last executing test programs: 2.496590537s ago: executing program 3 (id=2037): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000001140)={'ip6tnl0\x00', 0x0, 0x29, 0x24, 0x3, 0x20004, 0x2, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x700, 0x8001, 0x7d}}) sendmsg$inet(r0, &(0x7f0000001280)={&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)="2ebb2c84849824c6b1d8f0bea0f9040247a9c8235707863159edb6246b93e92ec3c91e5c865567aac2d9626febdda5aeb838a10c167c96409f7a1f79211f72290ecfb78a204eca1424b97a19d3fb04dc08f568b8aebde6935d57d0677385b139c6e420017c3488ab36bd8d8cc4c34235e09bb5d7e1b37733b516faad389cade52791230f2d1d067e935c4a68061b8cc3294734689e7a57372b23d4607df8136e5a77edcd66fe40bf15faf6b8c85403ee95ab0cf9425aade908549b2185e553f426d22b66a3e6be1a3529dfa7ace2da9f01118047e231a1099e04c841cf29553098402363ffdcdcea1234a777b9dfc631468763138491e4e5fe7c95033d44434f757eac0a5735ca2baf79bf609535e1cf76b2e802c10336e6cee4ca185cb7dbab0967cbb1890cff47c41d5e650c70f46d44abbd7ff10f4c70e2076036794c0fd9fd4d7821192425b097d77882012e0efa9269982c3e964a24829e69022604d7fc58e89759d124df749d9581aee6f49daa990ff34aed78b560cce65509497b977a02a4d4e507b3b318015fa7cb089a2729b38e31a7102f407ba859b82bc6c4f5961bcd09459d58203d6101fe460edd8676a4e332e368909c26b3c7a42986e3cace39f92b7db2f6a05704759c3767a8619840d6c3ca40c3a463d3474a87e5fe086973fd40209243e3d8b86ffa521355713cff10632647827e202e5ba4038ba0021c1f5b9b51fbc38eb8441b5a75e5d24e666c687c541fbec4a2fb80878aa6c27962985973b162c81c54af383819b72064b817776e723f2ab7569d50b1156d8995371eafde948a3b7281db5ceca21fdf4b62c45eff91836b3b5cce6f50a6bd0c633db5bfee1dc4635cfcfd725c0afc2a071fa5200cee615856386253baec41d0236173b86b79a05422773a2e5540e7ef2950b3a3b0eb629df3539221d8c8eb7bc336f96a1951f6db44643422728c26caa1fd8c8486b70284ec7e94326972cbbf174d5ac4e4af18f03cd3e4405369ecc819aa69eed00c312a29566dff23d4d3148e892964e5f1e8464238c01daf51a272c131b1a765de9ae97b0efc8dcf774a27c3cbb3ecdeca258742931a24146d588e8f97c82b54ddaca8ac970ddf3de05b39c6743897cf1f3addd9f9ccdb28336c81627b7319a155e304d2bb58787a07420c50fdf83bda6e4f1b15ca8a44c86af433bbdcbf81c363256f2171fe716029e7622ec1e0716856c74e97ead68dd0e5dc9fdcd9ef9dc1b021fb492be1c78bb9c1d7d6118670d196fb619f1b56c1b8c75d363e670c31375d88ecc5057f9b65ce8df6c9279d2bc5ca0f884e8b2a0ba3daf7f975569f919758e84100c6029e259991fec6f9e523de57dce2f8891315e05066696ab15c4d0fd227cd5108b9394a9de584431b4f3ed4d7bfe4422bb515ca2b6ffb3e41175a0cf62029c2eb92784876159809ddfebbed0337bb27dd10fad3de55d19e67aee6d0465bc1aef55abf4e9a51225dc891f3a807d34cffb10ca917a588bcd1074afc620fe3df40ac4116630e3174ead579b3393398c6dc8b2a52cb8e5cb449500e5c6222f0cd3b44252f48530bf750da375ad2be26b328658c59e645fb35c99b2a5dc587158bf0936b5d1876a856017433634e23783e4ff96319e042d92690ed88f5e311c1b2b73d6c07d62650f36d5c17ebc5c299fb6ea1616c3d84aed8598d859dbd48364ae41cfa7bb161e75a372b168eae5cbb443efd395fa822c3981d6c19f21240b0331a5addce02222089cadd69c8c7af2649458b360f7a318c0fd4f7bf00293775b337d54c8dddb5a7333138ac31ac02d1648df70d05056f40b69595618572f0872439bc10796d9f9e6c1ef82c9395e83797959235ae283a636acdc7b661ffd931fda26db12f7eebb91745fa6b30ee4a56261801caf0680680f3a69c7dde92d41d13d4d919faca15b5207ffd3ded2687aa33615669399ca0e29a8e18068c387e66d34b3545ca39417fc1a90232f97dff65ee85bc6f939084f70ad2758ed4b832274bf9a872dd21234f2a2488296363322cd67c41823472cb590ccf2cddda4eea31ba6c6c12c29525e7dc9a3affeef38496ce34baaacb608e01c33427c8d73ecf57046f1fc4c41869fa99a9a3dceb880da14f4e701b969560585ef1d70fa025509bec4ec5279cde07285636722284ca39bfc43e62e0ef68d4af1d89d1ca44899444d12b9095339e966e07b07bb93fdc4fd27fae4dd2f0cad409081d7b463b65bcb688a04fcc7f4b0ebfa7861d068b39bfbe742857827c5bede6f8585d5477260e731811aa7a13677e9e89d0a5576be1ca9044f1e5d3edd81fe753882ee30d3482495928bb16b7d4edc33f631f0bae930bcb668457df5d6fc2fe50c9f4ff950960dfa69ac7d3d2a1c2f8e2e04b29c80750f804d723fb3d6b7ed7987b32e48b855400681ba170ca887dc2a9e70787b099759e5920f9c5f808915ab177c597c476091087619f18c24208e50338678a17fbb70da7fed339a507f2908a873199bffc49bf598cbb78f2bce654c6ba09c3d562bf4c0a8db03165208ce081e3bc0fdfcd0183a3e039dd92514f2fe748a05f78a045d882cf64f03d55612e8b73c96dcb7f8c82edda8b1cd513ea5dd4e687430eea8c06fb14d65e46b1d81d939e451d30c2ae72f64a74e5603202201830058f007af87301101faf7f82a734331e322aca5b68efc901015e418c768c064cb4c279f56b19deeb5e6a3ff2375891061a810b88c5096ed336875d4829d9434a3424eddf5f86f7a765b83bd822b59f7f5d2abc9c2564cdddf01ec653219f5795b8200b13308761be85db0d6b6a1851c1ed93bf2e0048e98f66c3ff39875304b4aabe14c4dbf89643d033a9463a13b779c63b42492302074f70b05ac9561db412b095fcf229203c9a0eefeabd16f224f298e412bf947ab877a073c78a08697bbbe2ab026363cfb75e8b043e215312630e10779e48f74948a2942809a750fbd82f4fb5f6d821dcd05ef622b1356c494facf527695f867855c13b723c4eda2e5405c0cae8698172b1582a644d35e220aaeafa491994beca9e92a5524d15f1aee5aed87106192ee89d17d3f22915967faa8193ef2735abf4ba2db7deb54db1dedeae0ca5baca473931c655b2e24b2f2132a19fac4bfc537897a121781fb976ab8644d6c90b872d6955b2b1ddf7e53a74278679c5548e5c89b01dd43caffa2faa7b70cd9b27cbfa66cd416ec333c137d71cf8b33fc874a381935d16a3d46b3f1df303a38e43934228da2b4bae1cd9a1ee98e7f73c1b51f3913cde0bd9786880bfd92b7a487d875eed9ab23c987b59e4b9e14052a7210c74eb3157774d474706564acb99287355569e481bdb3a2ffc37da830ac80fb23f987a698bd6e9de988a3204586fca8a28ab900606f2a093c92e5b121114a097e9ec2553ea36bdb69c64c9684a4a73e95e6d41990283e2a8af447c21ae1ca3f1939b1bc22833a80513736b6531c5a1d9b43ca708908cfe8f8e6a457c24cb3c68693d3d83a6acb6e4e56c47523731a027436f5488b650a0fbc6eea9cab86ea0247476f66a5711f26a6e7241c0db48f2bbc0a83b750e87132fe652c0b095f2d824edd4683903c8cc0b5c9a7b22511da11f28fb9b29f815517bf721df9c512d5f2b68f80f06ca4911013d78f9845107034f4bd8554fc1b91845e281d181c6bf39777dcf487d00763cd203ace96e8cff676bfd040a2e018a2094815abed01007dc7296575deeb9cb3603861aeced349fc502db60d515777bc1a7f58aae259d3d818a1fa26407a679ba2a9c32aa17f5bc1704fbb9a384deef74de09afc8d879c2e8bce1a8b6e32d2b8c8af8ab1cac7164127c13706c7ab94be5de725dc2175b592e015f2d91684403c84c69bcbe4b3defb3a6eadcef96ae0afaebc60517324d814a35e60e0ee72e099eb6ec75d358a22a75ba535d130e3e493a0701ed1cc253cb702867b462682cec3d60e1c5316ebd3bada36b26062f8fb6ab183a7ecd1dc1fe689d72a0933c4a70340bf1a2a723731a39e658d24ec2b7a840f73cb19f7ffd175b91abd5887224fd6913758cfd424f62e70571e49d89ecc4a9fd0adbc9e221cbc7dc0f7f976744a55f8bd49e4dc1739f4a6fb4bf31883967e80fa574b3d4e570ba16f56c9cb32151f42a27b564d9a0e5ba08e90d3d16443ff5130f5514eb699cde2478e6eafbfb2c36bbe560f99371a1353d1380f0d1bf675b89c2d22e2674801652158dd9f851a2297d68a5621b8626e457acf033975be497927bc5cfcf60dd869d921030d9cc6cc196508f6d617cc16ba9a228a7116a11b14efa69968275461c09556e203c42e64f4e7b6c534e87f5a424640ebdf3f42a7ccbcb2741563afaa317e1a9aaacdb459a908482d1044f6125ac0cc629498deb6bfbf99b6d6092143fae5d4f3da5d3aa13af697d727bc8f0d21b3ae74a96fa372d4f65353d93352787d4dada1da152b8cf069885fd1bffc2ebefd7aaa88f7d962056adb33b9fefd2cbb368c3c5fcd24b6925879ef904dbe8c006ee4abc5d6c3997d6acf9362b99d95c38d8318a3e8c8011f8c0f8c3a0ead108dc288314ec851cc1b715a3300a9a4d14cc95716eaa9df56be1a3aebf62c63982f1b2eaa2517412491e0816cbff5808b003fa11f7da10160f33c525dcc48c78e1825636940fc8414bca461867e724647e4d51580bd53cf79baaf9171507e687c32f79c1e9d98727c5c1ab3d83aea7b6f60451f57701f7bd77e5888a737f45eea08ef3d03f59b7d53060959bb41f8699970cbb1aad58522ca25870cdf4108b07ce920b705d7bee0eb2159d8640c646381839d09c4f778337980e1597a4fbcee2cbf2fbe00aad57fdd00a8465a3bf1968605d906ae7f300b2a112f954d7aeb929b92386b6867ca51342a5d7261ef61b377a6cdb77bde05bd54d0c63a93b868d80dfce1c76bb7602367e1bd48adae56cb2ad185bc0eb5991e4a896566365a3aae5bdc88bc6faa811850410565682a5d3804f785d4e9dc3a2683d70d36cf06be41311991037273c1906291f89d91046616b9c5a684031903bfefc302a3facd9885aa191cd422aca3c98805d7c273e8988fcdad8bd52b93a7bb1a42d660e590ad48b0da3f5858dd3e68e50f3ab575ad35ccc8b329e24a90cc6786c80f003fd31e0f2433a34622b1869047a9dc1074f6957a81023012bad9f623e5c2d81f0d4c8bbeb5d7d488d8f44a2ff02643657eddef572f9ac9ba58de5f2f18d558d566af2213f156c24bab475de6bad9bae66b569c2f9d71773c45c5927b9c2ac2349a2e6e7ee53b553260eb7188825b241a13c70ad1554b9a93a170e2fd23c17a1d2a5daa857a285c2044f68efb23a554a910354767599258c51c3ccf37aab8bae4f5b5e8d93873ec319ab0afd3a3fe96a0a978945414be9cb9a76b4bd2bffea174d7afb176947c5dd7d2db6adfdb512d35b4a46269d2736033becc7c0a87a240c3c8904c30bee8cc35fa32d4cc5d0ad44320db112858e08b4ed5f9deaf6c21519871be64c3e4ee2693333724d1143b29958ea21955e3f94924038680f05ae73b4d60e35f11ad78ae5ea0534c727ff086a059f7c7fb2f0ae72c08f860219e58aeea9d633cc9600ed7cdbff45ba235223f04275f18cb84cd087d21307a281c41e68a3774171918ce387d0404b67d9ce6032630fe81fff282351a39d91eeb1973a4ae69d0b5378074f9ab3e76f0bffddc17c4491be4208b432efaaf7501a91c433aa213fbd7e309820db12cd69e0362082b2cc46769608ff62b680f906e04a46a293a590250a24", 0x1000}, {&(0x7f0000001080)="861079ea3c46d374f233e6adc581a385c8d7be9b55930c7639fff42ce365b3fdfde4fe4dc4b8d17a8fe15d8513844bda602346958a36a319349df1c5231f9e3fdb2979a314154cef2ace7c51e998b7239ac36e704a416ef24531737c37f00cd7", 0x60}], 0x2, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @dev={0xac, 0x14, 0x14, 0xa}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x50}, 0x800) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13c, 0x13c, 0x4, [@fwd={0xf}, @var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x7}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}, @float={0x8, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xff}}, @enum={0xf, 0x7, 0x0, 0x6, 0x4, [{0x3, 0xd000000}, {0xb, 0x34e4800}, {0x9, 0xffff0000}, {0x5, 0x66}, {0xf, 0x4}, {0xe, 0x2}, {0x2, 0x8}]}, @typedef={0xe}, @enum64={0x8, 0xa, 0x0, 0x13, 0x1, 0x8, [{0x2, 0xaf, 0x5}, {0xb, 0x6, 0x8}, {0x4, 0xfff}, {0xc, 0x52503a5c, 0x8}, {0x4, 0x9, 0x1}, {0xf, 0x69, 0x4}, {0x7, 0xc341, 0x9f39}, {0x5, 0x7f, 0x9}, {0xe, 0x0, 0x5}, {0xf, 0x9, 0x2}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000001600)=""/123, 0x158, 0x7b, 0x0, 0x81, 0x10000, @value}, 0x28) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001740)={r0, 0xdc1, 0xd, 0x7}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r2, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x3, 0x5, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe18, 0x0, 0x0, 0x0, 0x1}, [@exit, @ldst={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff}]}, &(0x7f00000013c0)='syzkaller\x00', 0x8, 0x50, &(0x7f0000001400)=""/80, 0x41100, 0x20, '\x00', r1, @fallback=0x2e, r3, 0x8, &(0x7f00000016c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x1, 0x6, 0x0, 0x72d}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000001840)=[r2, r5, r2, r2, r2, r2], 0x0, 0x10, 0x3cea, @void, @value}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000001bc0)={0x4, &(0x7f0000001940)=[{}, {@none}, {@fixed}, {@fixed}]}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', 0x0, r3, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001c80)="c39ed9f17e65980e5b60fcf7da428c8f2855219055767189d2cd61fb19beb6558772309abcebee9f44963d5106842294bac33f7a45381e2524344393b2bf9db4c73653d55e6ca6cda7c9a48a46005365fd8b81a62f9b822fbb2bb4cbc4dbac84e9e49c642a6c2d566612d644e170d752723262fb93353146cea611af786348ba56208dc6c274b8baf0069d5b04d08a134877c95796bf45bc0bcc1e63b27d0238c8610a861a8aa3c39926d2e76e5697d33c1994ae56a86432690c585ef087bf1ce7d17658a2c17801ced7a77affdb05d8fe7216bc81f386446b1eab9c21615d79cf6b3d0d342658a7ea19", 0xea) (async) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000001d80)=0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e00)={&(0x7f0000001dc0)='inode_foreign_history\x00', r4, 0x0, 0x6}, 0x18) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001e40)={'batadv_slave_0\x00'}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r2}, &(0x7f0000001e80), &(0x7f0000001ec0)=r6}, 0x20) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x38, r7, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x0, 0xe, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r8 = accept4(r4, &(0x7f0000002080)=@hci, &(0x7f0000002100)=0x80, 0x800) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002240)={@fallback=r0, 0x33, 0x1, 0xf246, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) write$cgroup_int(r4, &(0x7f0000002280)=0x712a, 0x12) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000022c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPOEIOCDFWD(r9, 0xb101, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000002300)) (async) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x44000) 2.36620898s ago: executing program 3 (id=2039): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="316f017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f00"/190, 0xbe}, {&(0x7f0000000180)="530450436e44c53f5959f50ce181132762bb9f077aa7bbb5e0625b2be485e34b667711c01cc2045361aeb84e6874e9b6c3361e66a952a15575ebeaeee1366e24cd1cbbb31f36ae42f10bed16388cbe2f8509bc14146a273741a55c7ff7c52d10dc766d6fe91f725b9610dda90aa6c0d9849e9f5523c632f92e8469c711ba968563a920f7ee1b82d6a90c5144ff0cac00a93eaa177e923b6dc49fd26888d8ec487bd86aca58506a51eedd5f6a2522fb9e17bed837cd400a0aa3a0d7df91be31fd7df27f634efc6a806c035c9d00a4da9e80d580", 0xd3}, {&(0x7f0000000000)="da5db8fc49a687e8a2020e9d977184b29ecd6898138ac54516851d704f", 0x1d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c40)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1", 0x6e}], 0x1}}], 0x2, 0x4000000) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.313595098s ago: executing program 1 (id=2040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8}]}, 0x40}}, 0x0) 2.253093125s ago: executing program 3 (id=2042): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r4, 0x1, 0xb, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000001c0)={r9, 0x7, 0x20, 0x1, 0xbfa1}, &(0x7f0000000240)=0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@mcast1, @empty, [], [], 'vlan1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a69199fb8f4af703fe193000f3e34e1c27647d8cd16b804edb9654cf89d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x78, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x41dbc}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x96}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5a0}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xa4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x16}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xf0, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYRES64=r12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0xfffffffe}, 0x8, 0x10, &(0x7f00000000c0), 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000041400012cbd7000fbdbdf2508000100000008000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) 2.227324932s ago: executing program 2 (id=2043): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000010}) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth0_to_bridge\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01062bbd7000000000000100000008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20040090) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x9, 0x885d, 0x15, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x701, 0x80, 0x1, 0x1000}}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r15, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r14}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg1\x00', 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r21 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r21}) sendmsg$nl_route(r21, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r20}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x2}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="90090000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000f0000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400f1ff028f910200000000d604030000007f000100224d00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f4ffffff08000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="680102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d401028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400460200003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffff00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="7801028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040006000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400afbb000008000600", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2c01028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f6ffffff38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r14, @ANYBLOB="b1046521bc82beacf53024dbfd37a39dd2441c0100ffff08c9c2de159be9a5102cef721c49e8dcb31733", @ANYRES32=r16, @ANYBLOB="2801028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r17, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7fffff"], 0x990}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 2.153903685s ago: executing program 1 (id=2044): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) ioctl$TUNSETLINK(r4, 0x400454cd, 0x325) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x1f0, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="01", 0x1}], 0x1}, 0x800) close(r9) socket$nl_generic(0x10, 0x3, 0x10) 2.064446559s ago: executing program 3 (id=2045): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r3, &(0x7f0000000580)="5ca7bb8fde0ce88fa02d07eec0fa3052b3b19477a8440b3167a4cd48bed723681afe25e1ee1d5875477d31cc830ebc626b5f3b365ce4bbef89520e9868956159a16ec3360589", 0x3d5bb649f2c3467, 0x40000d5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x3) 2.063744439s ago: executing program 0 (id=2046): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x5}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet6(0xa, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB="ce1d7ed6", @ANYRES16, @ANYBLOB="010000000000000000000400000008000700ac1414aa080002000500000014000500fe80000000000000000000000000000a08000400ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x3, 0x0, 0x5, 0xa94, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x18) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="cb00"/26], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183000000300020000000000000000003d950001f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xf779, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r7, r8, r9, r8, r3, r3], 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) 1.714349281s ago: executing program 1 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x180, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfe00}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff2bbd}, {0x6, 0x11, 0xf39}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xe4}}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c00000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="00000000000000000400140078001680740001800c0003000000000000000000280001"], 0x9c}}, 0x0) 1.69510942s ago: executing program 2 (id=2050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 26) 1.603602318s ago: executing program 2 (id=2051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x78}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x6) ioctl$TUNSETLINK(r7, 0x400454cd, 0x335) 1.486277886s ago: executing program 1 (id=2053): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}], 0x18, 0x24004850}], 0x1, 0x2000c000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 1.372141654s ago: executing program 2 (id=2054): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0xa1ff, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) socket$netlink(0x10, 0x3, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xbd, &(0x7f0000000900)=""/189, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 1.102297427s ago: executing program 2 (id=2056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) write(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, 0x20}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty}, 0x1c) shutdown(r6, 0x2) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000040)=""/68, 0x44}, {0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.072450909s ago: executing program 3 (id=2057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x53) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000001080)='\b\x00', 0xfffffffffffffea6, 0x48000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xe6, &(0x7f0000000080), &(0x7f0000000000)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x11, 0x800000003, 0xffffffe1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 1.068274577s ago: executing program 0 (id=2058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000023000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0x88, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044045}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r7, @ANYRESDEC, @ANYRESHEX], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r8}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)={0x78, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040001}, 0x10048800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 886.439342ms ago: executing program 4 (id=2059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) 862.16352ms ago: executing program 0 (id=2060): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x118, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x2, 0x2, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0x1}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x1}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xfff3}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8, 0x7, 0x7, 0xf}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xca9a3b}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 792.740965ms ago: executing program 0 (id=2061): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1600, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@local, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r7, 0x29, 0xb, 0xd, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}, @private1, 0x8, 0x8000, 0x7, 0x1}}) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2e, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket(0x23, 0x5, 0x0) getpeername$packet(r10, 0x0, &(0x7f0000001140)) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) ioctl$SIOCSIFHWADDR(r9, 0xff03, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', 0x0}) connect$phonet_pipe(r3, &(0x7f0000000440)={0x23, 0xe, 0x3, 0x6}, 0x10) r11 = socket(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r11) sendmsg$L2TP_CMD_SESSION_MODIFY(r11, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r12, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x6}, [@typed={0x4}]}, 0x18}}, 0x0) bind$802154_dgram(r11, &(0x7f0000000200)={0x24, @none={0x0, 0x2}}, 0x14) 743.331312ms ago: executing program 4 (id=2062): unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x4000000}, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc) 566.164348ms ago: executing program 1 (id=2063): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) (fail_nth: 1) 522.427614ms ago: executing program 4 (id=2064): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 474.267479ms ago: executing program 0 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a80)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r6, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f0000000480), &(0x7f0000004880)=@udp=r2, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r8, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000bdc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c840}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "b45068002eaac3dd", "f030c4011b8dd0bbeccda353ca093c62", "365e1448", "8f4bcd1c1fcdd9d2"}, 0x28) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, &(0x7f0000000ac0)={0x0, 0x3938700}) 382.589444ms ago: executing program 4 (id=2066): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x2, 0x136, [0x20000480, 0x4100000000000000, 0x0, 0x200005c6, 0x200005f6], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x11, 0x42, 0xf9, 'veth0_to_bond\x00', 'macvlan0\x00', 'dvmrp0\x00', 'veth1_vlan\x00', @local, [], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@random="25a3af103df2", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1ae) 286.699556ms ago: executing program 0 (id=2067): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r3, &(0x7f0000000580)="5ca7bb8fde0ce88fa02d07eec0fa3052b3b19477a8440b3167a4cd48bed723681afe25e1ee1d5875477d31cc830ebc626b5f3b365ce4bbef89520e9868956159a16ec3360589", 0x3d5bb649f2c3467, 0x40000d5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x3) 182.179586ms ago: executing program 1 (id=2068): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x5}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet6(0xa, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB="ce1d7ed6", @ANYRES16, @ANYBLOB="010000000000000000000400000008000700ac1414aa080002000500000014000500fe80000000000000000000000000000a08000400ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x3, 0x0, 0x5, 0xa94, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x18) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="cb00"/26], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183000000300020000000000000000003d950001f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xf779, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r7, r8, r9, r8, r3, r3], 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) 181.75856ms ago: executing program 4 (id=2069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000023000000010001000900000001000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0x88, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044045}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r7, @ANYRESDEC, @ANYRESHEX], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r8}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)={0x78, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040001}, 0x10048800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 163.847003ms ago: executing program 2 (id=2070): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x80) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x52}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x2a, 0x2, 0xffffffff) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7b8, 0x128, 0x128, 0x128, 0x0, 0x5f8, 0x6e8, 0x6e8, 0x6e8, 0x6e8, 0x6e8, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x48b, 0xa3d6], 0x0, 0x28, 0x2}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x3265, [0xffffffff, 0xfffffffb], 0x800, 0x30, 0x0, [@empty, @rand_addr=' \x01\x00', @private1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @empty, @private1, @mcast1, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0x5d21f3a206e4e217, 0xffffffff, 0xffffffff], [0xff, 0xff, 0x0, 0x7b606c02bacd9a0e], 'veth0_to_hsr\x00', 'pimreg\x00', {}, {0xff}, 0x8, 0x43, 0x0, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x80, 0x1}}, @common=@srh1={{0x90}, {0x8, 0x4, 0x8, 0xf8, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 0x2, 0x240}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@mcast1, 0x5, 0x3b}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x2c}, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xff], 'syzkaller0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x32, 0x5, 0x0, 0x48}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x9, 0x12, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x818) pipe(&(0x7f0000000140)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c01000008000000040000000000001302000000000000002e2e5f00"], 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c0100db", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000001c010880e800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c9c000980040000801c000080060001000200000008000200ffffffff050003000300000028000080060001000a0000001400020000000000000000000000ffffac1414bb050003000200000028000080060001000a00000014000200fe880000000000000000000000000001050003000300000028000080060001000a00000014000200fc020000000000000000000000000000050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b30000080080003000600000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b"], 0x19c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 65.664056ms ago: executing program 3 (id=2071): setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x2, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) socket$netlink(0x10, 0x3, 0x12) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 4 (id=2072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 4] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.551212][ T8634] ? aa_sock_msg_perm+0x91/0x160 [ 155.556153][ T8634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.561479][ T8634] __sock_sendmsg+0x221/0x270 [ 155.566163][ T8634] ____sys_sendmsg+0x52a/0x7e0 [ 155.570932][ T8634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.576213][ T8634] ? __fget_files+0x2a/0x410 [ 155.580804][ T8634] ? __fget_files+0x2a/0x410 [ 155.585403][ T8634] __sys_sendmsg+0x269/0x350 [ 155.589993][ T8634] ? __pfx_lock_release+0x10/0x10 [ 155.595021][ T8634] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.600140][ T8634] ? __pfx_vfs_write+0x10/0x10 [ 155.604927][ T8634] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.611345][ T8634] ? do_syscall_64+0x100/0x230 [ 155.616112][ T8634] ? do_syscall_64+0xb6/0x230 [ 155.620788][ T8634] do_syscall_64+0xf3/0x230 [ 155.625291][ T8634] ? clear_bhb_loop+0x35/0x90 [ 155.629973][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.635866][ T8634] RIP: 0033:0x7f8041785d29 [ 155.640280][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.659881][ T8634] RSP: 002b:00007f80425e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.668297][ T8634] RAX: ffffffffffffffda RBX: 00007f8041975fa0 RCX: 00007f8041785d29 [ 155.676274][ T8634] RDX: 00000000040c0080 RSI: 00000000200002c0 RDI: 0000000000000003 [ 155.684240][ T8634] RBP: 00007f80425e7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.692210][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.700176][ T8634] R13: 0000000000000000 R14: 00007f8041975fa0 R15: 00007ffcfe9bb668 [ 155.708160][ T8634] [ 156.039311][ T8645] __nla_validate_parse: 5 callbacks suppressed [ 156.039330][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 156.090770][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 156.103600][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.930'. [ 156.145612][ T8647] veth0_macvtap: left promiscuous mode [ 156.173698][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 156.259948][ T8657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.935'. [ 156.825674][ T8692] netlink: 72 bytes leftover after parsing attributes in process `syz.3.944'. [ 156.843791][ T8692] netlink: 92 bytes leftover after parsing attributes in process `syz.3.944'. [ 156.867989][ T8692] netlink: 92 bytes leftover after parsing attributes in process `syz.3.944'. [ 156.941084][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 157.571388][ T8716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 157.965999][ T8739] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 158.608548][ T8773] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 159.552488][ T8799] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 159.582750][ T8801] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 159.658808][ T8803] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 159.673095][ T8805] FAULT_INJECTION: forcing a failure. [ 159.673095][ T8805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.689606][ T8801] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 159.706889][ T8805] CPU: 0 UID: 0 PID: 8805 Comm: syz.4.983 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 159.717554][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.727653][ T8805] Call Trace: [ 159.730952][ T8805] [ 159.733529][ T8801] team0: Failed to send options change via netlink (err -105) [ 159.733884][ T8805] dump_stack_lvl+0x241/0x360 [ 159.746054][ T8805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.749303][ T8801] team0: Port device netdevsim0 added [ 159.751271][ T8805] ? __pfx__printk+0x10/0x10 [ 159.751308][ T8805] ? snprintf+0xda/0x120 [ 159.765511][ T8805] should_fail_ex+0x3b0/0x4e0 [ 159.770200][ T8805] _copy_to_user+0x31/0xb0 [ 159.774645][ T8805] simple_read_from_buffer+0xca/0x150 [ 159.780022][ T8805] proc_fail_nth_read+0x1e9/0x250 [ 159.785047][ T8805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.790593][ T8805] ? rw_verify_area+0x55e/0x6f0 [ 159.795446][ T8805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.801000][ T8805] vfs_read+0x1fc/0xb70 [ 159.805161][ T8805] ? __pfx___mutex_lock+0x10/0x10 [ 159.810187][ T8805] ? __pfx_vfs_read+0x10/0x10 [ 159.814865][ T8805] ? __fget_files+0x2a/0x410 [ 159.819458][ T8805] ? __fget_files+0x395/0x410 [ 159.824133][ T8805] ? __fget_files+0x2a/0x410 [ 159.828728][ T8805] ksys_read+0x18f/0x2b0 [ 159.832972][ T8805] ? __pfx_ksys_read+0x10/0x10 [ 159.837731][ T8805] ? do_syscall_64+0x100/0x230 [ 159.842505][ T8805] ? do_syscall_64+0xb6/0x230 [ 159.847184][ T8805] do_syscall_64+0xf3/0x230 [ 159.851688][ T8805] ? clear_bhb_loop+0x35/0x90 [ 159.856371][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.862265][ T8805] RIP: 0033:0x7f7fdfb8473c [ 159.866683][ T8805] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.886288][ T8805] RSP: 002b:00007f7fe0a42030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.894700][ T8805] RAX: ffffffffffffffda RBX: 00007f7fdfd75fa0 RCX: 00007f7fdfb8473c [ 159.902669][ T8805] RDX: 000000000000000f RSI: 00007f7fe0a420a0 RDI: 0000000000000004 [ 159.910639][ T8805] RBP: 00007f7fe0a42090 R08: 0000000000000000 R09: 0000000000000000 [ 159.918616][ T8805] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001 [ 159.926607][ T8805] R13: 0000000000000000 R14: 00007f7fdfd75fa0 R15: 00007ffe1116ea78 [ 159.934606][ T8805] [ 159.995402][ T11] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 160.109795][ T8803] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 160.175199][ T8803] team0: Failed to send options change via netlink (err -105) [ 160.203905][ T8803] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 160.254179][ T8803] team0: Port device netdevsim0 removed [ 160.324821][ T8803] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 160.367772][ T8803] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 160.417391][ T8803] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 160.593989][ T8835] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 160.746031][ T8837] IPVS: Scheduler module ip_vs_sip not found [ 160.969425][ T8850] FAULT_INJECTION: forcing a failure. [ 160.969425][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 161.017147][ T8850] CPU: 0 UID: 0 PID: 8850 Comm: syz.0.1000 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 161.027890][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.037951][ T8850] Call Trace: [ 161.041231][ T8850] [ 161.044159][ T8850] dump_stack_lvl+0x241/0x360 [ 161.048847][ T8850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.054044][ T8850] ? __pfx__printk+0x10/0x10 [ 161.058668][ T8850] should_fail_ex+0x3b0/0x4e0 [ 161.063375][ T8850] should_failslab+0xac/0x100 [ 161.068064][ T8850] __kmalloc_cache_noprof+0x70/0x390 [ 161.073357][ T8850] ? sctp_add_bind_addr+0x89/0x3a0 [ 161.078471][ T8850] sctp_add_bind_addr+0x89/0x3a0 [ 161.083417][ T8850] sctp_copy_local_addr_list+0x311/0x500 [ 161.089061][ T8850] ? sctp_copy_local_addr_list+0xab/0x500 [ 161.094781][ T8850] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 161.100946][ T8850] ? sctp_v6_is_any+0x60/0x70 [ 161.105650][ T8850] sctp_bind_addr_copy+0xad/0x3b0 [ 161.110674][ T8850] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 161.117000][ T8850] sctp_connect_new_asoc+0x2f3/0x6c0 [ 161.122292][ T8850] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 161.128104][ T8850] ? sctp_get_af_specific+0x2a/0x80 [ 161.133330][ T8850] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 161.139148][ T8850] __sctp_connect+0x66d/0xe30 [ 161.143840][ T8850] ? __local_bh_enable_ip+0x168/0x200 [ 161.149214][ T8850] ? __pfx___sctp_connect+0x10/0x10 [ 161.154412][ T8850] ? sctp_inet_connect+0xa7/0x1f0 [ 161.159435][ T8850] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 161.165159][ T8850] ? do_raw_spin_unlock+0x13c/0x8b0 [ 161.170358][ T8850] sctp_inet_connect+0x149/0x1f0 [ 161.175302][ T8850] __sys_connect+0x288/0x2d0 [ 161.179900][ T8850] ? __fget_files+0x2a/0x410 [ 161.184491][ T8850] ? __pfx___sys_connect+0x10/0x10 [ 161.189607][ T8850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.195934][ T8850] ? do_syscall_64+0x100/0x230 [ 161.200697][ T8850] __x64_sys_connect+0x7a/0x90 [ 161.205458][ T8850] do_syscall_64+0xf3/0x230 [ 161.209961][ T8850] ? clear_bhb_loop+0x35/0x90 [ 161.214728][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.220622][ T8850] RIP: 0033:0x7f1a08f85d29 [ 161.225036][ T8850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.244645][ T8850] RSP: 002b:00007f1a06df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 161.253062][ T8850] RAX: ffffffffffffffda RBX: 00007f1a09175fa0 RCX: 00007f1a08f85d29 [ 161.261032][ T8850] RDX: 0000000000000010 RSI: 0000000020004cc0 RDI: 0000000000000007 [ 161.269000][ T8850] RBP: 00007f1a06df6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.276968][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.284933][ T8850] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 161.292912][ T8850] [ 161.632460][ T8869] __nla_validate_parse: 10 callbacks suppressed [ 161.632483][ T8869] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1008'. [ 161.633905][ T8868] FAULT_INJECTION: forcing a failure. [ 161.633905][ T8868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.641094][ T8869] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 161.675006][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 161.683856][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.4.1006 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 161.694682][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.704938][ T8868] Call Trace: [ 161.708219][ T8868] [ 161.711161][ T8868] dump_stack_lvl+0x241/0x360 [ 161.715876][ T8868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.721094][ T8868] ? __pfx__printk+0x10/0x10 [ 161.725722][ T8868] ? __pfx_lock_release+0x10/0x10 [ 161.730755][ T8868] should_fail_ex+0x3b0/0x4e0 [ 161.735439][ T8868] _copy_from_user+0x2f/0xc0 [ 161.740034][ T8868] do_ebt_get_ctl+0x2c8/0x29f0 [ 161.744815][ T8868] ? __pfx_validate_chain+0x10/0x10 [ 161.750021][ T8868] ? __lock_acquire+0x1397/0x2100 [ 161.755049][ T8868] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 161.760269][ T8868] ? __pfx___mutex_trylock_common+0x10/0x10 [ 161.766177][ T8868] ? nf_getsockopt+0x248/0x2c0 [ 161.770942][ T8868] ? __pfx_lock_release+0x10/0x10 [ 161.775964][ T8868] ? rcu_is_watching+0x15/0xb0 [ 161.780730][ T8868] ? trace_contention_end+0x3c/0x120 [ 161.786021][ T8868] ? __mutex_lock+0x37f/0xee0 [ 161.790718][ T8868] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.796701][ T8868] ? __might_fault+0xaa/0x120 [ 161.801373][ T8868] ? __mutex_trylock_common+0x183/0x2e0 [ 161.806921][ T8868] ? __pfx_lock_release+0x10/0x10 [ 161.811950][ T8868] nf_getsockopt+0x299/0x2c0 [ 161.816548][ T8868] ip_getsockopt+0x222/0x2e0 [ 161.821142][ T8868] ? __pfx_ip_getsockopt+0x10/0x10 [ 161.826271][ T8868] ? smc_getsockopt+0x144/0x3e0 [ 161.831133][ T8868] tcp_getsockopt+0x163/0x1c0 [ 161.835816][ T8868] ? __pfx_tcp_getsockopt+0x10/0x10 [ 161.841040][ T8868] ? __pfx___might_resched+0x10/0x10 [ 161.846351][ T8868] ? __might_fault+0xaa/0x120 [ 161.851032][ T8868] ? sock_common_getsockopt+0x2e/0xb0 [ 161.856412][ T8868] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 161.862326][ T8868] smc_getsockopt+0x1d9/0x3e0 [ 161.867003][ T8868] ? __pfx_smc_getsockopt+0x10/0x10 [ 161.872198][ T8868] ? __might_fault+0xc6/0x120 [ 161.876873][ T8868] ? __pfx_smc_getsockopt+0x10/0x10 [ 161.882067][ T8868] do_sock_getsockopt+0x3c4/0x7e0 [ 161.887096][ T8868] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 161.892647][ T8868] ? __fget_files+0x2a/0x410 [ 161.897240][ T8868] ? __fget_files+0x395/0x410 [ 161.901917][ T8868] ? __fget_files+0x2a/0x410 [ 161.906623][ T8868] __x64_sys_getsockopt+0x2a1/0x370 [ 161.911849][ T8868] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 161.917581][ T8868] ? do_syscall_64+0x100/0x230 [ 161.922350][ T8868] ? do_syscall_64+0xb6/0x230 [ 161.927027][ T8868] do_syscall_64+0xf3/0x230 [ 161.931529][ T8868] ? clear_bhb_loop+0x35/0x90 [ 161.936211][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.942100][ T8868] RIP: 0033:0x7f7fdfb85d29 [ 161.946583][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.966206][ T8868] RSP: 002b:00007f7fe0a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 161.974620][ T8868] RAX: ffffffffffffffda RBX: 00007f7fdfd75fa0 RCX: 00007f7fdfb85d29 [ 161.982584][ T8868] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 0000000000000003 [ 161.990550][ T8868] RBP: 00007f7fe0a42090 R08: 00000000200002c0 R09: 0000000000000000 [ 161.998516][ T8868] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 162.006484][ T8868] R13: 0000000000000000 R14: 00007f7fdfd75fa0 R15: 00007ffe1116ea78 [ 162.014465][ T8868] [ 162.070207][ T8873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1009'. [ 162.190369][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 162.328107][ T8886] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1015'. [ 162.350166][ T8886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'. [ 162.703569][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.709858][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 162.821192][ T8920] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 162.859081][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 163.085231][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 163.094531][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1035'. [ 163.641625][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 164.134857][ T8967] tipc: Enabled bearer , priority 0 [ 164.143256][ T8986] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 164.145870][ T8977] syzkaller0: MTU too low for tipc bearer [ 164.183590][ T8977] tipc: Disabling bearer [ 164.302207][ T8984] syzkaller0: entered promiscuous mode [ 164.321837][ T8984] syzkaller0: entered allmulticast mode [ 164.490225][ T9006] FAULT_INJECTION: forcing a failure. [ 164.490225][ T9006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.513857][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.2.1060 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 164.524598][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.534683][ T9006] Call Trace: [ 164.537994][ T9006] [ 164.541041][ T9006] dump_stack_lvl+0x241/0x360 [ 164.545767][ T9006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.551007][ T9006] ? __pfx__printk+0x10/0x10 [ 164.555640][ T9006] ? snprintf+0xda/0x120 [ 164.559913][ T9006] should_fail_ex+0x3b0/0x4e0 [ 164.564621][ T9006] _copy_to_user+0x31/0xb0 [ 164.569080][ T9006] simple_read_from_buffer+0xca/0x150 [ 164.574494][ T9006] proc_fail_nth_read+0x1e9/0x250 [ 164.579560][ T9006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.585144][ T9006] ? rw_verify_area+0x55e/0x6f0 [ 164.590025][ T9006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.595610][ T9006] vfs_read+0x1fc/0xb70 [ 164.599806][ T9006] ? __pfx___mutex_lock+0x10/0x10 [ 164.604871][ T9006] ? __pfx_vfs_read+0x10/0x10 [ 164.609583][ T9006] ? __fget_files+0x2a/0x410 [ 164.614206][ T9006] ? __fget_files+0x395/0x410 [ 164.618919][ T9006] ? __fget_files+0x2a/0x410 [ 164.623550][ T9006] ksys_read+0x18f/0x2b0 [ 164.627826][ T9006] ? __pfx_ksys_read+0x10/0x10 [ 164.632617][ T9006] ? do_syscall_64+0x100/0x230 [ 164.637403][ T9006] ? do_syscall_64+0xb6/0x230 [ 164.642117][ T9006] do_syscall_64+0xf3/0x230 [ 164.646640][ T9006] ? clear_bhb_loop+0x35/0x90 [ 164.651324][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.657217][ T9006] RIP: 0033:0x7efdd218473c [ 164.661635][ T9006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.681263][ T9006] RSP: 002b:00007efdd2f17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.689696][ T9006] RAX: ffffffffffffffda RBX: 00007efdd2375fa0 RCX: 00007efdd218473c [ 164.697681][ T9006] RDX: 000000000000000f RSI: 00007efdd2f170a0 RDI: 0000000000000006 [ 164.705647][ T9006] RBP: 00007efdd2f17090 R08: 0000000000000000 R09: 0000000000000000 [ 164.713700][ T9006] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 164.721691][ T9006] R13: 0000000000000000 R14: 00007efdd2375fa0 R15: 00007ffc315e51c8 [ 164.729773][ T9006] [ 164.829102][ T9014] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 165.361978][ T9030] FAULT_INJECTION: forcing a failure. [ 165.361978][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 165.407358][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.4.1069 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 165.418111][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.428198][ T9030] Call Trace: [ 165.431483][ T9030] [ 165.434420][ T9030] dump_stack_lvl+0x241/0x360 [ 165.439109][ T9030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.444307][ T9030] ? __pfx__printk+0x10/0x10 [ 165.448916][ T9030] ? __kmalloc_noprof+0xb5/0x4c0 [ 165.453855][ T9030] ? __pfx___might_resched+0x10/0x10 [ 165.459138][ T9030] should_fail_ex+0x3b0/0x4e0 [ 165.463816][ T9030] should_failslab+0xac/0x100 [ 165.468495][ T9030] __kmalloc_noprof+0xdd/0x4c0 [ 165.473256][ T9030] ? sock_kmalloc+0xd7/0x160 [ 165.477850][ T9030] sock_kmalloc+0xd7/0x160 [ 165.482618][ T9030] skcipher_recvmsg+0x5ff/0x1230 [ 165.487565][ T9030] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 165.492933][ T9030] ? aa_sock_msg_perm+0x91/0x160 [ 165.497868][ T9030] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 165.503238][ T9030] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 165.508611][ T9030] sock_recvmsg+0x22f/0x280 [ 165.513119][ T9030] ____sys_recvmsg+0x1c6/0x480 [ 165.517887][ T9030] ? __pfx_____sys_recvmsg+0x10/0x10 [ 165.523187][ T9030] do_recvmmsg+0x426/0xab0 [ 165.527611][ T9030] ? __pfx_do_recvmmsg+0x10/0x10 [ 165.532565][ T9030] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 165.538470][ T9030] ? ksys_write+0x22a/0x2b0 [ 165.542976][ T9030] ? __pfx_lock_release+0x10/0x10 [ 165.548003][ T9030] ? vfs_write+0x730/0xd30 [ 165.552425][ T9030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.558407][ T9030] ? __fget_files+0x2a/0x410 [ 165.563008][ T9030] __x64_sys_recvmmsg+0x199/0x250 [ 165.568032][ T9030] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 165.573575][ T9030] ? do_syscall_64+0x100/0x230 [ 165.578340][ T9030] ? do_syscall_64+0xb6/0x230 [ 165.583013][ T9030] do_syscall_64+0xf3/0x230 [ 165.587516][ T9030] ? clear_bhb_loop+0x35/0x90 [ 165.592195][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.598088][ T9030] RIP: 0033:0x7f7fdfb85d29 [ 165.602523][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.622127][ T9030] RSP: 002b:00007f7fe0a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 165.630550][ T9030] RAX: ffffffffffffffda RBX: 00007f7fdfd75fa0 RCX: 00007f7fdfb85d29 [ 165.638537][ T9030] RDX: 0000000000000001 RSI: 00000000200027c0 RDI: 0000000000000004 [ 165.646510][ T9030] RBP: 00007f7fe0a42090 R08: 0000000000000000 R09: 0000000000000000 [ 165.654480][ T9030] R10: 0000000000012021 R11: 0000000000000246 R12: 0000000000000001 [ 165.662447][ T9030] R13: 0000000000000000 R14: 00007f7fdfd75fa0 R15: 00007ffe1116ea78 [ 165.670428][ T9030] [ 167.330061][ T9057] __nla_validate_parse: 5 callbacks suppressed [ 167.330084][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 167.580464][ T9057] IPVS: Error joining to the multicast group [ 167.672527][ T9061] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1076'. [ 167.683766][ T9061] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.786365][ T9063] ax25_connect(): syz.3.1077 uses autobind, please contact jreuter@yaina.de [ 167.815068][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1078'. [ 167.838512][ T9066] tipc: Invalid UDP bearer configuration [ 167.838565][ T9066] tipc: Enabling of bearer rejected, failed to enable media [ 167.886869][ T9066] netlink: zone id is out of range [ 167.911258][ T9066] netlink: zone id is out of range [ 167.923153][ T9066] netlink: zone id is out of range [ 167.940602][ T9066] netlink: zone id is out of range [ 167.959248][ T9069] IPVS: Scheduler module ip_vs_sip not found [ 167.990350][ T9066] netlink: zone id is out of range [ 168.023530][ T9066] netlink: zone id is out of range [ 168.028700][ T9066] netlink: zone id is out of range [ 168.419224][ T9063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1077'. [ 168.782583][ T9099] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1089'. [ 168.845183][ T9103] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1091'. [ 168.905709][ T9105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1092'. [ 169.105861][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 169.141667][ T9111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 169.208325][ T9119] FAULT_INJECTION: forcing a failure. [ 169.208325][ T9119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.224516][ T9119] CPU: 1 UID: 0 PID: 9119 Comm: syz.2.1098 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 169.235240][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.245295][ T9119] Call Trace: [ 169.248570][ T9119] [ 169.251494][ T9119] dump_stack_lvl+0x241/0x360 [ 169.256185][ T9119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.261387][ T9119] ? __pfx__printk+0x10/0x10 [ 169.265978][ T9119] ? __pfx_lock_release+0x10/0x10 [ 169.271002][ T9119] ? percpu_ref_get_many+0x19/0x140 [ 169.276206][ T9119] should_fail_ex+0x3b0/0x4e0 [ 169.280888][ T9119] _copy_from_iter+0x1e9/0x1c20 [ 169.285746][ T9119] ? pipe_write+0x1c6/0x1a30 [ 169.290336][ T9119] ? __pfx__copy_from_iter+0x10/0x10 [ 169.295622][ T9119] ? alloc_pages_mpol_noprof+0x417/0x680 [ 169.301260][ T9119] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 169.307237][ T9119] ? page_copy_sane+0x46/0x260 [ 169.312004][ T9119] copy_page_from_iter+0x7a/0x100 [ 169.317138][ T9119] pipe_write+0x7f5/0x1a30 [ 169.321591][ T9119] ? __pfx_pipe_write+0x10/0x10 [ 169.326459][ T9119] ? common_file_perm+0x1a6/0x210 [ 169.331495][ T9119] ? bpf_lsm_file_permission+0x9/0x10 [ 169.336902][ T9119] ? security_file_permission+0x74/0x280 [ 169.342585][ T9119] vfs_write+0xaeb/0xd30 [ 169.346840][ T9119] ? __pfx_pipe_write+0x10/0x10 [ 169.351700][ T9119] ? __pfx_vfs_write+0x10/0x10 [ 169.356482][ T9119] ? __fget_files+0x2a/0x410 [ 169.361087][ T9119] ? __fget_files+0x2a/0x410 [ 169.365683][ T9119] ksys_write+0x18f/0x2b0 [ 169.370011][ T9119] ? __pfx_ksys_write+0x10/0x10 [ 169.374958][ T9119] ? do_syscall_64+0x100/0x230 [ 169.379719][ T9119] ? do_syscall_64+0xb6/0x230 [ 169.384393][ T9119] do_syscall_64+0xf3/0x230 [ 169.388898][ T9119] ? clear_bhb_loop+0x35/0x90 [ 169.393573][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.399464][ T9119] RIP: 0033:0x7efdd2185d29 [ 169.403884][ T9119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.423491][ T9119] RSP: 002b:00007efdd2f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.431916][ T9119] RAX: ffffffffffffffda RBX: 00007efdd2375fa0 RCX: 00007efdd2185d29 [ 169.439898][ T9119] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 169.447869][ T9119] RBP: 00007efdd2f17090 R08: 0000000000000000 R09: 0000000000000000 [ 169.455840][ T9119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.463812][ T9119] R13: 0000000000000000 R14: 00007efdd2375fa0 R15: 00007ffc315e51c8 [ 169.471793][ T9119] [ 169.674929][ T9132] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1103'. [ 169.715522][ T9132] net_ratelimit: 4 callbacks suppressed [ 169.715536][ T9132] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.746740][ T9122] IPVS: Scheduler module ip_vs_sip not found [ 169.840349][ T9135] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 169.903652][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 169.911019][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.740368][ T9163] bridge1: entered promiscuous mode [ 170.758637][ T9163] bridge1: entered allmulticast mode [ 170.824053][ T9163] team0: Port device bridge1 added [ 171.122114][ T9178] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 171.169885][ T9178] syz_tun: entered promiscuous mode [ 171.182069][ T9178] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 171.500239][ T9192] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 171.515621][ T9185] IPVS: Scheduler module ip_vs_sip not found [ 171.558964][ T9188] netlink: 'syz.0.1120': attribute type 9 has an invalid length. [ 171.624967][ T9194] ip6t_srh: unknown srh invflags 4000 [ 171.826169][ T9198] erspan1: entered promiscuous mode [ 171.831589][ T9198] erspan1: entered allmulticast mode [ 172.253171][ T9198] netlink: 'syz.0.1122': attribute type 21 has an invalid length. [ 172.273570][ T9198] netlink: 'syz.0.1122': attribute type 6 has an invalid length. [ 172.400073][ T9220] __nla_validate_parse: 10 callbacks suppressed [ 172.400094][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 172.429492][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1129'. [ 172.516167][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 172.542306][ T9226] IPVS: Error joining to the multicast group [ 172.683620][ T9230] netlink: 'syz.1.1133': attribute type 10 has an invalid length. [ 172.704191][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.704668][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 172.846250][ T9238] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 172.861186][ T9237] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 172.995065][ T9241] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 173.021959][ T9241] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 173.047300][ T9241] team0: Port device netdevsim0 added [ 173.316128][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 173.358347][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 173.367668][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1141'. [ 173.514810][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'. [ 173.636217][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 173.697877][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 173.823605][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 174.061297][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 174.086852][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1156'. [ 174.783859][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.791731][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 174.834827][ T9329] x_tables: duplicate underflow at hook 1 [ 175.169845][ T9349] xt_HMARK: spi-set and port-set can't be combined [ 175.950039][ T9396] sctp: [Deprecated]: syz.1.1189 (pid 9396) Use of int in max_burst socket option. [ 175.950039][ T9396] Use struct sctp_assoc_value instead [ 176.308783][ T9412] FAULT_INJECTION: forcing a failure. [ 176.308783][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 176.328632][ T9412] CPU: 1 UID: 0 PID: 9412 Comm: syz.3.1198 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 176.339360][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.349433][ T9412] Call Trace: [ 176.352727][ T9412] [ 176.355670][ T9412] dump_stack_lvl+0x241/0x360 [ 176.360379][ T9412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.365689][ T9412] ? __pfx__printk+0x10/0x10 [ 176.370310][ T9412] ? __kmalloc_noprof+0xb5/0x4c0 [ 176.375277][ T9412] ? __pfx___might_resched+0x10/0x10 [ 176.380578][ T9412] ? aa_get_newest_label+0xff/0x6f0 [ 176.385805][ T9412] should_fail_ex+0x3b0/0x4e0 [ 176.390510][ T9412] should_failslab+0xac/0x100 [ 176.395214][ T9412] __kmalloc_noprof+0xdd/0x4c0 [ 176.400004][ T9412] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 176.406275][ T9412] ? apparmor_capable+0x13b/0x1b0 [ 176.411328][ T9412] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 176.417433][ T9412] genl_rcv_msg+0x802/0xec0 [ 176.421971][ T9412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.427051][ T9412] ? __pfx_lock_acquire+0x10/0x10 [ 176.432098][ T9412] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 176.438192][ T9412] ? __pfx___might_resched+0x10/0x10 [ 176.443513][ T9412] netlink_rcv_skb+0x1e3/0x430 [ 176.448307][ T9412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.453354][ T9412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.458742][ T9412] genl_rcv+0x28/0x40 [ 176.462752][ T9412] netlink_unicast+0x7f6/0x990 [ 176.467550][ T9412] ? __pfx_netlink_unicast+0x10/0x10 [ 176.472851][ T9412] ? __virt_addr_valid+0x45f/0x530 [ 176.477984][ T9412] ? __phys_addr_symbol+0x2f/0x70 [ 176.483029][ T9412] ? __check_object_size+0x47a/0x730 [ 176.488348][ T9412] netlink_sendmsg+0x8e4/0xcb0 [ 176.493157][ T9412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.498471][ T9412] ? aa_sock_msg_perm+0x91/0x160 [ 176.503443][ T9412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.508747][ T9412] __sock_sendmsg+0x221/0x270 [ 176.513483][ T9412] ____sys_sendmsg+0x52a/0x7e0 [ 176.518285][ T9412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.523590][ T9412] ? __fget_files+0x2a/0x410 [ 176.528211][ T9412] ? __fget_files+0x2a/0x410 [ 176.532834][ T9412] __sys_sendmsg+0x269/0x350 [ 176.537444][ T9412] ? __pfx_lock_release+0x10/0x10 [ 176.542490][ T9412] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.547640][ T9412] ? __pfx_vfs_write+0x10/0x10 [ 176.552455][ T9412] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.558802][ T9412] ? do_syscall_64+0x100/0x230 [ 176.563588][ T9412] ? do_syscall_64+0xb6/0x230 [ 176.568287][ T9412] do_syscall_64+0xf3/0x230 [ 176.572808][ T9412] ? clear_bhb_loop+0x35/0x90 [ 176.577509][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.583420][ T9412] RIP: 0033:0x7fd2fd785d29 [ 176.587849][ T9412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.607487][ T9412] RSP: 002b:00007fd2fe62a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.615936][ T9412] RAX: ffffffffffffffda RBX: 00007fd2fd975fa0 RCX: 00007fd2fd785d29 [ 176.623938][ T9412] RDX: 0000000024040840 RSI: 0000000020000540 RDI: 0000000000000003 [ 176.631933][ T9412] RBP: 00007fd2fe62a090 R08: 0000000000000000 R09: 0000000000000000 [ 176.639902][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.647890][ T9412] R13: 0000000000000000 R14: 00007fd2fd975fa0 R15: 00007ffdb7d21de8 [ 176.655910][ T9412] [ 176.872291][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.104924][ T9441] netlink: 'syz.2.1207': attribute type 2 has an invalid length. [ 177.274907][ T9432] x_tables: duplicate entry at hook 1 [ 177.977458][ T9484] __nla_validate_parse: 21 callbacks suppressed [ 177.977475][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 178.171842][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 178.183581][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 178.321626][ T9500] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 178.341161][ T9503] FAULT_INJECTION: forcing a failure. [ 178.341161][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 178.355744][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.1.1227 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 178.366481][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.376571][ T9503] Call Trace: [ 178.379881][ T9503] [ 178.382845][ T9503] dump_stack_lvl+0x241/0x360 [ 178.387570][ T9503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.392808][ T9503] ? __pfx__printk+0x10/0x10 [ 178.397437][ T9503] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 178.401009][ T9500] veth0_macvtap: entered promiscuous mode [ 178.403429][ T9503] ? __pfx___might_resched+0x10/0x10 [ 178.403465][ T9503] should_fail_ex+0x3b0/0x4e0 [ 178.403490][ T9503] should_failslab+0xac/0x100 [ 178.403513][ T9503] kmem_cache_alloc_node_noprof+0x77/0x380 [ 178.403537][ T9503] ? __alloc_skb+0x1c3/0x440 [ 178.403560][ T9503] __alloc_skb+0x1c3/0x440 [ 178.403579][ T9503] ? validate_chain+0x11e/0x5920 [ 178.403605][ T9503] ? __pfx___alloc_skb+0x10/0x10 [ 178.403625][ T9503] ? reacquire_held_locks+0x5b0/0x690 [ 178.403650][ T9503] ? mark_lock+0x9a/0x360 [ 178.403673][ T9503] alloc_skb_with_frags+0xc3/0x820 [ 178.428463][ T9500] team0: Port device veth0_macvtap added [ 178.429851][ T9503] ? aa_label_sk_perm+0x4f3/0x6c0 [ 178.429898][ T9503] sock_alloc_send_pskb+0x91a/0xa60 [ 178.429938][ T9503] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 178.485258][ T9503] hci_sock_sendmsg+0x22b/0x11c0 [ 178.490244][ T9503] ? __pfx_aa_sk_perm+0x10/0x10 [ 178.495135][ T9503] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 178.500543][ T9503] ? __pfx_aa_file_perm+0x10/0x10 [ 178.505602][ T9503] ? aa_sock_msg_perm+0x91/0x160 [ 178.510583][ T9503] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 178.515987][ T9503] __sock_sendmsg+0x221/0x270 [ 178.520704][ T9503] sock_write_iter+0x2d7/0x3f0 [ 178.525511][ T9503] ? __pfx_sock_write_iter+0x10/0x10 [ 178.530847][ T9503] ? bpf_lsm_file_permission+0x9/0x10 [ 178.536261][ T9503] ? security_file_permission+0x74/0x280 [ 178.541965][ T9503] vfs_write+0xaeb/0xd30 [ 178.546239][ T9503] ? __pfx_sock_write_iter+0x10/0x10 [ 178.551560][ T9503] ? __pfx_vfs_write+0x10/0x10 [ 178.556356][ T9503] ? __fget_files+0x2a/0x410 [ 178.560985][ T9503] ? __fget_files+0x2a/0x410 [ 178.565614][ T9503] ksys_write+0x18f/0x2b0 [ 178.569974][ T9503] ? __pfx_ksys_write+0x10/0x10 [ 178.570378][ T9500] syz.2.1225 (9500) used greatest stack depth: 18640 bytes left [ 178.574829][ T9503] ? do_syscall_64+0x100/0x230 [ 178.574857][ T9503] ? do_syscall_64+0xb6/0x230 [ 178.574879][ T9503] do_syscall_64+0xf3/0x230 [ 178.574898][ T9503] ? clear_bhb_loop+0x35/0x90 [ 178.574923][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.574945][ T9503] RIP: 0033:0x7f8041785d29 [ 178.574963][ T9503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.574978][ T9503] RSP: 002b:00007f80425e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.639547][ T9503] RAX: ffffffffffffffda RBX: 00007f8041975fa0 RCX: 00007f8041785d29 [ 178.647525][ T9503] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000004 [ 178.655502][ T9503] RBP: 00007f80425e7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.663475][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.671533][ T9503] R13: 0000000000000000 R14: 00007f8041975fa0 R15: 00007ffcfe9bb668 [ 178.679539][ T9503] [ 178.977850][ T9517] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 181.220369][ T9557] FAULT_INJECTION: forcing a failure. [ 181.220369][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 181.250714][ T9557] CPU: 0 UID: 0 PID: 9557 Comm: syz.1.1243 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 181.261463][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.271552][ T9557] Call Trace: [ 181.274855][ T9557] [ 181.277808][ T9557] dump_stack_lvl+0x241/0x360 [ 181.282530][ T9557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.287764][ T9557] ? __pfx__printk+0x10/0x10 [ 181.292400][ T9557] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 181.298934][ T9557] ? __pfx___might_resched+0x10/0x10 [ 181.304259][ T9557] should_fail_ex+0x3b0/0x4e0 [ 181.308974][ T9557] should_failslab+0xac/0x100 [ 181.313695][ T9557] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 181.320046][ T9557] ? alloc_vfsmnt+0xeb/0x4d0 [ 181.324642][ T9557] kstrdup+0x39/0xb0 [ 181.328542][ T9557] alloc_vfsmnt+0xeb/0x4d0 [ 181.332956][ T9557] clone_mnt+0x6b/0xc80 [ 181.337107][ T9557] ? do_raw_spin_unlock+0x13c/0x8b0 [ 181.342302][ T9557] ? attach_mnt+0x4ed/0x600 [ 181.346805][ T9557] copy_tree+0x3f5/0x830 [ 181.351082][ T9557] ? copy_mnt_ns+0x176/0x8c0 [ 181.355707][ T9557] copy_mnt_ns+0x176/0x8c0 [ 181.360140][ T9557] ? rcu_is_watching+0x15/0xb0 [ 181.364922][ T9557] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 181.370304][ T9557] create_new_namespaces+0xd3/0x7b0 [ 181.375509][ T9557] ? bpf_lsm_capable+0x9/0x10 [ 181.380186][ T9557] ? security_capable+0x7e/0x2d0 [ 181.385123][ T9557] unshare_nsproxy_namespaces+0x124/0x180 [ 181.390842][ T9557] ksys_unshare+0x57d/0xa70 [ 181.395348][ T9557] ? __pfx_ksys_unshare+0x10/0x10 [ 181.400370][ T9557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.406728][ T9557] ? do_syscall_64+0x100/0x230 [ 181.411501][ T9557] __x64_sys_unshare+0x38/0x40 [ 181.416264][ T9557] do_syscall_64+0xf3/0x230 [ 181.420772][ T9557] ? clear_bhb_loop+0x35/0x90 [ 181.425453][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.431346][ T9557] RIP: 0033:0x7f8041785d29 [ 181.435767][ T9557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.455383][ T9557] RSP: 002b:00007f80425e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 181.463807][ T9557] RAX: ffffffffffffffda RBX: 00007f8041975fa0 RCX: 00007f8041785d29 [ 181.471782][ T9557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002020400 [ 181.479748][ T9557] RBP: 00007f80425e7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.487723][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.495696][ T9557] R13: 0000000000000000 R14: 00007f8041975fa0 R15: 00007ffcfe9bb668 [ 181.503680][ T9557] [ 181.668177][ T9569] wg1: entered promiscuous mode [ 181.759214][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 181.793480][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 182.423823][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'. [ 182.461783][ T9605] syz_tun: entered promiscuous mode [ 182.488059][ T9605] syz_tun: left promiscuous mode [ 182.525036][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1254'. [ 182.847122][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1264'. [ 182.885811][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1264'. [ 183.084675][ T9635] netlink: 'syz.0.1268': attribute type 7 has an invalid length. [ 183.103967][ T9635] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1268'. [ 183.213893][ T9648] FAULT_INJECTION: forcing a failure. [ 183.213893][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 183.231347][ T9648] CPU: 1 UID: 0 PID: 9648 Comm: syz.1.1272 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 183.242084][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.252175][ T9648] Call Trace: [ 183.255488][ T9648] [ 183.258439][ T9648] dump_stack_lvl+0x241/0x360 [ 183.263156][ T9648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.268402][ T9648] ? __pfx__printk+0x10/0x10 [ 183.273123][ T9648] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 183.279145][ T9648] ? __pfx___might_resched+0x10/0x10 [ 183.284473][ T9648] should_fail_ex+0x3b0/0x4e0 [ 183.289184][ T9648] should_failslab+0xac/0x100 [ 183.293900][ T9648] kmem_cache_alloc_node_noprof+0x77/0x380 [ 183.299748][ T9648] ? __alloc_skb+0x1c3/0x440 [ 183.304373][ T9648] __alloc_skb+0x1c3/0x440 [ 183.308826][ T9648] ? __pfx___alloc_skb+0x10/0x10 [ 183.313796][ T9648] ? netlink_autobind+0xd6/0x2f0 [ 183.318762][ T9648] ? netlink_autobind+0x2b0/0x2f0 [ 183.323824][ T9648] netlink_sendmsg+0x638/0xcb0 [ 183.328634][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.333962][ T9648] ? aa_sock_msg_perm+0x91/0x160 [ 183.339014][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.344324][ T9648] __sock_sendmsg+0x221/0x270 [ 183.349045][ T9648] ____sys_sendmsg+0x52a/0x7e0 [ 183.353845][ T9648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.359153][ T9648] ? __fget_files+0x2a/0x410 [ 183.363774][ T9648] ? __fget_files+0x2a/0x410 [ 183.368397][ T9648] __sys_sendmsg+0x269/0x350 [ 183.373014][ T9648] ? __pfx_lock_release+0x10/0x10 [ 183.378075][ T9648] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.383225][ T9648] ? __pfx_vfs_write+0x10/0x10 [ 183.388035][ T9648] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.394395][ T9648] ? do_syscall_64+0x100/0x230 [ 183.399184][ T9648] ? do_syscall_64+0xb6/0x230 [ 183.403898][ T9648] do_syscall_64+0xf3/0x230 [ 183.408429][ T9648] ? clear_bhb_loop+0x35/0x90 [ 183.413132][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.419053][ T9648] RIP: 0033:0x7f8041785d29 [ 183.423493][ T9648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.423654][ T9649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 183.443102][ T9648] RSP: 002b:00007f80425e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.443133][ T9648] RAX: ffffffffffffffda RBX: 00007f8041975fa0 RCX: 00007f8041785d29 [ 183.443146][ T9648] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000008 [ 183.443156][ T9648] RBP: 00007f80425e7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.443167][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.443178][ T9648] R13: 0000000000000000 R14: 00007f8041975fa0 R15: 00007ffcfe9bb668 [ 183.443202][ T9648] [ 183.564267][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1273'. [ 183.582123][ T9655] netlink: 'syz.1.1273': attribute type 7 has an invalid length. [ 183.593855][ T9655] netlink: 'syz.1.1273': attribute type 8 has an invalid length. [ 183.607515][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 183.629105][ T9655] erspan0: entered promiscuous mode [ 183.637369][ T9655] batadv_slave_1: entered promiscuous mode [ 183.647461][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1273'. [ 183.657466][ T9655] netlink: 'syz.1.1273': attribute type 7 has an invalid length. [ 183.665545][ T9655] netlink: 'syz.1.1273': attribute type 8 has an invalid length. [ 183.674058][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 184.014567][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 184.030267][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1278'. [ 184.739698][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1284'. [ 184.891074][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 184.922440][ T9701] IPVS: Error joining to the multicast group [ 185.293153][ T9719] 8021q: VLANs not supported on lo [ 185.373696][ T9712] x_tables: duplicate entry at hook 1 [ 185.775316][ T9739] FAULT_INJECTION: forcing a failure. [ 185.775316][ T9739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.788821][ T9739] CPU: 0 UID: 0 PID: 9739 Comm: syz.4.1299 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 185.799524][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.809584][ T9739] Call Trace: [ 185.812862][ T9739] [ 185.815795][ T9739] dump_stack_lvl+0x241/0x360 [ 185.820514][ T9739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.825736][ T9739] ? __pfx__printk+0x10/0x10 [ 185.830332][ T9739] ? __pfx_lock_release+0x10/0x10 [ 185.835354][ T9739] should_fail_ex+0x3b0/0x4e0 [ 185.840058][ T9739] _copy_from_iter+0x1e9/0x1c20 [ 185.844922][ T9739] ? __virt_addr_valid+0x183/0x530 [ 185.850060][ T9739] ? __alloc_skb+0x28f/0x440 [ 185.854651][ T9739] ? __pfx__copy_from_iter+0x10/0x10 [ 185.859936][ T9739] ? __virt_addr_valid+0x183/0x530 [ 185.865046][ T9739] ? __virt_addr_valid+0x183/0x530 [ 185.870152][ T9739] ? __virt_addr_valid+0x45f/0x530 [ 185.875258][ T9739] ? __phys_addr_symbol+0x2f/0x70 [ 185.880286][ T9739] ? __check_object_size+0x47a/0x730 [ 185.885570][ T9739] netlink_sendmsg+0x73d/0xcb0 [ 185.890340][ T9739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.895628][ T9739] ? aa_sock_msg_perm+0x91/0x160 [ 185.900568][ T9739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.905866][ T9739] __sock_sendmsg+0x221/0x270 [ 185.910577][ T9739] ____sys_sendmsg+0x52a/0x7e0 [ 185.915363][ T9739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.920659][ T9739] ? __fget_files+0x2a/0x410 [ 185.925258][ T9739] ? __fget_files+0x2a/0x410 [ 185.929858][ T9739] __sys_sendmsg+0x269/0x350 [ 185.934448][ T9739] ? __pfx_lock_release+0x10/0x10 [ 185.939473][ T9739] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.944594][ T9739] ? __pfx_vfs_write+0x10/0x10 [ 185.949369][ T9739] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.955700][ T9739] ? do_syscall_64+0x100/0x230 [ 185.960463][ T9739] ? do_syscall_64+0xb6/0x230 [ 185.965138][ T9739] do_syscall_64+0xf3/0x230 [ 185.969752][ T9739] ? clear_bhb_loop+0x35/0x90 [ 185.974441][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.980369][ T9739] RIP: 0033:0x7f7fdfb85d29 [ 185.984786][ T9739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.004412][ T9739] RSP: 002b:00007f7fe0a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.012828][ T9739] RAX: ffffffffffffffda RBX: 00007f7fdfd75fa0 RCX: 00007f7fdfb85d29 [ 186.020801][ T9739] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 186.028780][ T9739] RBP: 00007f7fe0a42090 R08: 0000000000000000 R09: 0000000000000000 [ 186.036748][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.044717][ T9739] R13: 0000000000000000 R14: 00007f7fdfd75fa0 R15: 00007ffe1116ea78 [ 186.052696][ T9739] [ 186.620851][ T9774] pim6reg1: entered allmulticast mode [ 186.671662][ T5881] IPVS: starting estimator thread 0... [ 186.689147][ T9771] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.763520][ T9778] IPVS: using max 21 ests per chain, 50400 per kthread [ 187.133708][ T9791] tipc: Cannot configure node identity twice [ 187.182855][ T9797] netlink: 'syz.2.1321': attribute type 4 has an invalid length. [ 187.362768][ T9804] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.414607][ T9806] netlink: 'syz.3.1325': attribute type 13 has an invalid length. [ 187.531382][ T9813] IPVS: Error joining to the multicast group [ 187.810563][ T9826] netlink: 'syz.3.1329': attribute type 4 has an invalid length. [ 188.368548][ T9845] vlan3: entered promiscuous mode [ 188.374131][ T9845] vlan3: entered allmulticast mode [ 188.380356][ T9845] bond0: entered allmulticast mode [ 188.387657][ T9845] bond_slave_0: entered allmulticast mode [ 188.393674][ T9845] bond_slave_1: entered allmulticast mode [ 188.399711][ T9845] syz_tun: entered allmulticast mode [ 188.442147][ T9845] team0: Port device vlan3 added [ 188.646603][ T9851] x_tables: duplicate underflow at hook 2 [ 188.703185][ T9851] bridge0: entered promiscuous mode [ 188.711712][ T9851] bridge0: entered allmulticast mode [ 188.740157][ T9851] netlink: 'syz.3.1341': attribute type 9 has an invalid length. [ 188.758895][ T9851] netlink: 'syz.3.1341': attribute type 7 has an invalid length. [ 188.794191][ T9851] netlink: 'syz.3.1341': attribute type 8 has an invalid length. [ 189.146930][ T9875] __nla_validate_parse: 14 callbacks suppressed [ 189.146952][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 189.183190][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1351'. [ 189.304055][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 189.333682][ T9881] IPVS: Error joining to the multicast group [ 189.527745][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 189.580767][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 190.330088][ T9915] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 190.478805][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 190.493119][ T9921] IPVS: Error joining to the multicast group [ 190.754081][ T9923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.782438][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1362'. [ 191.072769][ T9935] netlink: 'syz.2.1365': attribute type 2 has an invalid length. [ 191.080757][ T9935] netlink: 'syz.2.1365': attribute type 9 has an invalid length. [ 191.088912][ T9935] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1365'. [ 191.471720][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 191.502343][ T9952] IPVS: Error joining to the multicast group [ 191.730709][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 191.743522][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.746144][ T5839] Bluetooth: hci3: command 0x0401 tx timeout [ 191.750609][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 