last executing test programs: 2.633975063s ago: executing program 3 (id=1627): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xf3, 0x3, 0x3, 0x2, 0xffffffff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0xfffffeff}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x0, 0x1000, 0x2, 0x2, 0x82, 0x47}}, {0x4}}]}]}, 0x98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x78, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde2c01dd9b90ac10900000000000000b5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x78}}, 0x0) 2.367785987s ago: executing program 1 (id=1629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b000a0000000000000e00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 2.275317928s ago: executing program 3 (id=1630): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800000000"], 0x7c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x42, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)={0x114, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_NAT_DST={0xa8, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) recvmmsg(r2, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0xf8, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x971a}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xf8}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3f8, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c002b800000030000000000080003000000000008000800", @ANYRES32, @ANYBLOB="4c001a80100002800c00019808000f00000000003800028026000180"], 0x88}}, 0x0) 2.203904316s ago: executing program 1 (id=1631): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e0000000700000000000500050005000000050003"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0cf3b0aa9cfae92960102f69aedfa35f4e40f98de7aebbf4f002bbde44fd8e00"/42], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000005c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) bind$rds(r10, &(0x7f00000006c0)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000500)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000700)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000007b302d7714b81104532d0085000000060000001801000020696c2500000000002020207b0af8ff00000000bd510000000000000701010000feffffb702000008000000b703000000000000850000001900"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 2.025312905s ago: executing program 1 (id=1633): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a80)={0xe8, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0x108, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x971a}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x108}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.923731251s ago: executing program 1 (id=1634): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x20a, @remote}]}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fedbdf256c00000008000300", @ANYRES32=r5, @ANYBLOB="0d00990081000046ecf43594a57d3a1d2ca3869ca7f48600020000000800a0000100000008002700000000002200a100ff000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) socket$kcm(0x2, 0x3, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x262) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}]}, 0x98}}, 0x801) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r11, @ANYBLOB="5efde7678b31a46463a72d8cd596aeea41580667fba1817f4b0ac7298ec5952faf969226f5"], 0x68}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0xf0, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_vlan\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8de4"}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@dev, @private, 0x0, 0x0, 'pimreg1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_hsr\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 1.745337441s ago: executing program 2 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x34000}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000206010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f727400240007800600054001000000060004400000000008000640000000000800080099f7cd040000e2ffffff0000000000"], 0x6c}}, 0x0) 1.7323834s ago: executing program 0 (id=1637): r0 = socket$inet(0xa, 0x1, 0x7) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) 1.574320722s ago: executing program 2 (id=1639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="0adebe", 0x3}], 0x1}}], 0x2, 0x40000) shutdown(r0, 0x1) 1.523401156s ago: executing program 0 (id=1640): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x3, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x6400, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 1.505025198s ago: executing program 4 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x403, 0xfe0f0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x0) 1.442449223s ago: executing program 0 (id=1642): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000002000003400000034db876f770000000000000000000000000000000b00000000000000000000000200000000000000000010000b000000000000000000006fac28cc83db115a75b26b1d71629307f5d0"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f00000003c0)=0x89ea, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x20000000, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe40b}}, 0xe8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r8, 0x0, 0x18, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_audit(0x10, 0x3, 0x9) connect$inet6(r7, &(0x7f00000000c0), 0x1c) 1.442055461s ago: executing program 2 (id=1643): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c0002800600", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}}, 0x0) 1.379752124s ago: executing program 4 (id=1644): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, &(0x7f0000001900)={0x2, 0x0, @loopback}, 0x0) syz_emit_ethernet(0xda, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0809000000cc000000000001907864010100ac1414aa0b009078032c00004c000000000000000089000000000000ac14a70883add46b14aa862a00000000000d5e000000ff00000000000005054eb8a600129606053d0006ff00800000b61af93a93831300ac141400ffffffff7f000019e000000286480000000000074b6cefc500000cdf61168c24ac88ad078c004a2e0a2189ea43a2149bf6c67031ac76216736ab1784000bf7d11634eea26b75af000902a20948fd74060011ccf0294e2a3bdb4aa40b249e8e0c1a441456000000000000000000cef756ab8baec5be82a9d1777332f9ca6d6eba583ca7c424a81abbee06f868d2caf9cf2bb8e28263b23b7c1c92108b603ba71b7aad63e76a397f9a0749797f6a0c1603451c7b54b8974d2fc9d4f323c8db710cae47e31cf63ed166ef8fbc35ace6ab51fd9dd267fae5986578b172b76640d1fac7852276e1d659a6e4f9e8316bf2e7d0b4b8c8dc193e0fd9003e1c5719dd49eef32fc50339e4fe0180d75ea9f529e4df3fc7eee493d41ee15ea160a3826e790bb771a96e3bb81675c708f5c812846d50818917e15decee44a1aa02b9fcc082f44991c6abe80bd9ea13cf8a0ad0dbb467f1b3d8fb39ab91af1ca0a630fc482eca0c6afe010cb0edf337879b5aca03c3a7d9a461c466df0b95e5d85546de0390c8c1532038a6174618a1072ff5d9a3"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000200)=0xf, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa8c01aabb86dd600000000014060020010000000000000000000000200001fe800000000000000000f0ffffff00aaed004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601020000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414aa0c0001800800014080ffffff040014002000000005000500020000000500010006"], 0x6c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x0, 0x0, @void}}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="000088150004ff0101ff000002006381dc2f132811010000000000000000000000000000000100000000000000000000ffff7f0000013b0204014a280300fc0100000000000000000000000000010402000000000000c910fc0000000000000000000000000000000000000000002c1d000000000000000100c204000000000001000001000001000710000000010207a9090000000000000000ffc69e58b7748552199491b61aa884811837955d337afef8f5d5119eca68e4b47341db4a179e7f3a87f0dc68effa48310d828c18936815dcd37cdde9d8466cffee19a3b23134d16063fdd2c4005713660dfbee1124ef4a057e856590420413eb6d0eefb47a1f6fa5ed9f5c8697fd7e9f83ea057d9e1e94f7db2cd740a92f84d0086a79decae906edd08216a07569edcf1bbc659e8ac13b0fe7f4c7c6637f37049d9c5da85f61796b77afcd6a63100fec3535ee0d4ec3120f5134575b306cde0cd02136f8f19b706c000000001634000000000000ffc499c7c9a44bd83ffd76a0f86eb97f6fc651498bb7ac100c5052688bb8574525b386770557574ae85bc7e9a87f27f2738df301c4b592a6b943ea2be0f73305c9b13c573549510be90fec1b56c2a06465d32bba1ad266d934c4b3a5483288a7410b333b175825dd8d953b70c91872bed0e2f72b9bb1217270a58723fab6c3a89a29afdcfe08420e332b9057a0192614f0faf89bda9cda8fb9cf5112580b59c3b0aeb5b95d712b5a357c2413e6839088864b1b1585ed39af399b3d5c8b690fdbfff3572dd75f00010001494e9b4de78efc0ac108d8b4e95bd9b9980da2a2e1563572ab7254dfc24c0120dcec178343e3e6fc2d7468f7d97e6a5032a54c0fce7dc2ef3e0a628f67621dc26ddcf50a8988d28615c1000100071800000001040304000400000000000000dca09c3c00000000000100f36a3abba914a478367c6040b2bb94fad0952da7c6a20d3bcb46a3817d7fa7f6d2e2c4ba2b2942c0348b5b4d039a22c33744e0db6f3b16c12fba65f6a78dc3276bc1ed8a1a181e09c50b966642808f02faab9b29f78b944aa08b1da958b95d68b8093da74e996c5b022904ee01000401040000003c0500000000000005020001040107072639dfd4d5f69577d17de0e0f8fb09c4582c7367b70497ed46c2c3855820b4bced84386a910afb00620008e9640000004e214e231008907846ff7f748016bc841135e7f10cfcefd7248fe0add120b07fee795a5f893f90982530d2b867a97428846aca800817edc2c8e44c3921e5fe0bc7c1c1424cfad8c76702bebc8a43e11e9cd0b4355011dfa95465ae6324d80e7505c7fe87efaf47b276d3138617b02b7f7df235802668cc1bb453b59ff4cdb29ecc9f7edca376ce3546f3a329d356190c6a4f532ec4b50f3ecadd257639a65268d599eed9c524703da73b8a56494b9b934796996a8ec86b7b5bb8c9e2509888cc7b2d5bf1c799653a0a521aa95d540d696744171e49466622a15342f479b0d19e854c78e2944c2e256e4b2b4bfe0db04ae87a44af8b4a6b1381defc6607dddd0a39f0cbe502aa500d277c50b1cef588556f53ffba1f37b5e137bb67774eff810cb6b781f6c089bedf152ff27014333d73eccb6e64e8111117aee60a77a88e2127bcd75381097535b45ee58085aaa23c950e4cb95eba78340625a58ae3dd9ee8150d8d38ce844d0c47eee8db4c808ab1bf359d8699cdaf957a0e8f414e41c0c4cff8b36f95c0d924611685e9e247ba70c0d998e6225e20f5762c19d668e3fe7f5ccd9fdbaf7bc850320102210551a9e2682a055354cf6db2336512fc77e16463b99d0ca230d1d049fa7d5563640c47231c171cb8799a1f53c3a2c25c5851abee7ac5696d1b0d159f9ec0f491318339ea41dd82139410c3c03f1f6df45dbf7c634ceab72e703f77ec538b51d7899410a85cb17159f41ee17f2503bdf3222fafd68151781758e7929f6ce6cfa8ae391184da2d6b746e7af8f450e9119ff38b3dd16a1c4d702ad3f1d1e83b60058c7cf92f0551fff8a89ba4f13fb131f12a0cdf36a37d45270c2d9f827a06a41a0afa9a23f94af47f45ca742431d6cf95ad6c3009a0398ffd10d95d48baabe048a9f7b6e94939c23377adad9bec4563bf0bc845c537819ada321d36e85d78ebd660abc41d1b2d81d52bc05b72a497b06646dd5f1ee730288c430317202806799814280ce3e0acd28dc9989decfe4e33f55732bee6f0bc96f95bef69559ab646ec2fae6bb858ca199832d11c536a7ce56acbd8d5a2c0dbcc5bd8b88000677ba9c43da85a10aae38422bc39abf2470b543427211cdd24890c62208d841b8a781e6751763d183dc56897619e4db540c028c4225e0bb00926a54d08bba91d639b155c9d003c87b9e561fcfb743e0552c737c60d6a5a0468f51de4fa52ebb119bb02e2bf1f9434a5f67dff4744e380ba356d1b68097ca7dab1cbea3fce89533a60c940aae0aaa3f66ca7f4e521eb75f7a1b558f03818dda6208d433dece262fad1c6e86aad05dbd4833af995aa513d0d0302ceb3ff93da2aa966505978cda2618d73fce6d08e1f5485b7c259f298922eb848c7d9d5eddbdc941b684da2bdfe028337163c11a27ec088a2b8577ce5df82b38caecf2e2ec785f8a5c814fa224e556c9eeabc74ba3eccc52e202b466ab4667a7721a5a10c14adb785b4f38d82a5709c6fb9406f4538f5414286fd40e047bd4dd476b8fd65b7dea73384a4763eec7535515a475b494d8e8c3a395ecb7ce83cd090721c1a6388727113d23c73609191a49ec05b1e12b6b5d94f1103dbd211b5d7af24116ef615851e0ed6e7d9e350668ade1b547a8e56d445253a6538c3d93d4bffbccce7b215c043dcd2c7d7f3d3b057a741d4ea671d2fa51935dfe2de22132bc3f0f449e3a95919ab4727342dcc43b21d0dc94e238d241e29ab1ace9dfe793123206916da2f59e482c79bb73b533d0f00f2be90be36159ec89315fb3daa44664342df82d7da005b63d4d58d6542586d8aed59944b49f407cdd089706dc7e606d2e4c81c93a26ef5527224426693bbdf128c49b285edc180444e4d917980f4a392c6ebff5535f48b3a9e7566957afe0339032523b5be82f7406556c1caa9685a9f1d321dfe09285ae813f2dfcce463e695cd1b772a0e6bf693d00be766a79de6d8c6e277fc3740c23c709e88f75c89d33e019b4e8734dbedb66f75348e24108e4e007a5f2a987d7a932df60e56267552a89dbc086f6cfa2240d84706dd459ae81eb4ac2feed0134c8a1388ca93f8de160d8210897d89a0d619f28c0bb5e802b1cd851645f5fe3ef008687aa321d85e4271cd0114bad19b00d967e9872c32f4f268f02ad76e6456a2e20580f85d377c0a4eadf0e45dab5e3b55f97f26cb73465b3c3eeded6e76f35b5727495612ce545a03b9b5573ce72725b7ab64bdd5954c04a6ec61368e6181dde892f10a8f7c042cbacfd88e7e16be9744921a5b46182e8bb1083253eb3ab627bf5460780f201606455c92ed5ccbce567b14595d93325edb073a6f278bd8c5f1aa865d8e8dd6440c9f193527b0f178824839b17ecfb4aa5e49f6fe010665dc0e725ae5b420045962e8955cc3acb924b7b3f1f972f793f705c5c4b72091e2de0ef57d4ba7976eea39a979d3bee5a3aa635d8eef5adc48cf8d3a1ff1069f03a8aead00cc705b1c72e0cc22ffa49bca44642b6da03d7d5f235efe3db5b4297b1578d3a03fdc5adc899c343dda92f49d0a6fd7c1e75e1a71633ffa43f7d48db6c50a837c2eadf30e256368058c117b93941c0672f5e7548cff777a6cd08f8695cca9ed5363a01012a44cf6647d206ca3004a70fd8d2fb4d4e2476f9951b0697f71226c1920809d9e85b8780b9c7e9ddf4184f849c4cd3ff626e9ea0e78258fcac020c8a057bff14f12716850edf4154d580a40f717d70e827ad7d38b198b5da57db321bda047f9cdb8e3626f1ab3bf885c1c73c81cb05d895ef97f1bb25bccd5140dcaa6d0c6575b798cd2e03be22efcd871de0064b14f3554c3ff8bf1cff62665e6d3fb16e6b7661c0d8fd66e783b7bf15e1d22345b956babc0e146822a3d1845d792217cf764f2b2ccfbbb462521249d55501aa61c22f5c5a851e06cc96308e994835f8c7b57f88771c20bcd745e2e8ddefd1087e395f5bff3e97f4a820fb9839d85801617bfb3ce71457c818a612296a511d6da8fd205050d3d213beb84c345e34ff0f5eb6630de30f5607eae5cc7bac61beb40ebf3e4f9c1f666f90bf4903b98ab419fd79c935029a29f65b50db6f078cc2d5d2c543d53b85ec9867b56972a409c3102a75312ae34a6ac1a98a11c3cc1453b18e65f27596aeb94c205ed76b01c70d4402bd0738fa45612080e269b2b8f21230364f9b53780c74108c7baf4ed83f83c8ff2889441f4dd34b3a1c16ea9ae20847ae59b61c466048dd775dd178963b903d6555fefce93553e092fe361cff8c98b94748a5cf77890b3dcd707ff3292d39cc13e8b0c2e6e21249f526c0d6b462273ba69c42686c290b3126c7706dc3adec980e30007d68c15e924e64d531dae0b25be9377e312cdaffa31aa05769a694550b2356c5ca2394a18b430888f321da5374f105cca70d974ec340c6521d13e43499834fa194762c78377749e89ad410ba028f4639c0bcb96722fec4ad960decc2fcd6e3ef907000000e9f31f56e19a3e2a60b77c365a1dcef75c8317123ea8db65bcb685e4e0d17588125fe52ffaa86535a18022f75c7ab3cf3798d9e7bbf43078e3f4b30b279fd1b5361e1513ff2e7b10139d74026b1580f7bf10463f21ca6bc0cc73b3534426d51e4097fd3a33fd2cd5b333debee94eaf089ad604f86e9a9f9a52ebcf04e8ca58cc950bd3e0711193384d1173dfd02ef912f49578d2f43f42395972d9e0341599ff2c4de86864f95c1225154eabc8b7d3971361fe922bb0d0881d238529af0d89f51f52cea3cceb83ec6dd42a3104f31ab6e117387224b67d31b3a609e43b32e54160933af2ffcf4eca2d2e29ba0c30e11105872d212632c221b8e7a8320e504717fc900ee07e71b4a7bfa0744407c76b59c66eb6653a318b3415c7e85b674f7e4ca6b94bd2d959941c50b09a7ea6d6386e9407f020c7a5e9050c3e147221fe1a1884454fca6088228ea4383107c3856957318db53f539b5f7eb867b0233712c19a8f612d8301670684a62b9b0cbd30bb97232d0dad56a4d16d0084a76e633f60b817c071308790bda2fe4ba10784b00c61945000c163694e222ad5a5b5d4ad63adb4b604218014c4bd1ff5d3944739a370740a6571cc1dfd336885051c3e1ef6ddc6f7c3ce8bf43b65fca77f7ca140c165cd275201359f87452bf8e1599f2617b9084e25a4b94629379b77cd90a7cce5f7aed899162ddd98cfad2d36ff46221905f752da4bd0325880b42fcbba00bd4b78c20207a84ac4c267dc2cfc167d51df1f894ffee982df68db4472915834db3bb2580bda1c111ca32d504bc9e2e06d59b0e232909d61d34612fa70da1f3db8714905cf1eafa82db8f0fce332bb51e060524b50e496da92c5c035349d0a4105091e1da7746b2bddccc23b2c107bde33b9cef7085d0756bcd973ed237c03e9160e9850f1a82d25b808a197b256c8a65565427fa964ffefdf7a61c09fd811ca54a423befbf526ececd49030d24918ba1c57e3077244996ff8f2b0664743ee6bee2790b3cbef31682a8e8e51cbab6846fa0c5771a107c313c9d7d5579fd8b18899390c4f802119e3fb8083a96a5802a640cb12459641fe108af0bee5fcd8feb71ab92d67f6e406fba1ba75a339587ac889b36bcb91a6d393ceb12f3c075e000a9807c137c2c1229fff111b824e56cd8a1a1c9c4692fedaeb60e7d15b7a05d612c27f5f381054b7cf23f4fefaa2a2e87085cf6eda13b09d205dd4789071273982bd3927c101b51ec865c6db871d8f045abf51b0d8687a4dc5bff91d73d6aab65217a14dd5e72824ad40c2e6b101959e02032f93dd9fbc08b54746acd9c9ba194e0fad96cf34e8b79a4f5d32c871c20f238cef3484eb7ef68df2717bbbccdf064976b47b1114209b3d4165f3350eb5a72dcba63f5125fb77c126cc8dd9f2d23019525ca1a771636a2d61eb01aafd54ac5feb46edc253a2a22da7b89f787dfe9f3b49b0401caa080e1b0dbd5943ea19171cadf780252ac56ffa3706b61d23b6faba89ef80921d92db721b14dc271d61fe272151100f5c667a68c937ac934fdefe997011cb75dfa92cb8842f95ff91794bf82cc877b1125c25e928a4a82dc55da2a6bbfe9270e1bcfa61e2c4b1a48c88a58a62dcc376bfea38fd30400b4d1975c4df9572a9bbb2858c6969ec4a683cb98b24abc7848066848af8f352bc568c21d356734c3462fb4e64366e3842900b840cfaae62f8e7b4cbc24a600f9367657c04142dab0ddcf856a9d35ab5ada7cb47be3a0344ab846e1c765717b45316b2119ebd3c63f730f952202fcac764402fbb79867e95db4a0b70534aa8c2aca1830f1f01030e04e8b8798f8f0137e972c196b9bc932cb8b2604377060ebe24a086d88406433eab4c145c2d9989c55782c98bfdf5c7e0602299e1a5a449f06b7b00cfe997602ea19031754a76e84ce116eb52843e65825661b6ddbab6a8431491d8903165b2592f6d951957c6a39d48e28640262c5927c92316b450c9121200b8038d923d9223148638e18a380e4cc259a4e600defc32b83cba8d71ec503a48c46d12cb4ea30aff94d51d54aeecf24d5ff974915826e1274712986fc20ae6c8b4b74407c934d624f99cd29328103c97b0f66ad6c365dd837656451c69cd772884528299d6db511992ad93c9b619fd6655ac5014a1edcf4197ec0208687577a02dfa4909893315651033c30ba2a7da8b1d649232acf03892ef66af0782007df3b651c8e02f700e3ecdd2fc80b86c02f432562e0650ad828fd0478c1e5366169f4a55f9a550516888d185040f07904b9b69d0ac2ed5"], 0x135e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x55, 0x99, &(0x7f00000000c0)="5e9a13efcc57856496733474b89fff98f2be78d6615fdbcb30124a627e9aea46fdd02e861aa8dec167bb1c711177f817196bb72af90ee1cb93630447f4fc80cabc53a0e453fd3f28cfa3923349def8bb445d4ea31b", &(0x7f0000000380)=""/153, 0x5, 0x0, 0x7e, 0x1, &(0x7f00000004c0)="e2822678222131ccba3f56c8b52ef2eecbe711e4c2d9aea306f169f15440e8aeac905bf7dd9162bdf19d1b51703dd0419964419f7b91445e23c374653762648ed3e4c0646cea66db36e509339b714f1040646ce87008c1d1ac4b3bf036e244632eee3d00de56ba0624aebec80a57039173c9c84bde2b4441b720c4825b00", &(0x7f0000000040)='$', 0x1, 0x0, 0x8}, 0x50) bind$bt_hci(r2, &(0x7f0000000200)={0x27, 0x0, 0x1}, 0x6) 1.379119676s ago: executing program 3 (id=1645): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x99, &(0x7f0000000940), &(0x7f0000000080)=0x58) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, 0x0, 0x2000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x140b, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="00000000000000002800bc88fe5cebd71b48f52b"], 0x48}}, 0x20008000) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x128, 0x288, 0xffffffff, 0x128, 0x128, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000340), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x30, 0x11, 0x8, 0x4}}, @common=@addrtype={{0x30}, {0x300, 0x8ca, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x5, 0x5, 0x4], 0x4, 0x2}, {0xffffffffffffffff, [0x2, 0x7, 0x0, 0x5, 0xa], 0x5, 0x4}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xff, 'wg2\x00', 'team0\x00', {}, {}, 0x21, 0x3, 0x4a}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @gre_key=0x9, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e24, @gre_key=0x8}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x4}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @broadcast, @broadcast, @port=0x4e23, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) getsockname$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @initdev}, &(0x7f0000000400)=0x10) 1.268676254s ago: executing program 2 (id=1646): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002b40)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x4c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x40, 0x1, 0x3, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', r4, 0x8000, 0x10, 0x2, 0x6, {{0x23, 0x4, 0x3, 0x31, 0x8c, 0x67, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0x7, [{@broadcast, 