __pfx_warn_alloc+0x10/0x10 [ 168.204020][ T8217] ? kasan_save_track+0x3f/0x80 [ 168.208899][ T8217] ? __kasan_kmalloc+0x98/0xb0 [ 168.213697][ T8217] ? xsk_setsockopt+0x4ea/0x950 [ 168.218569][ T8217] ? do_sock_setsockopt+0x3af/0x720 [ 168.223797][ T8217] ? __sys_setsockopt+0x1ae/0x250 [ 168.228897][ T8217] ? __x64_sys_setsockopt+0xb5/0xd0 [ 168.234131][ T8217] ? do_syscall_64+0xf3/0x230 [ 168.238814][ T8217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.244909][ T8217] __vmalloc_node_range_noprof+0x126/0x1400 [ 168.250821][ T8217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.257148][ T8217] ? __kasan_kmalloc+0x98/0xb0 [ 168.261913][ T8217] ? xskq_create+0x54/0x170 [ 168.266503][ T8217] vmalloc_user_noprof+0x74/0x80 [ 168.271434][ T8217] ? xskq_create+0xb6/0x170 [ 168.275928][ T8217] xskq_create+0xb6/0x170 [ 168.280342][ T8217] xsk_init_queue+0xa1/0x100 [ 168.284928][ T8217] xsk_setsockopt+0x4ea/0x950 [ 168.289598][ T8217] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.294797][ T8217] ? __pfx_lock_acquire+0x10/0x10 [ 168.299906][ T8217] ? aa_sock_opt_perm+0x79/0x120 [ 168.304858][ T8217] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 168.310398][ T8217] ? security_socket_setsockopt+0x87/0xb0 [ 168.316115][ T8217] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.321328][ T8217] do_sock_setsockopt+0x3af/0x720 [ 168.326379][ T8217] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 168.331932][ T8217] ? __fget_files+0x29/0x470 [ 168.336527][ T8217] ? __fget_files+0x3f6/0x470 [ 168.341211][ T8217] __sys_setsockopt+0x1ae/0x250 [ 168.346061][ T8217] __x64_sys_setsockopt+0xb5/0xd0 [ 168.351083][ T8217] do_syscall_64+0xf3/0x230 [ 168.355584][ T8217] ? clear_bhb_loop+0x35/0x90 [ 168.360259][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.366148][ T8217] RIP: 0033:0x7f82d357cef9 [ 168.370556][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.390157][ T8217] RSP: 002b:00007f82d4450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.398592][ T8217] RAX: ffffffffffffffda RBX: 00007f82d3735f80 RCX: 00007f82d357cef9 [ 168.406573][ T8217] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 168.414551][ T8217] RBP: 00007f82d35ef046 R08: 0000000000000004 R09: 0000000000000000 [ 168.422518][ T8217] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.430487][ T8217] R13: 0000000000000000 R14: 00007f82d3735f80 R15: 00007ffd9aba29e8 [ 168.438467][ T8217] [ 168.483734][ T8217] Mem-Info: [ 168.495201][ T8217] active_anon:4002 inactive_anon:0 isolated_anon:0 [ 168.495201][ T8217] active_file:1671 inactive_file:38218 isolated_file:0 [ 168.495201][ T8217] unevictable:768 dirty:269 writeback:0 [ 168.495201][ T8217] slab_reclaimable:8787 slab_unreclaimable:95501 [ 168.495201][ T8217] mapped:21248 shmem:1253 pagetables:719 [ 168.495201][ T8217] sec_pagetables:0 bounce:0 [ 168.495201][ T8217] kernel_misc_reclaimable:0 [ 168.495201][ T8217] free:1354254 free_pcp:1376 free_cma:0 [ 168.542258][ T8217] Node 0 active_anon:16008kB inactive_anon:0kB active_file:6684kB inactive_file:152788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84992kB dirty:1076kB writeback:0kB shmem:3476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10128kB pagetables:2876kB sec_pagetables:0kB all_unreclaimable? no [ 168.584558][ T8217] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 168.646471][ T8217] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.688524][ T8217] lowmem_reserve[]: 0 2467 2468 0 0 [ 168.695667][ T8217] Node 0 DMA32 free:1449932kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:15972kB inactive_anon:0kB active_file:6684kB inactive_file:151968kB unevictable:1536kB writepending:1076kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:5800kB local_pcp:4640kB free_cma:0kB [ 168.794748][ T8217] lowmem_reserve[]: 0 0 0 0 0 [ 168.814989][ T8217] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 168.890291][ T8217] lowmem_reserve[]: 0 0 0 0 0 [ 168.895123][ T8217] Node 1 Normal free:3951472kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.981840][ T8217] lowmem_reserve[]: 0 0 0 0 0 [ 168.986739][ T8217] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.063433][ T8217] Node 0 DMA32: 248*4kB (ME) 208*8kB (ME) 326*16kB (UME) 281*32kB (UME) 113*64kB (UME) 83*128kB (UME) 43*256kB (UME) 20*512kB (UME) 