191.758488][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 192.263986][ T9976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.484274][ T9984] @ÿ: renamed from bond_slave_0 [ 193.523679][T10004] bond0 (unregistering): left promiscuous mode [ 193.583457][T10004] bond0 (unregistering): Released all slaves [ 193.626248][T10017] IPVS: Error joining to the multicast group [ 194.239819][T10036] __nla_validate_parse: 8 callbacks suppressed [ 194.239838][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 194.293531][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 194.397154][T10046] netlink: 'syz.4.1394': attribute type 4 has an invalid length. [ 194.548596][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 194.571611][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1398'. [ 194.789783][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.002057][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1402'. [ 195.335989][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 195.365928][T10087] IPVS: Error joining to the multicast group [ 195.833210][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 195.865986][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 196.426964][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'. [ 196.752570][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 197.100430][T10143] IPVS: Error joining to the multicast group [ 197.755959][T10162] IPVS: Error joining to the multicast group [ 197.779113][T10163] batadv_slave_1: entered promiscuous mode [ 197.890593][T10163] batadv_slave_1: left promiscuous mode [ 198.958706][T10211] IPVS: Error joining to the multicast group [ 199.868535][T10230] __nla_validate_parse: 12 callbacks suppressed [ 199.868555][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 200.608692][T10241] IPVS: Scheduler module ip_vs_sip not found [ 201.541141][T10264] netlink: 30 bytes leftover after parsing attributes in process `syz.4.1469'. [ 202.046872][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 202.283740][T10293] FAULT_INJECTION: forcing a failure. [ 202.283740][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 202.322739][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.4.1477 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 202.333571][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.343660][T10293] Call Trace: [ 202.346952][T10293] [ 202.349894][T10293] dump_stack_lvl+0x241/0x360 [ 202.354590][T10293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.359887][T10293] ? __pfx__printk+0x10/0x10 [ 202.364491][T10293] should_fail_ex+0x3b0/0x4e0 [ 202.369197][T10293] should_failslab+0xac/0x100 [ 202.373885][T10293] __kmalloc_cache_noprof+0x70/0x390 [ 202.379172][T10293] ? __hw_addr_add_ex+0x1a8/0x610 [ 202.384198][T10293] __hw_addr_add_ex+0x1a8/0x610 [ 202.389075][T10293] dev_addr_init+0x143/0x230 [ 202.393665][T10293] ? __pfx_dev_addr_init+0x10/0x10 [ 202.398787][T10293] ? read_word_at_a_time+0xe/0x20 [ 202.403822][T10293] alloc_netdev_mqs+0x2ae/0x1080 [ 202.408763][T10293] ? __pfx_macvlan_setup+0x10/0x10 [ 202.413931][T10293] ? __pfx_snprintf+0x10/0x10 [ 202.418632][T10293] rtnl_create_link+0x2f9/0xc20 [ 202.423489][T10293] rtnl_newlink_create+0x210/0xa40 [ 202.428605][T10293] ? __pfx___mutex_lock+0x10/0x10 [ 202.433629][T10293] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 202.439266][T10293] ? ns_capable+0x8a/0xf0 [ 202.443607][T10293] rtnl_newlink+0x1c7e/0x2210 [ 202.448301][T10293] ? __pfx_rtnl_newlink+0x10/0x10 [ 202.453327][T10293] ? __netlink_deliver_tap+0x56b/0x7f0 [ 202.458797][T10293] ? __pfx_validate_chain+0x10/0x10 [ 202.464010][T10293] ? __sock_sendmsg+0x221/0x270 [ 202.468866][T10293] ? ____sys_sendmsg+0x52a/0x7e0 [ 202.473800][T10293] ? __sys_sendmsg+0x269/0x350 [ 202.478560][T10293] ? do_syscall_64+0xf3/0x230 [ 202.483230][T10293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.489320][T10293] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.495307][T10293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.501641][T10293] ? mark_lock+0x9a/0x360 [ 202.505978][T10293] ? __lock_acquire+0x1397/0x2100 [ 202.511025][T10293] ? __pfx_lock_release+0x10/0x10 [ 202.516063][T10293] ? __pfx_rtnl_newlink+0x10/0x10 [ 202.521090][T10293] rtnetlink_rcv_msg+0x791/0xcf0 [ 202.526030][T10293] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 202.531144][T10293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.536605][T10293] ? ref_tracker_free+0x643/0x7e0 [ 202.541634][T10293] netlink_rcv_skb+0x1e3/0x430 [ 202.546401][T10293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.551869][T10293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.557167][T10293] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.562370][T10293] netlink_unicast+0x7f6/0x990 [ 202.567142][T10293] ? __pfx_netlink_unicast+0x10/0x10 [ 202.572419][T10293] ? __virt_addr_valid+0x45f/0x530 [ 202.577532][T10293] ? __phys_addr_symbol+0x2f/0x70 [ 202.582576][T10293] ? __check_object_size+0x47a/0x730 [ 202.587914][T10293] netlink_sendmsg+0x8e4/0xcb0 [ 202.592774][T10293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.598063][T10293] ? aa_sock_msg_perm+0x91/0x160 [ 202.603008][T10293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.608297][T10293] __sock_sendmsg+0x221/0x270 [ 202.612984][T10293] ____sys_sendmsg+0x52a/0x7e0 [ 202.617755][T10293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.623058][T10293] ? __fget_files+0x2a/0x410 [ 202.627653][T10293] ? __fget_files+0x2a/0x410 [ 202.632247][T10293] __sys_sendmsg+0x269/0x350 [ 202.636840][T10293] ? __pfx_lock_release+0x10/0x10 [ 202.641866][T10293] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.646984][T10293] ? __pfx_vfs_write+0x10/0x10 [ 202.651765][T10293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.658094][T10293] ? do_syscall_64+0x100/0x230 [ 202.662859][T10293] ? do_syscall_64+0xb6/0x230 [ 202.667538][T10293] do_syscall_64+0xf3/0x230 [ 202.672041][T10293] ? clear_bhb_loop+0x35/0x90 [ 202.676723][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.682616][T10293] RIP: 0033:0x7f7fdfb85d29 [ 202.687034][T10293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.706992][T10293] RSP: 002b:00007f7fe0a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.715420][T10293] RAX: ffffffffffffffda RBX: 00007f7fdfd76080 RCX: 00007f7fdfb85d29 [ 202.723392][T10293] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 202.731362][T10293] RBP: 00007f7fe0a21090 R08: 0000000000000000 R09: 0000000000000000 [ 202.739355][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.747336][T10293] R13: 0000000000000000 R14: 00007f7fdfd76080 R15: 00007ffe1116ea78 [ 202.755325][T10293] [ 202.772400][T10299] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 202.783788][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.784342][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 202.843886][T10298] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.1478'. [ 202.869330][T10298] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.083593][T10310] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1483'. [ 203.083938][T10313] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1483'. [ 203.162022][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1484'. [ 203.207172][T10316] netlink: 'syz.0.1484': attribute type 7 has an invalid length. [ 203.242499][T10318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.243721][T10316] netlink: 'syz.0.1484': attribute type 8 has an invalid length. [ 203.283306][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 203.779796][T10340] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.1493'. [ 203.801333][T10340] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.085733][T10351] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1495'. [ 204.385492][T10354] FAULT_INJECTION: forcing a failure. [ 204.385492][T10354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.403537][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.0.1497 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 204.414632][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.424719][T10354] Call Trace: [ 204.428018][T10354] [ 204.430969][T10354] dump_stack_lvl+0x241/0x360 [ 204.435774][T10354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.441016][T10354] ? __pfx__printk+0x10/0x10 [ 204.445641][T10354] ? __pfx_lock_release+0x10/0x10 [ 204.450698][T10354] should_fail_ex+0x3b0/0x4e0 [ 204.455407][T10354] _copy_from_user+0x2f/0xc0 [ 204.460038][T10354] ____sys_sendmsg+0x2ef/0x7e0 [ 204.464842][T10354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.470149][T10354] ? __fget_files+0x2a/0x410 [ 204.474786][T10354] ? __fget_files+0x2a/0x410 [ 204.479411][T10354] __sys_sendmsg+0x269/0x350 [ 204.484025][T10354] ? __pfx_lock_release+0x10/0x10 [ 204.489078][T10354] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.494241][T10354] ? __pfx_vfs_write+0x10/0x10 [ 204.499064][T10354] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.505428][T10354] ? do_syscall_64+0x100/0x230 [ 204.510218][T10354] ? do_syscall_64+0xb6/0x230 [ 204.514931][T10354] do_syscall_64+0xf3/0x230 [ 204.519465][T10354] ? clear_bhb_loop+0x35/0x90 [ 204.524179][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.530112][T10354] RIP: 0033:0x7f1a08f85d29 [ 204.534553][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.554196][T10354] RSP: 002b:00007f1a06df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.562649][T10354] RAX: ffffffffffffffda RBX: 00007f1a09175fa0 RCX: 00007f1a08f85d29 [ 204.570651][T10354] RDX: 0000000024004800 RSI: 0000000020000040 RDI: 0000000000000003 [ 204.578742][T10354] RBP: 00007f1a06df6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.586752][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.594769][T10354] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 204.602795][T10354] [ 205.136847][T10383] FAULT_INJECTION: forcing a failure. [ 205.136847][T10383] name failslab, interval 1, probability 0, space 0, times 0 [ 205.185124][T10383] CPU: 0 UID: 0 PID: 10383 Comm: syz.0.1507 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 205.195958][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.206215][T10383] Call Trace: [ 205.209516][T10383] [ 205.212463][T10383] dump_stack_lvl+0x241/0x360 [ 205.217173][T10383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.222395][T10383] ? __pfx__printk+0x10/0x10 [ 205.227011][T10383] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 205.233537][T10383] ? __pfx___might_resched+0x10/0x10 [ 205.238846][T10383] should_fail_ex+0x3b0/0x4e0 [ 205.243543][T10383] should_failslab+0xac/0x100 [ 205.248248][T10383] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 205.254602][T10383] ? kasprintf+0xd5/0x120 [ 205.258960][T10383] kvasprintf+0xdf/0x190 [ 205.263222][T10383] ? __kmalloc_noprof+0x285/0x4c0 [ 205.268256][T10383] ? nla_strdup+0x9c/0x140 [ 205.272676][T10383] ? nf_tables_newset+0x17b2/0x2ee0 [ 205.277874][T10383] ? __pfx_kvasprintf+0x10/0x10 [ 205.282725][T10383] ? ____sys_sendmsg+0x52a/0x7e0 [ 205.287683][T10383] kasprintf+0xd5/0x120 [ 205.291845][T10383] ? __pfx_kasprintf+0x10/0x10 [ 205.296621][T10383] nf_tables_set_alloc_name+0x111/0x730 [ 205.302187][T10383] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 205.308257][T10383] ? __asan_memcpy+0x40/0x70 [ 205.312845][T10383] ? nla_strdup+0xb7/0x140 [ 205.317353][T10383] nf_tables_newset+0x17d3/0x2ee0 [ 205.322391][T10383] ? __pfx_nf_tables_newset+0x10/0x10 [ 205.327770][T10383] ? __pfx_lock_release+0x10/0x10 [ 205.332802][T10383] ? __nla_parse+0x40/0x60 [ 205.337225][T10383] nfnetlink_rcv+0x14e3/0x2ab0 [ 205.342014][T10383] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 205.347163][T10383] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.352362][T10383] ? skb_clone+0x240/0x390 [ 205.356781][T10383] ? __pfx_lock_release+0x10/0x10 [ 205.361814][T10383] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.367015][T10383] netlink_unicast+0x7f6/0x990 [ 205.371785][T10383] ? __pfx_netlink_unicast+0x10/0x10 [ 205.377072][T10383] ? __virt_addr_valid+0x45f/0x530 [ 205.382187][T10383] ? __phys_addr_symbol+0x2f/0x70 [ 205.387218][T10383] ? __check_object_size+0x47a/0x730 [ 205.392505][T10383] netlink_sendmsg+0x8e4/0xcb0 [ 205.397278][T10383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.402567][T10383] ? aa_sock_msg_perm+0x91/0x160 [ 205.407595][T10383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.412878][T10383] __sock_sendmsg+0x221/0x270 [ 205.417562][T10383] ____sys_sendmsg+0x52a/0x7e0 [ 205.422330][T10383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.427616][T10383] ? __fget_files+0x2a/0x410 [ 205.432299][T10383] ? __fget_files+0x2a/0x410 [ 205.436900][T10383] __sys_sendmsg+0x269/0x350 [ 205.441489][T10383] ? __pfx_lock_release+0x10/0x10 [ 205.446520][T10383] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.451643][T10383] ? __pfx_vfs_write+0x10/0x10 [ 205.456423][T10383] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.462752][T10383] ? do_syscall_64+0x100/0x230 [ 205.467525][T10383] ? do_syscall_64+0xb6/0x230 [ 205.472205][T10383] do_syscall_64+0xf3/0x230 [ 205.476740][T10383] ? clear_bhb_loop+0x35/0x90 [ 205.481424][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.487402][T10383] RIP: 0033:0x7f1a08f85d29 [ 205.491816][T10383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.511420][T10383] RSP: 002b:00007f1a06df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.519837][T10383] RAX: ffffffffffffffda RBX: 00007f1a09175fa0 RCX: 00007f1a08f85d29 [ 205.527807][T10383] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 205.535774][T10383] RBP: 00007f1a06df6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.543741][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.551714][T10383] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 205.559698][T10383] [ 206.242752][T10405] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 206.468017][T10420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1517'. [ 206.501213][T10393] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 206.698166][T10428] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1521'. [ 206.700636][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1519'. [ 206.708032][T10428] openvswitch: netlink: Flow actions attr not present in new flow. [ 207.174332][T10435] ebtables: ebtables: counters copy to user failed while replacing table [ 207.268168][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'. [ 207.422427][T10445] syz_tun (unregistering): left promiscuous mode [ 207.590085][T10446] ebtables: ebtables: counters copy to user failed while replacing table [ 207.954711][T10463] IPVS: Scheduler module ip_vs_sip not found [ 208.323244][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 208.335144][T10487] IPVS: Error joining to the multicast group [ 208.548346][T10489] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1539'. [ 208.560978][T10489] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.725433][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 208.786946][T10495] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1542'. [ 208.869880][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 208.879118][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1545'. [ 209.172966][T10515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.205178][T10517] openvswitch: netlink: Flow actions attr not present in new flow. [ 209.416951][T10521] IPVS: Scheduler module ip_vs_sip not found [ 209.903592][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 209.978575][T10551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.040813][T10554] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.135981][T10558] IPVS: Error joining to the multicast group [ 210.209026][T10560] netlink: 'syz.1.1565': attribute type 3 has an invalid length. [ 210.255348][T10562] FAULT_INJECTION: forcing a failure. [ 210.255348][T10562] name failslab, interval 1, probability 0, space 0, times 0 [ 210.282236][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.4.1566 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 210.293052][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.303148][T10562] Call Trace: [ 210.306459][T10562] [ 210.309411][T10562] dump_stack_lvl+0x241/0x360 [ 210.314136][T10562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.319375][T10562] ? __pfx__printk+0x10/0x10 [ 210.323998][T10562] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 210.329930][T10562] ? __pfx___might_resched+0x10/0x10 [ 210.335284][T10562] should_fail_ex+0x3b0/0x4e0 [ 210.339990][T10562] should_failslab+0xac/0x100 [ 210.344697][T10562] ? sock_alloc_inode+0x28/0xc0 [ 210.349573][T10562] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 210.355405][T10562] sock_alloc_inode+0x28/0xc0 [ 210.360094][T10562] ? __pfx_sock_alloc_inode+0x10/0x10 [ 210.365480][T10562] alloc_inode+0x65/0x1a0 [ 210.369815][T10562] __sock_create+0x127/0xa30 [ 210.374419][T10562] udp_sock_create6+0xe7/0x870 [ 210.379181][T10562] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 210.384996][T10562] ? __pfx_udp_sock_create6+0x10/0x10 [ 210.390382][T10562] ? rxrpc_lookup_local+0xce4/0x1890 [ 210.395670][T10562] rxrpc_lookup_local+0xd8f/0x1890 [ 210.400791][T10562] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 210.406344][T10562] ? __local_bh_enable_ip+0x168/0x200 [ 210.411726][T10562] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 210.417446][T10562] ? do_raw_spin_unlock+0x13c/0x8b0 [ 210.422651][T10562] rxrpc_sendmsg+0x4d9/0x920 [ 210.427252][T10562] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 210.432369][T10562] __sock_sendmsg+0x221/0x270 [ 210.437060][T10562] ____sys_sendmsg+0x52a/0x7e0 [ 210.441834][T10562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.447119][T10562] ? __fget_files+0x2a/0x410 [ 210.451718][T10562] ? __fget_files+0x2a/0x410 [ 210.456316][T10562] __sys_sendmsg+0x269/0x350 [ 210.461343][T10562] ? __pfx_lock_release+0x10/0x10 [ 210.466377][T10562] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.471511][T10562] ? __pfx_vfs_write+0x10/0x10 [ 210.476303][T10562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.482647][T10562] ? do_syscall_64+0x100/0x230 [ 210.487415][T10562] ? do_syscall_64+0xb6/0x230 [ 210.492092][T10562] do_syscall_64+0xf3/0x230 [ 210.496599][T10562] ? clear_bhb_loop+0x35/0x90 [ 210.501283][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.507177][T10562] RIP: 0033:0x7f7fdfb85d29 [ 210.511614][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.531232][T10562] RSP: 002b:00007f7fe0a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.539646][T10562] RAX: ffffffffffffffda RBX: 00007f7fdfd75fa0 RCX: 00007f7fdfb85d29 [ 210.547617][T10562] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 210.555611][T10562] RBP: 00007f7fe0a42090 R08: 0000000000000000 R09: 0000000000000000 [ 210.563578][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.571547][T10562] R13: 0000000000000000 R14: 00007f7fdfd75fa0 R15: 00007ffe1116ea78 [ 210.579528][T10562] [ 210.601188][T10562] socket: no more sockets [ 210.831860][T10575] netlink: 'syz.2.1568': attribute type 1 has an invalid length. [ 210.838078][T10574] FAULT_INJECTION: forcing a failure. [ 210.838078][T10574] name failslab, interval 1, probability 0, space 0, times 0 [ 210.882429][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.3.1570 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 210.893261][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.903357][T10574] Call Trace: [ 210.906660][T10574] [ 210.909606][T10574] dump_stack_lvl+0x241/0x360 [ 210.914327][T10574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.919561][T10574] ? __pfx__printk+0x10/0x10 [ 210.924186][T10574] should_fail_ex+0x3b0/0x4e0 [ 210.928902][T10574] should_failslab+0xac/0x100 [ 210.933621][T10574] __kmalloc_cache_noprof+0x70/0x390 [ 210.938931][T10574] ? sctp_add_bind_addr+0x89/0x3a0 [ 210.944051][T10574] sctp_add_bind_addr+0x89/0x3a0 [ 210.948992][T10574] sctp_copy_local_addr_list+0x311/0x500 [ 210.954629][T10574] ? sctp_copy_local_addr_list+0xab/0x500 [ 210.960369][T10574] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 210.966520][T10574] ? sctp_v6_is_any+0x60/0x70 [ 210.971200][T10574] sctp_bind_addr_copy+0xad/0x3b0 [ 210.976227][T10574] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 210.982553][T10574] sctp_connect_new_asoc+0x2f3/0x6c0 [ 210.987846][T10574] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 210.993798][T10574] ? sctp_get_af_specific+0x2a/0x80 [ 210.999013][T10574] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 211.004836][T10574] __sctp_connect+0x66d/0xe30 [ 211.009545][T10574] ? __local_bh_enable_ip+0x168/0x200 [ 211.014922][T10574] ? __pfx___sctp_connect+0x10/0x10 [ 211.020140][T10574] ? sctp_inet_connect+0xa7/0x1f0 [ 211.025236][T10574] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 211.031065][T10574] ? do_raw_spin_unlock+0x13c/0x8b0 [ 211.036274][T10574] sctp_inet_connect+0x149/0x1f0 [ 211.041218][T10574] __sys_connect+0x288/0x2d0 [ 211.045807][T10574] ? __fget_files+0x2a/0x410 [ 211.050414][T10574] ? __pfx___sys_connect+0x10/0x10 [ 211.055540][T10574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.061879][T10574] ? do_syscall_64+0x100/0x230 [ 211.066645][T10574] __x64_sys_connect+0x7a/0x90 [ 211.071438][T10574] do_syscall_64+0xf3/0x230 [ 211.075945][T10574] ? clear_bhb_loop+0x35/0x90 [ 211.080622][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.086518][T10574] RIP: 0033:0x7fd2fd785d29 [ 211.090938][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.110568][T10574] RSP: 002b:00007fd2fe62a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 211.118988][T10574] RAX: ffffffffffffffda RBX: 00007fd2fd975fa0 RCX: 00007fd2fd785d29 [ 211.126954][T10574] RDX: 0000000000000010 RSI: 0000000020004cc0 RDI: 0000000000000007 [ 211.134921][T10574] RBP: 00007fd2fe62a090 R08: 0000000000000000 R09: 0000000000000000 [ 211.142906][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.150874][T10574] R13: 0000000000000000 R14: 00007fd2fd975fa0 R15: 00007ffdb7d21de8 [ 211.158853][T10574] [ 211.296251][T10583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.371936][T10587] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.496795][T10585] IPVS: Scheduler module ip_vs_sip not found [ 211.580885][T10600] __nla_validate_parse: 14 callbacks suppressed [ 211.580905][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 211.588550][T10603] ip6t_srh: unknown srh match flags 5294 [ 211.598655][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1580'. [ 211.795860][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 211.813826][T10612] FAULT_INJECTION: forcing a failure. [ 211.813826][T10612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.846083][T10610] IPVS: Error joining to the multicast group [ 211.861657][T10612] CPU: 0 UID: 0 PID: 10612 Comm: syz.0.1582 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 211.872466][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.882533][T10612] Call Trace: [ 211.886008][T10612] [ 211.888937][T10612] dump_stack_lvl+0x241/0x360 [ 211.893648][T10612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.898869][T10612] ? __pfx__printk+0x10/0x10 [ 211.903466][T10612] ? snprintf+0xda/0x120 [ 211.907722][T10612] should_fail_ex+0x3b0/0x4e0 [ 211.912598][T10612] _copy_to_user+0x31/0xb0 [ 211.917046][T10612] simple_read_from_buffer+0xca/0x150 [ 211.922434][T10612] proc_fail_nth_read+0x1e9/0x250 [ 211.927468][T10612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.933020][T10612] ? rw_verify_area+0x55e/0x6f0 [ 211.937916][T10612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.943475][T10612] vfs_read+0x1fc/0xb70 [ 211.947640][T10612] ? __pfx___mutex_lock+0x10/0x10 [ 211.952698][T10612] ? __pfx_vfs_read+0x10/0x10 [ 211.957403][T10612] ? __fget_files+0x2a/0x410 [ 211.962026][T10612] ? __fget_files+0x395/0x410 [ 211.966725][T10612] ? __fget_files+0x2a/0x410 [ 211.971356][T10612] ksys_read+0x18f/0x2b0 [ 211.975634][T10612] ? __pfx_ksys_read+0x10/0x10 [ 211.980512][T10612] ? do_syscall_64+0x100/0x230 [ 211.985318][T10612] ? do_syscall_64+0xb6/0x230 [ 211.990032][T10612] do_syscall_64+0xf3/0x230 [ 211.994610][T10612] ? clear_bhb_loop+0x35/0x90 [ 211.999291][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.005193][T10612] RIP: 0033:0x7f1a08f8473c [ 212.009607][T10612] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.029227][T10612] RSP: 002b:00007f1a06df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.037659][T10612] RAX: ffffffffffffffda RBX: 00007f1a09175fa0 RCX: 00007f1a08f8473c [ 212.045662][T10612] RDX: 000000000000000f RSI: 00007f1a06df60a0 RDI: 0000000000000003 [ 212.053668][T10612] RBP: 00007f1a06df6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.061656][T10612] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 212.069648][T10612] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 212.077672][T10612] [ 212.181103][T10615] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 212.189131][T10615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.196409][T10615] IPv6: NLM_F_CREATE should be set when creating new route [ 212.206142][T10615] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 212.214073][T10615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.569590][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 212.578734][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1588'. [ 212.758357][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 212.774642][T10639] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1591'. [ 212.807840][T10639] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.818793][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 212.846346][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 213.067144][T10658] IPVS: Scheduler module ip_vs_sip not found [ 213.202101][T10652] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1597'. [ 213.241488][T10662] FAULT_INJECTION: forcing a failure. [ 213.241488][T10662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.266216][T10662] CPU: 1 UID: 0 PID: 10662 Comm: syz.1.1599 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 213.277044][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.287227][T10662] Call Trace: [ 213.290537][T10662] [ 213.293486][T10662] dump_stack_lvl+0x241/0x360 [ 213.298203][T10662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.303426][T10662] ? __pfx__printk+0x10/0x10 [ 213.308062][T10662] ? __pfx_lock_release+0x10/0x10 [ 213.313306][T10662] should_fail_ex+0x3b0/0x4e0 [ 213.318028][T10662] _copy_from_iter+0x1e9/0x1c20 [ 213.323436][T10662] ? __virt_addr_valid+0x183/0x530 [ 213.328584][T10662] ? __alloc_skb+0x28f/0x440 [ 213.333370][T10662] ? __pfx__copy_from_iter+0x10/0x10 [ 213.338688][T10662] ? __virt_addr_valid+0x183/0x530 [ 213.343846][T10662] ? __virt_addr_valid+0x183/0x530 [ 213.348980][T10662] ? __virt_addr_valid+0x45f/0x530 [ 213.354133][T10662] ? __phys_addr_symbol+0x2f/0x70 [ 213.359195][T10662] ? __check_object_size+0x47a/0x730 [ 213.364528][T10662] netlink_sendmsg+0x73d/0xcb0 [ 213.369340][T10662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.374661][T10662] ? aa_sock_msg_perm+0x91/0x160 [ 213.379641][T10662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.384965][T10662] __sock_sendmsg+0x221/0x270 [ 213.389777][T10662] ____sys_sendmsg+0x52a/0x7e0 [ 213.394594][T10662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.399917][T10662] ? __fget_files+0x2a/0x410 [ 213.404566][T10662] ? __fget_files+0x2a/0x410 [ 213.409380][T10662] __sys_sendmsg+0x269/0x350 [ 213.414020][T10662] ? __pfx_lock_release+0x10/0x10 [ 213.419091][T10662] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.423593][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 213.424220][T10662] ? __pfx_vfs_write+0x10/0x10 [ 213.435655][T10662] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.441991][T10662] ? do_syscall_64+0x100/0x230 [ 213.446797][T10662] ? do_syscall_64+0xb6/0x230 [ 213.451500][T10662] do_syscall_64+0xf3/0x230 [ 213.456030][T10662] ? clear_bhb_loop+0x35/0x90 [ 213.460745][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.466671][T10662] RIP: 0033:0x7f8041785d29 [ 213.471100][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.490721][T10662] RSP: 002b:00007f80425e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.499246][T10662] RAX: ffffffffffffffda RBX: 00007f8041975fa0 RCX: 00007f8041785d29 [ 213.507213][T10662] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 213.515179][T10662] RBP: 00007f80425e7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.523150][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.531136][T10662] R13: 0000000000000000 R14: 00007f8041975fa0 R15: 00007ffcfe9bb668 [ 213.539125][T10662] [ 213.806659][T10675] FAULT_INJECTION: forcing a failure. [ 213.806659][T10675] name failslab, interval 1, probability 0, space 0, times 0 [ 213.822022][T10675] CPU: 0 UID: 0 PID: 10675 Comm: syz.0.1602 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 213.832842][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.842922][T10675] Call Trace: [ 213.846202][T10675] [ 213.849131][T10675] dump_stack_lvl+0x241/0x360 [ 213.853816][T10675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.859014][T10675] ? __pfx__printk+0x10/0x10 [ 213.863617][T10675] ? __kmalloc_noprof+0xb5/0x4c0 [ 213.868583][T10675] ? __pfx___might_resched+0x10/0x10 [ 213.873898][T10675] should_fail_ex+0x3b0/0x4e0 [ 213.878687][T10675] should_failslab+0xac/0x100 [ 213.883375][T10675] __kmalloc_noprof+0xdd/0x4c0 [ 213.888140][T10675] ? sock_kmalloc+0xd7/0x160 [ 213.892732][T10675] sock_kmalloc+0xd7/0x160 [ 213.897149][T10675] af_alg_alloc_areq+0x90/0x260 [ 213.902008][T10675] skcipher_recvmsg+0x382/0x1230 [ 213.906968][T10675] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 213.912336][T10675] ? aa_sock_msg_perm+0x91/0x160 [ 213.917272][T10675] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 213.922555][T10675] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 213.927932][T10675] sock_recvmsg+0x22f/0x280 [ 213.932479][T10675] ____sys_recvmsg+0x1c6/0x480 [ 213.937288][T10675] ? __pfx_____sys_recvmsg+0x10/0x10 [ 213.942599][T10675] do_recvmmsg+0x426/0xab0 [ 213.947028][T10675] ? __pfx_do_recvmmsg+0x10/0x10 [ 213.951979][T10675] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 213.957888][T10675] ? ksys_write+0x22a/0x2b0 [ 213.962415][T10675] ? __pfx_lock_release+0x10/0x10 [ 213.967555][T10675] ? vfs_write+0x730/0xd30 [ 213.972010][T10675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.978001][T10675] ? __fget_files+0x2a/0x410 [ 213.982613][T10675] __x64_sys_recvmmsg+0x199/0x250 [ 213.987647][T10675] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 213.993202][T10675] ? do_syscall_64+0x100/0x230 [ 213.997995][T10675] ? do_syscall_64+0xb6/0x230 [ 214.002672][T10675] do_syscall_64+0xf3/0x230 [ 214.007176][T10675] ? clear_bhb_loop+0x35/0x90 [ 214.011857][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.017749][T10675] RIP: 0033:0x7f1a08f85d29 [ 214.022180][T10675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.041808][T10675] RSP: 002b:00007f1a06df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 214.050225][T10675] RAX: ffffffffffffffda RBX: 00007f1a09175fa0 RCX: 00007f1a08f85d29 [ 214.058388][T10675] RDX: 0000000000000001 RSI: 00000000200027c0 RDI: 0000000000000004 [ 214.066355][T10675] RBP: 00007f1a06df6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.074331][T10675] R10: 0000000000012021 R11: 0000000000000246 R12: 0000000000000001 [ 214.082303][T10675] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 214.090287][T10675] [ 214.236026][T10686] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.452353][T10696] netlink: 'syz.4.1611': attribute type 21 has an invalid length. [ 214.524442][T10700] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 214.671028][T10709] netlink: 'syz.1.1615': attribute type 10 has an invalid length. [ 214.860373][T10720] netlink: zone id is out of range [ 214.891385][T10720] netlink: set zone limit has 8 unknown bytes [ 215.149301][T10729] openvswitch: netlink: Flow actions attr not present in new flow. [ 215.325159][T10734] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 215.340308][T10734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.347660][T10734] IPv6: NLM_F_CREATE should be set when creating new route [ 215.357010][T10734] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 215.365142][T10734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.577346][T10739] x_tables: duplicate underflow at hook 2 [ 215.623907][T10744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.799807][T10753] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 216.057759][T10769] netlink: 'syz.4.1636': attribute type 11 has an invalid length. [ 216.312479][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.743246][T10799] dvmrp0: entered allmulticast mode [ 216.961981][T10811] __nla_validate_parse: 15 callbacks suppressed [ 216.962001][T10811] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1654'. [ 216.983921][T10811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.056637][T10804] IPVS: Scheduler module ip_vs_sip not found [ 217.259051][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1658'. [ 217.327537][T10825] bond2: entered promiscuous mode [ 217.549122][T10835] vlan4: entered promiscuous mode [ 218.004325][T10843] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1662'. [ 218.090842][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 218.157430][T10847] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1665'. [ 218.167291][T10847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.266904][T10852] bridge3: entered promiscuous mode [ 218.272186][T10852] bridge3: entered allmulticast mode [ 218.282483][T10852] team0: Port device bridge3 added [ 218.667782][T10876] FAULT_INJECTION: forcing a failure. [ 218.667782][T10876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.691838][T10876] CPU: 0 UID: 0 PID: 10876 Comm: syz.0.1675 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 218.702667][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.712753][T10876] Call Trace: [ 218.716034][T10876] [ 218.718965][T10876] dump_stack_lvl+0x241/0x360 [ 218.723654][T10876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.728861][T10876] ? __pfx__printk+0x10/0x10 [ 218.733565][T10876] ? snprintf+0xda/0x120 [ 218.737850][T10876] should_fail_ex+0x3b0/0x4e0 [ 218.742547][T10876] _copy_to_user+0x31/0xb0 [ 218.746975][T10876] simple_read_from_buffer+0xca/0x150 [ 218.752441][T10876] proc_fail_nth_read+0x1e9/0x250 [ 218.757482][T10876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.763057][T10876] ? rw_verify_area+0x55e/0x6f0 [ 218.767921][T10876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.773495][T10876] vfs_read+0x1fc/0xb70 [ 218.777659][T10876] ? __pfx___mutex_lock+0x10/0x10 [ 218.782687][T10876] ? __pfx_vfs_read+0x10/0x10 [ 218.787460][T10876] ? __fget_files+0x2a/0x410 [ 218.792060][T10876] ? __fget_files+0x395/0x410 [ 218.796738][T10876] ? __fget_files+0x2a/0x410 [ 218.801337][T10876] ksys_read+0x18f/0x2b0 [ 218.805577][T10876] ? __pfx_ksys_read+0x10/0x10 [ 218.810342][T10876] ? do_syscall_64+0x100/0x230 [ 218.815111][T10876] ? do_syscall_64+0xb6/0x230 [ 218.819785][T10876] do_syscall_64+0xf3/0x230 [ 218.824309][T10876] ? clear_bhb_loop+0x35/0x90 [ 218.828990][T10876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.834916][T10876] RIP: 0033:0x7f1a08f8473c [ 218.839330][T10876] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 218.859021][T10876] RSP: 002b:00007f1a06df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.867433][T10876] RAX: ffffffffffffffda RBX: 00007f1a09175fa0 RCX: 00007f1a08f8473c [ 218.875398][T10876] RDX: 000000000000000f RSI: 00007f1a06df60a0 RDI: 0000000000000006 [ 218.883377][T10876] RBP: 00007f1a06df6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.891364][T10876] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001 [ 218.899336][T10876] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 218.907404][T10876] [ 219.013217][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1677'. [ 219.067535][T10879] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 219.083126][T10879] syzkaller0: entered promiscuous mode [ 219.091085][T10879] syzkaller0: entered allmulticast mode [ 219.172373][T10884] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1679'. [ 219.192537][T10884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.282539][T10885] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1678'. [ 220.153701][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 222.677230][T10914] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.1691'. [ 222.704922][T10914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.361031][T10938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1700'. [ 223.563756][T10953] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1705'. [ 223.573202][T10953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.054841][T10972] FAULT_INJECTION: forcing a failure. [ 224.054841][T10972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.071847][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.3.1713 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 224.082676][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.092767][T10972] Call Trace: [ 224.096072][T10972] [ 224.099026][T10972] dump_stack_lvl+0x241/0x360 [ 224.103743][T10972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.108972][T10972] ? __pfx__printk+0x10/0x10 [ 224.113595][T10972] ? __pfx_lock_release+0x10/0x10 [ 224.118653][T10972] should_fail_ex+0x3b0/0x4e0 [ 