last executing test programs: 4.838379878s ago: executing program 3 (id=1625): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c0c000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="580c2a50cf75711a22e9db40e4ce42511c9682f1810ba16e597b75984e4caf12c4f524d51170fcea3601cd9e8319ef61b2d7a1aaccacacdbe625b883ad8d907c", @ANYBLOB="00000000000000000200000000000000000074463a0f000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x198}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000004003d0000004500004400000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c40000189078001c0a0300050a0000000300000000080a050000000000000122036b0000"], 0x52) (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) socket$nl_netfilter(0x10, 0x3, 0xc) 4.500276962s ago: executing program 1 (id=1628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f0", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.422418526s ago: executing program 4 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.freeze\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x8, 0x7fe2, 0x1, 0x9ea041b0ece0b73c, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, @value=r1, @void, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000080)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bc02000000000000611130000000000085000000ab0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1f0e0000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) 3.88675471s ago: executing program 2 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000820000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000001001100018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) close(0x3) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010003000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x5}]}}]}, 0x40}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r12 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r14, 0x84, 0x3, &(0x7f0000000400)="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", 0x168) r15 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r15, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="e2c1a45b170cbdfc0d89b78802be1ca0", 0x10}, {&(0x7f0000000000)="9396537725d9143870e58ddab5c794b4a123973924b1226ba53b15855c62973a603c01cff174fddc981221bdfd46fec17689091cfa42a728156fbe87342d31ecd557cf1bd81238090484b1183bfadce893f5f838cf003b173035d6c538462f86b9b49bda70430d1ee5ab9220ba7069cf4056ac0a6f4f517e8ddfdab6734646dadce5cd1c2e5b6c", 0x87}, {&(0x7f0000000100)='(', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001800)}}], 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x28}}, 0x0) 3.690473194s ago: executing program 1 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000038005080080003000cac0f0011000100cabee339084eeef109002471f400000008000700"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x4, 0x200072}, 0x2c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010002, 0x4e23, 0x2000000, 0x0, 0x12d5f, 0x12d5c}}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4039}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x2c}}, 0x0) 3.046834183s ago: executing program 4 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000001100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000070000000000000000000000000000000000004ede8d641d6ddd81120000000000"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) pread64(r0, 0x0, 0x0, 0x869) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800b00010065727370616e00000800028004001200d9ea4354fd6b6410b317091017205f6260241dcf5fe1b0c66f88b1913cdd7758b63a401a17c1c5126c30529a0cd46f67a6ce54a170eb5910c58e249488bc172d2e80f3b634446caa0880c48484d99bc0241bebd96c1ed8b862ee96b05fcbbc01a92403bab1566ad679784f0932747afe9adcdfa4a22dce28fc16502bd131a242e9"], 0x38}}, 0x0) mmap(&(0x7f0000605000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r2, 0x56452000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$unix(r5, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x6c) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.03694625s ago: executing program 0 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x34, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "10fbb91a53d0"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x9) 2.983990787s ago: executing program 1 (id=1635): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r2, 0x200, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendto$inet6(r0, &(0x7f00000003c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x9e}, 0x8) 2.979896144s ago: executing program 2 (id=1636): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000027bd7000ffdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8000080}, 0x24044890) accept(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000240)=0x80) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002", @ANYRESDEC, @ANYRES32=r0], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00'}) 2.81050895s ago: executing program 2 (id=1637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (fail_nth: 4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0x4020) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r6, &(0x7f0000001ac0)=[{{&(0x7f0000000340)=@tipc=@id, 0x80, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=""/178, 0xb2}, 0xfffffff1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/165, 0xa5}, 0x7b7}], 0x2, 0x0, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x8d) getsockname$inet(r8, 0x0, &(0x7f0000000040)) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) 2.809621973s ago: executing program 3 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x24}}, 0x4000) 2.809065199s ago: executing program 0 (id=1639): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x810) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@private=0xa010102, [0xff000000, 0xff000000, 0x0, 0xffffffff], @ipv6=@mcast2, [0xffffffff, 0xff, 0xff000000, 0xffffffff], @ipv6=@private0, [0xff, 0xff, 0xff, 0xff000000], @ipv6=@loopback, [0xff, 0xffffffff, 0xffffffff, 0xff], 0x4, 0x400, 0x11, 0x4e20, 0x4e23, 0x4e23, 0x4e22, 0x840, 0x1024}, 0xe0, 0x80}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="020000000200000000000000", @ANYRES8, @ANYBLOB="e2d004f0f661bb33c6828f17a0e953eebc5989ad7e97d1ee8ebb74e9ae6cfb3eab9494894bdc987fae3ee4db6133d384426504292e31ec8cdf7c9be305b4f456cf165864e76b4b24e6c2177cdde73531d5df92cf3bc19201684e202c96644b7f6ba327a309a86099bf15c35f86a5471ddcd75dd13b9cb973dcda3cd2d7e5bd008e6259ee7a038de66f", @ANYRES32=r1], 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f0000000c80)=""/4096, &(0x7f0000000080)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@map, 0xffffffffffffffff, 0x31, 0x2000, 0xffffffffffffffff, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 2.779589664s ago: executing program 1 (id=1640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000003c0)=""/9, &(0x7f0000004540)=0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0xf0}, 0x1, 0x0, 0x0, 0xc000810}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xbb, 0x0, &(0x7f0000000140)=0x33) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) splice(r3, &(0x7f0000000280)=0x80000001, r2, &(0x7f00000002c0)=0x1, 0x10000, 0x8) splice(r2, 0x0, r5, 0x0, 0x10500, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r8, 0x0, 0x22, 0x0, &(0x7f0000000100)=0x1) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r9, 0x103, 0x6, &(0x7f0000000400)=0x3, 0x4) unshare(0x20000400) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x4, 0xfffffff8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000100)={0x90000002}) recvfrom$packet(r3, &(0x7f0000000140)=""/206, 0xce, 0x40000022, &(0x7f0000000240)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) 2.453199633s ago: executing program 3 (id=1641): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0xf994bb16dd6c1318, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r1, &(0x7f0000000000)=""/167, 0xa7, 0x100, &(0x7f00000000c0)={0xa, 0x4e21, 0x63ea, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) 2.298496137s ago: executing program 2 (id=1642): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000080)=""/108, &(0x7f0000000100)=0x6c) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)='T', 0x1}, {&(0x7f00000001c0)="8e0d7c", 0x3}], 0x2}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="a7bda888000000002c0012800800010067726500200002800500130000000000040012000800040002000000050009000900000008000a00", @ANYRES32], 0x54}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r6, &(0x7f0000000040)=[{&(0x7f00000005c0)="c2c1000000000000073dfb5b86dd", 0xe}, {&(0x7f0000000100)="974111ae5e972fd42356f2a399ce1ec4561165c32bdc8c8e11ea7803849c181465099983d218e2caf0", 0x29}, {&(0x7f0000000240)='M\x00\x00', 0x3}], 0x3) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2.292872848s ago: executing program 0 (id=1643): r0 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010101, 0x0, 0x6c}, @in6=@empty, {}, {0x0, 0x0, 0x0, 0x1}, {0xffffffff}, 0x0, 0x0, 