9*1024kB (UM) 4*2048kB (UM) 337*4096kB (M) = 1453728kB [ 169.112773][ T8217] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 169.156801][ T8217] Node 1 Normal: 2*4kB (UM) 9*8kB (UM) 10*16kB (UM) 8*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 7*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3951472kB [ 169.182904][ T8217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.211741][ T8217] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.234710][ T8217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.264269][ T8217] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.286046][ T8217] 41367 total pagecache pages [ 169.296399][ T8256] netlink: 'syz.2.1063': attribute type 2 has an invalid length. [ 169.298824][ T8217] 0 pages in swap cache [ 169.318830][ T8217] Free swap = 124996kB [ 169.325367][ T8217] Total swap = 124996kB [ 169.340554][ T8217] 2097051 pages RAM [ 169.349568][ T8217] 0 pages HighMem/MovableOnly [ 169.354489][ T8217] 426967 pages reserved [ 169.359072][ T8217] 0 pages cma reserved [ 169.898205][ T8275] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.975404][ T8350] __nla_validate_parse: 6 callbacks suppressed [ 171.975423][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 172.025973][ T8350] Bluetooth: hci3: unsupported parameter 32 [ 172.041295][ T8350] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 172.249988][ T8356] sctp: [Deprecated]: syz.4.1091 (pid 8356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.249988][ T8356] Use struct sctp_sack_info instead [ 172.427414][ T8366] netlink: 'syz.1.1095': attribute type 33 has an invalid length. [ 173.002769][ T8388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1105'. [ 173.317254][ T8397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.614745][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1110'. [ 174.365691][ T8411] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1113'. [ 184.882479][ T8430] netlink: 'syz.1.1122': attribute type 10 has an invalid length. [ 184.958879][ T8430] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 185.054747][ T8430] bond0: (slave netdevsim0): Releasing backup interface [ 185.121136][ T8430] team0: Failed to send options change via netlink (err -105) [ 185.148958][ T8430] team0: Port device netdevsim0 added [ 185.303514][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.330886][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.339207][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1124'. [ 185.360897][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.369163][ T5251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.388894][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.397154][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.400398][ T5251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.416169][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.427527][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.427624][ T5250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.445128][ T5251] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 185.461286][ T5250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.482345][ T5252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.494359][ T5252] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.504276][ T5252] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.516789][ T5252] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.531112][ T5252] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 185.538519][ T5252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.723223][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.725410][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 185.753128][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 185.762786][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 185.815028][ T8450] syz.1.1127: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 185.845980][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.1.1127 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 185.856705][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 185.866789][ T8450] Call Trace: [ 185.870087][ T8450] [ 185.873028][ T8450] dump_stack_lvl+0x241/0x360 [ 185.877733][ T8450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.882959][ T8450] ? __pfx__printk+0x10/0x10 [ 185.887581][ T8450] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 185.894026][ T8450] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 185.900559][ T8450] warn_alloc+0x278/0x410 [ 185.904920][ T8450] ? stack_depot_save_flags+0x29/0x830 [ 185.910402][ T8450] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 185.916499][ T8450] ? __pfx_warn_alloc+0x10/0x10 [ 185.921384][ T8450] ? kasan_save_track+0x3f/0x80 [ 185.926261][ T8450] ? __kasan_kmalloc+0x98/0xb0 [ 185.931055][ T8450] ? xsk_setsockopt+0x4ea/0x950 [ 185.935925][ T8450] ? do_sock_setsockopt+0x3af/0x720 [ 185.941150][ T8450] ? __sys_setsockopt+0x1ae/0x250 [ 185.946186][ T8450] ? __x64_sys_setsockopt+0xb5/0xd0 [ 185.951385][ T8450] ? do_syscall_64+0xf3/0x230 [ 185.956076][ T8450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.962148][ T8450] __vmalloc_node_range_noprof+0x126/0x1400 [ 185.968062][ T8450] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 185.974398][ T8450] ? __kasan_kmalloc+0x98/0xb0 [ 185.979177][ T8450] ? xskq_create+0x54/0x170 [ 185.983689][ T8450] vmalloc_user_noprof+0x74/0x80 [ 185.988626][ T8450] ? xskq_create+0xb6/0x170 [ 185.993136][ T8450] xskq_create+0xb6/0x170 [ 185.997455][ T8450] xsk_init_queue+0xa1/0x100 [ 186.002040][ T8450] xsk_setsockopt+0x4ea/0x950 [ 186.006705][ T8450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.011910][ T8450] ? __pfx_lock_acquire+0x10/0x10 [ 186.016945][ T8450] ? aa_sock_opt_perm+0x79/0x120 [ 186.021887][ T8450] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 186.027433][ T8450] ? security_socket_setsockopt+0x87/0xb0 [ 186.033151][ T8450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 186.038337][ T8450] do_sock_setsockopt+0x3af/0x720 [ 186.043360][ T8450] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 186.048909][ T8450] ? __fget_files+0x29/0x470 [ 186.053521][ T8450] ? __fget_files+0x3f6/0x470 [ 186.058220][ T8450] __sys_setsockopt+0x1ae/0x250 [ 186.063071][ T8450] __x64_sys_setsockopt+0xb5/0xd0 [ 186.068092][ T8450] do_syscall_64+0xf3/0x230 [ 186.072601][ T8450] ? clear_bhb_loop+0x35/0x90 [ 186.077291][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.083176][ T8450] RIP: 0033:0x7f324017cef9 [ 186.087579][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.107177][ T8450] RSP: 002b:00007f3240e9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.115587][ T8450] RAX: ffffffffffffffda RBX: 00007f3240335f80 RCX: 00007f324017cef9 [ 186.123550][ T8450] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 186.131520][ T8450] RBP: 00007f32401ef046 R08: 0000000000000004 R09: 0000000000000000 [ 186.139507][ T8450] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.147492][ T8450] R13: 0000000000000000 R14: 00007f3240335f80 R15: 00007ffd944da708 [ 186.155523][ T8450] [ 186.162707][ T8450] Mem-Info: [ 186.170440][ T8450] active_anon:4097 inactive_anon:0 isolated_anon:0 [ 186.170440][ T8450] active_file:1441 inactive_file:38261 isolated_file:0 [ 186.170440][ T8450] unevictable:768 dirty:94 writeback:0 [ 186.170440][ T8450] slab_reclaimable:9798 slab_unreclaimable:100258 [ 186.170440][ T8450] mapped:21068 shmem:1256 pagetables:694 [ 186.170440][ T8450] sec_pagetables:0 bounce:0 [ 186.170440][ T8450] kernel_misc_reclaimable:0 [ 186.170440][ T8450] free:1350973 free_pcp:355 free_cma:0 [ 186.231295][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.252873][ T8450] Node 0 active_anon:16232kB inactive_anon:0kB active_file:5764kB inactive_file:152960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84268kB dirty:452kB writeback:0kB shmem:3496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10096kB pagetables:2664kB sec_pagetables:0kB all_unreclaimable? no [ 186.288184][ T8450] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 186.319375][ T8450] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.377709][ T8450] lowmem_reserve[]: 0 2467 2468 0 0 [ 186.392973][ T8450] Node 0 DMA32 free:1437396kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:16296kB inactive_anon:0kB active_file:5764kB inactive_file:152140kB unevictable:1536kB writepending:448kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:1632kB local_pcp:604kB free_cma:0kB [ 186.423457][ T8450] lowmem_reserve[]: 0 0 0 0 0 [ 186.428336][ T8450] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 