0x101}]}, @timestamp_prespec={0x44, 0xc, 0xdc, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp={0x44, 0x18, 0x9c, 0x0, 0x4, [0x3, 0x4e5, 0x8, 0x2, 0x6]}, @timestamp_prespec={0x44, 0x3c, 0xc2, 0x3, 0x2, [{@loopback}, {@multicast2, 0xfe}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x8}]}, @rr={0x7, 0xb, 0xe2, [@multicast1, @remote]}, @end]}}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_STATUS={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x8, 0x3, 0x7, 0x8000, 0x7ff, 0xcdaa]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x488c0}, 0x80) 1.235352752s ago: executing program 3 (id=1647): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="d2c17c103c85"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r3, 0x0, r6, 0x0, 0x8, 0x2) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800}, 0x20) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x10, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x3, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendto$rose(r4, &(0x7f0000000080)="62c54808a5b86f08720ee7da0cef570e", 0x10, 0x20040840, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.197798738s ago: executing program 4 (id=1648): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x82}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1}]}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$netlink(0x10, 0x3, 0x0) 1.060525576s ago: executing program 4 (id=1649): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x16, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x2d) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.059145619s ago: executing program 1 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) write$bt_hci(r2, &(0x7f0000000180)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0xd}}}, 0x7) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001700)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000380)=""/57, 0x39}], 0x2}}, {{&(0x7f0000000b00)=@ax25={{0x3, @default}, [@bcast, @default, @default, @bcast, @remote, @remote, @rose, @default]}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000b80)=""/77, 0x4d}], 0x1, &(0x7f0000002200)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000c00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)=""/97, 0x61}], 0x3}, 0x4}, {{&(0x7f0000000e80)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f00)=""/59, 0x3b}, {&(0x7f0000000f40)=""/172, 0xac}, {&(0x7f0000001100)=""/209, 0xd1}], 0x3, &(0x7f0000001040)=""/92, 0x5c}, 0x9}, {{&(0x7f0000001200)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/60, 0x3c}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000001380)=""/144, 0x90}, {0x0}, {&(0x7f0000001500)=""/6, 0x6}, {&(0x7f0000001540)=""/249, 0xf9}], 0x7, &(0x7f00000016c0)=""/1, 0x1}, 0x100}], 0x5, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r5, 0x413, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) 915.012247ms ago: executing program 4 (id=1651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)}], 0x1}}], 0x2, 0x40000) shutdown(r0, 0x1) 813.896564ms ago: executing program 2 (id=1652): r0 = socket(0x848000000015, 0x805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000000, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x7f}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'rr\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='F'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000300)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000000)={r10, 0x0, 0x2, 0x8}) 769.180445ms ago: executing program 3 (id=1653): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x20060400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="060000000000000002004e24ac141436000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095e8d71a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141426000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7eaddd9f3cbc355dc32cadba581c37912d7dab5ad04fe3b1a015b01dfda186d7e218d0aa61797e95bbc7918975489"], 0x110) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@private}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000805, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x7}, {0x0, 0x0, 0x0, 0x6}, 0x4, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="d3d850055e10d9850d44da85b000bf1f", 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000340)={0x0, 'pimreg0\x00', {0x3}}) 641.762992ms ago: executing program 4 (id=1654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="0adebe", 0x3}], 0x1}}], 0x2, 0x40000) shutdown(r0, 0x1) 567.988345ms ago: executing program 3 (id=1655): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800000000"], 0x7c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x42, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)={0x114, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_NAT_DST={0xa8, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) recvmmsg(r2, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltaction={0xf8, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x971a}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xf8}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3f8, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c002b800000030000000000080003000000000008000800", @ANYRES32, @ANYBLOB="4c001a80100002800c00019808000f00000000003800028026000180"], 0x88}}, 0x0) 526.197115ms ago: executing program 0 (id=1656): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c0002800600", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}}, 0x0) 406.864412ms ago: executing program 0 (id=1657): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32000000000300010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 281.296903ms ago: executing program 0 (id=1658): r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$phonet(0x23, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x8807, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000001c0)={0x2, 0x0, @loopback, 0x18}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004080) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x20}}, 0x68}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040045}, 0x440c5) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1}, 0xc) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 124.345873ms ago: executing program 1 (id=1659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280)={0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000600)={@void, @val={0x1, 0x4, 0xb7, 0x4, 0xa979, 0x1}, @ipv4=@tcp={{0xa, 0x4, 0x0, 0x16, 0xed, 0x68, 0x0, 0x9, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x8, [{@broadcast, 0x6}, {@remote, 0x80}]}]}}, {{0x4e23, 0x4e24, r3, r4, 0x1, 0x0, 0x6, 0x20, 0x1ff, 0x0, 0x6, {[@mptcp=@mp_join={0x1e, 0x3, 0x1}]}}, {"f0f9e6a99fb9889353d1fc3f6c519eeac54dbb8fda035b5c29c5615791e77114368cda575f082b66182209e6147d2a755e8dc644651c50e1268106c2a9883211639dae6af532c6f3fce347524463e217a92a10b8a75d544302c452853130e53a11b89b4dd5163364725758c5c1c09c143c69c52f0bd1219c1bd07032c82850e8fe320f57f47fa4f2c6aa068d2788f656dd2fbc2a6db2829de78b7afc00e669e8f8a2d5e0bd42e432370c12900d"}}}}, 0xf7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r5) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) sendto$inet(r6, &(0x7f0000000540)='0', 0x1, 0x0, &(0x7f0000000580)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)={r7, 0x0, 0x1, "cd"}, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x252, 0x80000001, 0xa793}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x2, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c854) syz_emit_ethernet(0x120c, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "834c3b", 0x11d6, 0x2f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, {[@fragment={0x3b, 0x0, 0x4, 0x1, 0x0, 0x9, 0x66}, @dstopts={0x89, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa2, 0x3, [0xf], "96650f8a199b32dc7d7a1e1fb784b7dcf67c891d5b9d0d208e6ea547b8c6e536c8b520f219eac84ded102f1e662c4b92d940d1569be795983271493c15669b2d27c0bf097d31b74c67e7030fcda864c26e2ecc1d715735f96a6a7ff44ff9b8b7eaf15919fca27e09712df13bf500881a15f0ecd0a9cca0ecdb785c6c3f8f0d8647e6f2affa37ca0cc52be8babc15e95063693c4362e87ff4b83d47c51810a3a9aaef"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xc000, 0x2], "628bb53f3d6d022b0974af5f676e9be29662fb6800ac2a6a71f9de97f84b18a168fbefb610f218955574818bb58d7c8b3abf2d702e7bff90582f7ca4f407367414ea4a055bd43cf9ffb100b782313f566e3946662c70472d65202587b1dd048cbcfef970a2a56f8a49a05e7d72d0b2db3e56d5ffa72a07b5009123dd87638a3d1714f13b78035330ed77b7f4f5b277c264756748d161bc040b7118"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x2], "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"}, {0x8, 0x88be, 0x0, {{0xe, 0x1, 0xf9, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0xdc, 0x0, 0x1, 0x1, 0x0, 0x2a}, 0x2, {0x240000, 0x0, 0x3, 0x15, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x0, "43c5909441c26a3439058eed3b4b1de8bc5b6cce17048da222b523ae581573f30eb9739029dab9495c1e26cb5721e008b64eb5bbdd"}}}}}}}, 0x0) 0s ago: executing program 2 (id=1660): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000007002100626204001c002280040000800000040003000000000004000d00000004000080040000800400008024fc008004000080"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@broadcast, @empty}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x57) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000008064b36efea6a800000000000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448de, &(0x7f00000000c0)={0x0, 0x8000}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) close(r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000080), 0x0) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) kernel console output (not intermixed with test programs): 266022][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz.1.1083 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 147.276777][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 147.286871][ T8606] Call Trace: [ 147.290168][ T8606] [ 147.293108][ T8606] dump_stack_lvl+0x241/0x360 [ 147.297802][ T8606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.303025][ T8606] ? __pfx__printk+0x10/0x10 [ 147.307743][ T8606] ? ref_tracker_alloc+0x332/0x490 [ 147.312961][ T8606] should_fail_ex+0x3b0/0x4e0 [ 147.317648][ T8606] ? skb_clone+0x20c/0x390 [ 147.322087][ T8606] should_failslab+0xac/0x100 [ 147.326783][ T8606] ? skb_clone+0x20c/0x390 [ 147.331217][ T8606] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 147.336604][ T8606] skb_clone+0x20c/0x390 [ 147.340890][ T8606] __netlink_deliver_tap+0x3cc/0x7f0 [ 147.346202][ T8606] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.351419][ T8606] netlink_deliver_tap+0x19d/0x1b0 [ 147.356550][ T8606] netlink_unicast+0x7c4/0x990 [ 147.361331][ T8606] ? __pfx_netlink_unicast+0x10/0x10 [ 147.366630][ T8606] ? __virt_addr_valid+0x183/0x530 [ 147.371767][ T8606] ? __check_object_size+0x48e/0x900 [ 147.377067][ T8606] netlink_sendmsg+0x8e4/0xcb0 [ 147.381856][ T8606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.387162][ T8606] ? aa_sock_msg_perm+0x91/0x160 [ 147.392118][ T8606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.397417][ T8606] __sock_sendmsg+0x221/0x270 [ 147.402111][ T8606] ____sys_sendmsg+0x52a/0x7e0 [ 147.406898][ T8606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.412216][ T8606] __sys_sendmsg+0x292/0x380 [ 147.416822][ T8606] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.421965][ T8606] ? __pfx_vfs_write+0x10/0x10 [ 147.426757][ T8606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.433131][ T8606] ? do_syscall_64+0x100/0x230 [ 147.437933][ T8606] ? do_syscall_64+0xb6/0x230 [ 147.442623][ T8606] do_syscall_64+0xf3/0x230 [ 147.447136][ T8606] ? clear_bhb_loop+0x35/0x90 [ 147.451828][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.457755][ T8606] RIP: 0033:0x7fe83bf7e719 [ 147.462193][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.481811][ T8606] RSP: 002b:00007fe83a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.490238][ T8606] RAX: ffffffffffffffda RBX: 00007fe83c135f80 RCX: 00007fe83bf7e719 [ 147.498218][ T8606] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 147.506202][ T8606] RBP: 00007fe83a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.514188][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.522163][ T8606] R13: 0000000000000000 R14: 00007fe83c135f80 R15: 00007ffc260b5908 [ 147.530176][ T8606] [ 147.541935][ T8611] __nla_validate_parse: 4 callbacks suppressed [ 147.541955][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1087'. [ 147.557366][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.778347][ T8617] netlink: 'syz.1.1088': attribute type 2 has an invalid length. [ 147.888873][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.974136][ T8626] FAULT_INJECTION: forcing a failure. [ 147.974136][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.009292][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.0.1093 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 148.020037][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 148.030137][ T8626] Call Trace: [ 148.033496][ T8626] [ 148.036558][ T8626] dump_stack_lvl+0x241/0x360 [ 148.041288][ T8626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.046537][ T8626] ? __pfx__printk+0x10/0x10 [ 148.051167][ T8626] ? __pfx_lock_release+0x10/0x10 [ 148.056238][ T8626] ? __lock_acquire+0x1384/0x2050 [ 148.061318][ T8626] should_fail_ex+0x3b0/0x4e0 [ 148.066044][ T8626] _copy_from_user+0x2f/0xc0 [ 148.070798][ T8626] kstrtouint_from_user+0xc6/0x190 [ 148.075958][ T8626] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 148.081727][ T8626] ? __pfx_lock_acquire+0x10/0x10 [ 148.086814][ T8626] proc_fail_nth_write+0xaa/0x2d0 [ 148.091892][ T8626] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 148.097835][ T8626] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.103540][ T8626] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.109223][ T8626] vfs_write+0x2a3/0xd30 [ 148.113481][ T8626] ? fdget_pos+0x24e/0x320 [ 148.117911][ T8626] ? __pfx_vfs_write+0x10/0x10 [ 148.122691][ T8626] ? __fget_files+0x3f3/0x470 [ 148.127389][ T8626] ? fdget_pos+0x24e/0x320 [ 148.131826][ T8626] ksys_write+0x183/0x2b0 [ 148.136167][ T8626] ? __pfx_ksys_write+0x10/0x10 [ 148.141030][ T8626] ? do_syscall_64+0x100/0x230 [ 148.145808][ T8626] ? do_syscall_64+0xb6/0x230 [ 148.150528][ T8626] do_syscall_64+0xf3/0x230 [ 148.155039][ T8626] ? clear_bhb_loop+0x35/0x90 [ 148.159728][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.165625][ T8626] RIP: 0033:0x7f850557d1ff [ 148.170070][ T8626] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 148.189684][ T8626] RSP: 002b:00007f85039f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.198104][ T8626] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f850557d1ff [ 148.206079][ T8626] RDX: 0000000000000001 RSI: 00007f85039f60a0 RDI: 0000000000000004 [ 148.214069][ T8626] RBP: 00007f85039f6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.222049][ T8626] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 148.230031][ T8626] R13: 0000000000000000 R14: 00007f8505735f80 R15: 00007ffc4bbbfe18 [ 148.238024][ T8626] [ 148.247993][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.432945][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 148.571752][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.635604][ T8641] netlink: 'syz.4.1097': attribute type 2 has an invalid length. [ 148.645770][ T8646] lo speed is unknown, defaulting to 1000 [ 148.782311][ T8652] FAULT_INJECTION: forcing a failure. [ 148.782311][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 148.814665][ T8652] CPU: 0 UID: 0 PID: 8652 Comm: syz.2.1102 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 148.825427][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 148.835529][ T8652] Call Trace: [ 148.838845][ T8652] [ 148.841805][ T8652] dump_stack_lvl+0x241/0x360 [ 148.846522][ T8652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.851760][ T8652] ? __pfx__printk+0x10/0x10 [ 148.856389][ T8652] ? ref_tracker_alloc+0x332/0x490 [ 148.861540][ T8652] should_fail_ex+0x3b0/0x4e0 [ 148.866282][ T8652] ? skb_clone+0x20c/0x390 [ 148.870748][ T8652] should_failslab+0xac/0x100 [ 148.875460][ T8652] ? skb_clone+0x20c/0x390 [ 148.879915][ T8652] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 148.885342][ T8652] skb_clone+0x20c/0x390 [ 148.889655][ T8652] __netlink_deliver_tap+0x3cc/0x7f0 [ 148.895000][ T8652] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.900239][ T8652] netlink_deliver_tap+0x19d/0x1b0 [ 148.905407][ T8652] netlink_unicast+0x7c4/0x990 [ 148.910227][ T8652] ? __pfx_netlink_unicast+0x10/0x10 [ 148.915565][ T8652] ? __virt_addr_valid+0x183/0x530 [ 148.920723][ T8652] ? __check_object_size+0x48e/0x900 [ 148.926052][ T8652] netlink_sendmsg+0x8e4/0xcb0 [ 148.930874][ T8652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.936207][ T8652] ? aa_sock_msg_perm+0x91/0x160 [ 148.941182][ T8652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.946524][ T8652] __sock_sendmsg+0x221/0x270 [ 148.951247][ T8652] ____sys_sendmsg+0x52a/0x7e0 [ 148.956070][ T8652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.961420][ T8652] __sys_sendmsg+0x292/0x380 [ 148.966065][ T8652] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.971242][ T8652] ? __pfx_vfs_write+0x10/0x10 [ 148.976075][ T8652] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.982451][ T8652] ? do_syscall_64+0x100/0x230 [ 148.987261][ T8652] ? do_syscall_64+0xb6/0x230 [ 148.991986][ T8652] do_syscall_64+0xf3/0x230 [ 148.996565][ T8652] ? clear_bhb_loop+0x35/0x90 [ 149.001307][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.007239][ T8652] RIP: 0033:0x7f1b6317e719 [ 149.011691][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.031340][ T8652] RSP: 002b:00007f1b63f6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.039798][ T8652] RAX: ffffffffffffffda RBX: 00007f1b63335f80 RCX: 00007f1b6317e719 [ 149.047804][ T8652] RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000003 [ 149.055815][ T8652] RBP: 00007f1b63f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.063830][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.071840][ T8652] R13: 0000000000000000 R14: 00007f1b63335f80 R15: 00007ffe634bd338 [ 149.079855][ T8652] [ 149.096660][ T8646] IPVS: You probably need to specify IP address on multicast interface. [ 149.106728][ T8646] IPVS: Error connecting to the multicast addr [ 150.136128][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 150.165543][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 150.201381][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 150.234683][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 150.357527][ T8704] netlink: 'syz.1.1120': attribute type 15 has an invalid length. [ 150.651810][ T5916] net_ratelimit: 1 callbacks suppressed [ 150.651831][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.701224][ T8724] FAULT_INJECTION: forcing a failure. [ 150.701224][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 150.717927][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.4.1128 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 150.728657][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 150.738750][ T8724] Call Trace: [ 150.742049][ T8724] [ 150.745002][ T8724] dump_stack_lvl+0x241/0x360 [ 150.749726][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.754960][ T8724] ? __pfx__printk+0x10/0x10 [ 150.759592][ T8724] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 150.765186][ T8724] ? __pfx___might_resched+0x10/0x10 [ 150.770513][ T8724] should_fail_ex+0x3b0/0x4e0 [ 150.775229][ T8724] ? skb_clone+0x20c/0x390 [ 150.779664][ T8724] should_failslab+0xac/0x100 [ 150.784357][ T8724] ? skb_clone+0x20c/0x390 [ 150.788790][ T8724] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 150.794175][ T8724] ? __virt_addr_valid+0x183/0x530 [ 150.799300][ T8724] skb_clone+0x20c/0x390 [ 150.803557][ T8724] pfkey_sendmsg+0x43d/0x1050 [ 150.808258][ T8724] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 150.813388][ T8724] ? aa_sk_perm+0x96d/0xab0 [ 150.817918][ T8724] ? __pfx_aa_sk_perm+0x10/0x10 [ 150.822788][ T8724] ? __pfx_lock_release+0x10/0x10 [ 150.827853][ T8724] ? __import_iovec+0x590/0x870 [ 150.832727][ T8724] ? aa_sock_msg_perm+0x91/0x160 [ 150.837682][ T8724] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 150.842808][ T8724] __sock_sendmsg+0x221/0x270 [ 150.847496][ T8724] ____sys_sendmsg+0x52a/0x7e0 [ 150.852293][ T8724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.857613][ T8724] __sys_sendmsg+0x292/0x380 [ 150.862381][ T8724] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.867534][ T8724] ? __pfx_vfs_write+0x10/0x10 [ 150.872337][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.878769][ T8724] ? do_syscall_64+0x100/0x230 [ 150.883547][ T8724] ? do_syscall_64+0xb6/0x230 [ 150.888245][ T8724] do_syscall_64+0xf3/0x230 [ 150.892842][ T8724] ? clear_bhb_loop+0x35/0x90 [ 150.897534][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.903446][ T8724] RIP: 0033:0x7f8dbe57e719 [ 150.907882][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.927605][ T8724] RSP: 002b:00007f8dbf462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.936068][ T8724] RAX: ffffffffffffffda RBX: 00007f8dbe735f80 RCX: 00007f8dbe57e719 [ 150.944143][ T8724] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 150.952224][ T8724] RBP: 00007f8dbf462090 R08: 0000000000000000 R09: 0000000000000000 [ 150.960208][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.968187][ T8724] R13: 0000000000000000 R14: 00007f8dbe735f80 R15: 00007ffc4b433268 [ 150.976202][ T8724] [ 151.192932][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 151.289519][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.417362][ T8742] FAULT_INJECTION: forcing a failure. [ 151.417362][ T8742] name failslab, interval 1, probability 0, space 0, times 0 [ 151.430136][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.3.1134 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 151.440850][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.450939][ T8742] Call Trace: [ 151.454244][ T8742] [ 151.457196][ T8742] dump_stack_lvl+0x241/0x360 [ 151.461916][ T8742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.467159][ T8742] ? __pfx__printk+0x10/0x10 [ 151.471808][ T8742] should_fail_ex+0x3b0/0x4e0 [ 151.476569][ T8742] ? dst_alloc+0x12b/0x190 [ 151.481024][ T8742] should_failslab+0xac/0x100 [ 151.485740][ T8742] ? dst_alloc+0x12b/0x190 [ 151.490197][ T8742] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 151.495625][ T8742] ? __pfx_ip6_dst_gc+0x10/0x10 [ 151.500514][ T8742] dst_alloc+0x12b/0x190 [ 151.504802][ T8742] icmp6_dst_alloc+0x77/0x420 [ 151.509513][ T8742] ? icmpv6_flow_init+0x63/0x120 [ 151.514467][ T8742] ndisc_send_skb+0x316/0x1450 [ 151.519260][ T8742] ? __pfx_ndisc_send_skb+0x10/0x10 [ 151.524491][ T8742] ? ndisc_ns_create+0x43a/0x770 [ 151.529449][ T8742] ? __asan_memcpy+0x40/0x70 [ 151.534063][ T8742] ? __pfx_ndisc_ns_create+0x10/0x10 [ 151.539365][ T8742] ndisc_solicit+0x493/0x6a0 [ 151.543964][ T8742] ? __pfx_ndisc_solicit+0x10/0x10 [ 151.549081][ T8742] ? __skb_clone+0x454/0x6c0 [ 151.553693][ T8742] ? __pfx_ndisc_solicit+0x10/0x10 [ 151.558840][ T8742] __neigh_event_send+0xef2/0x15d0 [ 151.563969][ T8742] ? ___neigh_create+0x1d56/0x2300 [ 151.569096][ T8742] neigh_resolve_output+0x1b5/0x740 [ 151.574305][ T8742] ip6_finish_output2+0x12c7/0x17b0 [ 151.579523][ T8742] ? ip6_mtu+0x81/0x3f0 [ 151.583694][ T8742] ? ip6_finish_output2+0x63a/0x17b0 [ 151.588997][ T8742] ? __pfx_ip6_finish_output2+0x10/0x10 [ 151.594567][ T8742] ? ip6_mtu+0x81/0x3f0 [ 151.598731][ T8742] ip6_finish_output+0x41e/0x840 [ 151.603687][ T8742] ip6_send_skb+0x1b1/0x3b0 [ 151.608198][ T8742] ? ip6_send_skb+0xfd/0x3b0 [ 151.612827][ T8742] udp_v6_send_skb+0xbc5/0x1880 [ 151.617707][ T8742] udpv6_sendmsg+0x23bc/0x32b0 [ 151.622495][ T8742] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 151.628054][ T8742] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 151.633177][ T8742] ? __pfx___might_resched+0x10/0x10 [ 151.638523][ T8742] ? aa_sk_perm+0x96d/0xab0 [ 151.643086][ T8742] ? sock_rps_record_flow+0x1a/0x400 [ 151.648400][ T8742] ? inet_send_prepare+0x21/0x260 [ 151.653530][ T8742] ? inet_send_prepare+0x5a/0x260 [ 151.658597][ T8742] __sock_sendmsg+0xef/0x270 [ 151.663205][ T8742] ____sys_sendmsg+0x52a/0x7e0 [ 151.667992][ T8742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.673308][ T8742] __sys_sendmmsg+0x3ab/0x730 [ 151.678005][ T8742] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.683316][ T8742] ? __pfx_lock_release+0x10/0x10 [ 151.688402][ T8742] ? kstrtouint_from_user+0x128/0x190 [ 151.693814][ T8742] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 151.699738][ T8742] ? ksys_write+0x229/0x2b0 [ 151.704291][ T8742] ? __pfx_lock_release+0x10/0x10 [ 151.709346][ T8742] ? vfs_write+0x730/0xd30 [ 151.713778][ T8742] ? __mutex_unlock_slowpath+0x21d/0x750 [ 151.719525][ T8742] ? __fget_files+0x3f3/0x470 [ 151.724260][ T8742] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.730271][ T8742] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.736621][ T8742] ? do_syscall_64+0x100/0x230 [ 151.741418][ T8742] __x64_sys_sendmmsg+0xa0/0xb0 [ 151.746315][ T8742] do_syscall_64+0xf3/0x230 [ 151.750836][ T8742] ? clear_bhb_loop+0x35/0x90 [ 151.755526][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.761434][ T8742] RIP: 0033:0x7feffcf7e719 [ 151.765861][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.785565][ T8742] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.794003][ T8742] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 151.801992][ T8742] RDX: 0000000000000001 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 151.809987][ T8742] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.817968][ T8742] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.825972][ T8742] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 151.833990][ T8742] [ 151.880628][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.099428][ T8753] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 152.119992][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 152.179803][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 152.193632][ T8755] vlan3: entered promiscuous mode [ 152.249271][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.267955][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 152.893110][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.011606][ T8799] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.463484][ T8822] FAULT_INJECTION: forcing a failure. [ 153.463484][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 153.490572][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.4.1164 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 153.501317][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 153.511430][ T8822] Call Trace: [ 153.514745][ T8822] [ 153.517710][ T8822] dump_stack_lvl+0x241/0x360 [ 153.522438][ T8822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.527690][ T8822] ? __pfx__printk+0x10/0x10 [ 153.532333][ T8822] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 153.538362][ T8822] ? __pfx___might_resched+0x10/0x10 [ 153.543704][ T8822] should_fail_ex+0x3b0/0x4e0 [ 153.548429][ T8822] should_failslab+0xac/0x100 [ 153.553166][ T8822] ? __alloc_skb+0x1c3/0x440 [ 153.557803][ T8822] kmem_cache_alloc_node_noprof+0x71/0x320 [ 153.563675][ T8822] __alloc_skb+0x1c3/0x440 [ 153.568141][ T8822] ? __pfx___alloc_skb+0x10/0x10 [ 153.573130][ T8822] ? __pfx___might_resched+0x10/0x10 [ 153.578479][ T8822] alloc_skb_with_frags+0xc3/0x820 [ 153.583645][ T8822] ? validate_chain+0x11e/0x5920 [ 153.588637][ T8822] sock_alloc_send_pskb+0x91a/0xa60 [ 153.593906][ T8822] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 153.599691][ T8822] ? iov_iter_advance+0x8f/0x1e0 [ 153.604684][ T8822] tun_get_user+0xcf0/0x4890 [ 153.609333][ T8822] ? __lock_acquire+0x1384/0x2050 [ 153.614419][ T8822] ? __pfx_tun_get_user+0x10/0x10 [ 153.619525][ T8822] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 153.625035][ T8822] ? tun_get+0x1e/0x2f0 [ 153.629240][ T8822] ? __pfx_lock_release+0x10/0x10 [ 153.634340][ T8822] ? tun_get+0x1e/0x2f0 [ 153.638540][ T8822] ? tun_get+0x27d/0x2f0 [ 153.642833][ T8822] tun_chr_write_iter+0x10d/0x1f0 [ 153.647924][ T8822] vfs_write+0xaeb/0xd30 [ 153.652210][ T8822] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 153.657802][ T8822] ? __pfx_vfs_write+0x10/0x10 [ 153.662622][ T8822] ? fdget_pos+0x19a/0x320 [ 153.667082][ T8822] ksys_write+0x183/0x2b0 [ 153.671458][ T8822] ? __pfx_ksys_write+0x10/0x10 [ 153.676348][ T8822] ? do_syscall_64+0x100/0x230 [ 153.681202][ T8822] ? do_syscall_64+0xb6/0x230 [ 153.685928][ T8822] do_syscall_64+0xf3/0x230 [ 153.690478][ T8822] ? clear_bhb_loop+0x35/0x90 [ 153.695210][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.701142][ T8822] RIP: 0033:0x7f8dbe57e719 [ 153.705595][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.725256][ T8822] RSP: 002b:00007f8dbf462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.733698][ T8822] RAX: ffffffffffffffda RBX: 00007f8dbe735f80 RCX: 00007f8dbe57e719 [ 153.741677][ T8822] RDX: 0000000000000086 RSI: 0000000020000600 RDI: 0000000000000003 [ 153.749666][ T8822] RBP: 00007f8dbf462090 R08: 0000000000000000 R09: 0000000000000000 [ 153.757676][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.765670][ T8822] R13: 0000000000000000 R14: 00007f8dbe735f80 R15: 00007ffc4b433268 [ 153.773682][ T8822] [ 153.920211][ T8840] __nla_validate_parse: 2 callbacks suppressed [ 153.920232][ T8840] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1168'. [ 153.939839][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.966683][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 153.998113][ T8842] lo speed is unknown, defaulting to 1000 [ 154.200800][ T8849] FAULT_INJECTION: forcing a failure. [ 154.200800][ T8849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.229680][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1173'. [ 154.272686][ T8849] CPU: 0 UID: 0 PID: 8849 Comm: syz.4.1172 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 154.283442][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 154.293548][ T8849] Call Trace: [ 154.296867][ T8849] [ 154.299836][ T8849] dump_stack_lvl+0x241/0x360 [ 154.304553][ T8849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.309780][ T8849] ? __pfx__printk+0x10/0x10 [ 154.314378][ T8849] ? __pfx_lock_release+0x10/0x10 [ 154.319436][ T8849] should_fail_ex+0x3b0/0x4e0 [ 154.324140][ T8849] _copy_from_iter+0x21f/0x1e70 [ 154.329015][ T8849] ? __virt_addr_valid+0x183/0x530 [ 154.334167][ T8849] ? __pfx_lock_release+0x10/0x10 [ 154.339245][ T8849] ? __alloc_skb+0x28f/0x440 [ 154.343876][ T8849] ? __pfx__copy_from_iter+0x10/0x10 [ 154.349226][ T8849] ? __virt_addr_valid+0x183/0x530 [ 154.354430][ T8849] ? __virt_addr_valid+0x183/0x530 [ 154.359585][ T8849] ? __virt_addr_valid+0x45f/0x530 [ 154.364741][ T8849] ? __check_object_size+0x48e/0x900 [ 154.370086][ T8849] netlink_sendmsg+0x73d/0xcb0 [ 154.374933][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.380272][ T8849] ? aa_sock_msg_perm+0x91/0x160 [ 154.385262][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.390598][ T8849] __sock_sendmsg+0x221/0x270 [ 154.395381][ T8849] ____sys_sendmsg+0x52a/0x7e0 [ 154.400201][ T8849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.405534][ T8849] __sys_sendmsg+0x292/0x380 [ 154.410153][ T8849] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.415318][ T8849] ? __pfx_vfs_write+0x10/0x10 [ 154.420105][ T8849] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.426453][ T8849] ? do_syscall_64+0x100/0x230 [ 154.431253][ T8849] ? do_syscall_64+0xb6/0x230 [ 154.435967][ T8849] do_syscall_64+0xf3/0x230 [ 154.440521][ T8849] ? clear_bhb_loop+0x35/0x90 [ 154.445243][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.451202][ T8849] RIP: 0033:0x7f8dbe57e719 [ 154.455648][ T8849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.475281][ T8849] RSP: 002b:00007f8dbf462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.483730][ T8849] RAX: ffffffffffffffda RBX: 00007f8dbe735f80 RCX: 00007f8dbe57e719 [ 154.491748][ T8849] RDX: 0000000000004050 RSI: 0000000020000080 RDI: 0000000000000003 [ 154.499761][ T8849] RBP: 00007f8dbf462090 R08: 0000000000000000 R09: 0000000000000000 [ 154.507783][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.515804][ T8849] R13: 0000000000000000 R14: 00007f8dbe735f80 R15: 00007ffc4b433268 [ 154.523816][ T8849] [ 154.657610][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 154.688159][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1176'. [ 154.832281][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 154.974594][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.177222][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1181'. [ 155.310492][ T8899] FAULT_INJECTION: forcing a failure. [ 155.310492][ T8899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.353707][ T8899] CPU: 1 UID: 0 PID: 8899 Comm: syz.0.1186 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 155.364464][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 155.374571][ T8899] Call Trace: [ 155.377918][ T8899] [ 155.380894][ T8899] dump_stack_lvl+0x241/0x360 [ 155.385624][ T8899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.390866][ T8899] ? __pfx__printk+0x10/0x10 [ 155.395496][ T8899] ? __pfx_lock_release+0x10/0x10 [ 155.400582][ T8899] should_fail_ex+0x3b0/0x4e0 [ 155.405306][ T8899] _copy_from_iter+0x21f/0x1e70 [ 155.410235][ T8899] ? __virt_addr_valid+0x183/0x530 [ 155.415421][ T8899] ? __pfx_lock_release+0x10/0x10 [ 155.420502][ T8899] ? __alloc_skb+0x28f/0x440 [ 155.425139][ T8899] ? __pfx__copy_from_iter+0x10/0x10 [ 155.430487][ T8899] ? __virt_addr_valid+0x183/0x530 [ 155.435640][ T8899] ? __virt_addr_valid+0x183/0x530 [ 155.440795][ T8899] ? __virt_addr_valid+0x45f/0x530 [ 155.445944][ T8899] ? __check_object_size+0x48e/0x900 [ 155.451259][ T8899] netlink_sendmsg+0x73d/0xcb0 [ 155.456058][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.461376][ T8899] ? aa_sock_msg_perm+0x91/0x160 [ 155.466329][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.471634][ T8899] __sock_sendmsg+0x221/0x270 [ 155.476327][ T8899] ____sys_sendmsg+0x52a/0x7e0 [ 155.481120][ T8899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.486449][ T8899] __sys_sendmsg+0x292/0x380 [ 155.491059][ T8899] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.496194][ T8899] ? __pfx_vfs_write+0x10/0x10 [ 155.500989][ T8899] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.507337][ T8899] ? do_syscall_64+0x100/0x230 [ 155.512121][ T8899] ? do_syscall_64+0xb6/0x230 [ 155.516827][ T8899] do_syscall_64+0xf3/0x230 [ 155.521345][ T8899] ? clear_bhb_loop+0x35/0x90 [ 155.526046][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.531952][ T8899] RIP: 0033:0x7f850557e719 [ 155.536415][ T8899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.556053][ T8899] RSP: 002b:00007f85039f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.564499][ T8899] RAX: ffffffffffffffda RBX: 00007f8505735f80 RCX: 00007f850557e719 [ 155.572489][ T8899] RDX: 0000000024000004 RSI: 0000000020000340 RDI: 0000000000000003 [ 155.580469][ T8899] RBP: 00007f85039f6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.588470][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.596446][ T8899] R13: 0000000000000000 R14: 00007f8505735f80 R15: 00007ffc4bbbfe18 [ 155.604441][ T8899] [ 155.610021][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.009515][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.170558][ T8922] IPv6: sit1: Disabled Multicast RS [ 156.192696][ T8922] sit1: entered allmulticast mode [ 156.316521][ T8932] FAULT_INJECTION: forcing a failure. [ 156.316521][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 156.329665][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.3.1196 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 156.339439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.340362][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 156.340404][ T8932] Call Trace: [ 156.340416][ T8932] [ 156.340427][ T8932] dump_stack_lvl+0x241/0x360 [ 156.369753][ T8932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.375008][ T8932] ? __pfx__printk+0x10/0x10 [ 156.379735][ T8932] ? __lock_acquire+0x1384/0x2050 [ 156.384814][ T8932] should_fail_ex+0x3b0/0x4e0 [ 156.389537][ T8932] should_failslab+0xac/0x100 [ 156.394254][ T8932] ? __alloc_skb+0x1c3/0x440 [ 156.398884][ T8932] kmem_cache_alloc_node_noprof+0x71/0x320 [ 156.404734][ T8932] __alloc_skb+0x1c3/0x440 [ 156.409179][ T8932] ? __pfx___alloc_skb+0x10/0x10 [ 156.414144][ T8932] ? trace_raw_output_contention_end+0xa0/0xd0 [ 156.420345][ T8932] __pfkey_xfrm_state2msg+0x434/0x3cf0 [ 156.425831][ T8932] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.431231][ T8932] dump_sa+0xaa/0x570 [ 156.435260][ T8932] xfrm_state_walk+0x263/0x9e0 [ 156.440069][ T8932] ? __pfx_dump_sa+0x10/0x10 [ 156.444675][ T8932] pfkey_do_dump+0x5c/0x400 [ 156.449197][ T8932] pfkey_sendmsg+0xbcc/0x1050 [ 156.453907][ T8932] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 156.459059][ T8932] ? __pfx_aa_sk_perm+0x10/0x10 [ 156.463949][ T8932] ? __pfx_lock_release+0x10/0x10 [ 156.469030][ T8932] ? __import_iovec+0x590/0x870 [ 156.473899][ T8932] ? aa_sock_msg_perm+0x91/0x160 [ 156.478875][ T8932] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 156.484013][ T8932] __sock_sendmsg+0x221/0x270 [ 156.488716][ T8932] ____sys_sendmsg+0x52a/0x7e0 [ 156.493517][ T8932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.498836][ T8932] __sys_sendmsg+0x292/0x380 [ 156.503486][ T8932] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.508651][ T8932] ? __pfx_vfs_write+0x10/0x10 [ 156.513452][ T8932] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.519807][ T8932] ? do_syscall_64+0x100/0x230 [ 156.524614][ T8932] ? do_syscall_64+0xb6/0x230 [ 156.529313][ T8932] do_syscall_64+0xf3/0x230 [ 156.533823][ T8932] ? clear_bhb_loop+0x35/0x90 [ 156.538519][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.544435][ T8932] RIP: 0033:0x7feffcf7e719 [ 156.548860][ T8932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.568475][ T8932] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.576929][ T8932] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 156.584935][ T8932] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 156.592921][ T8932] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.600905][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.608908][ T8932] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 156.616924][ T8932] [ 157.049575][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.200142][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1206'. [ 157.373244][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.383330][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.431651][ T8971] netlink: 'syz.0.1211': attribute type 7 has an invalid length. [ 157.439807][ T8971] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1211'. [ 