0x2, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sm3-generic\x00'}}}]}, 0x184}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20, 0x4}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x214, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x0, 0x2}, {0xa, 0xb}}, [@TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x400}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x190, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x1000, 0x3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_U32_ACT={0x16c, 0x7, [@m_connmark={0x168, 0xb, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x65, 0x3, 0x7, 0x0, 0x3ff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xbfa0, 0x6, 0x1, 0x9ca}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x926d, 0x2, 0x2, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x92, 0x6, 0x0, 0x10001, 0x1}, 0x538}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x10000, 0x3, 0x10, 0x7}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8080, 0xfffffff9, 0x10000000, 0x1ff, 0x180000}, 0xbd4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6062, 0x1, 0x20000000, 0xfbe3}, 0x3}}]}, {0x73, 0x6, "5c0dfdaf9711eb7c714f45e3da4922582d2d0bd98f42ac316bc3fef632bf37373918c40558cc123708c9dc3819264bdc13e7715f48021d5bd41207729a789347c3fec01206e70363c2c19ab4477f6185b54020ff26707e76870c05323e9b4a42157e1ed5ffe0e7e036a70d989d97d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x65}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x214}, 0x1, 0x0, 0x0, 0x81}, 0x24010015) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006d0001002000000000000000000000002d19d0"], 0x28}}, 0x0) getsockname(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 2.098256328s ago: executing program 0 (id=1644): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000010000089af540340c00"/22], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'macvlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000d80)=@deltaction={0x1cc, 0x31, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa042}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x4a8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x3325, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x48400}, 0x2004c044) socket$nl_route(0x10, 0x3, 0x0) 1.696036689s ago: executing program 4 (id=1645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xf2, "7352cb929da9fcad1dcb80997f681424eda8f5452153fe8a6376969a154e98a0f427d34cbfc4e8391ec27171a7d5c7dee7334bc31ad209e3231ded84424191157714aaa775d5862ca9b0346e07459ab1c40543c83b93eb286bc5114d2da7e14adb3b87e15f8177f5f561b66096c41e866fbd5fd46a6747a039cbbdd7c9b32a159a0c09a51cf73dfa5c1ec6f30e71f10d53d2d1323efdec12a47773db47fc22eb444082d4c1d8a05f5581b3b928fb47cf2a22f9036853877fc5a8652c2fa8fd33287f4a17934c3e35fdbce0f71e1d048f764b4616152ab861423df997e057695e0b23dc6c0aeb7616a47a2d0c2603a39d36df"}, &(0x7f0000000000)=0xfa) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r2, 0xff1e}, 0x8) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004804) 1.530512155s ago: executing program 4 (id=1646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8}, @TCA_PIE_TUPDATE={0x8}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="016eb17a5c"]) close(r0) 1.514886703s ago: executing program 3 (id=1647): r0 = socket$nl_route(0x10, 0x3, 0x0) read(r0, &(0x7f0000000b00)=""/98, 0x62) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) poll(&(0x7f0000000300)=[{r1, 0x1114}], 0x1, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007202010000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="3291bb7503fee295baaa4d16d0b343f9a25b01c41c55904d1b9a93dc3244bfb8cc2dc02d29d9a6bf7c3cfa43c00e5852703a0e574e3c53a81ad2e58cf159cddce6d149e147bd499804ab3ca780b8f3c261f2bff0e83f97c3371207556612e404e3cdab8c56152bd0e67403664908f2773418a912a17f02701d65920b4b528fdea78f359364bc4919c57ef0bc830bfda4f64608c4ef67c582356942324781575017bcdb6e8055e97055f2727dcf0da0dd81c1f858e8b6e1bf2acd9e07"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 346.770924ms ago: executing program 1 (id=1648): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 327.953154ms ago: executing program 0 (id=1649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000c08c3aa603", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x8}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000280), &(0x7f0000000380)='%-5lx \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b800b000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x8000}, {0x0, 0x9}, 0x3ff, 0x0, 0x1}}, 0xb8}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000ffffff03000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000003000000000000000100000000000000"], 0xb8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r4, 0x4000, r4}, 0x18) 187.601014ms ago: executing program 2 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0x19, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x34}}, 0x0) 142.691189ms ago: executing program 3 (id=1651): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 142.312465ms ago: executing program 4 (id=1652): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000}, 0x4c) 125.585594ms ago: executing program 0 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100140000000000010015"], 0x80}, 0x1, 0x7}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 101.138784ms ago: executing program 1 (id=1654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="050053"], 0x2c}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) 42.423227ms ago: executing program 3 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000001100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000070000000000000000000000000000000000004ede8d641d6ddd81120000000000"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) pread64(r0, 0x0, 0x0, 0x869) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800b00010065727370616e00000800028004001200d9ea4354fd6b6410b317091017205f6260241dcf5fe1b0c66f88b1913cdd7758b63a401a17c1c5126c30529a0cd46f67a6ce54a170eb5910c58e249488bc172d2e80f3b634446caa0880c48484d99bc0241bebd96c1ed8b862ee96b05fcbbc01a92403bab1566ad679784f0932747afe9adcdfa4a22dce28fc16502bd131a242e9"], 0x38}}, 0x0) mmap(&(0x7f0000605000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r2, 0x56452000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$unix(r5, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x6c) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 41.986587ms ago: executing program 2 (id=1656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000001100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000070000000000000000000000000000000000004ede8d641d6ddd"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) pread64(r0, 0x0, 0x0, 0x869) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800b00010065727370616e00000800028004001200d9ea4354fd6b6410b317091017205f6260241dcf5fe1b0c66f88b1913cdd7758b63a401a17c1c5126c30529a0cd46f67a6ce54a170eb5910c58e249488bc172d2e80f3b634446caa0880c48484d99bc0241bebd96c1ed8b862ee96b05fcbbc01a92403bab1566ad679784f0932747afe9adcdfa4a22dce28fc16502bd131a242e9"], 0x38}}, 0x0) mmap(&(0x7f0000605000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r2, 0x56452000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$unix(r5, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x6c) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 4 (id=1657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09f5ffffff0002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): hci4: link tx timeout [ 146.566186][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.575764][ T5835] Bluetooth: hci4: link tx timeout [ 146.581034][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.589359][ T5835] Bluetooth: hci4: link tx timeout [ 146.594780][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.883797][ T8113] nbd: couldn't find a device at index 1 [ 147.121369][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 147.601111][ T8156] nbd: couldn't find a device at index 2 [ 147.675808][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.749'. [ 147.707088][ T8162] x_tables: duplicate underflow at hook 2 [ 148.187483][ T8184] netlink: 44 bytes leftover after parsing attributes in process `syz.3.760'. [ 148.374823][ T8194] netlink: 'syz.3.765': attribute type 33 has an invalid length. [ 148.386401][ T8192] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 148.393934][ T8194] netlink: 160 bytes leftover after parsing attributes in process `syz.3.765'. [ 148.422008][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.765'. [ 148.511892][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 148.520844][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 148.603280][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 148.881259][ T8227] team0: entered promiscuous mode [ 148.886553][ T8227] team_slave_0: entered promiscuous mode [ 148.902003][ T8227] team_slave_1: entered promiscuous mode [ 148.916231][ T8226] team0: left promiscuous mode [ 148.926335][ T8226] team_slave_0: left promiscuous mode [ 148.936792][ T8226] team_slave_1: left promiscuous mode [ 149.020763][ T8233] FAULT_INJECTION: forcing a failure. [ 149.020763][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.035895][ T8233] CPU: 0 UID: 0 PID: 8233 Comm: syz.2.777 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 149.046629][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 149.056716][ T8233] Call Trace: [ 149.060012][ T8233] [ 149.062983][ T8233] dump_stack_lvl+0x241/0x360 [ 149.067698][ T8233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.072933][ T8233] ? __pfx__printk+0x10/0x10 [ 149.077572][ T8233] ? __pfx_lock_release+0x10/0x10 [ 149.082650][ T8233] should_fail_ex+0x3b0/0x4e0 [ 149.087354][ T8233] _copy_from_iter+0x1e9/0x1c20 [ 149.092224][ T8233] ? __virt_addr_valid+0x183/0x530 [ 149.097358][ T8233] ? __alloc_skb+0x28f/0x440 [ 149.101951][ T8233] ? __pfx__copy_from_iter+0x10/0x10 [ 149.107248][ T8233] ? __virt_addr_valid+0x183/0x530 [ 149.112381][ T8233] ? __virt_addr_valid+0x183/0x530 [ 149.117507][ T8233] ? __virt_addr_valid+0x45f/0x530 [ 149.122635][ T8233] ? __phys_addr_symbol+0x2f/0x70 [ 149.127682][ T8233] ? __check_object_size+0x47a/0x730 [ 149.132975][ T8233] netlink_sendmsg+0x73d/0xcb0 [ 149.137750][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.143042][ T8233] ? aa_sock_msg_perm+0x91/0x160 [ 149.147984][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.153274][ T8233] __sock_sendmsg+0x221/0x270 [ 149.157967][ T8233] ____sys_sendmsg+0x52a/0x7e0 [ 149.162745][ T8233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.168038][ T8233] ? __fget_files+0x2a/0x410 [ 149.172652][ T8233] ? __fget_files+0x2a/0x410 [ 149.177260][ T8233] __sys_sendmsg+0x269/0x350 [ 149.181853][ T8233] ? __pfx_lock_release+0x10/0x10 [ 149.186886][ T8233] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.192007][ T8233] ? __pfx_vfs_write+0x10/0x10 [ 149.196794][ T8233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.203129][ T8233] ? do_syscall_64+0x100/0x230 [ 149.207901][ T8233] ? do_syscall_64+0xb6/0x230 [ 149.212606][ T8233] do_syscall_64+0xf3/0x230 [ 149.217128][ T8233] ? clear_bhb_loop+0x35/0x90 [ 149.221814][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.227716][ T8233] RIP: 0033:0x7f07c8d85d29 [ 149.232145][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.251762][ T8233] RSP: 002b:00007f07c9c64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.260199][ T8233] RAX: ffffffffffffffda RBX: 00007f07c8f76080 RCX: 00007f07c8d85d29 [ 149.268189][ T8233] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 149.276165][ T8233] RBP: 00007f07c9c64090 R08: 0000000000000000 R09: 0000000000000000 [ 149.284154][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.292135][ T8233] R13: 0000000000000000 R14: 00007f07c8f76080 R15: 00007ffe73778038 [ 149.300133][ T8233] [ 149.644781][ T6741] IPVS: starting estimator thread 0... [ 149.654288][ T8255] netlink: 'syz.2.786': attribute type 39 has an invalid length. [ 149.732730][ T8256] IPVS: using max 21 ests per chain, 50400 per kthread [ 149.799293][ T8264] __nla_validate_parse: 1 callbacks suppressed [ 149.799316][ T8264] netlink: 144 bytes leftover after parsing attributes in process `syz.1.791'. [ 149.816350][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 150.436058][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 150.465812][ T8296] FAULT_INJECTION: forcing a failure. [ 150.465812][ T8296] name failslab, interval 1, probability 0, space 0, times 0 [ 150.482673][ T8296] CPU: 0 UID: 0 PID: 8296 Comm: syz.2.803 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 150.493296][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 150.503383][ T8296] Call Trace: [ 150.506685][ T8296] [ 150.509646][ T8296] dump_stack_lvl+0x241/0x360 [ 150.514370][ T8296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.519581][ T8296] ? __pfx__printk+0x10/0x10 [ 150.524182][ T8296] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 150.530176][ T8296] ? __pfx___might_resched+0x10/0x10 [ 150.535478][ T8296] should_fail_ex+0x3b0/0x4e0 [ 150.540166][ T8296] should_failslab+0xac/0x100 [ 150.544873][ T8296] kmem_cache_alloc_node_noprof+0x77/0x380 [ 150.550695][ T8296] ? __alloc_skb+0x1c3/0x440 [ 150.555299][ T8296] __alloc_skb+0x1c3/0x440 [ 150.559731][ T8296] ? __pfx___alloc_skb+0x10/0x10 [ 150.564679][ T8296] ? netlink_autobind+0xd6/0x2f0 [ 150.569647][ T8296] ? netlink_autobind+0x2b0/0x2f0 [ 150.574688][ T8296] netlink_sendmsg+0x638/0xcb0 [ 150.579487][ T8296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.584784][ T8296] ? aa_sock_msg_perm+0x91/0x160 [ 150.589739][ T8296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.595038][ T8296] __sock_sendmsg+0x221/0x270 [ 150.599734][ T8296] ____sys_sendmsg+0x52a/0x7e0 [ 150.604512][ T8296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.609805][ T8296] ? __fget_files+0x2a/0x410 [ 150.614414][ T8296] ? __fget_files+0x2a/0x410 [ 150.619021][ T8296] __sys_sendmsg+0x269/0x350 [ 150.623613][ T8296] ? __pfx_lock_release+0x10/0x10 [ 150.628642][ T8296] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.633767][ T8296] ? __pfx_vfs_write+0x10/0x10 [ 150.638551][ T8296] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.644888][ T8296] ? do_syscall_64+0x100/0x230 [ 150.649669][ T8296] ? do_syscall_64+0xb6/0x230 [ 150.654362][ T8296] do_syscall_64+0xf3/0x230 [ 150.658868][ T8296] ? clear_bhb_loop+0x35/0x90 [ 150.663558][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.669461][ T8296] RIP: 0033:0x7f07c8d85d29 [ 150.673880][ T8296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.693577][ T8296] RSP: 002b:00007f07c9c85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.701999][ T8296] RAX: ffffffffffffffda RBX: 00007f07c8f75fa0 RCX: 00007f07c8d85d29 [ 150.709991][ T8296] RDX: 0000000000048000 RSI: 0000000020007700 RDI: 0000000000000004 [ 150.717970][ T8296] RBP: 00007f07c9c85090 R08: 0000000000000000 R09: 0000000000000000 [ 150.725940][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.733911][ T8296] R13: 0000000000000000 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 150.741892][ T8296] [ 150.860304][ T8298] sctp: [Deprecated]: syz.0.804 (pid 8298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.860304][ T8298] Use struct sctp_sack_info instead [ 150.962867][ T8309] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 151.101668][ T8320] Cannot find add_set index 32768 as target [ 151.143282][ T8321] Cannot find add_set index 32768 as target [ 152.148537][ T8338] FAULT_INJECTION: forcing a failure. [ 152.148537][ T8338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.183206][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.2.816 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 152.193838][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 152.203912][ T8338] Call Trace: [ 152.207212][ T8338] [ 152.210185][ T8338] dump_stack_lvl+0x241/0x360 [ 152.214920][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.220168][ T8338] ? __pfx__printk+0x10/0x10 [ 152.224816][ T8338] ? __pfx_lock_release+0x10/0x10 [ 152.229886][ T8338] ? __lock_acquire+0x1397/0x2100 [ 152.234962][ T8338] should_fail_ex+0x3b0/0x4e0 [ 152.239689][ T8338] _copy_from_user+0x2f/0xc0 [ 152.244328][ T8338] kstrtouint_from_user+0xc6/0x190 [ 152.249487][ T8338] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 152.255253][ T8338] ? __pfx_lock_acquire+0x10/0x10 [ 152.260328][ T8338] proc_fail_nth_write+0xaa/0x2d0 [ 152.265391][ T8338] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 152.271339][ T8338] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 152.277019][ T8338] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 152.282694][ T8338] vfs_write+0x2a3/0xd30 [ 152.286982][ T8338] ? __pfx_vfs_write+0x10/0x10 [ 152.291789][ T8338] ? __fget_files+0x2a/0x410 [ 152.296416][ T8338] ? __fget_files+0x395/0x410 [ 152.301117][ T8338] ? __fget_files+0x2a/0x410 [ 152.305730][ T8338] ksys_write+0x18f/0x2b0 [ 152.310069][ T8338] ? __pfx_ksys_write+0x10/0x10 [ 152.314930][ T8338] ? do_syscall_64+0x100/0x230 [ 152.319708][ T8338] ? do_syscall_64+0xb6/0x230 [ 152.324397][ T8338] do_syscall_64+0xf3/0x230 [ 152.328911][ T8338] ? clear_bhb_loop+0x35/0x90 [ 152.333622][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.339520][ T8338] RIP: 0033:0x7f07c8d847df [ 152.343946][ T8338] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 152.363553][ T8338] RSP: 002b:00007f07c9c85030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.372064][ T8338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07c8d847df [ 152.380043][ T8338] RDX: 0000000000000001 RSI: 00007f07c9c850a0 RDI: 0000000000000008 [ 152.388016][ T8338] RBP: 00007f07c9c85090 R08: 0000000000000000 R09: 0000000000000000 [ 152.395989][ T8338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 152.403962][ T8338] R13: 0000000000000000 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 152.411952][ T8338] [ 152.537099][ T8364] nbd: device at index 0 is going down [ 152.771096][ T8371] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 153.022883][ T8361] netlink: 'syz.1.820': attribute type 21 has an invalid length. [ 153.062073][ T8361] netlink: 'syz.1.820': attribute type 6 has an invalid length. [ 153.086162][ T8361] netlink: 64 bytes leftover after parsing attributes in process `syz.1.820'. [ 153.141974][ T8384] netlink: 256 bytes leftover after parsing attributes in process `syz.0.830'. [ 153.180804][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 153.332815][ T8385] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.720916][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 153.859288][ T8405] nbd: couldn't find a device at index 2 [ 154.154362][ T8423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.841'. [ 154.178821][ T8423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.300617][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.843'. [ 154.564711][ T8443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.852'. [ 154.729911][ T8453] tipc: Enabling of bearer rejected, failed to enable media [ 154.747879][ T8450] vlan2: entered allmulticast mode [ 154.754250][ T8450] bond0: entered allmulticast mode [ 154.784886][ T8450] bond_slave_0: entered allmulticast mode [ 154.792467][ T8450] bond_slave_1: entered allmulticast mode [ 154.814359][ T8450] bond0: left allmulticast mode [ 154.836920][ T8450] bond_slave_0: left allmulticast mode [ 154.852669][ T8450] bond_slave_1: left allmulticast mode [ 154.990921][ T8464] netlink: 'syz.1.847': attribute type 21 has an invalid length. [ 154.998980][ T8464] netlink: 'syz.1.847': attribute type 6 has an invalid length. [ 155.008074][ T8464] __nla_validate_parse: 2 callbacks suppressed [ 155.008090][ T8464] netlink: 64 bytes leftover after parsing attributes in process `syz.1.847'. [ 155.081029][ T8467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.861'. [ 155.112279][ T8468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 155.489044][ T8459] geneve0: entered promiscuous mode [ 155.502332][ T8459] geneve0: entered allmulticast mode [ 155.827743][ T8489] netlink: 44 bytes leftover after parsing attributes in process `syz.4.869'. [ 156.009657][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 156.037457][ T8495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.078940][ T8495] batadv_slave_0: entered promiscuous mode [ 156.095665][ T8495] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 156.261597][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.874'. [ 156.651906][ T8526] sctp: [Deprecated]: syz.4.885 (pid 8526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.651906][ T8526] Use struct sctp_sack_info instead [ 156.674619][ T8528] IPv6: NLM_F_REPLACE set, but no existing node found! [ 156.867598][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 156.889300][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 157.101406][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 157.259815][ T8552] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 157.279436][ T8551] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.291052][ T8552] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 157.307527][ T8530] netlink: 'syz.1.886': attribute type 21 has an invalid length. [ 157.315471][ T8530] netlink: 'syz.1.886': attribute type 6 has an invalid length. [ 157.323558][ T8530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.886'. [ 157.384580][ T8552] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 157.451038][ T8560] Cannot find add_set index 32768 as target [ 158.019272][ T8579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.146075][ T8585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.901'. [ 158.268890][ T8592] siw: device registration error -23 [ 158.590761][ T8608] bridge_slave_0: left allmulticast mode [ 158.607579][ T8608] bridge_slave_0: left promiscuous mode [ 158.619430][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.633830][ T8608] bridge_slave_1: left allmulticast mode [ 158.639629][ T8608] bridge_slave_1: left promiscuous mode [ 158.649012][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.662075][ T8608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.673012][ T8608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.713074][ T8608] gretap1: left promiscuous mode [ 158.736005][ T8617] FAULT_INJECTION: forcing a failure. [ 158.736005][ T8617] name failslab, interval 1, probability 0, space 0, times 0 [ 158.742888][ T8608] bridge0: port 3(gretap1) entered disabled state [ 158.748891][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.4.913 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 158.765888][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 158.775970][ T8617] Call Trace: [ 158.779275][ T8617] [ 158.782238][ T8617] dump_stack_lvl+0x241/0x360 [ 158.786966][ T8617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.792208][ T8617] ? __pfx__printk+0x10/0x10 [ 158.796846][ T8617] ? __pfx_lock_acquire+0x10/0x10 [ 158.801915][ T8617] should_fail_ex+0x3b0/0x4e0 [ 158.806654][ T8617] should_failslab+0xac/0x100 [ 158.811377][ T8617] ? sctp_get_port_local+0x78e/0x1740 [ 158.816789][ T8617] kmem_cache_alloc_noprof+0x70/0x380 [ 158.822206][ T8617] sctp_get_port_local+0x78e/0x1740 [ 158.827447][ T8617] ? __pfx_lock_release+0x10/0x10 [ 158.832520][ T8617] ? __pfx_sctp_get_port_local+0x10/0x10 [ 158.838194][ T8617] ? sctp_bind_addr_match+0x295/0x2b0 [ 158.843784][ T8617] sctp_do_bind+0x513/0x950 [ 158.848341][ T8617] sctp_connect_new_asoc+0x277/0x6c0 [ 158.853661][ T8617] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 158.859525][ T8617] ? sctp_sendmsg+0xbb9/0x3520 [ 158.864336][ T8617] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 158.870177][ T8617] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 158.875770][ T8617] sctp_sendmsg+0x219a/0x3520 [ 158.880516][ T8617] ? __pfx_sctp_sendmsg+0x10/0x10 [ 158.885600][ T8617] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.890504][ T8617] ? inet_sendmsg+0x330/0x390 [ 158.895222][ T8617] __sock_sendmsg+0x1a6/0x270 [ 158.899945][ T8617] __sys_sendto+0x363/0x4c0 [ 158.904491][ T8617] ? __pfx___sys_sendto+0x10/0x10 [ 158.909547][ T8617] ? __mutex_unlock_slowpath+0x21e/0x790 [ 158.915323][ T8617] ? __fget_files+0x2a/0x410 [ 158.919968][ T8617] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.925988][ T8617] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.932356][ T8617] __x64_sys_sendto+0xde/0x100 [ 158.937159][ T8617] do_syscall_64+0xf3/0x230 [ 158.941704][ T8617] ? clear_bhb_loop+0x35/0x90 [ 158.946417][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.952360][ T8617] RIP: 0033:0x7fc4dcd85d29 [ 158.956805][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.976436][ T8617] RSP: 002b:00007fc4ddae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 158.984893][ T8617] RAX: ffffffffffffffda RBX: 00007fc4dcf75fa0 RCX: 00007fc4dcd85d29 [ 158.992897][ T8617] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 159.000894][ T8617] RBP: 00007fc4ddae6090 R08: 000000002005ffe4 R09: 000000000000001c [ 159.008923][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.016930][ T8617] R13: 0000000000000000 R14: 00007fc4dcf75fa0 R15: 00007ffd40865fd8 [ 159.024958][ T8617] [ 159.125131][ T8613] netlink: 'syz.1.912': attribute type 21 has an invalid length. [ 159.143066][ T8613] netlink: 'syz.1.912': attribute type 6 has an invalid length. [ 159.189753][ T8627] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 159.319021][ T8630] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 159.593096][ T8642] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.451904][ T8673] FAULT_INJECTION: forcing a failure. [ 160.451904][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 160.482585][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.1.933 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 160.493220][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 160.503293][ T8673] Call Trace: [ 160.506575][ T8673] [ 160.509510][ T8673] dump_stack_lvl+0x241/0x360 [ 160.514205][ T8673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.519418][ T8673] ? __pfx__printk+0x10/0x10 [ 160.524015][ T8673] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 160.529394][ T8673] ? __pfx___might_resched+0x10/0x10 [ 160.534690][ T8673] should_fail_ex+0x3b0/0x4e0 [ 160.539395][ T8673] should_failslab+0xac/0x100 [ 160.544077][ T8673] __kmalloc_node_noprof+0xe1/0x4d0 [ 160.549285][ T8673] ? __kvmalloc_node_noprof+0x72/0x190 [ 160.554760][ T8673] __kvmalloc_node_noprof+0x72/0x190 [ 160.560051][ T8673] alloc_netdev_mqs+0xc0f/0x1080 [ 160.565003][ T8673] rtnl_create_link+0x2f9/0xc20 [ 160.569865][ T8673] rtnl_newlink_create+0x210/0xa40 [ 160.574995][ T8673] ? __pfx___mutex_lock+0x10/0x10 [ 160.580026][ T8673] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 160.585673][ T8673] ? ns_capable+0x8a/0xf0 [ 160.590030][ T8673] rtnl_newlink+0x1c7e/0x2210 [ 160.594748][ T8673] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.599787][ T8673] ? __pfx_validate_chain+0x10/0x10 [ 160.605021][ T8673] ? validate_chain+0x11e/0x5920 [ 160.609974][ T8673] ? __pfx_lock_acquire+0x10/0x10 [ 160.615012][ T8673] ? __pfx_lock_release+0x10/0x10 [ 160.620048][ T8673] ? __pfx_validate_chain+0x10/0x10 [ 160.625270][ T8673] ? mark_lock+0x9a/0x360 [ 160.629629][ T8673] ? __lock_acquire+0x1397/0x2100 [ 160.634695][ T8673] ? __pfx_lock_release+0x10/0x10 [ 160.639744][ T8673] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.644785][ T8673] rtnetlink_rcv_msg+0x791/0xcf0 [ 160.649740][ T8673] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 160.654880][ T8673] ? __lock_acquire+0x1397/0x2100 [ 160.659912][ T8673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.665393][ T8673] netlink_rcv_skb+0x1e3/0x430 [ 160.670169][ T8673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.675640][ T8673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.680959][ T8673] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.686164][ T8673] netlink_unicast+0x7f6/0x990 [ 160.690939][ T8673] ? __pfx_netlink_unicast+0x10/0x10 [ 160.696229][ T8673] ? __virt_addr_valid+0x45f/0x530 [ 160.701353][ T8673] ? __phys_addr_symbol+0x2f/0x70 [ 160.706389][ T8673] ? __check_object_size+0x47a/0x730 [ 160.711692][ T8673] netlink_sendmsg+0x8e4/0xcb0 [ 160.716478][ T8673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.721779][ T8673] ? aa_sock_msg_perm+0x91/0x160 [ 160.726732][ T8673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.732025][ T8673] __sock_sendmsg+0x221/0x270 [ 160.736722][ T8673] ____sys_sendmsg+0x52a/0x7e0 [ 160.741505][ T8673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.746796][ T8673] ? __fget_files+0x2a/0x410 [ 160.751408][ T8673] ? __fget_files+0x2a/0x410 [ 160.756017][ T8673] __sys_sendmsg+0x269/0x350 [ 160.760615][ T8673] ? __pfx_lock_release+0x10/0x10 [ 160.765653][ T8673] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.770791][ T8673] ? __pfx_vfs_write+0x10/0x10 [ 160.775594][ T8673] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.781949][ T8673] ? do_syscall_64+0x100/0x230 [ 160.786727][ T8673] ? do_syscall_64+0xb6/0x230 [ 160.791417][ T8673] do_syscall_64+0xf3/0x230 [ 160.795933][ T8673] ? clear_bhb_loop+0x35/0x90 [ 160.800625][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.806529][ T8673] RIP: 0033:0x7fcefd385d29 [ 160.810976][ T8673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.830594][ T8673] RSP: 002b:00007fcefe273038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.839012][ T8673] RAX: ffffffffffffffda RBX: 00007fcefd575fa0 RCX: 00007fcefd385d29 [ 160.846994][ T8673] RDX: 0000000000004000 RSI: 0000000020000280 RDI: 0000000000000008 [ 160.854973][ T8673] RBP: 00007fcefe273090 R08: 0000000000000000 R09: 0000000000000000 [ 160.862951][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.870918][ T8673] R13: 0000000000000000 R14: 00007fcefd575fa0 R15: 00007ffc1be6de48 [ 160.878926][ T8673] [ 161.106261][ T8685] FAULT_INJECTION: forcing a failure. [ 161.106261][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 161.119267][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.2.937 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 161.129890][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 161.139970][ T8685] Call Trace: [ 161.143270][ T8685] [ 161.146217][ T8685] dump_stack_lvl+0x241/0x360 [ 161.150935][ T8685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.156166][ T8685] ? __pfx__printk+0x10/0x10 [ 161.160795][ T8685] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 161.166817][ T8685] ? __pfx___might_resched+0x10/0x10 [ 161.172148][ T8685] should_fail_ex+0x3b0/0x4e0 [ 161.176853][ T8685] should_failslab+0xac/0x100 [ 161.181617][ T8685] kmem_cache_alloc_node_noprof+0x77/0x380 [ 161.187475][ T8685] ? __alloc_skb+0x1c3/0x440 [ 161.192090][ T8685] ? do_raw_spin_lock+0x14f/0x370 [ 161.197137][ T8685] __alloc_skb+0x1c3/0x440 [ 161.201579][ T8685] ? __pfx___alloc_skb+0x10/0x10 [ 161.201626][ T8688] FAULT_INJECTION: forcing a failure. [ 161.201626][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 161.206530][ T8685] ? _raw_spin_unlock+0x28/0x50 [ 161.206563][ T8685] ? unix_create1+0x60c/0x7a0 [ 161.206589][ T8685] sock_wmalloc+0xab/0x120 [ 161.206618][ T8685] unix_stream_connect+0x33f/0x1070 [ 161.206650][ T8685] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.243205][ T8685] ? __might_fault+0xaa/0x120 [ 161.247911][ T8685] ? __pfx_unix_stream_connect+0x10/0x10 [ 161.253582][ T8685] __sys_connect+0x288/0x2d0 [ 161.258185][ T8685] ? __fget_files+0x2a/0x410 [ 161.262805][ T8685] ? __pfx___sys_connect+0x10/0x10 [ 161.267970][ T8685] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.274333][ T8685] ? do_syscall_64+0x100/0x230 [ 161.279141][ T8685] __x64_sys_connect+0x7a/0x90 [ 161.283943][ T8685] do_syscall_64+0xf3/0x230 [ 161.288476][ T8685] ? clear_bhb_loop+0x35/0x90 [ 161.293205][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.299132][ T8685] RIP: 0033:0x7f07c8d85d29 [ 161.303565][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.323191][ T8685] RSP: 002b:00007f07c9c85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 161.331635][ T8685] RAX: ffffffffffffffda RBX: 00007f07c8f75fa0 RCX: 00007f07c8d85d29 [ 161.339628][ T8685] RDX: 000000000000006e RSI: 0000000020000280 RDI: 0000000000000006 [ 161.347628][ T8685] RBP: 00007f07c9c85090 R08: 0000000000000000 R09: 0000000000000000 [ 161.355624][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.363618][ T8685] R13: 0000000000000000 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 161.371625][ T8685] [ 161.397480][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.4.938 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 161.408120][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 161.418228][ T8688] Call Trace: [ 161.421574][ T8688] [ 161.424539][ T8688] dump_stack_lvl+0x241/0x360 [ 161.429273][ T8688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.434523][ T8688] ? __pfx__printk+0x10/0x10 [ 161.439157][ T8688] ? __kmalloc_cache_noprof+0x48/0x390 [ 161.444661][ T8688] ? __pfx___might_resched+0x10/0x10 [ 161.449992][ T8688] should_fail_ex+0x3b0/0x4e0 [ 161.454720][ T8688] should_failslab+0xac/0x100 [ 161.459447][ T8688] __kmalloc_cache_noprof+0x70/0x390 [ 161.464774][ T8688] ? nf_tables_newchain+0x131b/0x3310 [ 161.470191][ T8688] nf_tables_newchain+0x131b/0x3310 [ 161.475441][ T8688] ? __pfx_lock_release+0x10/0x10 [ 161.479974][ T8696] netlink: 'syz.3.939': attribute type 17 has an invalid length. [ 161.480496][ T8688] ? __pfx_nf_tables_newchain+0x10/0x10 [ 161.493776][ T8688] ? __pfx_lock_acquire+0x10/0x10 [ 161.498814][ T8688] ? nfnl_pernet+0x23/0x240 [ 161.503348][ T8688] ? __nla_parse+0x40/0x60 [ 161.507786][ T8688] nfnetlink_rcv+0x14e3/0x2ab0 [ 161.512571][ T8688] ? __pfx_validate_chain+0x10/0x10 [ 161.517806][ T8688] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.522971][ T8688] ? __lock_acquire+0x1397/0x2100 [ 161.528031][ T8688] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.533412][ T8688] ? __pfx_lock_release+0x10/0x10 [ 161.538457][ T8688] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.543672][ T8688] netlink_unicast+0x7f6/0x990 [ 161.548459][ T8688] ? __pfx_netlink_unicast+0x10/0x10 [ 161.553766][ T8688] ? __virt_addr_valid+0x45f/0x530 [ 161.558887][ T8688] ? __phys_addr_symbol+0x2f/0x70 [ 161.563918][ T8688] ? __check_object_size+0x47a/0x730 [ 161.569220][ T8688] netlink_sendmsg+0x8e4/0xcb0 [ 161.574008][ T8688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.579313][ T8688] ? aa_sock_msg_perm+0x91/0x160 [ 161.584261][ T8688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.589549][ T8688] __sock_sendmsg+0x221/0x270 [ 161.594251][ T8688] ____sys_sendmsg+0x52a/0x7e0 [ 161.599047][ T8688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.604343][ T8688] ? __fget_files+0x2a/0x410 [ 161.608949][ T8688] ? __fget_files+0x2a/0x410 [ 161.613558][ T8688] __sys_sendmsg+0x269/0x350 [ 161.618162][ T8688] ? __pfx_lock_release+0x10/0x10 [ 161.623190][ T8688] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.628317][ T8688] ? __pfx_vfs_write+0x10/0x10 [ 161.633104][ T8688] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.639434][ T8688] ? do_syscall_64+0x100/0x230 [ 161.644200][ T8688] ? do_syscall_64+0xb6/0x230 [ 161.648885][ T8688] do_syscall_64+0xf3/0x230 [ 161.653395][ T8688] ? clear_bhb_loop+0x35/0x90 [ 161.658075][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.663968][ T8688] RIP: 0033:0x7fc4dcd85d29 [ 161.668386][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.688009][ T8688] RSP: 002b:00007fc4ddae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.696422][ T8688] RAX: ffffffffffffffda RBX: 00007fc4dcf75fa0 RCX: 00007fc4dcd85d29 [ 161.704392][ T8688] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 161.712355][ T8688] RBP: 00007fc4ddae6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.720326][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.728295][ T8688] R13: 0000000000000000 R14: 00007fc4dcf75fa0 R15: 00007ffd40865fd8 [ 161.736279][ T8688] [ 161.740421][ T8696] __nla_validate_parse: 2 callbacks suppressed [ 161.740434][ T8696] netlink: 152 bytes leftover after parsing attributes in process `syz.3.939'. [ 161.780652][ T8696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.876176][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 162.553957][ T8723] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 162.568066][ T8723] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 162.588890][ T8723] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 162.597424][ T8723] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 162.625396][ T8723] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 51720 - 0 [ 162.634259][ T8723] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 51720 - 0 [ 162.643256][ T8723] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 51720 - 0 [ 162.653885][ T8723] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 51720 - 0 [ 162.662914][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 162.671997][ T8723] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 35334 - 0 [ 162.681848][ T8723] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 35334 - 0 [ 162.690529][ T8723] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 35334 - 0 [ 162.699148][ T8723] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 35334 - 0 [ 162.707750][ T8723] geneve2: left promiscuous mode [ 162.713110][ T8723] geneve2: left allmulticast mode [ 162.720123][ T8723] bridge1: left promiscuous mode [ 162.725286][ T8723] bridge1: left allmulticast mode [ 162.731564][ T8723] erspan1: left promiscuous mode [ 162.736873][ T8723] erspan1: left allmulticast mode [ 162.744287][ T8723] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 162.915650][ T8743] x_tables: duplicate underflow at hook 2 [ 163.047030][ T8753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.958'. [ 163.077252][ T8756] netlink: 'syz.3.962': attribute type 2 has an invalid length. [ 163.101069][ T8756] fþ: entered promiscuous mode [ 163.301611][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 163.320558][ T8764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 163.365141][ T8767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 163.757923][ T8786] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 163.776841][ T8786] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 163.790210][ T8786] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 163.821534][ T8789] Cannot find add_set index 32768 as target [ 164.187273][ T8803] xt_l2tp: missing protocol rule (udp|l2tpip) [ 164.467148][ T8810] pim6reg: entered allmulticast mode [ 164.563486][ T8812] netlink: 76 bytes leftover after parsing attributes in process `syz.2.981'. [ 164.572402][ T8812] nbd: couldn't find device at index 0 [ 164.586731][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 164.617300][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 164.988605][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.993'. [ 165.010974][ T8837] bridge_slave_0: default FDB implementation only supports local addresses [ 165.262495][ T8846] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 165.488052][ T8853] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 165.649338][ T8869] ipt_ECN: cannot use operation on non-tcp rule [ 165.657734][ T8870] ipt_ECN: cannot use operation on non-tcp rule [ 166.103551][ T8897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 167.362846][ T8958] nbd: couldn't find a device at index 2 [ 167.508504][ T8963] xt_hashlimit: size too large, truncated to 1048576 [ 167.540073][ T8963] syz.0.1039: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.579320][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.0.1039 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 167.590027][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 167.600096][ T8963] Call Trace: [ 167.603393][ T8963] [ 167.606332][ T8963] dump_stack_lvl+0x241/0x360 [ 167.611035][ T8963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.616249][ T8963] ? __pfx__printk+0x10/0x10 [ 167.620859][ T8963] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 167.627300][ T8963] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 167.633821][ T8963] warn_alloc+0x278/0x410 [ 167.638173][ T8963] ? __pfx_warn_alloc+0x10/0x10 [ 167.643036][ T8963] ? htable_create+0x102/0x880 [ 167.647809][ T8963] ? __get_vm_area_node+0x1c8/0x2d0 [ 167.653017][ T8963] ? __get_vm_area_node+0x25c/0x2d0 [ 167.658238][ T8963] __vmalloc_node_range_noprof+0x62f/0x1380 [ 167.664167][ T8963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.670512][ T8963] ? hashlimit_mt_check_common+0x691/0xa40 [ 167.676336][ T8963] ? htable_create+0x102/0x880 [ 167.681114][ T8963] vmalloc_noprof+0x79/0x90 [ 167.685629][ T8963] ? htable_create+0x102/0x880 [ 167.690407][ T8963] htable_create+0x102/0x880 [ 167.695014][ T8963] hashlimit_mt_check_common+0x710/0xa40 [ 167.700658][ T8963] ? xt_check_proc_name+0xc7/0x110 [ 167.705779][ T8963] xt_check_match+0x368/0xa40 [ 167.710467][ T8963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.716460][ T8963] ? __pfx_xt_check_match+0x10/0x10 [ 167.721674][ T8963] ? xt_find_match+0x1d3/0x210 [ 167.726452][ T8963] translate_table+0x1671/0x2330 [ 167.731424][ T8963] ? __pfx_translate_table+0x10/0x10 [ 167.736714][ T8963] ? __might_fault+0xaa/0x120 [ 167.741391][ T8963] ? __pfx_lock_release+0x10/0x10 [ 167.746446][ T8963] ? __virt_addr_valid+0x183/0x530 [ 167.751573][ T8963] ? __might_fault+0xc6/0x120 [ 167.756255][ T8963] ? _copy_from_user+0x99/0xc0 [ 167.761031][ T8963] ? copy_from_sockptr_offset+0x6b/0xb0 [ 167.766591][ T8963] do_ip6t_set_ctl+0xe4c/0x1270 [ 167.771473][ T8963] ? __pfx___mutex_trylock_common+0x10/0x10 [ 167.777381][ T8963] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 167.782678][ T8963] ? __pfx_lock_release+0x10/0x10 [ 167.787710][ T8963] ? rcu_is_watching+0x15/0xb0 [ 167.792491][ T8963] ? trace_contention_end+0x3c/0x120 [ 167.797816][ T8963] ? __mutex_unlock_slowpath+0x21e/0x790 [ 167.803464][ T8963] ? __pfx___mutex_lock+0x10/0x10 [ 167.808499][ T8963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.814504][ T8963] nf_setsockopt+0x295/0x2c0 [ 167.819109][ T8963] rawv6_setsockopt+0x327/0x740 [ 167.823974][ T8963] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.828841][ T8963] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 167.834231][ T8963] ? __pfx_lock_acquire+0x10/0x10 [ 167.839271][ T8963] ? aa_sock_opt_perm+0x79/0x120 [ 167.844219][ T8963] ? sock_common_setsockopt+0x37/0xc0 [ 167.849620][ T8963] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 167.855523][ T8963] do_sock_setsockopt+0x3af/0x720 [ 167.860562][ T8963] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 167.866118][ T8963] ? __fget_files+0x395/0x410 [ 167.870807][ T8963] ? __fget_files+0x2a/0x410 [ 167.875415][ T8963] __x64_sys_setsockopt+0x1ee/0x280 [ 167.880623][ T8963] do_syscall_64+0xf3/0x230 [ 167.885130][ T8963] ? clear_bhb_loop+0x35/0x90 [ 167.889819][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.895721][ T8963] RIP: 0033:0x7fcf8d585d29 [ 167.900139][ T8963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.919741][ T8963] RSP: 002b:00007fcf8d3f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.928159][ T8963] RAX: ffffffffffffffda RBX: 00007fcf8d775fa0 RCX: 00007fcf8d585d29 [ 167.936130][ T8963] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 167.944096][ T8963] RBP: 00007fcf8d601aa8 R08: 0000000000000588 R09: 0000000000000000 [ 167.952066][ T8963] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 167.960037][ T8963] R13: 0000000000000000 R14: 00007fcf8d775fa0 R15: 00007ffec2dc7338 [ 167.968026][ T8963] [ 167.973938][ T8963] Mem-Info: [ 167.977172][ T8963] active_anon:3753 inactive_anon:0 isolated_anon:0 [ 167.977172][ T8963] active_file:1819 inactive_file:38288 isolated_file:0 [ 167.977172][ T8963] unevictable:768 dirty:206 writeback:0 [ 167.977172][ T8963] slab_reclaimable:10504 slab_unreclaimable:97516 [ 167.977172][ T8963] mapped:28883 shmem:1436 pagetables:697 [ 167.977172][ T8963] sec_pagetables:0 bounce:0 [ 167.977172][ T8963] kernel_misc_reclaimable:0 [ 167.977172][ T8963] free:1346919 free_pcp:762 free_cma:0 [ 168.032939][ T8963] Node 0 active_anon:15060kB inactive_anon:0kB active_file:7276kB inactive_file:153080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115528kB dirty:900kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no [ 168.065713][ T8963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 168.097342][ T8963] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.124793][ T8963] lowmem_reserve[]: 0 2465 2466 0 0 [ 168.130362][ T8963] Node 0 DMA32 free:1464260kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:15124kB inactive_anon:0kB active_file:7276kB inactive_file:152248kB unevictable:1536kB writepending:900kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:3164kB