186.455983][ T8450] lowmem_reserve[]: 0 0 0 0 0 [ 186.457493][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.460823][ T8450] Node 1 Normal free:3951472kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.460886][ T8450] lowmem_reserve[]: 0 0 0 0 0 [ 186.460932][ T8450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.461075][ T8450] Node 0 DMA32: 2*4kB (E) 3*8kB (UE) 184*16kB [ 186.510959][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 186.523660][ T5252] Bluetooth: hci2: command 0x0406 tx timeout [ 186.525995][ T5250] Bluetooth: hci3: command 0x0406 tx timeout [ 186.551863][ T8450] (UME) 141*32kB (UME) 380*64kB (UME) 379*128kB (UME) 272*256kB (UME) 176*512kB (UM) 67*1024kB (UME) 7*2048kB (UM) 272*4096kB (M) = 1437120kB [ 186.604602][ T8450] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 186.617382][ T8450] Node 1 Normal: 2*4kB (UM) 9*8kB (UM) 10*16kB (UM) 8*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 7*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3951472kB [ 186.635779][ T8457] vlan2: entered promiscuous mode [ 186.637313][ T8450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.651889][ T8450] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.655242][ T8457] 0ªX¹¦À: entered promiscuous mode [ 186.661265][ T8450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.661287][ T8450] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.661303][ T8450] 40960 total pagecache pages [ 186.661311][ T8450] 0 pages in swap cache [ 186.661319][ T8450] Free swap = 124728kB [ 186.661327][ T8450] Total swap = 124996kB [ 186.661338][ T8450] 2097051 pages RAM [ 186.661347][ T8450] 0 pages HighMem/MovableOnly [ 186.661355][ T8450] 426967 pages reserved [ 186.661363][ T8450] 0 pages cma reserved [ 186.754217][ T8457] 0ªX¹¦À: left promiscuous mode [ 186.831771][ T35] team0: Port device netdevsim0 removed [ 186.846775][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.058383][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 187.095123][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 187.277558][ T35] bridge_slave_1: left allmulticast mode [ 187.297159][ T35] bridge_slave_1: left promiscuous mode [ 187.304787][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.319931][ T35] bridge_slave_0: left allmulticast mode [ 187.325690][ T35] bridge_slave_0: left promiscuous mode [ 187.331776][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.519467][ T5254] Bluetooth: hci5: command tx timeout [ 187.525573][ T5240] Bluetooth: hci4: command tx timeout [ 187.598987][ T5254] Bluetooth: hci6: command tx timeout [ 188.099161][ T8477] xt_hashlimit: invalid rate [ 188.213261][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.250501][ T35] bond0 (unregistering): Released all slaves [ 188.503199][ T35] tipc: Disabling bearer [ 188.518814][ T35] tipc: Left network mode [ 188.630908][ T35] ------------[ cut here ]------------ [ 188.636479][ T35] WARNING: CPU: 0 PID: 35 at net/l2tp/l2tp_core.c:1881 l2tp_exit_net+0x165/0x170 [ 188.646017][ T35] Modules linked in: [ 188.650064][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 188.660852][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 188.670988][ T35] Workqueue: netns cleanup_net [ 188.675788][ T35] RIP: 0010:l2tp_exit_net+0x165/0x170 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.681296][ T35] Code: 0f 0b 90 e9 3b ff ff ff e8 f8 90 b0 f6 eb 05 e8 f1 90 b0 f6 90 0f 0b 90 e9 7a ff ff ff e8 e3 90 b0 f6 eb 05 e8 dc 90 b0 f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 188.701062][ T35] RSP: 0000:ffffc90000ab7a98 EFLAGS: 00010293 [ 188.707252][ T35] RAX: ffffffff8ae2fbcd RBX: ffff88802fcc0888 RCX: ffff888020eebc00 [ 188.715539][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 188.724167][ T35] RBP: ffffc90000ab7bb0 R08: ffffffff8bb2de16 R09: 1ffffffff2031015 [ 188.732228][ T35] R10: dffffc0000000000 R11: fffffbfff2031016 R12: dffffc0000000000 [ 188.740319][ T35] R13: 1ffffffff1fd274c R14: ffff88802fcc0930 R15: ffff88802fcc0840 [ 188.748319][ T35] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 188.757329][ T35] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.763997][ T35] CR2: 0000001b32f12ff8 CR3: 00000000287d8000 CR4: 00000000003506f0 [ 188.772062][ T35] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.780098][ T35] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.788815][ T35] Call Trace: [ 188.792129][ T35] [ 188.795085][ T35] ? __warn+0x163/0x4e0 [ 188.799614][ T35] ? l2tp_exit_net+0x165/0x170 [ 188.804406][ T35] ? report_bug+0x2b3/0x500 [ 188.808999][ T35] ? l2tp_exit_net+0x165/0x170 [ 188.813812][ T35] ? handle_bug+0x3e/0x70 [ 188.818447][ T35] ? exc_invalid_op+0x1a/0x50 [ 188.823253][ T35] ? asm_exc_invalid_op+0x1a/0x20 [ 188.828743][ T35] ? idr_destroy+0x56/0x290 [ 188.833278][ T35] ? l2tp_exit_net+0x15d/0x170 [ 188.838069][ T35] ? l2tp_exit_net+0x165/0x170 [ 188.842978][ T35] ? l2tp_exit_net+0x15d/0x170 [ 188.847795][ T35] cleanup_net+0x802/0xcc0 [ 188.852504][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 188.857483][ T35] ? process_scheduled_works+0x945/0x1830 [ 188.863307][ T35] process_scheduled_works+0xa2c/0x1830 [ 188.868975][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.874993][ T35] ? assign_work+0x364/0x3d0 [ 188.879710][ T35] worker_thread+0x86d/0xd10 [ 188.884343][ T35] ? __kthread_parkme+0x169/0x1d0 [ 188.889437][ T35] ? __pfx_worker_thread+0x10/0x10 [ 188.894580][ T35] kthread+0x2f0/0x390 [ 188.898797][ T35] ? __pfx_worker_thread+0x10/0x10 [ 188.903965][ T35] ? __pfx_kthread+0x10/0x10 [ 188.908637][ T35] ret_from_fork+0x4b/0x80 [ 188.913082][ T35] ? __pfx_kthread+0x10/0x10 [ 188.917699][ T35] ret_from_fork_asm+0x1a/0x30 [ 188.922795][ T35] [ 188.925919][ T35] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.933194][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.11.0-rc6-syzkaller-01157-gc259acab839e #0 [ 188.943857][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 188.953901][ T35] Workqueue: netns cleanup_net [ 188.958666][ T35] Call Trace: [ 188.961937][ T35] [ 188.964858][ T35] dump_stack_lvl+0x241/0x360 [ 188.969536][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.974726][ T35] ? __pfx__printk+0x10/0x10 [ 188.979306][ T35] ? _printk+0xd5/0x120 [ 188.983455][ T35] ? vscnprintf+0x5d/0x90 [ 188.987790][ T35] panic+0x349/0x860 [ 188.991676][ T35] ? __warn+0x172/0x4e0 [ 188.995824][ T35] ? __pfx_panic+0x10/0x10 [ 189.000267][ T35] ? show_trace_log_lvl+0x4e6/0x520 [ 189.005486][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 189.010435][ T35] __warn+0x346/0x4e0 [ 189.014417][ T35] ? l2tp_exit_net+0x165/0x170 [ 189.019184][ T35] report_bug+0x2b3/0x500 [ 189.023515][ T35] ? l2tp_exit_net+0x165/0x170 [ 189.028304][ T35] handle_bug+0x3e/0x70 [ 189.032563][ T35] exc_invalid_op+0x1a/0x50 [ 189.037074][ T35] asm_exc_invalid_op+0x1a/0x20 [ 189.041927][ T35] RIP: 0010:l2tp_exit_net+0x165/0x170 [ 189.047319][ T35] Code: 0f 0b 90 e9 3b ff ff ff e8 f8 90 b0 f6 eb 05 e8 f1 90 b0 f6 90 0f 0b 90 e9 7a ff ff ff e8 e3 90 b0 f6 eb 05 e8 dc 90 b0 f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 189.066933][ T35] RSP: 0000:ffffc90000ab7a98 EFLAGS: 00010293 [ 189.072999][ T35] RAX: ffffffff8ae2fbcd RBX: ffff88802fcc0888 RCX: ffff888020eebc00 [ 189.080963][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 189.088926][ T35] RBP: ffffc90000ab7bb0 R08: ffffffff8bb2de16 R09: 1ffffffff2031015 [ 189.096886][ T35] R10: dffffc0000000000 R11: fffffbfff2031016 R12: dffffc0000000000 [ 189.104850][ T35] R13: 1ffffffff1fd274c R14: ffff88802fcc0930 R15: ffff88802fcc0840 [ 189.112818][ T35] ? idr_destroy+0x56/0x290 [ 189.117317][ T35] ? l2tp_exit_net+0x15d/0x170 [ 189.122170][ T35] ? l2tp_exit_net+0x15d/0x170 [ 189.127017][ T35] cleanup_net+0x802/0xcc0 [ 189.131530][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 189.136468][ T35] ? process_scheduled_works+0x945/0x1830 [ 189.142191][ T35] process_scheduled_works+0xa2c/0x1830 [ 189.147748][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.153734][ T35] ? assign_work+0x364/0x3d0 [ 189.158324][ T35] worker_thread+0x86d/0xd10 [ 189.162946][ T35] ? __kthread_parkme+0x169/0x1d0 [ 189.167967][ T35] ? __pfx_worker_thread+0x10/0x10 [ 189.173329][ T35] kthread+0x2f0/0x390 [ 189.177392][ T35] ? __pfx_worker_thread+0x10/0x10 [ 189.182493][ T35] ? __pfx_kthread+0x10/0x10 [ 189.187075][ T35] ret_from_fork+0x4b/0x80 [ 189.191482][ T35] ? __pfx_kthread+0x10/0x10 [ 189.196066][ T35] ret_from_fork_asm+0x1a/0x30 [ 189.200840][ T35] [ 189.203954][ T35] Kernel Offset: disabled [ 189.208309][ T35] Rebooting in 86400 seconds..