157.882449][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.891465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.920447][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.943239][ T2958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.969224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.138322][ T9005] FAULT_INJECTION: forcing a failure. [ 158.138322][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.151859][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.3.1223 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 158.162600][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 158.165115][ T9007] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 158.172676][ T9005] Call Trace: [ 158.172690][ T9005] [ 158.172701][ T9005] dump_stack_lvl+0x241/0x360 [ 158.172735][ T9005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.172760][ T9005] ? __pfx__printk+0x10/0x10 [ 158.172785][ T9005] ? __pfx_lock_release+0x10/0x10 [ 158.180828][ T9007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1222'. [ 158.183800][ T9005] should_fail_ex+0x3b0/0x4e0 [ 158.183839][ T9005] _copy_from_user+0x2f/0xc0 [ 158.224734][ T9005] copy_msghdr_from_user+0xae/0x680 [ 158.229989][ T9005] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.235859][ T9005] __sys_sendmsg+0x22d/0x380 [ 158.240524][ T9005] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.245697][ T9005] ? __pfx_vfs_write+0x10/0x10 [ 158.250535][ T9005] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.256925][ T9005] ? do_syscall_64+0x100/0x230 [ 158.261737][ T9005] ? do_syscall_64+0xb6/0x230 [ 158.266460][ T9005] do_syscall_64+0xf3/0x230 [ 158.271003][ T9005] ? clear_bhb_loop+0x35/0x90 [ 158.275720][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.281669][ T9005] RIP: 0033:0x7feffcf7e719 [ 158.286126][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.305768][ T9005] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.314208][ T9005] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 158.322226][ T9005] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 158.330216][ T9005] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.338218][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.346221][ T9005] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 158.354246][ T9005] [ 159.173446][ T9038] FAULT_INJECTION: forcing a failure. [ 159.173446][ T9038] name failslab, interval 1, probability 0, space 0, times 0 [ 159.186419][ T9038] CPU: 1 UID: 0 PID: 9038 Comm: syz.4.1235 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 159.197124][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 159.207210][ T9038] Call Trace: [ 159.210506][ T9038] [ 159.213461][ T9038] dump_stack_lvl+0x241/0x360 [ 159.218186][ T9038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.223402][ T9038] ? __pfx__printk+0x10/0x10 [ 159.228004][ T9038] ? ref_tracker_alloc+0x332/0x490 [ 159.233146][ T9038] should_fail_ex+0x3b0/0x4e0 [ 159.237867][ T9038] ? skb_clone+0x20c/0x390 [ 159.242322][ T9038] should_failslab+0xac/0x100 [ 159.247020][ T9038] ? skb_clone+0x20c/0x390 [ 159.251473][ T9038] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 159.256891][ T9038] skb_clone+0x20c/0x390 [ 159.261171][ T9038] __netlink_deliver_tap+0x3cc/0x7f0 [ 159.266514][ T9038] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.271729][ T9038] netlink_deliver_tap+0x19d/0x1b0 [ 159.276864][ T9038] netlink_unicast+0x7c4/0x990 [ 159.281665][ T9038] ? __pfx_netlink_unicast+0x10/0x10 [ 159.286961][ T9038] ? __virt_addr_valid+0x183/0x530 [ 159.292088][ T9038] ? __check_object_size+0x48e/0x900 [ 159.297390][ T9038] netlink_sendmsg+0x8e4/0xcb0 [ 159.302183][ T9038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.307664][ T9038] ? aa_sock_msg_perm+0x91/0x160 [ 159.312654][ T9038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.317953][ T9038] __sock_sendmsg+0x221/0x270 [ 159.322647][ T9038] ____sys_sendmsg+0x52a/0x7e0 [ 159.327610][ T9038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.332924][ T9038] __sys_sendmsg+0x292/0x380 [ 159.337533][ T9038] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.342670][ T9038] ? __pfx_vfs_write+0x10/0x10 [ 159.347470][ T9038] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.353821][ T9038] ? do_syscall_64+0x100/0x230 [ 159.358602][ T9038] ? do_syscall_64+0xb6/0x230 [ 159.363294][ T9038] do_syscall_64+0xf3/0x230 [ 159.367826][ T9038] ? clear_bhb_loop+0x35/0x90 [ 159.372533][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.378521][ T9038] RIP: 0033:0x7f8dbe57e719 [ 159.382943][ T9038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.402559][ T9038] RSP: 002b:00007f8dbf462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.410988][ T9038] RAX: ffffffffffffffda RBX: 00007f8dbe735f80 RCX: 00007f8dbe57e719 [ 159.418967][ T9038] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 159.426957][ T9038] RBP: 00007f8dbf462090 R08: 0000000000000000 R09: 0000000000000000 [ 159.434939][ T9038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.442918][ T9038] R13: 0000000000000000 R14: 00007f8dbe735f80 R15: 00007ffc4b433268 [ 159.450916][ T9038] [ 159.617136][ T9042] IPv6: NLM_F_REPLACE set, but no existing node found! [ 160.172285][ T9066] FAULT_INJECTION: forcing a failure. [ 160.172285][ T9066] name failslab, interval 1, probability 0, space 0, times 0 [ 160.208784][ T9066] CPU: 0 UID: 0 PID: 9066 Comm: syz.1.1248 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 160.211706][ T9069] ipt_REJECT: TCP_RESET invalid for non-tcp [ 160.219521][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 160.219543][ T9066] Call Trace: [ 160.219553][ T9066] [ 160.219564][ T9066] dump_stack_lvl+0x241/0x360 [ 160.219597][ T9066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.219621][ T9066] ? __pfx__printk+0x10/0x10 [ 160.219647][ T9066] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 160.219679][ T9066] ? __pfx___might_resched+0x10/0x10 [ 160.219715][ T9066] should_fail_ex+0x3b0/0x4e0 [ 160.219743][ T9066] should_failslab+0xac/0x100 [ 160.219770][ T9066] ? __alloc_skb+0x1c3/0x440 [ 160.219801][ T9066] kmem_cache_alloc_node_noprof+0x71/0x320 [ 160.219837][ T9066] __alloc_skb+0x1c3/0x440 [ 160.219872][ T9066] ? __pfx___alloc_skb+0x10/0x10 [ 160.219907][ T9066] ? __pfx___might_resched+0x10/0x10 [ 160.219940][ T9066] alloc_skb_with_frags+0xc3/0x820 [ 160.219975][ T9066] ? validate_chain+0x11e/0x5920 [ 160.220010][ T9066] sock_alloc_send_pskb+0x91a/0xa60 [ 160.220070][ T9066] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 160.220116][ T9066] ? iov_iter_advance+0x8f/0x1e0 [ 160.220162][ T9066] tun_get_user+0xcf0/0x4890 [ 160.220204][ T9066] ? __lock_acquire+0x1384/0x2050 [ 160.220242][ T9066] ? __pfx_tun_get_user+0x10/0x10 [ 160.220287][ T9066] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 160.220332][ T9066] ? tun_get+0x1e/0x2f0 [ 160.220362][ T9066] ? __pfx_lock_release+0x10/0x10 [ 160.220422][ T9066] ? tun_get+0x1e/0x2f0 [ 160.220449][ T9066] ? tun_get+0x27d/0x2f0 [ 160.220479][ T9066] tun_chr_write_iter+0x10d/0x1f0 [ 160.220510][ T9066] vfs_write+0xaeb/0xd30 [ 160.220534][ T9066] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 160.220564][ T9066] ? __pfx_vfs_write+0x10/0x10 [ 160.220600][ T9066] ? fdget_pos+0x19a/0x320 [ 160.220645][ T9066] ksys_write+0x183/0x2b0 [ 160.220671][ T9066] ? __pfx_ksys_write+0x10/0x10 [ 160.220694][ T9066] ? do_syscall_64+0x100/0x230 [ 160.220721][ T9066] ? do_syscall_64+0xb6/0x230 [ 160.409424][ T9066] do_syscall_64+0xf3/0x230 [ 160.413950][ T9066] ? clear_bhb_loop+0x35/0x90 [ 160.418642][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.424556][ T9066] RIP: 0033:0x7fe83bf7e719 [ 160.428987][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.448608][ T9066] RSP: 002b:00007fe83a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.457040][ T9066] RAX: ffffffffffffffda RBX: 00007fe83c135f80 RCX: 00007fe83bf7e719 [ 160.465109][ T9066] RDX: 0000000000000086 RSI: 0000000020000600 RDI: 0000000000000003 [ 160.473088][ T9066] RBP: 00007fe83a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.481070][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.489076][ T9066] R13: 0000000000000000 R14: 00007fe83c135f80 R15: 00007ffc260b5908 [ 160.497077][ T9066] [ 160.927944][ T9088] __nla_validate_parse: 1 callbacks suppressed [ 160.927968][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1253'. [ 161.036697][ T9088] lo speed is unknown, defaulting to 1000 [ 161.073495][ T9096] FAULT_INJECTION: forcing a failure. [ 161.073495][ T9096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.104499][ T9098] netlink: 'syz.1.1255': attribute type 7 has an invalid length. [ 161.117559][ T9099] netlink: 'syz.1.1255': attribute type 7 has an invalid length. [ 161.120857][ T9096] CPU: 1 UID: 0 PID: 9096 Comm: syz.0.1256 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 161.136041][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 161.146138][ T9096] Call Trace: [ 161.149454][ T9096] [ 161.152419][ T9096] dump_stack_lvl+0x241/0x360 [ 161.157149][ T9096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.162390][ T9096] ? __pfx__printk+0x10/0x10 [ 161.167048][ T9096] should_fail_ex+0x3b0/0x4e0 [ 161.171775][ T9096] _copy_from_user+0x2f/0xc0 [ 161.176423][ T9096] sctp_setsockopt+0xcc/0x11c0 [ 161.181250][ T9096] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 161.187189][ T9096] do_sock_setsockopt+0x3af/0x720 [ 161.192270][ T9096] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 161.197878][ T9096] ? __fget_files+0x29/0x470 [ 161.202503][ T9096] ? __fget_files+0x3f3/0x470 [ 161.207197][ T9096] ? __fget_files+0x29/0x470 [ 161.211812][ T9096] __sys_setsockopt+0x1a2/0x250 [ 161.216702][ T9096] __x64_sys_setsockopt+0xb5/0xd0 [ 161.221758][ T9096] do_syscall_64+0xf3/0x230 [ 161.226272][ T9096] ? clear_bhb_loop+0x35/0x90 [ 161.231047][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.236985][ T9096] RIP: 0033:0x7f850557e719 [ 161.241412][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.261120][ T9096] RSP: 002b:00007f85039f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.269590][ T9096] RAX: ffffffffffffffda RBX: 00007f8505735f80 RCX: 00007f850557e719 [ 161.277573][ T9096] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000004 [ 161.285569][ T9096] RBP: 00007f85039f6090 R08: 0000000000000008 R09: 0000000000000000 [ 161.293579][ T9096] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 161.301578][ T9096] R13: 0000000000000000 R14: 00007f8505735f80 R15: 00007ffc4bbbfe18 [ 161.309595][ T9096] [ 161.323160][ T9094] bond0: (slave macsec1): Enslaving as an active interface with an up link [ 161.343578][ T5888] net_ratelimit: 9 callbacks suppressed [ 161.343599][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.348001][ T9100] ip6gre1: entered allmulticast mode [ 161.400303][ T9073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.626233][ T9111] lo speed is unknown, defaulting to 1000 [ 161.688650][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 161.709686][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.756780][ T9114] bond0: option ad_select: unable to set because the bond device is up [ 161.774146][ T9110] sit0: entered promiscuous mode [ 162.157350][ T9127] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 162.169173][ T9127] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1266'. [ 162.419455][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.690440][ T9145] netlink: 'syz.4.1273': attribute type 10 has an invalid length. [ 162.699173][ T9145] wlan1: mtu less than device minimum [ 162.705095][ T9145] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 162.796156][ T9147] tap0: tun_chr_ioctl cmd 1074025677 [ 162.876937][ T9149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.902909][ T9149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.918435][ T9149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.928855][ T9149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.945694][ T9149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.957070][ T9150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.039403][ T9147] tap0: linktype set to 804 [ 163.086543][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 164.694395][ T9205] FAULT_INJECTION: forcing a failure. [ 164.694395][ T9205] name failslab, interval 1, probability 0, space 0, times 0 [ 164.707423][ T9205] CPU: 1 UID: 0 PID: 9205 Comm: syz.4.1291 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 164.718145][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 164.728214][ T9205] Call Trace: [ 164.731501][ T9205] [ 164.734436][ T9205] dump_stack_lvl+0x241/0x360 [ 164.739134][ T9205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.744343][ T9205] ? __pfx__printk+0x10/0x10 [ 164.748940][ T9205] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 164.754415][ T9205] ? __pfx___might_resched+0x10/0x10 [ 164.759747][ T9205] should_fail_ex+0x3b0/0x4e0 [ 164.764433][ T9205] should_failslab+0xac/0x100 [ 164.769119][ T9205] ? rtnl_newlink+0x12e/0x24f0 [ 164.773892][ T9205] __kmalloc_cache_noprof+0x6c/0x2c0 [ 164.779197][ T9205] rtnl_newlink+0x12e/0x24f0 [ 164.783803][ T9205] ? kasan_save_track+0x51/0x80 [ 164.788659][ T9205] ? kasan_save_free_info+0x40/0x50 [ 164.793925][ T9205] ? kmem_cache_free+0x1a2/0x420 [ 164.798895][ T9205] ? nlmon_xmit+0xaf/0x100 [ 164.803327][ T9205] ? dev_hard_start_xmit+0x27a/0x7e0 [ 164.808629][ T9205] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.813660][ T9205] ? netlink_unicast+0x7c4/0x990 [ 164.818626][ T9205] ? __pfx_validate_chain+0x10/0x10 [ 164.823853][ T9205] ? __sys_sendmsg+0x292/0x380 [ 164.828665][ T9205] ? do_syscall_64+0xf3/0x230 [ 164.833353][ T9205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.839447][ T9205] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.845451][ T9205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.851804][ T9205] ? mark_lock+0x9a/0x360 [ 164.856145][ T9205] ? __lock_acquire+0x1384/0x2050 [ 164.861207][ T9205] ? rcu_read_unlock+0x87/0xa0 [ 164.866418][ T9205] ? __dev_queue_xmit+0x1775/0x3f50 [ 164.871643][ T9205] ? __pfx_lock_release+0x10/0x10 [ 164.876695][ T9205] ? __pfx_rtnl_newlink+0x10/0x10 [ 164.881761][ T9205] rtnetlink_rcv_msg+0x791/0xcf0 [ 164.886719][ T9205] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 164.891859][ T9205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.897360][ T9205] ? ref_tracker_free+0x643/0x7e0 [ 164.902412][ T9205] netlink_rcv_skb+0x1e3/0x430 [ 164.907199][ T9205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.912680][ T9205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.918023][ T9205] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.923265][ T9205] netlink_unicast+0x7f6/0x990 [ 164.928068][ T9205] ? __pfx_netlink_unicast+0x10/0x10 [ 164.933412][ T9205] ? __virt_addr_valid+0x183/0x530 [ 164.938540][ T9205] ? __check_object_size+0x48e/0x900 [ 164.943841][ T9205] netlink_sendmsg+0x8e4/0xcb0 [ 164.948664][ T9205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.953973][ T9205] ? aa_sock_msg_perm+0x91/0x160 [ 164.958929][ T9205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.964258][ T9205] __sock_sendmsg+0x221/0x270 [ 164.968969][ T9205] ____sys_sendmsg+0x52a/0x7e0 [ 164.973770][ T9205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.979089][ T9205] __sys_sendmsg+0x292/0x380 [ 164.983717][ T9205] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.988875][ T9205] ? __pfx_vfs_write+0x10/0x10 [ 164.993667][ T9205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.000008][ T9205] ? do_syscall_64+0x100/0x230 [ 165.004778][ T9205] ? do_syscall_64+0xb6/0x230 [ 165.009462][ T9205] do_syscall_64+0xf3/0x230 [ 165.013968][ T9205] ? clear_bhb_loop+0x35/0x90 [ 165.018661][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.024558][ T9205] RIP: 0033:0x7f8dbe57e719 [ 165.028981][ T9205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.048625][ T9205] RSP: 002b:00007f8dbf462038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.057052][ T9205] RAX: ffffffffffffffda RBX: 00007f8dbe735f80 RCX: 00007f8dbe57e719 [ 165.065036][ T9205] RDX: 0000000000004050 RSI: 0000000020000080 RDI: 0000000000000003 [ 165.073013][ T9205] RBP: 00007f8dbf462090 R08: 0000000000000000 R09: 0000000000000000 [ 165.081043][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.089028][ T9205] R13: 0000000000000000 R14: 00007f8dbe735f80 R15: 00007ffc4b433268 [ 165.097027][ T9205] [ 165.233915][ T9209] ipt_REJECT: TCP_RESET invalid for non-tcp [ 165.306803][ T9212] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 165.393580][ T9212] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 165.418235][ T9212] bond0: option mode: unable to set because the bond device has slaves [ 165.578849][ T9225] FAULT_INJECTION: forcing a failure. [ 165.578849][ T9225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.592265][ T9225] CPU: 0 UID: 0 PID: 9225 Comm: syz.1.1299 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 165.603000][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 165.613100][ T9225] Call Trace: [ 165.616413][ T9225] [ 165.619377][ T9225] dump_stack_lvl+0x241/0x360 [ 165.624101][ T9225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.629353][ T9225] ? __pfx__printk+0x10/0x10 [ 165.633989][ T9225] ? __pfx_lock_release+0x10/0x10 [ 165.639066][ T9225] should_fail_ex+0x3b0/0x4e0 [ 165.643790][ T9225] _copy_from_user+0x2f/0xc0 [ 165.644997][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 165.648414][ T9225] __sys_bpf+0x1a4/0x810 [ 165.648452][ T9225] ? __pfx___sys_bpf+0x10/0x10 [ 165.666421][ T9225] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 165.672459][ T9225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.678842][ T9225] ? do_syscall_64+0x100/0x230 [ 165.683740][ T9225] __x64_sys_bpf+0x7c/0x90 [ 165.688193][ T9225] do_syscall_64+0xf3/0x230 [ 165.692733][ T9225] ? clear_bhb_loop+0x35/0x90 [ 165.697452][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.703394][ T9225] RIP: 0033:0x7fe83bf7e719 [ 165.707844][ T9225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.727602][ T9225] RSP: 002b:00007fe83a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.736073][ T9225] RAX: ffffffffffffffda RBX: 00007fe83c135f80 RCX: 00007fe83bf7e719 [ 165.744088][ T9225] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a [ 165.752105][ T9225] RBP: 00007fe83a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.760111][ T9225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.768113][ T9225] R13: 0000000000000000 R14: 00007fe83c135f80 R15: 00007ffc260b5908 [ 165.776105][ T9225] [ 165.894381][ T9239] netlink: 'syz.3.1302': attribute type 4 has an invalid length. [ 165.909686][ T9213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.936127][ T9239] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1302'. [ 166.257696][ T9255] vlan4: entered promiscuous mode [ 166.279158][ T9255] erspan0: entered promiscuous mode [ 166.437830][ T9270] tipc: Started in network mode [ 166.442959][ T9270] tipc: Node identity ffffffff, cluster identity 4711 [ 166.449950][ T9270] tipc: Node number set to 4294967295 [ 166.522618][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 166.616989][ T9276] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1315'. [ 166.679379][ T9279] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.866825][ T9280] veth5: entered promiscuous mode [ 166.890812][ T9287] FAULT_INJECTION: forcing a failure. [ 166.890812][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 166.903568][ T9287] CPU: 1 UID: 0 PID: 9287 Comm: syz.1.1320 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 166.914284][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.924419][ T9287] Call Trace: [ 166.927714][ T9287] [ 166.930662][ T9287] dump_stack_lvl+0x241/0x360 [ 166.935364][ T9287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.940582][ T9287] ? __pfx__printk+0x10/0x10 [ 166.945197][ T9287] should_fail_ex+0x3b0/0x4e0 [ 166.949890][ T9287] ? dst_alloc+0x12b/0x190 [ 166.954326][ T9287] should_failslab+0xac/0x100 [ 166.959020][ T9287] ? dst_alloc+0x12b/0x190 [ 166.963461][ T9287] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 166.968850][ T9287] ? __pfx_rt6_find_cached_rt+0x10/0x10 [ 166.974497][ T9287] ? __pfx_ip6_dst_gc+0x10/0x10 [ 166.979364][ T9287] dst_alloc+0x12b/0x190 [ 166.983625][ T9287] ip6_pol_route+0xb87/0x15d0 [ 166.988318][ T9287] ? ip6_pol_route+0x198/0x15d0 [ 166.993186][ T9287] ? __pfx_ip6_pol_route+0x10/0x10 [ 166.998323][ T9287] fib6_rule_lookup+0x3c2/0x790 [ 167.003188][ T9287] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 167.008919][ T9287] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 167.014304][ T9287] ? __lock_acquire+0x1384/0x2050 [ 167.019377][ T9287] ? ip6_route_output_flags+0x30/0x610 [ 167.024852][ T9287] ip6_route_output_flags+0x38e/0x610 [ 167.030265][ T9287] ip6_dst_lookup_tail+0x1b3/0x14f0 [ 167.035488][ T9287] ? sk_dst_check+0x29/0x470 [ 167.040106][ T9287] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 167.045763][ T9287] ? sk_dst_check+0x29/0x470 [ 167.050379][ T9287] ? sk_dst_check+0x2f9/0x470 [ 167.055073][ T9287] ip6_sk_dst_lookup_flow+0x78c/0xa30 [ 167.060463][ T9287] ? txopt_get+0x3e0/0x4f0 [ 167.064893][ T9287] ? __lock_acquire+0x1384/0x2050 [ 167.069935][ T9287] ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10 [ 167.075842][ T9287] ? udpv6_sendmsg+0x1c01/0x32b0 [ 167.080788][ T9287] udpv6_sendmsg+0x202a/0x32b0 [ 167.085596][ T9287] ? __pfx_udplite_getfrag+0x10/0x10 [ 167.090921][ T9287] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 167.096047][ T9287] ? inet_send_prepare+0x1b7/0x260 [ 167.101180][ T9287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.107540][ T9287] ? inet_send_prepare+0x1b7/0x260 [ 167.112668][ T9287] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 167.118483][ T9287] ? inet_send_prepare+0x1b7/0x260 [ 167.123611][ T9287] ? do_raw_spin_unlock+0x13c/0x8b0 [ 167.128838][ T9287] ? inet_send_prepare+0x1b7/0x260 [ 167.133973][ T9287] __sock_sendmsg+0xef/0x270 [ 167.138602][ T9287] ____sys_sendmsg+0x52a/0x7e0 [ 167.143388][ T9287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.148699][ T9287] __sys_sendmmsg+0x3ab/0x730 [ 167.153401][ T9287] ? __pfx___sys_sendmmsg+0x10/0x10 [ 167.158623][ T9287] ? __pfx_lock_release+0x10/0x10 [ 167.163670][ T9287] ? kstrtouint_from_user+0x128/0x190 [ 167.169181][ T9287] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 167.175083][ T9287] ? ksys_write+0x229/0x2b0 [ 167.179591][ T9287] ? __pfx_lock_release+0x10/0x10 [ 167.184633][ T9287] ? vfs_write+0x730/0xd30 [ 167.189065][ T9287] ? __mutex_unlock_slowpath+0x21d/0x750 [ 167.194715][ T9287] ? __fget_files+0x3f3/0x470 [ 167.199411][ T9287] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 167.205406][ T9287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.211756][ T9287] ? do_syscall_64+0x100/0x230 [ 167.216533][ T9287] __x64_sys_sendmmsg+0xa0/0xb0 [ 167.221418][ T9287] do_syscall_64+0xf3/0x230 [ 167.225929][ T9287] ? clear_bhb_loop+0x35/0x90 [ 167.230624][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.236535][ T9287] RIP: 0033:0x7fe83bf7e719 [ 167.240970][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.260588][ T9287] RSP: 002b:00007fe83a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.269067][ T9287] RAX: ffffffffffffffda RBX: 00007fe83c135f80 RCX: 00007fe83bf7e719 [ 167.277047][ T9287] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000003 [ 167.285032][ T9287] RBP: 00007fe83a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.293021][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.300999][ T9287] R13: 0000000000000000 R14: 00007fe83c135f80 R15: 00007ffc260b5908 [ 167.309005][ T9287] [ 167.324072][ T5868] net_ratelimit: 11 callbacks suppressed [ 167.324093][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.397617][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.575931][ T9294] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 167.585781][ T9294] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1324'. [ 167.618400][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1325'. [ 167.687303][ T9297] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 167.770850][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 167.820902][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 167.845804][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.852934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.867091][ T9309] openvswitch: netlink: Missing key (keys=40, expected=80) [ 167.972115][ T9298] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 168.036820][ T9317] FAULT_INJECTION: forcing a failure. [ 168.036820][ T9317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.064976][ T9317] CPU: 0 UID: 0 PID: 9317 Comm: syz.0.1330 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 168.075727][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 168.085813][ T9317] Call Trace: [ 168.089133][ T9317] [ 168.092108][ T9317] dump_stack_lvl+0x241/0x360 [ 168.096824][ T9317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.102053][ T9317] ? __pfx__printk+0x10/0x10 [ 168.106681][ T9317] ? __pfx_lock_release+0x10/0x10 [ 168.111771][ T9317] should_fail_ex+0x3b0/0x4e0 [ 168.116480][ T9317] _copy_from_user+0x2f/0xc0 [ 168.121111][ T9317] copy_msghdr_from_user+0xae/0x680 [ 168.126348][ T9317] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 168.132209][ T9317] __sys_sendmsg+0x22d/0x380 [ 168.136839][ T9317] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.141999][ T9317] ? __pfx_vfs_write+0x10/0x10 [ 168.146816][ T9317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.153185][ T9317] ? do_syscall_64+0x100/0x230 [ 168.158067][ T9317] ? do_syscall_64+0xb6/0x230 [ 168.162777][ T9317] do_syscall_64+0xf3/0x230 [ 168.167308][ T9317] ? clear_bhb_loop+0x35/0x90 [ 168.172031][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.177949][ T9317] RIP: 0033:0x7f850557e719 [ 168.182392][ T9317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.202022][ T9317] RSP: 002b:00007f85039d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.210469][ T9317] RAX: ffffffffffffffda RBX: 00007f8505736058 RCX: 00007f850557e719 [ 168.218468][ T9317] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 168.226472][ T9317] RBP: 00007f85039d5090 R08: 0000000000000000 R09: 0000000000000000 [ 168.234466][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.242471][ T9317] R13: 0000000000000001 R14: 00007f8505736058 R15: 00007ffc4bbbfe18 [ 168.243245][ T9298] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 168.250503][ T9317] [ 168.275284][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.303167][ T9297] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 168.367562][ T9321] FAULT_INJECTION: forcing a failure. [ 168.367562][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 168.381391][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.0.1331 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 168.392143][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 168.402211][ T9321] Call Trace: [ 168.405496][ T9321] [ 168.408453][ T9321] dump_stack_lvl+0x241/0x360 [ 168.413154][ T9321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.418369][ T9321] ? __pfx__printk+0x10/0x10 [ 168.423080][ T9321] ? kmem_cache_free+0x1a2/0x420 [ 168.428046][ T9321] ? ____sys_sendmsg+0x52a/0x7e0 [ 168.433009][ T9321] ? do_syscall_64+0xf3/0x230 [ 168.437698][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.443784][ T9321] should_fail_ex+0x3b0/0x4e0 [ 168.448472][ T9321] ? xfrm_state_alloc+0x22/0x2a0 [ 168.453437][ T9321] should_failslab+0xac/0x100 [ 168.458136][ T9321] ? xfrm_state_alloc+0x22/0x2a0 [ 168.463088][ T9321] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 168.468492][ T9321] xfrm_state_alloc+0x22/0x2a0 [ 168.473272][ T9321] pfkey_add+0x6e2/0x3030 [ 168.477615][ T9321] ? kasan_quarantine_put+0x62/0x230 [ 168.482923][ T9321] ? __pfx_pfkey_add+0x10/0x10 [ 168.487729][ T9321] ? pfkey_broadcast+0x45/0x400 [ 168.492596][ T9321] ? pfkey_broadcast+0x3e3/0x400 [ 168.497563][ T9321] pfkey_sendmsg+0xbcc/0x1050 [ 168.502275][ T9321] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 168.507422][ T9321] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.512294][ T9321] ? __pfx_lock_release+0x10/0x10 [ 168.517359][ T9321] ? __import_iovec+0x590/0x870 [ 168.522231][ T9321] ? aa_sock_msg_perm+0x91/0x160 [ 168.527187][ T9321] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 168.532403][ T9321] __sock_sendmsg+0x221/0x270 [ 168.537101][ T9321] ____sys_sendmsg+0x52a/0x7e0 [ 168.541893][ T9321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.547212][ T9321] __sys_sendmsg+0x292/0x380 [ 168.551847][ T9321] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.557017][ T9321] ? __pfx_vfs_write+0x10/0x10 [ 168.561820][ T9321] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.568174][ T9321] ? do_syscall_64+0x100/0x230 [ 168.572962][ T9321] ? do_syscall_64+0xb6/0x230 [ 168.577654][ T9321] do_syscall_64+0xf3/0x230 [ 168.582169][ T9321] ? clear_bhb_loop+0x35/0x90 [ 168.586861][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.592766][ T9321] RIP: 0033:0x7f850557e719 [ 168.597192][ T9321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.616816][ T9321] RSP: 002b:00007f85039f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.625335][ T9321] RAX: ffffffffffffffda RBX: 00007f8505735f80 RCX: 00007f850557e719 [ 168.633315][ T9321] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 168.641309][ T9321] RBP: 00007f85039f6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.649295][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.657298][ T9321] R13: 0000000000000000 R14: 00007f8505735f80 R15: 00007ffc4bbbfe18 [ 168.665323][ T9321] [ 168.683041][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.700211][ T9297] bond4 (unregistering): Released all slaves [ 168.911792][ T9330] FAULT_INJECTION: forcing a failure. [ 168.911792][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 168.924530][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.3.1335 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 168.935680][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 168.945784][ T9330] Call Trace: [ 168.949126][ T9330] [ 168.952091][ T9330] dump_stack_lvl+0x241/0x360 [ 168.956826][ T9330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.962086][ T9330] ? __pfx__printk+0x10/0x10 [ 168.966743][ T9330] should_fail_ex+0x3b0/0x4e0 [ 168.971479][ T9330] should_failslab+0xac/0x100 [ 168.975792][ T9334] Illegal XDP return value 4294967274 on prog (id 194) dev N/A, expect packet loss! [ 168.976189][ T9330] ? __alloc_skb+0x1c3/0x440 [ 168.990351][ T9330] kmem_cache_alloc_node_noprof+0x71/0x320 [ 168.996224][ T9330] __alloc_skb+0x1c3/0x440 [ 169.000706][ T9330] ? __pfx___alloc_skb+0x10/0x10 [ 169.005715][ T9330] ? skb_put+0x114/0x1f0 [ 169.010020][ T9330] __pfkey_xfrm_state2msg+0x434/0x3cf0 [ 169.015563][ T9330] dump_sa+0xaa/0x570 [ 169.019601][ T9330] xfrm_state_walk+0x263/0x9e0 [ 169.024420][ T9330] ? __pfx_dump_sa+0x10/0x10 [ 169.029058][ T9330] pfkey_do_dump+0x5c/0x400 [ 169.033615][ T9330] pfkey_sendmsg+0xbcc/0x1050 [ 169.038355][ T9330] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 169.043554][ T9330] ? __pfx_aa_sk_perm+0x10/0x10 [ 169.048459][ T9330] ? __pfx_lock_release+0x10/0x10 [ 169.053547][ T9330] ? __import_iovec+0x590/0x870 [ 169.058462][ T9330] ? aa_sock_msg_perm+0x91/0x160 [ 169.063465][ T9330] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 169.068638][ T9330] __sock_sendmsg+0x221/0x270 [ 169.073371][ T9330] ____sys_sendmsg+0x52a/0x7e0 [ 169.078201][ T9330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.083559][ T9330] __sys_sendmsg+0x292/0x380 [ 169.088210][ T9330] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.093499][ T9330] ? __pfx_vfs_write+0x10/0x10 [ 169.098347][ T9330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.104731][ T9330] ? do_syscall_64+0x100/0x230 [ 169.109548][ T9330] ? do_syscall_64+0xb6/0x230 [ 169.114273][ T9330] do_syscall_64+0xf3/0x230 [ 169.118820][ T9330] ? clear_bhb_loop+0x35/0x90 [ 169.123543][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.129477][ T9330] RIP: 0033:0x7feffcf7e719 [ 169.133923][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.153573][ T9330] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.162048][ T9330] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 169.170065][ T9330] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 169.178092][ T9330] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 169.186109][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.194136][ T9330] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 169.202170][ T9330] [ 169.253151][ T9341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.261505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.270837][ T29] audit: type=1107 audit(1731591545.314:2): pid=9325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 169.381278][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1342'. [ 169.412175][ T9350] vlan3: entered promiscuous mode [ 169.625292][ T9362] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 169.633523][ T9362] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1346'. [ 169.690476][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.817302][ T9373] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1349'. [ 169.964579][ T9381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.293134][ T9387] FAULT_INJECTION: forcing a failure. [ 170.293134][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 170.328447][ T9387] CPU: 0 UID: 0 PID: 9387 Comm: syz.1.1354 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 170.339294][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 170.349396][ T9387] Call Trace: [ 170.352716][ T9387] [ 170.355684][ T9387] dump_stack_lvl+0x241/0x360 [ 170.360420][ T9387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.365668][ T9387] ? __pfx__printk+0x10/0x10 [ 170.370318][ T9387] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 170.376350][ T9387] ? __pfx___might_resched+0x10/0x10 [ 170.381693][ T9387] should_fail_ex+0x3b0/0x4e0 [ 170.386414][ T9387] should_failslab+0xac/0x100 [ 170.391125][ T9387] ? __alloc_skb+0x1c3/0x440 [ 170.395762][ T9387] kmem_cache_alloc_node_noprof+0x71/0x320 [ 170.401631][ T9387] __alloc_skb+0x1c3/0x440 [ 170.406096][ T9387] ? __pfx___alloc_skb+0x10/0x10 [ 170.411074][ T9387] ? __local_bh_enable_ip+0x168/0x200 [ 170.416495][ T9387] ? dev_graft_qdisc+0x121/0x140 [ 170.421474][ T9387] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 170.427214][ T9387] qdisc_notify+0x11b/0x4b0 [ 170.431786][ T9387] qdisc_graft+0x12d3/0x1660 [ 170.436444][ T9387] ? __pfx_qdisc_graft+0x10/0x10 [ 170.441438][ T9387] ? __pfx_qdisc_create+0x10/0x10 [ 170.446515][ T9387] tc_modify_qdisc+0xf47/0x1e40 [ 170.451428][ T9387] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 170.456795][ T9387] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 170.462123][ T9387] rtnetlink_rcv_msg+0x73f/0xcf0 [ 170.467078][ T9387] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 170.472209][ T9387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.477688][ T9387] ? ref_tracker_free+0x643/0x7e0 [ 170.482735][ T9387] netlink_rcv_skb+0x1e3/0x430 [ 170.487538][ T9387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.493020][ T9387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.498355][ T9387] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.503574][ T9387] netlink_unicast+0x7f6/0x990 [ 170.508358][ T9387] ? __pfx_netlink_unicast+0x10/0x10 [ 170.513653][ T9387] ? __virt_addr_valid+0x183/0x530 [ 170.518775][ T9387] ? __check_object_size+0x48e/0x900 [ 170.524076][ T9387] netlink_sendmsg+0x8e4/0xcb0 [ 170.528866][ T9387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.534173][ T9387] ? aa_sock_msg_perm+0x91/0x160 [ 170.539135][ T9387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.544426][ T9387] __sock_sendmsg+0x221/0x270 [ 170.549120][ T9387] ____sys_sendmsg+0x52a/0x7e0 [ 170.553903][ T9387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.559211][ T9387] __sys_sendmsg+0x292/0x380 [ 170.563826][ T9387] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.568960][ T9387] ? __pfx_vfs_write+0x10/0x10 [ 170.573758][ T9387] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.580107][ T9387] ? do_syscall_64+0x100/0x230 [ 170.584904][ T9387] ? do_syscall_64+0xb6/0x230 [ 170.589601][ T9387] do_syscall_64+0xf3/0x230 [ 170.594122][ T9387] ? clear_bhb_loop+0x35/0x90 [ 170.598809][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.604716][ T9387] RIP: 0033:0x7fe83bf7e719 [ 170.609142][ T9387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.628757][ T9387] RSP: 002b:00007fe83a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.637189][ T9387] RAX: ffffffffffffffda RBX: 00007fe83c135f80 RCX: 00007fe83bf7e719 [ 170.645299][ T9387] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 170.653284][ T9387] RBP: 00007fe83a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.661265][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.669302][ T9387] R13: 0000000000000000 R14: 00007fe83c135f80 R15: 00007ffc260b5908 [ 170.677293][ T9387] [ 170.896808][ T9402] netlink: 'syz.3.1359': attribute type 15 has an invalid length. [ 171.423327][ T9429] FAULT_INJECTION: forcing a failure. [ 171.423327][ T9429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.455368][ T9429] CPU: 0 UID: 0 PID: 9429 Comm: syz.2.1370 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 171.466135][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.476236][ T9429] Call Trace: [ 171.479552][ T9429] [ 171.482514][ T9429] dump_stack_lvl+0x241/0x360 [ 171.487223][ T9429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.492483][ T9429] ? __pfx__printk+0x10/0x10 [ 171.497115][ T9429] ? __pfx_lock_release+0x10/0x10 [ 171.502207][ T9429] should_fail_ex+0x3b0/0x4e0 [ 171.506936][ T9429] _copy_from_iter+0x21f/0x1e70 [ 171.511828][ T9429] ? __virt_addr_valid+0x183/0x530 [ 171.516956][ T9429] ? __pfx_lock_release+0x10/0x10 [ 171.522007][ T9429] ? __alloc_skb+0x28f/0x440 [ 171.526611][ T9429] ? __pfx__copy_from_iter+0x10/0x10 [ 171.531931][ T9429] ? __virt_addr_valid+0x183/0x530 [ 171.537052][ T9429] ? __virt_addr_valid+0x183/0x530 [ 171.542173][ T9429] ? __virt_addr_valid+0x45f/0x530 [ 171.547383][ T9429] ? __check_object_size+0x48e/0x900 [ 171.552689][ T9429] netlink_sendmsg+0x73d/0xcb0 [ 171.557477][ T9429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.562804][ T9429] ? aa_sock_msg_perm+0x91/0x160 [ 171.567771][ T9429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.573091][ T9429] __sock_sendmsg+0x221/0x270 [ 171.577787][ T9429] ____sys_sendmsg+0x52a/0x7e0 [ 171.582600][ T9429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.587923][ T9429] __sys_sendmsg+0x292/0x380 [ 171.592530][ T9429] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.597666][ T9429] ? __pfx_vfs_write+0x10/0x10 [ 171.602457][ T9429] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.608809][ T9429] ? do_syscall_64+0x100/0x230 [ 171.613588][ T9429] ? do_syscall_64+0xb6/0x230 [ 171.618278][ T9429] do_syscall_64+0xf3/0x230 [ 171.622819][ T9429] ? clear_bhb_loop+0x35/0x90 [ 171.627514][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.633417][ T9429] RIP: 0033:0x7f1b6317e719 [ 171.637851][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.657475][ T9429] RSP: 002b:00007f1b63f6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.666010][ T9429] RAX: ffffffffffffffda RBX: 00007f1b63335f80 RCX: 00007f1b6317e719 [ 171.674016][ T9429] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 171.682007][ T9429] RBP: 00007f1b63f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 171.689993][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.697989][ T9429] R13: 0000000000000000 R14: 00007f1b63335f80 R15: 00007ffe634bd338 [ 171.705990][ T9429] [ 171.724737][ T9431] __nla_validate_parse: 2 callbacks suppressed [ 171.724761][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 171.830984][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1373'. [ 172.012721][ T9450] FAULT_INJECTION: forcing a failure. [ 172.012721][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.037995][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.2.1377 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 172.048783][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 172.058904][ T9450] Call Trace: [ 172.062232][ T9450] [ 172.065201][ T9450] dump_stack_lvl+0x241/0x360 [ 172.069932][ T9450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.075180][ T9450] ? __pfx__printk+0x10/0x10 [ 172.080045][ T9450] ? snprintf+0xda/0x120 [ 172.084336][ T9450] should_fail_ex+0x3b0/0x4e0 [ 172.089068][ T9450] _copy_to_user+0x31/0xb0 [ 172.093534][ T9450] simple_read_from_buffer+0xca/0x150 [ 172.098967][ T9450] proc_fail_nth_read+0x1e9/0x250 [ 172.104036][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.109616][ T9450] ? rw_verify_area+0x55e/0x6f0 [ 172.114504][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.120088][ T9450] vfs_read+0x1fc/0xb70 [ 172.124280][ T9450] ? fdget_pos+0x24e/0x320 [ 172.128722][ T9450] ? __pfx_vfs_read+0x10/0x10 [ 172.133429][ T9450] ? __fget_files+0x3f3/0x470 [ 172.138129][ T9450] ? fdget_pos+0x24e/0x320 [ 172.142562][ T9450] ksys_read+0x183/0x2b0 [ 172.146824][ T9450] ? __pfx_ksys_read+0x10/0x10 [ 172.151613][ T9450] ? do_syscall_64+0x100/0x230 [ 172.156389][ T9450] ? do_syscall_64+0xb6/0x230 [ 172.161105][ T9450] do_syscall_64+0xf3/0x230 [ 172.165618][ T9450] ? clear_bhb_loop+0x35/0x90 [ 172.170311][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.176212][ T9450] RIP: 0033:0x7f1b6317d15c [ 172.180654][ T9450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 172.200273][ T9450] RSP: 002b:00007f1b63f49030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.208704][ T9450] RAX: ffffffffffffffda RBX: 00007f1b63336058 RCX: 00007f1b6317d15c [ 172.216684][ T9450] RDX: 000000000000000f RSI: 00007f1b63f490a0 RDI: 0000000000000004 [ 172.224735][ T9450] RBP: 00007f1b63f49090 R08: 0000000000000000 R09: 0000000000000000 [ 172.232725][ T9450] R10: 000000000000008e R11: 0000000000000246 R12: 0000000000000001 [ 172.240709][ T9450] R13: 0000000000000001 R14: 00007f1b63336058 R15: 00007ffe634bd338 [ 172.248710][ T9450] [ 172.356995][ T9457] net_ratelimit: 9 callbacks suppressed [ 172.357018][ T9457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.407193][ T9457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.474621][ T9457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.530860][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 172.536236][ T9466] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 172.570885][ T9457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.588213][ T9466] syzkaller0: linktype set to 519 [ 172.604169][ T9457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.627074][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.644606][ T9456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.688394][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1388'. [ 172.751570][ T9477] lo speed is unknown, defaulting to 1000 [ 172.770118][ T9475] netlink: 'syz.1.1388': attribute type 10 has an invalid length. [ 172.810429][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.035068][ T9481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.203347][ T9495] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.338231][ T9481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.363164][ T9497] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1394'. [ 173.396813][ T9488] lo speed is unknown, defaulting to 1000 [ 173.490596][ T9481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.697118][ T9481] team0: Port device netdevsim0 removed [ 173.705166][ T9481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.833350][ T9481] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.872096][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.893335][ T9481] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.940837][ T9481] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.161458][ T9481] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.333987][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.555760][ T9536] x_tables: duplicate underflow at hook 2 [ 174.677120][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1405'. [ 175.095222][ T9575] nbd: must specify an index to disconnect [ 175.103926][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 175.205353][ T9583] FAULT_INJECTION: forcing a failure. [ 175.205353][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 175.218536][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.2.1418 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 175.229256][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 175.239358][ T9583] Call Trace: [ 175.242666][ T9583] [ 175.245626][ T9583] dump_stack_lvl+0x241/0x360 [ 175.250349][ T9583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.255595][ T9583] ? __pfx__printk+0x10/0x10 [ 175.260229][ T9583] ? __kmalloc_noprof+0xb0/0x400 [ 175.265226][ T9583] ? __pfx___might_resched+0x10/0x10 [ 175.270560][ T9583] should_fail_ex+0x3b0/0x4e0 [ 175.275298][ T9583] ? bpf_test_init+0xe1/0x180 [ 175.280017][ T9583] should_failslab+0xac/0x100 [ 175.284739][ T9583] ? bpf_test_init+0xe1/0x180 [ 175.289461][ T9583] __kmalloc_noprof+0xd8/0x400 [ 175.294277][ T9583] bpf_test_init+0xe1/0x180 [ 175.298830][ T9583] bpf_prog_test_run_skb+0x2bb/0x1820 [ 175.304270][ T9583] ? __pfx_lock_release+0x10/0x10 [ 175.309357][ T9583] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 175.315212][ T9583] ? fput+0x1a8/0x230 [ 175.319222][ T9583] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 175.325078][ T9583] bpf_prog_test_run+0x2e4/0x360 [ 175.330058][ T9583] __sys_bpf+0x48d/0x810 [ 175.334346][ T9583] ? __pfx___sys_bpf+0x10/0x10 [ 175.339142][ T9583] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.345165][ T9583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.351545][ T9583] ? do_syscall_64+0x100/0x230 [ 175.356341][ T9583] __x64_sys_bpf+0x7c/0x90 [ 175.360781][ T9583] do_syscall_64+0xf3/0x230 [ 175.365330][ T9583] ? clear_bhb_loop+0x35/0x90 [ 175.370053][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.375995][ T9583] RIP: 0033:0x7f1b6317e719 [ 175.380447][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.400186][ T9583] RSP: 002b:00007f1b63f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.408655][ T9583] RAX: ffffffffffffffda RBX: 00007f1b63335f80 RCX: 00007f1b6317e719 [ 175.417372][ T9583] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 175.425391][ T9583] RBP: 00007f1b63f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 175.433402][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.441415][ T9583] R13: 0000000000000000 R14: 00007f1b63335f80 R15: 00007ffe634bd338 [ 175.449447][ T9583] [ 175.634784][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1425'. [ 175.644141][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 175.656321][ T9598] bridge0: port 1(macvlan0) entered blocking state [ 175.671128][ T9598] bridge0: port 1(macvlan0) entered disabled state [ 175.694420][ T9598] macvlan0: entered allmulticast mode [ 175.700274][ T9598] veth1_vlan: entered allmulticast mode [ 175.707841][ T9598] macvlan0: entered promiscuous mode [ 175.721386][ T9598] x_tables: duplicate underflow at hook 2 [ 175.730190][ T9598] sctp: [Deprecated]: syz.2.1425 (pid 9598) Use of int in max_burst socket option. [ 175.730190][ T9598] Use struct sctp_assoc_value instead [ 176.113810][ T9617] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 176.351292][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'. [ 176.607566][ T9648] lo speed is unknown, defaulting to 1000 [ 176.847213][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 176.866709][ T9656] FAULT_INJECTION: forcing a failure. [ 176.866709][ T9656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.907406][ T9651] lo speed is unknown, defaulting to 1000 [ 176.928642][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.1.1443 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 176.939407][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 176.949511][ T9656] Call Trace: [ 176.952834][ T9656] [ 176.955803][ T9656] dump_stack_lvl+0x241/0x360 [ 176.960544][ T9656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.965807][ T9656] ? __pfx__printk+0x10/0x10 [ 176.970454][ T9656] ? snprintf+0xda/0x120 [ 176.974751][ T9656] should_fail_ex+0x3b0/0x4e0 [ 176.979487][ T9656] _copy_to_user+0x31/0xb0 [ 176.983968][ T9656] simple_read_from_buffer+0xca/0x150 [ 176.989418][ T9656] proc_fail_nth_read+0x1e9/0x250 [ 176.994507][ T9656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.000121][ T9656] ? rw_verify_area+0x55e/0x6f0 [ 177.005377][ T9656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.010982][ T9656] vfs_read+0x1fc/0xb70 [ 177.015196][ T9656] ? fdget_pos+0x24e/0x320 [ 177.019750][ T9656] ? __pfx_vfs_read+0x10/0x10 [ 177.024493][ T9656] ? __fget_files+0x3f3/0x470 [ 177.029229][ T9656] ? fdget_pos+0x24e/0x320 [ 177.033701][ T9656] ksys_read+0x183/0x2b0 [ 177.038012][ T9656] ? __pfx_ksys_read+0x10/0x10 [ 177.042826][ T9656] ? do_syscall_64+0x100/0x230 [ 177.047644][ T9656] ? do_syscall_64+0xb6/0x230 [ 177.052381][ T9656] do_syscall_64+0xf3/0x230 [ 177.056939][ T9656] ? clear_bhb_loop+0x35/0x90 [ 177.062017][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.067960][ T9656] RIP: 0033:0x7fe83bf7d15c [ 177.072420][ T9656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 177.092073][ T9656] RSP: 002b:00007fe83a3d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.100564][ T9656] RAX: ffffffffffffffda RBX: 00007fe83c136058 RCX: 00007fe83bf7d15c [ 177.108594][ T9656] RDX: 000000000000000f RSI: 00007fe83a3d50a0 RDI: 0000000000000004 [ 177.116632][ T9656] RBP: 00007fe83a3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 177.124747][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.132774][ T9656] R13: 0000000000000001 R14: 00007fe83c136058 R15: 00007ffc260b5908 [ 177.140903][ T9656] [ 177.370989][ T970] net_ratelimit: 16 callbacks suppressed [ 177.371012][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.417040][ T9667] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 177.447375][ T9667] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1445'. [ 177.605900][ T9667] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 177.876637][ T9689] netlink: 'syz.0.1452': attribute type 178 has an invalid length. [ 178.069981][ T9696] lo speed is unknown, defaulting to 1000 [ 178.171642][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.429248][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1458'. [ 178.456429][ T9711] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.489753][ T9711] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.498594][ T9711] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.507285][ T9711] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.523519][ T9714] FAULT_INJECTION: forcing a failure. [ 178.523519][ T9714] name failslab, interval 1, probability 0, space 0, times 0 [ 178.541987][ T9714] CPU: 0 UID: 0 PID: 9714 Comm: syz.4.1459 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 178.552738][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 178.562842][ T9714] Call Trace: [ 178.566155][ T9714] [ 178.569115][ T9714] dump_stack_lvl+0x241/0x360 [ 178.573837][ T9714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.579078][ T9714] ? __pfx__printk+0x10/0x10 [ 178.583794][ T9714] ? __lock_acquire+0x1384/0x2050 [ 178.588874][ T9714] should_fail_ex+0x3b0/0x4e0 [ 178.593602][ T9714] ? ___neigh_create+0x72b/0x2300 [ 178.598670][ T9714] should_failslab+0xac/0x100 [ 178.603383][ T9714] ? ___neigh_create+0x72b/0x2300 [ 178.608443][ T9714] __kmalloc_noprof+0xd8/0x400 [ 178.613243][ T9714] ? ip6_finish_output2+0x63a/0x17b0 [ 178.618546][ T9714] ___neigh_create+0x72b/0x2300 [ 178.623456][ T9714] ? ip6_finish_output2+0x63a/0x17b0 [ 178.628785][ T9714] ? __ipv6_neigh_lookup_noref+0x496/0x680 [ 178.634612][ T9714] ? ip6_finish_output2+0x63a/0x17b0 [ 178.639915][ T9714] ip6_finish_output2+0xb84/0x17b0 [ 178.645044][ T9714] ? ip6_mtu+0x81/0x3f0 [ 178.649248][ T9714] ? __pfx_ip6_finish_output2+0x10/0x10 [ 178.654833][ T9714] ? ip6_mtu+0x81/0x3f0 [ 178.659005][ T9714] ip6_finish_output+0x41e/0x840 [ 178.663960][ T9714] ip6_send_skb+0x1b1/0x3b0 [ 178.668475][ T9714] ? ip6_send_skb+0xfd/0x3b0 [ 178.673084][ T9714] udp_v6_send_skb+0xbc5/0x1880 [ 178.677960][ T9714] udpv6_sendmsg+0x23bc/0x32b0 [ 178.682749][ T9714] ? __pfx_udplite_getfrag+0x10/0x10 [ 178.688048][ T9714] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 178.693174][ T9714] ? inet_send_prepare+0x1b7/0x260 [ 178.698298][ T9714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.704676][ T9714] ? inet_send_prepare+0x1b7/0x260 [ 178.709826][ T9714] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 178.715573][ T9714] ? inet_send_prepare+0x1b7/0x260 [ 178.720711][ T9714] ? do_raw_spin_unlock+0x13c/0x8b0 [ 178.725950][ T9714] ? inet_send_prepare+0x1b7/0x260 [ 178.731119][ T9714] __sock_sendmsg+0xef/0x270 [ 178.735728][ T9714] ____sys_sendmsg+0x52a/0x7e0 [ 178.740521][ T9714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.745850][ T9714] __sys_sendmmsg+0x3ab/0x730 [ 178.751079][ T9714] ? __pfx___sys_sendmmsg+0x10/0x10 [ 178.756319][ T9714] ? __pfx_lock_release+0x10/0x10 [ 178.761363][ T9714] ? kstrtouint_from_user+0x128/0x190 [ 178.766769][ T9714] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 178.772770][ T9714] ? ksys_write+0x229/0x2b0 [ 178.777283][ T9714] ? __pfx_lock_release+0x10/0x10 [ 178.782336][ T9714] ? vfs_write+0x730/0xd30 [ 178.786768][ T9714] ? __mutex_unlock_slowpath+0x21d/0x750 [ 178.792423][ T9714] ? __fget_files+0x3f3/0x470 [ 178.797135][ T9714] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.803141][ T9714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.809488][ T9714] ? do_syscall_64+0x100/0x230 [ 178.814283][ T9714] __x64_sys_sendmmsg+0xa0/0xb0 [ 178.819192][ T9714] do_syscall_64+0xf3/0x230 [ 178.823711][ T9714] ? clear_bhb_loop+0x35/0x90 [ 178.828430][ T9714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.834353][ T9714] RIP: 0033:0x7f8dbe57e719 [ 178.838821][ T9714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.858442][ T9714] RSP: 002b:00007f8dbf462038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.866901][ T9714] RAX: ffffffffffffffda RBX: 00007f8dbe735f80 RCX: 00007f8dbe57e719 [ 178.874897][ T9714] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000003 [ 178.882897][ T9714] RBP: 00007f8dbf462090 R08: 0000000000000000 R09: 0000000000000000 [ 178.890888][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.898872][ T9714] R13: 0000000000000000 R14: 00007f8dbe735f80 R15: 00007ffc4b433268 [ 178.906873][ T9714] [ 179.180115][ T9724] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1462'. [ 179.210928][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.224113][ T9728] tipc: Enabling of bearer rejected, failed to enable media [ 179.424113][ T9736] macsec0: default FDB implementation only supports local addresses [ 179.463465][ T9736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1465'. [ 179.489149][ T9736] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1465'. [ 179.513486][ T9736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1465'. [ 179.540777][ T9736] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1465'. [ 179.545951][ T9744] FAULT_INJECTION: forcing a failure. [ 179.545951][ T9744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.603487][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.2.1468 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 179.614249][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 179.623684][ T9743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.624317][ T9744] Call Trace: [ 179.624329][ T9744] [ 179.645695][ T9744] dump_stack_lvl+0x241/0x360 [ 179.650418][ T9744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.655664][ T9744] ? __pfx__printk+0x10/0x10 [ 179.656558][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1467'. [ 179.660277][ T9744] ? __pfx_lock_release+0x10/0x10 [ 179.660324][ T9744] should_fail_ex+0x3b0/0x4e0 [ 179.660354][ T9744] _copy_from_user+0x2f/0xc0 [ 179.683580][ T9744] copy_msghdr_from_user+0xae/0x680 [ 179.688817][ T9744] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 179.694644][ T9744] __sys_sendmsg+0x22d/0x380 [ 179.699260][ T9744] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.704395][ T9744] ? __pfx_vfs_write+0x10/0x10 [ 179.709183][ T9744] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.715526][ T9744] ? do_syscall_64+0x100/0x230 [ 179.720337][ T9744] ? do_syscall_64+0xb6/0x230 [ 179.725023][ T9744] do_syscall_64+0xf3/0x230 [ 179.729535][ T9744] ? clear_bhb_loop+0x35/0x90 [ 179.734227][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.740130][ T9744] RIP: 0033:0x7f1b6317e719 [ 179.744562][ T9744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.764179][ T9744] RSP: 002b:00007f1b63f6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.772610][ T9744] RAX: ffffffffffffffda RBX: 00007f1b63335f80 RCX: 00007f1b6317e719 [ 179.780596][ T9744] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 179.788578][ T9744] RBP: 00007f1b63f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 179.796643][ T9744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.804642][ T9744] R13: 0000000000000000 R14: 00007f1b63335f80 R15: 00007ffe634bd338 [ 179.812634][ T9744] [ 179.826565][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.012990][ T9752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1470'. [ 180.250693][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.410456][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.551738][ T9774] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 180.573609][ T9788] FAULT_INJECTION: forcing a failure. [ 180.573609][ T9788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.618185][ T9788] CPU: 1 UID: 0 PID: 9788 Comm: syz.3.1481 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 180.628938][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.639068][ T9788] Call Trace: [ 180.642389][ T9788] [ 180.645353][ T9788] dump_stack_lvl+0x241/0x360 [ 180.650088][ T9788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.655335][ T9788] ? __pfx__printk+0x10/0x10 [ 180.659962][ T9788] ? migrate_enable+0x395/0x510 [ 180.664874][ T9788] should_fail_ex+0x3b0/0x4e0 [ 180.669600][ T9788] _copy_to_user+0x31/0xb0 [ 180.674101][ T9788] __htab_map_lookup_and_delete_batch+0x21b6/0x2680 [ 180.680788][ T9788] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 180.687764][ T9788] ? __fget_files+0x29/0x470 [ 180.692414][ T9788] ? __fget_files+0x3f3/0x470 [ 180.697135][ T9788] ? __fget_files+0x29/0x470 [ 180.701766][ T9788] ? __pfx_htab_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 180.709157][ T9788] bpf_map_do_batch+0x494/0x660 [ 180.714063][ T9788] __sys_bpf+0x66f/0x810 [ 180.718359][ T9788] ? __pfx___sys_bpf+0x10/0x10 [ 180.723192][ T9788] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 180.729239][ T9788] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.735616][ T9788] ? do_syscall_64+0x100/0x230 [ 180.740414][ T9788] __x64_sys_bpf+0x7c/0x90 [ 180.744866][ T9788] do_syscall_64+0xf3/0x230 [ 180.749419][ T9788] ? clear_bhb_loop+0x35/0x90 [ 180.754145][ T9788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.760084][ T9788] RIP: 0033:0x7feffcf7e719 [ 180.764536][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.784193][ T9788] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.792671][ T9788] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 180.800687][ T9788] RDX: 0000000000000038 RSI: 0000000020000800 RDI: 0000000000000019 [ 180.808696][ T9788] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 180.816714][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.824738][ T9788] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 180.832754][ T9788] [ 181.049502][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.262517][ T9823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.458270][ T9834] set match dimension is over the limit! [ 181.570249][ T9836] pim6reg: entered allmulticast mode [ 181.637200][ T9836] pim6reg: left allmulticast mode [ 182.090033][ T9853] FAULT_INJECTION: forcing a failure. [ 182.090033][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 182.098116][ T9854] netlink: 'syz.4.1503': attribute type 2 has an invalid length. [ 182.110428][ T9853] CPU: 1 UID: 0 PID: 9853 Comm: syz.3.1502 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 182.121459][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 182.131551][ T9853] Call Trace: [ 182.134837][ T9853] [ 182.137774][ T9853] dump_stack_lvl+0x241/0x360 [ 182.142498][ T9853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.147730][ T9853] ? __pfx__printk+0x10/0x10 [ 182.152346][ T9853] ? ref_tracker_alloc+0x332/0x490 [ 182.157491][ T9853] should_fail_ex+0x3b0/0x4e0 [ 182.162204][ T9853] ? skb_clone+0x20c/0x390 [ 182.166642][ T9853] should_failslab+0xac/0x100 [ 182.171356][ T9853] ? skb_clone+0x20c/0x390 [ 182.175791][ T9853] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 182.181212][ T9853] skb_clone+0x20c/0x390 [ 182.185481][ T9853] __netlink_deliver_tap+0x3cc/0x7f0 [ 182.190790][ T9853] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.196000][ T9853] netlink_deliver_tap+0x19d/0x1b0 [ 182.201128][ T9853] netlink_unicast+0x7c4/0x990 [ 182.205911][ T9853] ? __pfx_netlink_unicast+0x10/0x10 [ 182.211206][ T9853] ? __virt_addr_valid+0x183/0x530 [ 182.216344][ T9853] ? __check_object_size+0x48e/0x900 [ 182.221646][ T9853] netlink_sendmsg+0x8e4/0xcb0 [ 182.226435][ T9853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.231739][ T9853] ? aa_sock_msg_perm+0x91/0x160 [ 182.236696][ T9853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.241997][ T9853] __sock_sendmsg+0x221/0x270 [ 182.246690][ T9853] ____sys_sendmsg+0x52a/0x7e0 [ 182.251478][ T9853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.256817][ T9853] __sys_sendmsg+0x292/0x380 [ 182.261430][ T9853] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.266570][ T9853] ? __pfx_vfs_write+0x10/0x10 [ 182.271360][ T9853] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.277709][ T9853] ? do_syscall_64+0x100/0x230 [ 182.282487][ T9853] ? do_syscall_64+0xb6/0x230 [ 182.287177][ T9853] do_syscall_64+0xf3/0x230 [ 182.291700][ T9853] ? clear_bhb_loop+0x35/0x90 [ 182.296391][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.302293][ T9853] RIP: 0033:0x7feffcf7e719 [ 182.306767][ T9853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.326385][ T9853] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.334813][ T9853] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 182.342809][ T9853] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 182.350786][ T9853] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 182.358764][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.366740][ T9853] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 182.374731][ T9853] [ 182.382492][ T5916] net_ratelimit: 6 callbacks suppressed [ 182.382545][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.405620][ T9857] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 183.464151][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.472366][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.002755][ T9854] Xÿ: entered promiscuous mode [ 184.218246][ T9877] lo speed is unknown, defaulting to 1000 [ 184.437787][ T9896] FAULT_INJECTION: forcing a failure. [ 184.437787][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 184.489959][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.521933][ T9896] CPU: 0 UID: 0 PID: 9896 Comm: syz.2.1516 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 184.532667][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 184.542765][ T9896] Call Trace: [ 184.546074][ T9896] [ 184.549041][ T9896] dump_stack_lvl+0x241/0x360 [ 184.553770][ T9896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.559015][ T9896] ? __pfx__printk+0x10/0x10 [ 184.563634][ T9896] ? __kmalloc_noprof+0xb0/0x400 [ 184.568617][ T9896] ? __pfx___might_resched+0x10/0x10 [ 184.573970][ T9896] should_fail_ex+0x3b0/0x4e0 [ 184.578701][ T9896] ? bpf_test_init+0xe1/0x180 [ 184.583436][ T9896] should_failslab+0xac/0x100 [ 184.588153][ T9896] ? bpf_test_init+0xe1/0x180 [ 184.592873][ T9896] __kmalloc_noprof+0xd8/0x400 [ 184.597694][ T9896] bpf_test_init+0xe1/0x180 [ 184.602256][ T9896] bpf_prog_test_run_skb+0x2bb/0x1820 [ 184.607683][ T9896] ? __pfx_lock_release+0x10/0x10 [ 184.612786][ T9896] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 184.618651][ T9896] ? fput+0x1a8/0x230 [ 184.622684][ T9896] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 184.628533][ T9896] bpf_prog_test_run+0x2e4/0x360 [ 184.633522][ T9896] __sys_bpf+0x48d/0x810 [ 184.637815][ T9896] ? __pfx___sys_bpf+0x10/0x10 [ 184.642638][ T9896] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.648677][ T9896] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.655061][ T9896] ? do_syscall_64+0x100/0x230 [ 184.659931][ T9896] __x64_sys_bpf+0x7c/0x90 [ 184.664395][ T9896] do_syscall_64+0xf3/0x230 [ 184.668935][ T9896] ? clear_bhb_loop+0x35/0x90 [ 184.673649][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.679672][ T9896] RIP: 0033:0x7f1b6317e719 [ 184.684129][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.703784][ T9896] RSP: 002b:00007f1b63f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.712249][ T9896] RAX: ffffffffffffffda RBX: 00007f1b63335f80 RCX: 00007f1b6317e719 [ 184.720275][ T9896] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 184.728291][ T9896] RBP: 00007f1b63f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 184.736307][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.744326][ T9896] R13: 0000000000000000 R14: 00007f1b63335f80 R15: 00007ffe634bd338 [ 184.752346][ T9896] [ 184.925298][ T9915] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 184.942582][ T9915] __nla_validate_parse: 7 callbacks suppressed [ 184.942609][ T9915] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1523'. [ 185.541051][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.855451][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 185.924549][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 186.149723][ T9955] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 186.429489][ T9971] FAULT_INJECTION: forcing a failure. [ 186.429489][ T9971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.443208][ T9971] CPU: 0 UID: 0 PID: 9971 Comm: syz.2.1548 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 186.453942][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 186.464041][ T9971] Call Trace: [ 186.467382][ T9971] [ 186.470351][ T9971] dump_stack_lvl+0x241/0x360 [ 186.475073][ T9971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.480308][ T9971] ? __pfx__printk+0x10/0x10 [ 186.484912][ T9971] ? migrate_enable+0x395/0x510 [ 186.489790][ T9971] should_fail_ex+0x3b0/0x4e0 [ 186.494517][ T9971] _copy_to_user+0x31/0xb0 [ 186.498948][ T9971] __htab_map_lookup_and_delete_batch+0x214a/0x2680 [ 186.505619][ T9971] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 186.512597][ T9971] ? __fget_files+0x29/0x470 [ 186.517234][ T9971] ? __fget_files+0x3f3/0x470 [ 186.521942][ T9971] ? __fget_files+0x29/0x470 [ 186.526549][ T9971] ? __pfx_htab_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 186.533933][ T9971] bpf_map_do_batch+0x494/0x660 [ 186.538798][ T9971] __sys_bpf+0x66f/0x810 [ 186.543052][ T9971] ? __pfx___sys_bpf+0x10/0x10 [ 186.547833][ T9971] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.553862][ T9971] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.560214][ T9971] ? do_syscall_64+0x100/0x230 [ 186.564988][ T9971] __x64_sys_bpf+0x7c/0x90 [ 186.569413][ T9971] do_syscall_64+0xf3/0x230 [ 186.573919][ T9971] ? clear_bhb_loop+0x35/0x90 [ 186.578600][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.584525][ T9971] RIP: 0033:0x7f1b6317e719 [ 186.588944][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.608575][ T9971] RSP: 002b:00007f1b63f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.617005][ T9971] RAX: ffffffffffffffda RBX: 00007f1b63335f80 RCX: 00007f1b6317e719 [ 186.625010][ T9971] RDX: 0000000000000038 RSI: 0000000020000800 RDI: 0000000000000019 [ 186.633006][ T9971] RBP: 00007f1b63f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 186.641018][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.649040][ T9971] R13: 0000000000000000 R14: 00007f1b63335f80 R15: 00007ffe634bd338 [ 186.657040][ T9971] [ 186.662231][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.670385][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.978528][ T9990] netlink: 'syz.2.1555': attribute type 10 has an invalid length. [ 187.010649][ T9990] wlan1: mtu less than device minimum [ 187.016958][ T9990] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 187.173300][T10002] FAULT_INJECTION: forcing a failure. [ 187.173300][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 187.209220][T10002] CPU: 0 UID: 0 PID: 10002 Comm: syz.3.1561 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 187.220063][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 187.230157][T10002] Call Trace: [ 187.233464][T10002] [ 187.236420][T10002] dump_stack_lvl+0x241/0x360 [ 187.241140][T10002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.246382][T10002] ? __pfx__printk+0x10/0x10 [ 187.251013][T10002] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 187.257043][T10002] ? __pfx___might_resched+0x10/0x10 [ 187.262386][T10002] should_fail_ex+0x3b0/0x4e0 [ 187.267107][T10002] should_failslab+0xac/0x100 [ 187.271872][T10002] ? __alloc_skb+0x1c3/0x440 [ 187.276501][T10002] kmem_cache_alloc_node_noprof+0x71/0x320 [ 187.282334][T10002] __alloc_skb+0x1c3/0x440 [ 187.286774][T10002] ? __pfx___alloc_skb+0x10/0x10 [ 187.291728][T10002] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.296768][T10002] ? netlink_ack_tlv_len+0x6e/0x200 [ 187.301988][T10002] netlink_ack+0x13f/0xa30 [ 187.306452][T10002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.311928][T10002] netlink_rcv_skb+0x262/0x430 [ 187.316725][T10002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.322204][T10002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.327531][T10002] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.332752][T10002] netlink_unicast+0x7f6/0x990 [ 187.337538][T10002] ? __pfx_netlink_unicast+0x10/0x10 [ 187.342838][T10002] ? __virt_addr_valid+0x183/0x530 [ 187.347963][T10002] ? __check_object_size+0x48e/0x900 [ 187.353260][T10002] netlink_sendmsg+0x8e4/0xcb0 [ 187.358058][T10002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.363360][T10002] ? aa_sock_msg_perm+0x91/0x160 [ 187.368313][T10002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.373628][T10002] __sock_sendmsg+0x221/0x270 [ 187.378318][T10002] ____sys_sendmsg+0x52a/0x7e0 [ 187.383100][T10002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.388408][T10002] __sys_sendmsg+0x292/0x380 [ 187.393011][T10002] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.398141][T10002] ? __pfx_vfs_write+0x10/0x10 [ 187.402929][T10002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.409273][T10002] ? do_syscall_64+0x100/0x230 [ 187.414045][T10002] ? do_syscall_64+0xb6/0x230 [ 187.418819][T10002] do_syscall_64+0xf3/0x230 [ 187.423332][T10002] ? clear_bhb_loop+0x35/0x90 [ 187.428016][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.433924][T10002] RIP: 0033:0x7feffcf7e719 [ 187.438366][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.457985][T10002] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.466423][T10002] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 187.474401][T10002] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 187.482378][T10002] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 187.490352][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.498326][T10002] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 187.506332][T10002] [ 187.732383][T10021] FAULT_INJECTION: forcing a failure. [ 187.732383][T10021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.747361][T10021] CPU: 1 UID: 0 PID: 10021 Comm: syz.2.1570 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 187.758183][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 187.768278][T10021] Call Trace: [ 187.771583][T10021] [ 187.774523][T10021] dump_stack_lvl+0x241/0x360 [ 187.779240][T10021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.784464][T10021] ? __pfx__printk+0x10/0x10 [ 187.789072][T10021] ? __pfx_lock_release+0x10/0x10 [ 187.794180][T10021] should_fail_ex+0x3b0/0x4e0 [ 187.798866][T10021] _copy_from_user+0x2f/0xc0 [ 187.803469][T10021] copy_msghdr_from_user+0xae/0x680 [ 187.808677][T10021] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 187.814528][T10021] __sys_sendmmsg+0x36d/0x730 [ 187.819224][T10021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 187.824443][T10021] ? __pfx_lock_release+0x10/0x10 [ 187.829476][T10021] ? kstrtouint_from_user+0x128/0x190 [ 187.834870][T10021] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 187.840772][T10021] ? ksys_write+0x229/0x2b0 [ 187.845282][T10021] ? __pfx_lock_release+0x10/0x10 [ 187.850327][T10021] ? vfs_write+0x730/0xd30 [ 187.854794][T10021] ? __mutex_unlock_slowpath+0x21d/0x750 [ 187.860462][T10021] ? __fget_files+0x3f3/0x470 [ 187.865170][T10021] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 187.871175][T10021] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.877522][T10021] ? do_syscall_64+0x100/0x230 [ 187.882306][T10021] __x64_sys_sendmmsg+0xa0/0xb0 [ 187.887185][T10021] do_syscall_64+0xf3/0x230 [ 187.891701][T10021] ? clear_bhb_loop+0x35/0x90 [ 187.896390][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.902291][T10021] RIP: 0033:0x7f1b6317e719 [ 187.906717][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.926335][T10021] RSP: 002b:00007f1b63f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.934765][T10021] RAX: ffffffffffffffda RBX: 00007f1b63335f80 RCX: 00007f1b6317e719 [ 187.942767][T10021] RDX: 0400000000000077 RSI: 0000000020000180 RDI: 0000000000000004 [ 187.950747][T10021] RBP: 00007f1b63f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 187.958771][T10021] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000001 [ 187.966765][T10021] R13: 0000000000000000 R14: 00007f1b63335f80 R15: 00007ffe634bd338 [ 187.974775][T10021] [ 188.145995][T10031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.154433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.188533][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 188.250008][T10030] netlink: 'syz.1.1572': attribute type 11 has an invalid length. [ 188.410741][T10049] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 188.418832][T10049] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1579'. [ 188.419196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.439460][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.448876][T10028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.457505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.581390][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 188.730995][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.897630][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'. [ 188.987925][T10068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.990816][T10069] FAULT_INJECTION: forcing a failure. [ 188.990816][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 189.002023][T10068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.024192][T10068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.045179][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.3.1586 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 189.056018][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 189.066294][T10069] Call Trace: [ 189.069612][T10069] [ 189.072586][T10069] dump_stack_lvl+0x241/0x360 [ 189.077315][T10069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.082568][T10069] ? __pfx__printk+0x10/0x10 [ 189.087203][T10069] ? __kmalloc_noprof+0xb0/0x400 [ 189.092191][T10069] ? __pfx___might_resched+0x10/0x10 [ 189.097543][T10069] should_fail_ex+0x3b0/0x4e0 [ 189.102273][T10069] ? sk_prot_alloc+0xe0/0x210 [ 189.106990][T10069] should_failslab+0xac/0x100 [ 189.111698][T10069] ? sk_prot_alloc+0xe0/0x210 [ 189.116425][T10069] __kmalloc_noprof+0xd8/0x400 [ 189.121249][T10069] sk_prot_alloc+0xe0/0x210 [ 189.125820][T10069] ? sk_alloc+0x26/0x370 [ 189.130114][T10069] sk_alloc+0x38/0x370 [ 189.134223][T10069] ? bpf_test_init+0x15a/0x180 [ 189.139035][T10069] ? bpf_ctx_init+0x162/0x1b0 [ 189.143770][T10069] bpf_prog_test_run_skb+0x3ab/0x1820 [ 189.149201][T10069] ? __pfx_lock_release+0x10/0x10 [ 189.154274][T10069] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 189.160113][T10069] ? fput+0x1a8/0x230 [ 189.164120][T10069] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 189.170031][T10069] bpf_prog_test_run+0x2e4/0x360 [ 189.175008][T10069] __sys_bpf+0x48d/0x810 [ 189.179278][T10069] ? __pfx___sys_bpf+0x10/0x10 [ 189.184158][T10069] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.190154][T10069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.196504][T10069] ? do_syscall_64+0x100/0x230 [ 189.201280][T10069] __x64_sys_bpf+0x7c/0x90 [ 189.205705][T10069] do_syscall_64+0xf3/0x230 [ 189.210216][T10069] ? clear_bhb_loop+0x35/0x90 [ 189.214902][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.220803][T10069] RIP: 0033:0x7feffcf7e719 [ 189.225239][T10069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.244861][T10069] RSP: 002b:00007feffde4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.253290][T10069] RAX: ffffffffffffffda RBX: 00007feffd135f80 RCX: 00007feffcf7e719 [ 189.261271][T10069] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 189.269255][T10069] RBP: 00007feffde4e090 R08: 0000000000000000 R09: 0000000000000000 [ 189.277236][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.285222][T10069] R13: 0000000000000000 R14: 00007feffd135f80 R15: 00007ffc7bbb3628 [ 189.293237][T10069] [ 189.672945][T10096] Cannot find map_set index 0 as target [ 189.940730][T10110] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1601'. [ 