224.123358][T10972] _copy_from_user+0x2f/0xc0 [ 224.127987][T10972] copy_msghdr_from_user+0xae/0x680 [ 224.133230][T10972] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 224.139082][T10972] ? rcu_read_lock_any_held+0xb7/0x160 [ 224.144592][T10972] __sys_recvmsg+0x200/0x390 [ 224.149220][T10972] ? __pfx___sys_recvmsg+0x10/0x10 [ 224.154394][T10972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.160751][T10972] ? do_syscall_64+0x100/0x230 [ 224.165550][T10972] ? do_syscall_64+0xb6/0x230 [ 224.170258][T10972] do_syscall_64+0xf3/0x230 [ 224.174790][T10972] ? clear_bhb_loop+0x35/0x90 [ 224.179504][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.185428][T10972] RIP: 0033:0x7fd2fd785d29 [ 224.189878][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.209520][T10972] RSP: 002b:00007fd2fe62a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 224.217976][T10972] RAX: ffffffffffffffda RBX: 00007fd2fd975fa0 RCX: 00007fd2fd785d29 [ 224.225981][T10972] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 224.233980][T10972] RBP: 00007fd2fe62a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.241977][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.249979][T10972] R13: 0000000000000000 R14: 00007fd2fd975fa0 R15: 00007ffdb7d21de8 [ 224.257996][T10972] [ 224.375266][T10980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.485281][T10980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.627656][T10987] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1718'. [ 224.802251][T10993] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.1719'. [ 224.827376][T10993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.999968][T11003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.042163][T11003] netlink: 'syz.3.1725': attribute type 10 has an invalid length. [ 225.061042][T11003] mac80211_hwsim hwsim11 : entered promiscuous mode [ 225.077153][T11003] bond0: (slave ): Enslaving as an active interface with an up link [ 225.138697][T11001] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1720'. [ 225.256642][T11008] netlink: 'syz.2.1726': attribute type 11 has an invalid length. [ 225.428716][T11013] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1728'. [ 225.508944][T11017] netlink: 'syz.1.1730': attribute type 8 has an invalid length. [ 225.691463][T11027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1734'. [ 225.721761][T11029] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1735'. [ 225.733169][T11029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.794805][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 225.865465][T11034] FAULT_INJECTION: forcing a failure. [ 225.865465][T11034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.893505][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.2.1738 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 225.904340][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.914442][T11034] Call Trace: [ 225.917718][T11034] [ 225.920642][T11034] dump_stack_lvl+0x241/0x360 [ 225.925336][T11034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.930663][T11034] ? __pfx__printk+0x10/0x10 [ 225.935292][T11034] ? __pfx_lock_release+0x10/0x10 [ 225.940357][T11034] should_fail_ex+0x3b0/0x4e0 [ 225.945065][T11034] _copy_from_user+0x2f/0xc0 [ 225.949789][T11034] btf_get_info_by_fd+0xf2/0x750 [ 225.954772][T11034] ? __pfx_btf_get_info_by_fd+0x10/0x10 [ 225.956044][T11040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.960338][T11034] ? check_zeroed_user+0x77/0x190 [ 225.960375][T11034] ? check_zeroed_user+0x137/0x190 [ 225.980264][T11034] bpf_obj_get_info_by_fd+0xd85/0x4060 [ 225.981655][T11040] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 225.985757][T11034] ? __lock_acquire+0x1397/0x2100 [ 225.985791][T11034] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 225.985836][T11034] ? __pfx___might_resched+0x10/0x10 [ 225.985855][T11034] ? __might_fault+0xaa/0x120 [ 225.985873][T11034] ? __pfx_lock_release+0x10/0x10 [ 225.985897][T11034] ? vfs_write+0x730/0xd30 [ 225.985919][T11034] ? __might_fault+0xc6/0x120 [ 225.985940][T11034] __sys_bpf+0x685/0x810 [ 225.985961][T11034] ? __pfx___sys_bpf+0x10/0x10 [ 225.985998][T11034] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.043838][T11034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.050298][T11034] ? do_syscall_64+0x100/0x230 [ 226.055105][T11034] __x64_sys_bpf+0x7c/0x90 [ 226.059558][T11034] do_syscall_64+0xf3/0x230 [ 226.064095][T11034] ? clear_bhb_loop+0x35/0x90 [ 226.068809][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.074737][T11034] RIP: 0033:0x7efdd2185d29 [ 226.079185][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.098904][T11034] RSP: 002b:00007efdd2f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.107365][T11034] RAX: ffffffffffffffda RBX: 00007efdd2375fa0 RCX: 00007efdd2185d29 [ 226.115375][T11034] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 000000000000000f [ 226.123379][T11034] RBP: 00007efdd2f17090 R08: 0000000000000000 R09: 0000000000000000 [ 226.131380][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.139384][T11034] R13: 0000000000000000 R14: 00007efdd2375fa0 R15: 00007ffc315e51c8 [ 226.147412][T11034] [ 226.282239][T11040] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 226.298294][T11040] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 226.786267][T11076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.697308][T11108] __nla_validate_parse: 8 callbacks suppressed [ 227.697327][T11108] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1761'. [ 227.730570][T11108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.873939][T11106] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1760'. [ 228.022278][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 228.038262][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1763'. [ 228.360746][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 228.379842][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1766'. [ 228.634463][T11128] IPVS: Scheduler module ip_vs_sip not found [ 228.721580][T11132] syzkaller0: entered promiscuous mode [ 228.727423][T11132] syzkaller0: entered allmulticast mode [ 229.004105][T11145] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1772'. [ 229.018654][T11145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.155914][T11152] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 230.110731][T11168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1780'. [ 231.874706][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1782'. [ 232.577796][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1794'. [ 232.592150][T11202] syz_tun: entered promiscuous mode [ 232.644803][T11202] syz_tun: left promiscuous mode [ 232.772542][T11204] team0: Refused to change device type [ 232.939113][T11212] FAULT_INJECTION: forcing a failure. [ 232.939113][T11212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.958518][T11212] CPU: 1 UID: 0 PID: 11212 Comm: syz.4.1799 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 232.969439][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.979530][T11212] Call Trace: [ 232.982809][T11212] [ 232.985738][T11212] dump_stack_lvl+0x241/0x360 [ 232.990423][T11212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.995631][T11212] ? __pfx__printk+0x10/0x10 [ 233.000230][T11212] ? __pfx_lock_release+0x10/0x10 [ 233.005321][T11212] should_fail_ex+0x3b0/0x4e0 [ 233.010013][T11212] _copy_from_user+0x2f/0xc0 [ 233.014619][T11212] copy_msghdr_from_user+0xae/0x680 [ 233.020042][T11212] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.025883][T11212] ? __fget_files+0x2a/0x410 [ 233.030479][T11212] ? __fget_files+0x2a/0x410 [ 233.035076][T11212] __sys_sendmsg+0x209/0x350 [ 233.039669][T11212] ? __pfx_lock_release+0x10/0x10 [ 233.044696][T11212] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.049815][T11212] ? __pfx_vfs_write+0x10/0x10 [ 233.054592][T11212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.060921][T11212] ? do_syscall_64+0x100/0x230 [ 233.065693][T11212] ? do_syscall_64+0xb6/0x230 [ 233.070374][T11212] do_syscall_64+0xf3/0x230 [ 233.074887][T11212] ? clear_bhb_loop+0x35/0x90 [ 233.079589][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.085487][T11212] RIP: 0033:0x7f7fdfb85d29 [ 233.089925][T11212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.109539][T11212] RSP: 002b:00007f7fe0a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.117964][T11212] RAX: ffffffffffffffda RBX: 00007f7fdfd75fa0 RCX: 00007f7fdfb85d29 [ 233.125940][T11212] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 233.133912][T11212] RBP: 00007f7fe0a42090 R08: 0000000000000000 R09: 0000000000000000 [ 233.141896][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.149862][T11212] R13: 0000000000000000 R14: 00007f7fdfd75fa0 R15: 00007ffe1116ea78 [ 233.157842][T11212] [ 233.188535][T11209] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 233.200012][T11209] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 233.413109][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 233.449903][T11223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1802'. [ 234.211606][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 234.273010][T11250] bond3: entered promiscuous mode [ 234.804053][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 234.826816][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 234.968446][T11268] FAULT_INJECTION: forcing a failure. [ 234.968446][T11268] name failslab, interval 1, probability 0, space 0, times 0 [ 234.993840][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.0.1819 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 235.004682][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.014769][T11268] Call Trace: [ 235.018078][T11268] [ 235.021019][T11268] dump_stack_lvl+0x241/0x360 [ 235.025710][T11268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.030913][T11268] ? __pfx__printk+0x10/0x10 [ 235.035508][T11268] ? kmem_cache_alloc_noprof+0x48/0x380 [ 235.041060][T11268] ? __pfx___might_resched+0x10/0x10 [ 235.046369][T11268] should_fail_ex+0x3b0/0x4e0 [ 235.051067][T11268] should_failslab+0xac/0x100 [ 235.055764][T11268] ? getname_flags+0xb7/0x540 [ 235.060454][T11268] kmem_cache_alloc_noprof+0x70/0x380 [ 235.065833][T11268] ? bpf_trace_run2+0x1fc/0x540 [ 235.070685][T11268] getname_flags+0xb7/0x540 [ 235.075193][T11268] do_sys_openat2+0xd2/0x1d0 [ 235.079790][T11268] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.084992][T11268] ? trace_sys_enter+0x74/0x120 [ 235.089843][T11268] __x64_sys_openat+0x247/0x2a0 [ 235.094694][T11268] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.100063][T11268] ? __might_fault+0xc6/0x120 [ 235.104743][T11268] ? trace_sys_enter+0x74/0x120 [ 235.109599][T11268] ? rcu_is_watching+0x15/0xb0 [ 235.114560][T11268] ? trace_sys_enter+0x25/0x120 [ 235.119455][T11268] do_syscall_64+0xf3/0x230 [ 235.123971][T11268] ? clear_bhb_loop+0x35/0x90 [ 235.128662][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.134554][T11268] RIP: 0033:0x7f1a08f84690 [ 235.138989][T11268] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 235.158718][T11268] RSP: 002b:00007f1a06df5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 235.168031][T11268] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1a08f84690 [ 235.176007][T11268] RDX: 0000000000000000 RSI: 00007f1a09001bc0 RDI: 00000000ffffff9c [ 235.183996][T11268] RBP: 00007f1a09001bc0 R08: 0000000000000000 R09: 0000000000000000 [ 235.191962][T11268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 235.199925][T11268] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 235.207914][T11268] [ 235.423088][T11281] xt_TCPMSS: Only works on TCP SYN packets [ 235.625830][T11285] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 235.639774][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 235.943938][T11287] bond4: entered promiscuous mode [ 236.328306][T11285] syz_tun: entered promiscuous mode [ 236.376849][T11285] syz_tun: entered allmulticast mode [ 236.398800][T11285] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 236.422893][T11291] bridge_slave_0: default FDB implementation only supports local addresses [ 236.696034][T11303] FAULT_INJECTION: forcing a failure. [ 236.696034][T11303] name failslab, interval 1, probability 0, space 0, times 0 [ 236.711219][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 236.726128][T11303] CPU: 1 UID: 0 PID: 11303 Comm: syz.1.1830 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 236.736956][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.747054][T11303] Call Trace: [ 236.750363][T11303] [ 236.753318][T11303] dump_stack_lvl+0x241/0x360 [ 236.758035][T11303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.758106][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1829'. [ 236.763245][T11303] ? __pfx__printk+0x10/0x10 [ 236.763288][T11303] should_fail_ex+0x3b0/0x4e0 [ 236.763320][T11303] should_failslab+0xac/0x100 [ 236.786216][T11303] ? skb_clone+0x20c/0x390 [ 236.790693][T11303] kmem_cache_alloc_noprof+0x70/0x380 [ 236.796120][T11303] skb_clone+0x20c/0x390 [ 236.800414][T11303] __netlink_deliver_tap+0x3cc/0x7f0 [ 236.805747][T11303] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.810982][T11303] netlink_deliver_tap+0x19d/0x1b0 [ 236.816138][T11303] netlink_unicast+0x7c4/0x990 [ 236.821032][T11303] ? __pfx_netlink_unicast+0x10/0x10 [ 236.826354][T11303] ? __virt_addr_valid+0x45f/0x530 [ 236.831499][T11303] ? __phys_addr_symbol+0x2f/0x70 [ 236.836568][T11303] ? __check_object_size+0x47a/0x730 [ 236.841891][T11303] netlink_sendmsg+0x8e4/0xcb0 [ 236.846714][T11303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.852039][T11303] ? aa_sock_msg_perm+0x91/0x160 [ 236.857023][T11303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.862349][T11303] __sock_sendmsg+0x221/0x270 [ 236.867076][T11303] ____sys_sendmsg+0x52a/0x7e0 [ 236.871892][T11303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.877219][T11303] ? __fget_files+0x2a/0x410 [ 236.881873][T11303] ? __fget_files+0x2a/0x410 [ 236.886506][T11303] __sys_sendmsg+0x269/0x350 [ 236.891126][T11303] ? __pfx_lock_release+0x10/0x10 [ 236.896186][T11303] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.901351][T11303] ? __pfx_vfs_write+0x10/0x10 [ 236.906189][T11303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.912565][T11303] ? do_syscall_64+0x100/0x230 [ 236.917372][T11303] ? do_syscall_64+0xb6/0x230 [ 236.922093][T11303] do_syscall_64+0xf3/0x230 [ 236.926634][T11303] ? clear_bhb_loop+0x35/0x90 [ 236.931352][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.937276][T11303] RIP: 0033:0x7f8041785d29 [ 236.941726][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.961361][T11303] RSP: 002b:00007f80425e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.969818][T11303] RAX: ffffffffffffffda RBX: 00007f8041975fa0 RCX: 00007f8041785d29 [ 236.977825][T11303] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 236.985829][T11303] RBP: 00007f80425e7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.993833][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.001837][T11303] R13: 0000000000000000 R14: 00007f8041975fa0 R15: 00007ffcfe9bb668 [ 237.009860][T11303] [ 237.624739][T11337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1841'. [ 237.751404][T11319] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 237.887334][T11344] IPVS: Scheduler module ip_vs_sip not found [ 238.850883][T11384] FAULT_INJECTION: forcing a failure. [ 238.850883][T11384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.871380][T11384] CPU: 0 UID: 0 PID: 11384 Comm: syz.0.1856 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 238.882208][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.892304][T11384] Call Trace: [ 238.895613][T11384] [ 238.898571][T11384] dump_stack_lvl+0x241/0x360 [ 238.903297][T11384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.908536][T11384] ? __pfx__printk+0x10/0x10 [ 238.913179][T11384] should_fail_ex+0x3b0/0x4e0 [ 238.917899][T11384] _copy_from_user+0x2f/0xc0 [ 238.922530][T11384] vmemdup_user+0x149/0x1c0 [ 238.927060][T11384] map_lookup_elem+0x249/0x780 [ 238.931834][T11384] ? __might_fault+0xc6/0x120 [ 238.936518][T11384] __sys_bpf+0x429/0x810 [ 238.940761][T11384] ? __pfx___sys_bpf+0x10/0x10 [ 238.945528][T11384] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.951525][T11384] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.957890][T11384] ? do_syscall_64+0x100/0x230 [ 238.962677][T11384] __x64_sys_bpf+0x7c/0x90 [ 238.967115][T11384] do_syscall_64+0xf3/0x230 [ 238.971625][T11384] ? clear_bhb_loop+0x35/0x90 [ 238.976312][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.982555][T11384] RIP: 0033:0x7f1a08f85d29 [ 238.986970][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.006575][T11384] RSP: 002b:00007f1a06df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.014991][T11384] RAX: ffffffffffffffda RBX: 00007f1a09175fa0 RCX: 00007f1a08f85d29 [ 239.022968][T11384] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000001 [ 239.030947][T11384] RBP: 00007f1a06df6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.038919][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.046887][T11384] R13: 0000000000000000 R14: 00007f1a09175fa0 R15: 00007ffce8188ed8 [ 239.054868][T11384] [ 239.096654][T11388] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1857'. [ 239.117269][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1857'. [ 239.154738][T11388] pim6reg9: entered allmulticast mode [ 239.987912][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1872'. [ 239.997165][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1872'. [ 240.011789][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1872'. [ 240.021108][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1872'. [ 240.502770][T11453] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 240.511247][T11453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1877'. [ 240.520831][T11453] vxcan1: entered promiscuous mode [ 240.535673][T11453] vxcan1: entered allmulticast mode [ 240.543898][T11453] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 240.860557][T11468] netlink: 'syz.0.1884': attribute type 10 has an invalid length. [ 240.884282][T11468] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1884'. [ 240.935971][T11470] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1885'. [ 240.983488][T11470] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.008039][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 241.409578][T11495] netlink: 'syz.3.1895': attribute type 11 has an invalid length. [ 241.609738][T11509] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.649661][T11511] bond0: left allmulticast mode [ 241.660708][T11511] bond_slave_0: left allmulticast mode [ 241.674177][T11511] bond_slave_1: left allmulticast mode [ 241.686070][T11511] syz_tun: left allmulticast mode [ 241.991350][T11511] bond0 (unregistering): left promiscuous mode [ 241.998128][T11511] bond_slave_0: left promiscuous mode [ 242.004294][T11511] bond_slave_1: left promiscuous mode [ 242.044755][T11511] team0: Port device vlan3 removed [ 242.057118][T11511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.077670][T11511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.098813][T11511] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 242.118866][T11511] bond0 (unregistering): Released all slaves [ 242.341317][T11540] openvswitch: netlink: Flow key attr not present in new flow. [ 242.580726][T11548] IPVS: Scheduler module ip_vs_sip not found [ 243.190587][T11578] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 243.204034][T11578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.561763][T11601] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.661629][T11604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.704268][T11609] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 243.721326][T11609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.981769][T11624] nbd: must specify a device to reconfigure [ 244.000391][T11623] vlan4: entered promiscuous mode [ 244.023852][T11623] vlan4: entered allmulticast mode [ 244.097124][T11627] openvswitch: netlink: Flow actions attr not present in new flow. [ 244.264709][T11640] __nla_validate_parse: 11 callbacks suppressed [ 244.264730][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'. [ 244.400044][T11645] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 244.516995][T11648] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 244.525439][T11648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1948'. [ 244.525665][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 244.554817][T11656] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 244.563981][T11656] netlink: 'syz.0.1951': attribute type 2 has an invalid length. [ 244.732702][T11665] netlink: 'syz.0.1953': attribute type 5 has an invalid length. [ 244.811048][T11669] tc_dump_action: action bad kind [ 244.841639][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'. [ 244.860642][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 244.887526][T11673] netlink: 'syz.0.1953': attribute type 5 has an invalid length. [ 244.901240][T11671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'. [ 244.981729][T11671] ip6gretap0: entered promiscuous mode [ 245.069151][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 245.117190][T11680] netlink: 'syz.0.1958': attribute type 2 has an invalid length. [ 245.477329][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 245.977738][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 246.077047][T11708] bond2: entered promiscuous mode [ 246.096005][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 246.269524][T11726] FAULT_INJECTION: forcing a failure. [ 246.269524][T11726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.343460][T11726] CPU: 0 UID: 0 PID: 11726 Comm: syz.3.1973 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 246.354457][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.364533][T11726] Call Trace: [ 246.367823][T11726] [ 246.370756][T11726] dump_stack_lvl+0x241/0x360 [ 246.375455][T11726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.380703][T11726] ? __pfx__printk+0x10/0x10 [ 246.385320][T11726] ? snprintf+0xda/0x120 [ 246.389570][T11726] should_fail_ex+0x3b0/0x4e0 [ 246.394265][T11726] _copy_to_user+0x31/0xb0 [ 246.398719][T11726] simple_read_from_buffer+0xca/0x150 [ 246.404122][T11726] proc_fail_nth_read+0x1e9/0x250 [ 246.409200][T11726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.414776][T11726] ? rw_verify_area+0x55e/0x6f0 [ 246.419656][T11726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.425314][T11726] vfs_read+0x1fc/0xb70 [ 246.429502][T11726] ? __pfx___mutex_lock+0x10/0x10 [ 246.434564][T11726] ? __pfx_vfs_read+0x10/0x10 [ 246.439268][T11726] ? __fget_files+0x2a/0x410 [ 246.443892][T11726] ? __fget_files+0x395/0x410 [ 246.448597][T11726] ? __fget_files+0x2a/0x410 [ 246.453226][T11726] ksys_read+0x18f/0x2b0 [ 246.457493][T11726] ? __pfx_ksys_read+0x10/0x10 [ 246.462285][T11726] ? do_syscall_64+0x100/0x230 [ 246.467078][T11726] ? do_syscall_64+0xb6/0x230 [ 246.471826][T11726] do_syscall_64+0xf3/0x230 [ 246.476358][T11726] ? clear_bhb_loop+0x35/0x90 [ 246.481069][T11726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.486998][T11726] RIP: 0033:0x7fd2fd78473c [ 246.491444][T11726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 246.511191][T11726] RSP: 002b:00007fd2fe62a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.519650][T11726] RAX: ffffffffffffffda RBX: 00007fd2fd975fa0 RCX: 00007fd2fd78473c [ 246.527657][T11726] RDX: 000000000000000f RSI: 00007fd2fe62a0a0 RDI: 0000000000000003 [ 246.535666][T11726] RBP: 00007fd2fe62a090 R08: 0000000000000000 R09: 0000000000000000 [ 246.543671][T11726] R10: 0000000000000056 R11: 0000000000000246 R12: 0000000000000001 [ 246.551674][T11726] R13: 0000000000000001 R14: 00007fd2fd975fa0 R15: 00007ffdb7d21de8 [ 246.559701][T11726] [ 247.262415][T11750] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 247.411509][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.632634][T11767] netlink: 'syz.3.1986': attribute type 4 has an invalid length. [ 248.194151][T11781] bond3: entered promiscuous mode [ 249.281108][T11811] __nla_validate_parse: 2 callbacks suppressed [ 249.281128][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 249.711847][T11815] xt_nfacct: accounting object `sy' does not exists [ 250.029472][T11754] Set syz1 is full, maxelem 65536 reached [ 250.141247][T11823] veth0_macvtap: left promiscuous mode [ 250.162746][T11825] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2003'. [ 250.334238][T11831] netlink: 'syz.3.2005': attribute type 21 has an invalid length. [ 250.404898][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2009'. [ 250.445111][T11837] bond0: entered promiscuous mode [ 251.379016][T11867] FAULT_INJECTION: forcing a failure. [ 251.379016][T11867] name failslab, interval 1, probability 0, space 0, times 0 [ 251.391829][T11867] CPU: 1 UID: 0 PID: 11867 Comm: syz.4.2019 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 251.402632][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.412726][T11867] Call Trace: [ 251.416024][T11867] [ 251.418960][T11867] dump_stack_lvl+0x241/0x360 [ 251.423658][T11867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.428865][T11867] ? __pfx__printk+0x10/0x10 [ 251.433469][T11867] should_fail_ex+0x3b0/0x4e0 [ 251.438158][T11867] should_failslab+0xac/0x100 [ 251.442843][T11867] ? skb_clone+0x20c/0x390 [ 251.447270][T11867] kmem_cache_alloc_noprof+0x70/0x380 [ 251.452649][T11867] skb_clone+0x20c/0x390 [ 251.456897][T11867] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 251.462098][T11867] dev_queue_xmit_nit+0x249/0xca0 [ 251.467126][T11867] ? dev_queue_xmit_nit+0x2b/0xca0 [ 251.472237][T11867] ? validate_xmit_skb+0x9b8/0xff0 [ 251.477354][T11867] dev_hard_start_xmit+0x15f/0x7d0 [ 251.482471][T11867] ? __pfx_validate_xmit_skb+0x10/0x10 [ 251.487938][T11867] __dev_queue_xmit+0x1b73/0x3f50 [ 251.492961][T11867] ? kasan_save_track+0x51/0x80 [ 251.497903][T11867] ? ____sys_sendmsg+0x52a/0x7e0 [ 251.502846][T11867] ? __dev_queue_xmit+0x2f4/0x3f50 [ 251.507964][T11867] ? __pfx___dev_queue_xmit+0x10/0x10 [ 251.513356][T11867] ? __copy_skb_header+0x437/0x5b0 [ 251.518478][T11867] ? __asan_memcpy+0x40/0x70 [ 251.523065][T11867] ? __copy_skb_header+0x437/0x5b0 [ 251.528179][T11867] ? __skb_clone+0x454/0x6c0 [ 251.532782][T11867] ? skb_clone+0x240/0x390 [ 251.537320][T11867] __netlink_deliver_tap+0x56b/0x7f0 [ 251.542614][T11867] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.547815][T11867] netlink_deliver_tap+0x19d/0x1b0 [ 251.552933][T11867] netlink_unicast+0x7c4/0x990 [ 251.557750][T11867] ? __pfx_netlink_unicast+0x10/0x10 [ 251.563058][T11867] ? __virt_addr_valid+0x45f/0x530 [ 251.568175][T11867] ? __phys_addr_symbol+0x2f/0x70 [ 251.573206][T11867] ? __check_object_size+0x47a/0x730 [ 251.579015][T11867] netlink_sendmsg+0x8e4/0xcb0 [ 251.583799][T11867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.589093][T11867] ? aa_sock_msg_perm+0x91/0x160 [ 251.594039][T11867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.599324][T11867] __sock_sendmsg+0x221/0x270 [ 251.604010][T11867] ____sys_sendmsg+0x52a/0x7e0 [ 251.608788][T11867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.614072][T11867] ? __fget_files+0x2a/0x410 [ 251.618670][T11867] ? __fget_files+0x2a/0x410 [ 251.623269][T11867] __sys_sendmsg+0x269/0x350 [ 251.627859][T11867] ? __pfx_lock_release+0x10/0x10 [ 251.632886][T11867] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.638007][T11867] ? __pfx_vfs_write+0x10/0x10 [ 251.642797][T11867] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.649214][T11867] ? do_syscall_64+0x100/0x230 [ 251.653991][T11867] ? do_syscall_64+0xb6/0x230 [ 251.658688][T11867] do_syscall_64+0xf3/0x230 [ 251.663193][T11867] ? clear_bhb_loop+0x35/0x90 [ 251.667877][T11867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.673772][T11867] RIP: 0033:0x7f7fdfb85d29 [ 251.678189][T11867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.697799][T11867] RSP: 002b:00007f7fe0a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.706241][T11867] RAX: ffffffffffffffda RBX: 00007f7fdfd75fa0 RCX: 00007f7fdfb85d29 [ 251.714307][T11867] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 251.722276][T11867] RBP: 00007f7fe0a42090 R08: 0000000000000000 R09: 0000000000000000 [ 251.730245][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.738215][T11867] R13: 0000000000000000 R14: 00007f7fdfd75fa0 R15: 00007ffe1116ea78 [ 251.746199][T11867] [ 251.764998][T11865] netlink: 'syz.0.2018': attribute type 11 has an invalid length. [ 251.919967][T11871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2020'. [ 252.034454][T11876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2020'. [ 252.334479][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2029'. [ 252.376716][T11894] bond3: entered promiscuous mode [ 252.893185][T11914] IPVS: Scheduler module ip_vs_sip not found [ 253.706626][T11944] tap0: tun_chr_ioctl cmd 1074025677 [ 253.712191][T11944] tap0: linktype set to 805 [ 253.750526][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 253.755393][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2046'. [ 253.821906][T11950] bond4: entered promiscuous mode [ 254.069351][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2049'. [ 254.100197][T11965] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 254.422083][T11971] ebtables: ebtables: counters copy to user failed while replacing table [ 254.458577][T11977] bridge4: entered promiscuous mode [ 254.470783][T11977] bridge4: entered allmulticast mode [ 254.500801][T11977] team0: Port device bridge4 added [ 254.726299][T11983] IPVS: Scheduler module ip_vs_sip not found [ 254.758900][T11981] ebtables: ebtables: counters copy to user failed while replacing table [ 254.863639][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.015096][T12001] netlink: 'syz.0.2061': attribute type 64 has an invalid length. [ 255.023071][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2061'. [ 255.032518][T12001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2061'. [ 255.591530][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 255.693773][T12018] bond1: entered promiscuous mode [ 255.824169][T12027] ------------[ cut here ]------------ [ 255.830126][T12027] refcount_t: decrement hit 0; leaking memory. [ 255.850698][T12027] WARNING: CPU: 0 PID: 12027 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 255.860350][T12027] Modules linked in: [ 255.864462][T12027] CPU: 0 UID: 0 PID: 12027 Comm: syz.3.2071 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 255.875360][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.885556][T12027] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 255.891665][T12027] Code: b2 00 00 00 e8 37 3b dd fc 5b 5d c3 cc cc cc cc e8 2b 3b dd fc c6 05 4e 2b 42 0b 01 90 48 c7 c7 a0 6a 5f 8c e8 d7 de 9d fc 90 <0f> 0b 90 90 eb d9 e8 0b 3b dd fc c6 05 2b 2b 42 0b 01 90 48 c7 c7 [ 255.911653][T12027] RSP: 0018:ffffc90010557b48 EFLAGS: 00010246 [ 255.917878][T12027] RAX: 3037305fd53e4e00 RBX: ffff88807a9ee64c RCX: ffff888055113c00 [ 255.926036][T12027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 255.934222][T12027] RBP: 0000000000000004 R08: ffffffff81601a42 R09: fffffbfff1cfa210 [ 255.942281][T12027] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807a9ee608 [ 255.950869][T12027] R13: 0000000000000000 R14: ffff88807a9ee64c R15: dffffc0000000000 [ 255.959294][T12027] FS: 000055555b0e6500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 255.968533][T12027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.975249][T12027] CR2: 00007efdd216b7e0 CR3: 000000007ab9e000 CR4: 00000000003526f0 [ 255.983260][T12027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.991472][T12027] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.999558][T12027] Call Trace: [ 256.002865][T12027] [ 256.005881][T12027] ? __warn+0x165/0x4d0 [ 256.010097][T12027] ? refcount_warn_saturate+0xfa/0x1d0 [ 256.015702][T12027] ? report_bug+0x2b3/0x500 [ 256.020229][T12027] ? refcount_warn_saturate+0xfa/0x1d0 [ 256.025816][T12027] ? handle_bug+0x60/0x90 [ 256.030175][T12027] ? exc_invalid_op+0x1a/0x50 [ 256.034960][T12027] ? asm_exc_invalid_op+0x1a/0x20 [ 256.040018][T12027] ? __warn_printk+0x292/0x360 [ 256.045001][T12027] ? refcount_warn_saturate+0xfa/0x1d0 [ 256.050514][T12027] ? refcount_warn_saturate+0xf9/0x1d0 [ 256.056461][T12027] ref_tracker_free+0x6af/0x7e0 [ 256.061372][T12027] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 256.067940][T12027] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.073475][T12027] ? ax25_destroy_socket+0x551/0x5c0 [ 256.078843][T12027] ax25_release+0x368/0x950 [ 256.083515][T12027] sock_close+0xbc/0x240 [ 256.087796][T12027] ? __pfx_sock_close+0x10/0x10 [ 256.092681][T12027] __fput+0x23c/0xa50 [ 256.096793][T12027] task_work_run+0x24f/0x310 [ 256.101418][T12027] ? _raw_spin_unlock+0x28/0x50 [ 256.106400][T12027] ? __pfx_task_work_run+0x10/0x10 [ 256.111641][T12027] ? syscall_exit_to_user_mode+0xa3/0x340 [ 256.117492][T12027] syscall_exit_to_user_mode+0x13f/0x340 [ 256.123171][T12027] do_syscall_64+0x100/0x230 [ 256.127877][T12027] ? clear_bhb_loop+0x35/0x90 [ 256.132594][T12027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.138628][T12027] RIP: 0033:0x7fd2fd785d29 [ 256.143104][T12027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.163278][T12027] RSP: 002b:00007ffdb7d21f48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 256.172146][T12027] RAX: 0000000000000000 RBX: 00007fd2fd977ba0 RCX: 00007fd2fd785d29 [ 256.180326][T12027] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 256.188407][T12027] RBP: 00007fd2fd977ba0 R08: 0000000000000134 R09: 00007ffdb7d2223f [ 256.196537][T12027] R10: 00000000003ffca8 R11: 0000000000000246 R12: 000000000003e9dd [ 256.204584][T12027] R13: 00007fd2fd975fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 256.212632][T12027] [ 256.215805][T12027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.223539][T12027] CPU: 0 UID: 0 PID: 12027 Comm: syz.3.2071 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 256.234319][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.244403][T12027] Call Trace: [ 256.247697][T12027] [ 256.250645][T12027] dump_stack_lvl+0x241/0x360 [ 256.255354][T12027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.260588][T12027] ? __pfx__printk+0x10/0x10 [ 256.265201][T12027] ? _printk+0xd5/0x120 [ 256.269384][T12027] ? __init_begin+0x41000/0x41000 [ 256.274437][T12027] ? vscnprintf+0x5d/0x90 [ 256.278806][T12027] panic+0x349/0x880 [ 256.282727][T12027] ? __warn+0x174/0x4d0 [ 256.286890][T12027] ? __pfx_panic+0x10/0x10 [ 256.291318][T12027] __warn+0x344/0x4d0 [ 256.295305][T12027] ? refcount_warn_saturate+0xfa/0x1d0 [ 256.300765][T12027] report_bug+0x2b3/0x500 [ 256.305090][T12027] ? refcount_warn_saturate+0xfa/0x1d0 [ 256.310549][T12027] handle_bug+0x60/0x90 [ 256.314705][T12027] exc_invalid_op+0x1a/0x50 [ 256.319211][T12027] asm_exc_invalid_op+0x1a/0x20 [ 256.324061][T12027] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 256.330129][T12027] Code: b2 00 00 00 e8 37 3b dd fc 5b 5d c3 cc cc cc cc e8 2b 3b dd fc c6 05 4e 2b 42 0b 01 90 48 c7 c7 a0 6a 5f 8c e8 d7 de 9d fc 90 <0f> 0b 90 90 eb d9 e8 0b 3b dd fc c6 05 2b 2b 42 0b 01 90 48 c7 c7 [ 256.349732][T12027] RSP: 0018:ffffc90010557b48 EFLAGS: 00010246 [ 256.355796][T12027] RAX: 3037305fd53e4e00 RBX: ffff88807a9ee64c RCX: ffff888055113c00 [ 256.363766][T12027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 256.371735][T12027] RBP: 0000000000000004 R08: ffffffff81601a42 R09: fffffbfff1cfa210 [ 256.379703][T12027] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807a9ee608 [ 256.387759][T12027] R13: 0000000000000000 R14: ffff88807a9ee64c R15: dffffc0000000000 [ 256.395822][T12027] ? __warn_printk+0x292/0x360 [ 256.400604][T12027] ? refcount_warn_saturate+0xf9/0x1d0 [ 256.406062][T12027] ref_tracker_free+0x6af/0x7e0 [ 256.410908][T12027] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 256.416808][T12027] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.422186][T12027] ? ax25_destroy_socket+0x551/0x5c0 [ 256.427484][T12027] ax25_release+0x368/0x950 [ 256.431998][T12027] sock_close+0xbc/0x240 [ 256.436240][T12027] ? __pfx_sock_close+0x10/0x10 [ 256.441089][T12027] __fput+0x23c/0xa50 [ 256.445081][T12027] task_work_run+0x24f/0x310 [ 256.449673][T12027] ? _raw_spin_unlock+0x28/0x50 [ 256.454531][T12027] ? __pfx_task_work_run+0x10/0x10 [ 256.459641][T12027] ? syscall_exit_to_user_mode+0xa3/0x340 [ 256.465363][T12027] syscall_exit_to_user_mode+0x13f/0x340 [ 256.470998][T12027] do_syscall_64+0x100/0x230 [ 256.475588][T12027] ? clear_bhb_loop+0x35/0x90 [ 256.480880][T12027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.486769][T12027] RIP: 0033:0x7fd2fd785d29 [ 256.491449][T12027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.511058][T12027] RSP: 002b:00007ffdb7d21f48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 256.519476][T12027] RAX: 0000000000000000 RBX: 00007fd2fd977ba0 RCX: 00007fd2fd785d29 [ 256.527445][T12027] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 256.535419][T12027] RBP: 00007fd2fd977ba0 R08: 0000000000000134 R09: 00007ffdb7d2223f [ 256.543385][T12027] R10: 00000000003ffca8 R11: 0000000000000246 R12: 000000000003e9dd [ 256.551350][T12027] R13: 00007fd2fd975fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 256.559326][T12027] [ 256.562681][T12027] Kernel Offset: disabled [ 256.567053][T12027] Rebooting in 86400 seconds..