189.967087][T10110] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1601'. [ 190.125574][T10124] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1605'. [ 190.137758][T10126] netlink: 'syz.3.1606': attribute type 32 has an invalid length. [ 190.203657][T10129] xfrm1: entered allmulticast mode [ 190.286074][T10128] lo speed is unknown, defaulting to 1000 [ 190.423225][T10128] IPVS: You probably need to specify IP address on multicast interface. [ 190.455287][T10128] IPVS: Error connecting to the multicast addr [ 190.511146][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.529015][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.558309][T10144] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1610'. [ 190.589581][T10144] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1610'. [ 190.668236][T10146] vlan5: entered allmulticast mode [ 190.759216][T10146] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 190.829630][T10146] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 191.185843][T10155] FAULT_INJECTION: forcing a failure. [ 191.185843][T10155] name failslab, interval 1, probability 0, space 0, times 0 [ 191.203871][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.0.1615 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 191.214703][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 191.224808][T10155] Call Trace: [ 191.228121][T10155] [ 191.231093][T10155] dump_stack_lvl+0x241/0x360 [ 191.235898][T10155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.241133][T10155] ? __pfx__printk+0x10/0x10 [ 191.245758][T10155] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 191.251324][T10155] ? __pfx___might_resched+0x10/0x10 [ 191.256641][T10155] should_fail_ex+0x3b0/0x4e0 [ 191.261346][T10155] ? skb_clone+0x20c/0x390 [ 191.265791][T10155] should_failslab+0xac/0x100 [ 191.270486][T10155] ? skb_clone+0x20c/0x390 [ 191.274918][T10155] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 191.280316][T10155] skb_clone+0x20c/0x390 [ 191.284588][T10155] netlink_trim+0x14a/0x220 [ 191.289110][T10155] netlink_broadcast_filtered+0x76/0x12a0 [ 191.294849][T10155] ? __pfx___alloc_skb+0x10/0x10 [ 191.299810][T10155] ? __local_bh_enable_ip+0x168/0x200 [ 191.305216][T10155] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 191.310954][T10155] ? qdisc_notify+0x2ec/0x4b0 [ 191.315648][T10155] nlmsg_notify+0xfb/0x1c0 [ 191.320084][T10155] qdisc_graft+0x12d3/0x1660 [ 191.324695][T10155] ? __pfx_qdisc_graft+0x10/0x10 [ 191.329647][T10155] ? __pfx_qdisc_create+0x10/0x10 [ 191.334692][T10155] tc_modify_qdisc+0xf47/0x1e40 [ 191.339565][T10155] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 191.344881][T10155] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 191.350184][T10155] rtnetlink_rcv_msg+0x73f/0xcf0 [ 191.355126][T10155] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 191.360244][T10155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.365717][T10155] ? ref_tracker_free+0x643/0x7e0 [ 191.370769][T10155] netlink_rcv_skb+0x1e3/0x430 [ 191.375572][T10155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.381042][T10155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.386377][T10155] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.391612][T10155] netlink_unicast+0x7f6/0x990 [ 191.396423][T10155] ? __pfx_netlink_unicast+0x10/0x10 [ 191.401724][T10155] ? __virt_addr_valid+0x183/0x530 [ 191.406862][T10155] ? __check_object_size+0x48e/0x900 [ 191.412180][T10155] netlink_sendmsg+0x8e4/0xcb0 [ 191.416978][T10155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.422283][T10155] ? aa_sock_msg_perm+0x91/0x160 [ 191.427240][T10155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.432538][T10155] __sock_sendmsg+0x221/0x270 [ 191.437226][T10155] ____sys_sendmsg+0x52a/0x7e0 [ 191.442016][T10155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.447352][T10155] __sys_sendmsg+0x292/0x380 [ 191.451988][T10155] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.457213][T10155] ? __pfx_vfs_write+0x10/0x10 [ 191.462006][T10155] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.468436][T10155] ? do_syscall_64+0x100/0x230 [ 191.473211][T10155] ? do_syscall_64+0xb6/0x230 [ 191.477901][T10155] do_syscall_64+0xf3/0x230 [ 191.482425][T10155] ? clear_bhb_loop+0x35/0x90 [ 191.487130][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.493057][T10155] RIP: 0033:0x7f850557e719 [ 191.497486][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.517109][T10155] RSP: 002b:00007f85039f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.525557][T10155] RAX: ffffffffffffffda RBX: 00007f8505735f80 RCX: 00007f850557e719 [ 191.533535][T10155] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 191.541512][T10155] RBP: 00007f85039f6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.549502][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.557482][T10155] R13: 0000000000000000 R14: 00007f8505735f80 R15: 00007ffc4bbbfe18 [ 191.565474][T10155] [ 191.795058][T10171] delete_channel: no stack [ 191.844380][T10171] lo speed is unknown, defaulting to 1000 [ 191.949824][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 192.012783][T10185] netlink: 'syz.1.1624': attribute type 4 has an invalid length. [ 192.025221][T10185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1624'. [ 192.188679][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 192.287373][T10194] netlink: 'syz.3.1627': attribute type 4 has an invalid length. [ 192.385519][ T5868] lo speed is unknown, defaulting to 1000 [ 192.673371][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1631'. [ 192.995183][T10218] ipt_REJECT: TCP_RESET invalid for non-tcp [ 193.108784][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1636'. [ 193.146208][T10216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.188925][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 193.220765][T10230] net_ratelimit: 22 callbacks suppressed [ 193.220788][T10230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.235294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.452718][T10243] netlink: 'syz.2.1643': attribute type 16 has an invalid length. [ 193.941732][T10269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.965627][T10269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.999359][T10269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.029801][T10269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.050529][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.058731][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.079781][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.119795][T10268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.169972][T10274] lo speed is unknown, defaulting to 1000 [ 194.320203][T10284] netlink: 'syz.0.1656': attribute type 16 has an invalid length. [ 194.357523][T10274] IPVS: You probably need to specify IP address on multicast interface. [ 194.406113][T10274] IPVS: Error connecting to the multicast addr [ 194.499792][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.637999][T10294] netlink: 'syz.0.1658': attribute type 10 has an invalid length. [ 194.687841][T10294] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 194.739909][T10294] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 194.973106][T10300] Bluetooth: MGMT ver 1.23 [ 195.005611][T10300] netlink: 'syz.2.1660': attribute type 4 has an invalid length. [ 195.015611][T10303] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 195.023416][ T53] ================================================================== [ 195.031528][ T53] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 195.039229][ T53] Read of size 8 at addr ffff888063dbe498 by task kworker/u9:0/53 [ 195.047064][ T53] [ 195.049421][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 195.060140][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 195.070253][ T53] Workqueue: hci0 hci_cmd_sync_work [ 195.075505][ T53] Call Trace: [ 195.078826][ T53] [ 195.081779][ T53] dump_stack_lvl+0x241/0x360 [ 195.086495][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.091760][ T53] ? __pfx__printk+0x10/0x10 [ 195.096390][ T53] ? _printk+0xd5/0x120 [ 195.100668][ T53] ? __virt_addr_valid+0x183/0x530 [ 195.105817][ T53] ? __virt_addr_valid+0x183/0x530 [ 195.110963][ T53] print_report+0x169/0x550 [ 195.115516][ T53] ? __virt_addr_valid+0x183/0x530 [ 195.120658][ T53] ? __virt_addr_valid+0x183/0x530 [ 195.125801][ T53] ? __virt_addr_valid+0x45f/0x530 [ 195.130943][ T53] ? __phys_addr+0xba/0x170 [ 195.135480][ T53] ? set_powered_sync+0x3a/0xc0 [ 195.140373][ T53] kasan_report+0x143/0x180 [ 195.144912][ T53] ? set_powered_sync+0x3a/0xc0 [ 195.149802][ T53] set_powered_sync+0x3a/0xc0 [ 195.154546][ T53] ? __pfx_set_powered_sync+0x10/0x10 [ 195.159959][ T53] hci_cmd_sync_work+0x22b/0x400 [ 195.164940][ T53] ? process_scheduled_works+0x976/0x1850 [ 195.170705][ T53] process_scheduled_works+0xa63/0x1850 [ 195.173922][T10307] FAULT_INJECTION: forcing a failure. [ 195.173922][T10307] name failslab, interval 1, probability 0, space 0, times 0 [ 195.176291][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 195.194961][ T53] ? assign_work+0x364/0x3d0 [ 195.199591][ T53] worker_thread+0x870/0xd30 [ 195.204235][ T53] ? __kthread_parkme+0x169/0x1d0 [ 195.209282][ T53] ? __pfx_worker_thread+0x10/0x10 [ 195.214420][ T53] kthread+0x2f0/0x390 [ 195.218514][ T53] ? __pfx_worker_thread+0x10/0x10 [ 195.223664][ T53] ? __pfx_kthread+0x10/0x10 [ 195.228287][ T53] ret_from_fork+0x4b/0x80 [ 195.232734][ T53] ? __pfx_kthread+0x10/0x10 [ 195.237341][ T53] ret_from_fork_asm+0x1a/0x30 [ 195.242137][ T53] [ 195.245164][ T53] [ 195.245168][T10307] CPU: 1 UID: 0 PID: 10307 Comm: syz.0.1662 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 195.247483][ T53] Allocated by task 10300: [ 195.258238][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 195.262643][ T53] kasan_save_track+0x3f/0x80 [ 195.272691][T10307] Call Trace: [ 195.277348][ T53] __kasan_kmalloc+0x98/0xb0 [ 195.280626][T10307] [ 195.285194][ T53] __kmalloc_cache_noprof+0x19c/0x2c0 [ 195.288131][T10307] dump_stack_lvl+0x241/0x360 [ 195.293507][ T53] mgmt_pending_new+0x65/0x250 [ 195.298197][T10307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.302961][ T53] mgmt_pending_add+0x36/0x120 [ 195.308171][T10307] ? __pfx__printk+0x10/0x10 [ 195.312914][ T53] set_powered+0x3cd/0x5e0 [ 195.317498][T10307] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 195.321891][ T53] hci_mgmt_cmd+0xc47/0x11d0 [ 195.327857][T10307] ? __pfx___might_resched+0x10/0x10 [ 195.332449][ T53] hci_sock_sendmsg+0x7b8/0x11c0 [ 195.337717][T10307] ? unwind_get_return_address+0x4d/0x90 [ 195.342637][ T53] __sock_sendmsg+0x221/0x270 [ 195.348272][T10307] should_fail_ex+0x3b0/0x4e0 [ 195.352921][ T53] sock_write_iter+0x2d7/0x3f0 [ 195.357593][T10307] should_failslab+0xac/0x100 [ 195.362361][ T53] vfs_write+0xaeb/0xd30 [ 195.367042][T10307] ? __alloc_skb+0x1c3/0x440 [ 195.371266][ T53] ksys_write+0x183/0x2b0 [ 195.375845][T10307] kmem_cache_alloc_node_noprof+0x71/0x320 [ 195.380155][ T53] do_syscall_64+0xf3/0x230 [ 195.385947][T10307] ? validate_chain+0x11e/0x5920 [ 195.390441][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.395367][T10307] __alloc_skb+0x1c3/0x440 [ 195.401235][ T53] [ 195.401242][ T53] Freed by task 10292: [ 195.405643][T10307] ? __pfx___alloc_skb+0x10/0x10 [ 195.407949][ T53] kasan_save_track+0x3f/0x80 [ 195.412005][T10307] ? __kasan_slab_free+0x59/0x70 [ 195.416918][ T53] kasan_save_free_info+0x40/0x50 [ 195.421605][T10307] alloc_skb_with_frags+0xc3/0x820 [ 195.426529][ T53] __kasan_slab_free+0x59/0x70 [ 195.431551][T10307] sock_alloc_send_pskb+0x91a/0xa60 [ 195.436622][ T53] kfree+0x1a0/0x440 [ 195.441388][T10307] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 195.446545][ T53] settings_rsp+0x2bc/0x390 [ 195.450434][T10307] ? do_raw_spin_unlock+0x13c/0x8b0 [ 195.456128][ T53] mgmt_pending_foreach+0xd1/0x130 [ 195.460626][T10307] unix_dgram_sendmsg+0x6d3/0x1f80 [ 195.465882][ T53] __mgmt_power_off+0x106/0x430 [ 195.470997][T10307] ? aa_sk_perm+0x96d/0xab0 [ 195.476073][ T53] hci_dev_close_sync+0x6c4/0x11c0 [ 195.480929][T10307] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 195.485422][ T53] hci_dev_close+0x112/0x210 [ 195.490525][T10307] ? __import_iovec+0x3a8/0x870 [ 195.496043][ T53] sock_do_ioctl+0x158/0x460 [ 195.500621][T10307] ? aa_sock_msg_perm+0x91/0x160 [ 195.505447][ T53] sock_ioctl+0x626/0x8e0 [ 195.510020][T10307] ? unix_seqpacket_sendmsg+0x110/0x1e0 [ 195.514934][ T53] __se_sys_ioctl+0xf9/0x170 [ 195.519252][T10307] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 195.524771][ T53] do_syscall_64+0xf3/0x230 [ 195.529342][T10307] __sock_sendmsg+0x221/0x270 [ 195.535214][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.539721][T10307] ____sys_sendmsg+0x52a/0x7e0 [ 195.544389][ T53] [ 195.544402][ T53] The buggy address belongs to the object at ffff888063dbe480 [ 195.544402][ T53] which belongs to the cache kmalloc-96 of size 96 [ 195.550287][T10307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.555026][ T53] The buggy address is located 24 bytes inside of [ 195.555026][ T53] freed 96-byte region [ffff888063dbe480, ffff888063dbe4e0) [ 195.557359][T10307] ? rcu_is_watching+0x15/0xb0 [ 195.571227][ T53] [ 195.571242][ T53] The buggy address belongs to the physical page: [ 195.576535][T10307] ? __might_fault+0xaa/0x120 [ 195.590140][ T53] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63dbe [ 195.594884][T10307] __sys_sendmmsg+0x3ab/0x730 [ 195.597190][ T53] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 195.603599][T10307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.608250][ T53] page_type: f5(slab) [ 195.617000][T10307] ? __pfx_lock_release+0x10/0x10 [ 195.621657][ T53] raw: 00fff00000000000 ffff88801ac41280 ffffea0000a472c0 dead000000000005 [ 195.629219][T10307] ? kstrtouint_from_user+0x128/0x190 [ 195.634405][ T53] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 195.638381][T10307] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 195.643357][ T53] page dumped because: kasan: bad access detected [ 195.651922][T10307] ? ksys_write+0x229/0x2b0 [ 195.657289][ T53] page_owner tracks the page as allocated [ 195.665854][T10307] ? __pfx_lock_release+0x10/0x10 [ 195.671738][ T53] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 54, tgid 54 (kworker/u8:3), ts 79778202340, free_ts 79776681865 [ 195.678152][T10307] ? vfs_write+0x730/0xd30 [ 195.682629][ T53] post_alloc_hook+0x1f3/0x230 [ 195.688345][T10307] ? __mutex_unlock_slowpath+0x21d/0x750 [ 195.693345][ T53] get_page_from_freelist+0x303f/0x3190 [ 195.712251][T10307] ? __fget_files+0x3f3/0x470 [ 195.716641][ T53] __alloc_pages_noprof+0x292/0x710 [ 195.721403][T10307] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 195.727010][ T53] alloc_pages_mpol_noprof+0x3e8/0x680 [ 195.732544][T10307] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.737199][ T53] alloc_slab_page+0x6a/0x140 [ 195.742383][T10307] ? do_syscall_64+0x100/0x230 [ 195.748338][ T53] allocate_slab+0x5a/0x2f0 [ 195.753797][T10307] __x64_sys_sendmmsg+0xa0/0xb0 [ 195.760109][ T53] ___slab_alloc+0xcd1/0x14b0 [ 195.764785][T10307] do_syscall_64+0xf3/0x230 [ 195.769524][ T53] __slab_alloc+0x58/0xa0 [ 195.774017][T10307] ? clear_bhb_loop+0x35/0x90 [ 195.778853][ T53] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 195.783521][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.788002][ T53] nsim_fib_event_nb+0x17c/0x10b0 [ 195.792320][T10307] RIP: 0033:0x7f850557e719 [ 195.796977][ T53] notifier_call_chain+0x19f/0x3e0 [ 195.802339][T10307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.808210][ T53] atomic_notifier_call_chain+0xdb/0x180 [ 195.813218][T10307] RSP: 002b:00007f85039f6038 EFLAGS: 00000246 [ 195.817614][ T53] call_fib_notifiers+0x31/0x60 [ 195.822708][T10307] ORIG_RAX: 0000000000000133 [ 195.842291][ T53] fib6_add+0x1bd5/0x4420 [ 195.847936][T10307] RAX: ffffffffffffffda RBX: 00007f8505735f80 RCX: 00007f850557e719 [ 195.853996][ T53] ip6_ins_rt+0x106/0x170 [ 195.858848][T10307] RDX: 0000000004000190 RSI: 0000000020000180 RDI: 0000000000000003 [ 195.863526][ T53] __ipv6_ifa_notify+0x5d2/0x1230 [ 195.867851][T10307] RBP: 00007f85039f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.875822][ T53] page last free pid 5841 tgid 5841 stack trace: [ 195.880139][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.888113][ T53] free_unref_page+0xcfb/0xf20 [ 195.893122][T10307] R13: 0000000000000000 R14: 00007f8505735f80 R15: 00007ffc4bbbfe18 [ 195.901087][ T53] vfree+0x186/0x2e0 [ 195.907423][T10307] [ 195.915367][ T53] do_ipt_get_ctl+0x11e4/0x1810 [ 195.940816][ T53] nf_getsockopt+0x299/0x2c0 [ 195.945544][ T53] ip_getsockopt+0x222/0x2e0 [ 195.950172][ T53] tcp_getsockopt+0x163/0x1c0 [ 195.954876][ T53] do_sock_getsockopt+0x3c4/0x7e0 [ 195.959945][ T53] __sys_getsockopt+0x267/0x330 [ 195.964844][ T53] __x64_sys_getsockopt+0xb5/0xd0 [ 195.969901][ T53] do_syscall_64+0xf3/0x230 [ 195.974534][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.980459][ T53] [ 195.982798][ T53] Memory state around the buggy address: [ 195.988441][ T53] ffff888063dbe380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 195.996523][ T53] ffff888063dbe400: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 196.004697][ T53] >ffff888063dbe480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 196.012784][ T53] ^ [ 196.017669][ T53] ffff888063dbe500: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 196.025762][ T53] ffff888063dbe580: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 196.033840][ T53] ================================================================== [ 196.049099][ T53] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 196.056326][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 196.067009][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.077074][ T53] Workqueue: hci0 hci_cmd_sync_work [ 196.082304][ T53] Call Trace: [ 196.085583][ T53] [ 196.088514][ T53] dump_stack_lvl+0x241/0x360 [ 196.093200][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.098408][ T53] ? __pfx__printk+0x10/0x10 [ 196.102999][ T53] ? preempt_schedule+0xe1/0xf0 [ 196.107855][ T53] ? vscnprintf+0x5d/0x90 [ 196.112191][ T53] panic+0x349/0x880 [ 196.116094][ T53] ? check_panic_on_warn+0x21/0xb0 [ 196.121211][ T53] ? __pfx_panic+0x10/0x10 [ 196.125630][ T53] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 196.131622][ T53] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.137962][ T53] ? print_report+0x502/0x550 [ 196.142647][ T53] check_panic_on_warn+0x86/0xb0 [ 196.147588][ T53] ? set_powered_sync+0x3a/0xc0 [ 196.152461][ T53] end_report+0x77/0x160 [ 196.156804][ T53] kasan_report+0x154/0x180 [ 196.161315][ T53] ? set_powered_sync+0x3a/0xc0 [ 196.166181][ T53] set_powered_sync+0x3a/0xc0 [ 196.170873][ T53] ? __pfx_set_powered_sync+0x10/0x10 [ 196.176254][ T53] hci_cmd_sync_work+0x22b/0x400 [ 196.181200][ T53] ? process_scheduled_works+0x976/0x1850 [ 196.186928][ T53] process_scheduled_works+0xa63/0x1850 [ 196.192503][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.198510][ T53] ? assign_work+0x364/0x3d0 [ 196.203194][ T53] worker_thread+0x870/0xd30 [ 196.207814][ T53] ? __kthread_parkme+0x169/0x1d0 [ 196.212937][ T53] ? __pfx_worker_thread+0x10/0x10 [ 196.218088][ T53] kthread+0x2f0/0x390 [ 196.222158][ T53] ? __pfx_worker_thread+0x10/0x10 [ 196.227281][ T53] ? __pfx_kthread+0x10/0x10 [ 196.231873][ T53] ret_from_fork+0x4b/0x80 [ 196.236320][ T53] ? __pfx_kthread+0x10/0x10 [ 196.240942][ T53] ret_from_fork_asm+0x1a/0x30 [ 196.245736][ T53] [ 196.249114][ T53] Kernel Offset: disabled [ 196.253446][ T53] Rebooting in 86400 seconds..