local_pcp:1476kB free_cma:0kB [ 168.160809][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 168.165643][ T8963] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 168.192492][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 168.197294][ T8963] Node 1 Normal free:3907504kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:16kB free_cma:0kB [ 168.226849][ T8963] lowmem_reserve[]: 0 0 0 0 0 [ 168.231617][ T8963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.244572][ T8963] Node 0 DMA32: 555*4kB (UME) 2329*8kB (UME) 1873*16kB (UME) 1544*32kB (UME) 1724*64kB (UME) 1105*128kB (UME) 645*256kB (UME) 265*512kB (UME) 56*1024kB (UME) 7*2048kB (UME) 181*4096kB (UM) = 1465860kB [ 168.264716][ T8963] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 168.276397][ T8963] Node 1 Normal: 202*4kB (UE) 57*8kB (UME) 46*16kB (UME) 231*32kB (UME) 92*64kB (UME) 32*128kB (UME) 14*256kB (UM) 9*512kB (UME) 3*1024kB (UM) 5*2048kB (UE) 944*4096kB (M) = 3907504kB [ 168.295000][ T8963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.304872][ T8963] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.314500][ T8963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.324165][ T8963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.333543][ T8963] 41543 total pagecache pages [ 168.338247][ T8963] 0 pages in swap cache [ 168.342418][ T8963] Free swap = 124996kB [ 168.354742][ T8975] __nla_validate_parse: 5 callbacks suppressed [ 168.354781][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 168.369995][ T8963] Total swap = 124996kB [ 168.374383][ T8963] 2097051 pages RAM [ 168.378242][ T8963] 0 pages HighMem/MovableOnly [ 168.384586][ T8963] 427012 pages reserved [ 168.388773][ T8963] 0 pages cma reserved [ 168.502082][ T8982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1045'. [ 168.753844][ T8999] nbd: couldn't find a device at index 1 [ 169.078199][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 169.087993][ T9017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1062'. [ 169.103719][ T9019] SET target dimension over the limit! [ 169.340836][ T9032] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1065'. [ 169.348598][ T9033] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 169.362951][ T9033] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 169.377259][ T9033] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 169.406322][ T9037] Cannot find add_set index 32768 as target [ 169.433053][ T9034] nbd: couldn't find a device at index 4 [ 169.781522][ T9050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1074'. [ 169.807406][ T9054] netlink: 'syz.4.1076': attribute type 21 has an invalid length. [ 169.832618][ T9054] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1076'. [ 169.842463][ T9054] netlink: 'syz.4.1076': attribute type 4 has an invalid length. [ 169.850792][ T9054] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1076'. [ 169.866788][ T9056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1077'. [ 170.717654][ T9089] siw: device registration error -23 [ 170.744562][ T9091] FAULT_INJECTION: forcing a failure. [ 170.744562][ T9091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.778162][ T9073] netlink: 'syz.3.1083': attribute type 21 has an invalid length. [ 170.792709][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.4.1088 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 170.796630][ T9073] netlink: 'syz.3.1083': attribute type 6 has an invalid length. [ 170.803422][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 170.803460][ T9091] Call Trace: [ 170.803471][ T9091] [ 170.815822][ T9073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1083'. [ 170.821212][ T9091] dump_stack_lvl+0x241/0x360 [ 170.841089][ T9091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.846326][ T9091] ? __pfx__printk+0x10/0x10 [ 170.850956][ T9091] ? __pfx_lock_release+0x10/0x10 [ 170.856015][ T9091] ? __lock_acquire+0x1397/0x2100 [ 170.861073][ T9091] should_fail_ex+0x3b0/0x4e0 [ 170.865799][ T9091] _copy_from_user+0x2f/0xc0 [ 170.870447][ T9091] kstrtouint_from_user+0xc6/0x190 [ 170.875602][ T9091] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 170.881360][ T9091] ? __pfx_lock_acquire+0x10/0x10 [ 170.886423][ T9091] proc_fail_nth_write+0xaa/0x2d0 [ 170.891482][ T9091] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 170.897418][ T9091] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 170.903089][ T9091] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 170.908757][ T9091] vfs_write+0x2a3/0xd30 [ 170.913043][ T9091] ? __pfx_vfs_write+0x10/0x10 [ 170.917835][ T9091] ? __fget_files+0x2a/0x410 [ 170.922449][ T9091] ? __fget_files+0x395/0x410 [ 170.927158][ T9091] ? __fget_files+0x2a/0x410 [ 170.931794][ T9091] ksys_write+0x18f/0x2b0 [ 170.936152][ T9091] ? __pfx_ksys_write+0x10/0x10 [ 170.941014][ T9091] ? do_syscall_64+0x100/0x230 [ 170.945796][ T9091] ? do_syscall_64+0xb6/0x230 [ 170.950488][ T9091] do_syscall_64+0xf3/0x230 [ 170.955007][ T9091] ? clear_bhb_loop+0x35/0x90 [ 170.959716][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.965619][ T9091] RIP: 0033:0x7fc4dcd847df [ 170.970045][ T9091] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 170.989656][ T9091] RSP: 002b:00007fc4ddae6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 170.998078][ T9091] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4dcd847df [ 171.006049][ T9091] RDX: 0000000000000001 RSI: 00007fc4ddae60a0 RDI: 0000000000000004 [ 171.014021][ T9091] RBP: 00007fc4ddae6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.021995][ T9091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 171.029962][ T9091] R13: 0000000000000000 R14: 00007fc4dcf75fa0 R15: 00007ffd40865fd8 [ 171.037946][ T9091] [ 171.090336][ T9093] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 171.418999][ T9105] netlink: 'syz.2.1094': attribute type 7 has an invalid length. [ 171.657531][ T9111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 171.993107][ T6742] IPVS: starting estimator thread 0... [ 172.016564][ T9134] vlan3: entered promiscuous mode [ 172.098304][ T9136] IPVS: using max 22 ests per chain, 52800 per kthread [ 172.120828][ T9139] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 172.136893][ T9139] hsr0: entered promiscuous mode [ 173.628221][ T9165] siw: device registration error -23 [ 173.804909][ T9168] __nla_validate_parse: 3 callbacks suppressed [ 173.804931][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 173.820812][ T9147] netlink: 'syz.1.1109': attribute type 21 has an invalid length. [ 173.847399][ T9147] netlink: 'syz.1.1109': attribute type 6 has an invalid length. [ 173.864965][ T9168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1117'. [ 173.983592][ T9147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1109'. [ 174.032488][ T9170] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1118'. [ 174.240528][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 174.873783][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 174.898201][ T9185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 175.070561][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 175.165231][ T9199] veth0_to_team: entered promiscuous mode [ 175.192984][ T9199] veth0_to_team: entered allmulticast mode [ 175.263635][ T9206] Cannot find add_set index 32768 as target [ 175.320259][ T9202] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 175.339710][ T9202] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 175.348804][ T9202] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 175.384204][ T9204] ip6gretap0: entered promiscuous mode [ 175.416280][ T9204] batadv_slave_0: entered promiscuous mode [ 175.432251][ T9204] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 175.441131][ T9204] Cannot create hsr debugfs directory [ 175.467284][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 175.593345][ T9221] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1137'. [ 176.190032][ T9234] netlink: 'syz.3.1143': attribute type 21 has an invalid length. [ 176.198188][ T9234] netlink: 'syz.3.1143': attribute type 6 has an invalid length. [ 176.410603][ T9251] FAULT_INJECTION: forcing a failure. [ 176.410603][ T9251] name failslab, interval 1, probability 0, space 0, times 0 [ 176.425234][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.4.1148 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 176.435962][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 176.446047][ T9251] Call Trace: [ 176.449345][ T9251] [ 176.452317][ T9251] dump_stack_lvl+0x241/0x360 [ 176.457044][ T9251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.462275][ T9251] ? __pfx__printk+0x10/0x10 [ 176.466910][ T9251] ? kmem_cache_alloc_noprof+0x48/0x380 [ 176.472505][ T9251] ? __pfx___might_resched+0x10/0x10 [ 176.477822][ T9251] should_fail_ex+0x3b0/0x4e0 [ 176.482533][ T9251] should_failslab+0xac/0x100 [ 176.487238][ T9251] ? _sctp_make_chunk+0x161/0x460 [ 176.492270][ T9251] kmem_cache_alloc_noprof+0x70/0x380 [ 176.497660][ T9251] _sctp_make_chunk+0x161/0x460 [ 176.502552][ T9251] sctp_make_datafrag_empty+0xa6/0x510 [ 176.508031][ T9251] ? __kmalloc_cache_noprof+0x243/0x390 [ 176.513591][ T9251] ? sctp_auth_send_cid+0x69/0x250 [ 176.518710][ T9251] sctp_datamsg_from_user+0x740/0xf20 [ 176.524096][ T9251] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 176.529409][ T9251] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 176.535234][ T9251] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 176.540968][ T9251] ? sctp_connect_add_peer+0x4af/0x5b0 [ 176.546438][ T9251] ? __pfx_sctp_connect_add_peer+0x10/0x10 [ 176.552251][ T9251] ? sctp_sendmsg+0x2771/0x3520 [ 176.557126][ T9251] sctp_sendmsg+0x1bc3/0x3520 [ 176.561838][ T9251] ? __pfx_sctp_sendmsg+0x10/0x10 [ 176.566880][ T9251] ? __pfx_aa_sk_perm+0x10/0x10 [ 176.571745][ T9251] ? inet_sendmsg+0x330/0x390 [ 176.576439][ T9251] __sock_sendmsg+0x1a6/0x270 [ 176.581131][ T9251] ____sys_sendmsg+0x52a/0x7e0 [ 176.585917][ T9251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.591302][ T9251] ? __fget_files+0x2a/0x410 [ 176.595914][ T9251] ? __fget_files+0x2a/0x410 [ 176.600527][ T9251] __sys_sendmsg+0x269/0x350 [ 176.605132][ T9251] ? __pfx_lock_release+0x10/0x10 [ 176.610171][ T9251] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.615302][ T9251] ? __pfx_vfs_write+0x10/0x10 [ 176.620092][ T9251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.626420][ T9251] ? do_syscall_64+0x100/0x230 [ 176.631186][ T9251] ? do_syscall_64+0xb6/0x230 [ 176.635882][ T9251] do_syscall_64+0xf3/0x230 [ 176.640493][ T9251] ? clear_bhb_loop+0x35/0x90 [ 176.645178][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.651078][ T9251] RIP: 0033:0x7fc4dcd85d29 [ 176.655493][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.675106][ T9251] RSP: 002b:00007fc4ddae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.683528][ T9251] RAX: ffffffffffffffda RBX: 00007fc4dcf75fa0 RCX: 00007fc4dcd85d29 [ 176.691505][ T9251] RDX: 00000000200048d0 RSI: 0000000020000600 RDI: 0000000000000003 [ 176.699481][ T9251] RBP: 00007fc4ddae6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.707493][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.715471][ T9251] R13: 0000000000000000 R14: 00007fc4dcf75fa0 R15: 00007ffd40865fd8 [ 176.723456][ T9251] [ 176.890163][ T9256] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.898660][ T9256] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.907295][ T9256] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.915592][ T9256] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.382950][ T9278] FAULT_INJECTION: forcing a failure. [ 177.382950][ T9278] name failslab, interval 1, probability 0, space 0, times 0 [ 177.432684][ T9278] CPU: 0 UID: 0 PID: 9278 Comm: syz.0.1158 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 177.443407][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 177.453475][ T9278] Call Trace: [ 177.456760][ T9278] [ 177.459697][ T9278] dump_stack_lvl+0x241/0x360 [ 177.464399][ T9278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.469632][ T9278] ? __pfx__printk+0x10/0x10 [ 177.474240][ T9278] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 177.480230][ T9278] ? __pfx___might_resched+0x10/0x10 [ 177.485526][ T9278] ? __mutex_lock+0x37f/0xee0 [ 177.490215][ T9278] should_fail_ex+0x3b0/0x4e0 [ 177.494913][ T9278] should_failslab+0xac/0x100 [ 177.499619][ T9278] kmem_cache_alloc_node_noprof+0x77/0x380 [ 177.505442][ T9278] ? __alloc_skb+0x1c3/0x440 [ 177.510048][ T9278] __alloc_skb+0x1c3/0x440 [ 177.514471][ T9278] ? rtnl_bridge_setlink+0x492/0x730 [ 177.519799][ T9278] ? __pfx___alloc_skb+0x10/0x10 [ 177.524759][ T9278] ? netlink_ack_tlv_len+0x6e/0x200 [ 177.529974][ T9278] netlink_ack+0x145/0xa50 [ 177.534407][ T9278] netlink_rcv_skb+0x262/0x430 [ 177.539172][ T9278] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.544643][ T9278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.549982][ T9278] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.555188][ T9278] netlink_unicast+0x7f6/0x990 [ 177.559966][ T9278] ? __pfx_netlink_unicast+0x10/0x10 [ 177.565254][ T9278] ? __virt_addr_valid+0x45f/0x530 [ 177.570380][ T9278] ? __phys_addr_symbol+0x2f/0x70 [ 177.575418][ T9278] ? __check_object_size+0x47a/0x730 [ 177.580724][ T9278] netlink_sendmsg+0x8e4/0xcb0 [ 177.585512][ T9278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.590814][ T9278] ? aa_sock_msg_perm+0x91/0x160 [ 177.595789][ T9278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.601083][ T9278] __sock_sendmsg+0x221/0x270 [ 177.605780][ T9278] ____sys_sendmsg+0x52a/0x7e0 [ 177.610564][ T9278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.615866][ T9278] ? __fget_files+0x2a/0x410 [ 177.620486][ T9278] ? __fget_files+0x2a/0x410 [ 177.625102][ T9278] __sys_sendmsg+0x269/0x350 [ 177.629706][ T9278] ? __pfx_lock_release+0x10/0x10 [ 177.634770][ T9278] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.639903][ T9278] ? __pfx_vfs_write+0x10/0x10 [ 177.644689][ T9278] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.651048][ T9278] ? do_syscall_64+0x100/0x230 [ 177.655830][ T9278] ? do_syscall_64+0xb6/0x230 [ 177.660520][ T9278] do_syscall_64+0xf3/0x230 [ 177.665046][ T9278] ? clear_bhb_loop+0x35/0x90 [ 177.669787][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.675704][ T9278] RIP: 0033:0x7fcf8d585d29 [ 177.680130][ T9278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.699752][ T9278] RSP: 002b:00007fcf8d3f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.708193][ T9278] RAX: ffffffffffffffda RBX: 00007fcf8d775fa0 RCX: 00007fcf8d585d29 [ 177.716179][ T9278] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 177.724157][ T9278] RBP: 00007fcf8d3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.732218][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.740202][ T9278] R13: 0000000000000000 R14: 00007fcf8d775fa0 R15: 00007ffec2dc7338 [ 177.748206][ T9278] [ 177.767838][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 177.850271][ T9280] unsupported nlmsg_type 40 [ 178.054308][ T9293] IPVS: ip_vs_add_dest(): server weight less than zero [ 178.134928][ T9297] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 178.145614][ T6742] IPVS: starting estimator thread 0... [ 178.164613][ T9299] netlink: 'syz.0.1167': attribute type 7 has an invalid length. [ 178.172833][ T9299] netlink: 'syz.0.1167': attribute type 8 has an invalid length. [ 178.185510][ T9299] erspan0: entered promiscuous mode [ 178.221140][ T9301] GUP no longer grows the stack in syz.2.1168 (9301): 20004000-20005000 (20002000) [ 178.243928][ T9304] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 178.251555][ T9301] CPU: 0 UID: 0 PID: 9301 Comm: syz.2.1168 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 178.262269][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 178.272331][ T9301] Call Trace: [ 178.275615][ T9301] [ 178.278554][ T9301] dump_stack_lvl+0x241/0x360 [ 178.283267][ T9301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.288493][ T9301] ? __pfx__printk+0x10/0x10 [ 178.293101][ T9301] ? find_vma+0xf9/0x170 [ 178.297371][ T9301] __get_user_pages+0x4385/0x49e0 [ 178.302407][ T9301] ? __pfx_lock_acquire+0x10/0x10 [ 178.307441][ T9301] ? mark_lock+0x9a/0x360 [ 178.311786][ T9301] ? __lock_acquire+0x1397/0x2100 [ 178.316820][ T9301] ? __pfx___get_user_pages+0x10/0x10 [ 178.322193][ T9301] ? __gup_longterm_locked+0xd2f/0x17f0 [ 178.327742][ T9301] ? __pfx_down_read_killable+0x10/0x10 [ 178.333299][ T9301] ? __pfx_lock_acquire+0x10/0x10 [ 178.338322][ T9301] ? try_get_folio+0xf1/0x6f0 [ 178.342998][ T9301] ? __pfx_lock_release+0x10/0x10 [ 178.348055][ T9301] __gup_longterm_locked+0xe64/0x17f0 [ 178.353458][ T9301] ? mark_lock+0x9a/0x360 [ 178.357806][ T9301] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.363791][ T9301] ? __pfx___gup_longterm_locked+0x10/0x10 [ 178.369620][ T9301] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.375962][ T9301] ? gup_fast_fallback+0x207e/0x29c0 [ 178.381253][ T9301] gup_fast_fallback+0x2266/0x29c0 [ 178.386395][ T9301] ? __pfx_gup_fast_fallback+0x10/0x10 [ 178.391891][ T9301] ? __mutex_trylock_common+0x183/0x2e0 [ 178.397455][ T9301] ? __pfx___might_resched+0x10/0x10 [ 178.402746][ T9301] ? is_valid_gup_args+0x124/0x200 [ 178.407862][ T9301] get_user_pages_fast+0xcc/0x160 [ 178.412892][ T9301] ? __pfx_get_user_pages_fast+0x10/0x10 [ 178.418540][ T9301] ? rcu_is_watching+0x15/0xb0 [ 178.423309][ T9301] ? trace_contention_end+0x3c/0x120 [ 178.428610][ T9301] ? __mutex_lock+0x37f/0xee0 [ 178.433311][ T9301] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 178.439051][ T9301] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.445409][ T9301] iov_iter_get_pages2+0xcf/0x130 [ 178.450469][ T9301] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 178.456122][ T9301] __se_sys_vmsplice+0x740/0x1490 [ 178.461150][ T9301] ? plist_del+0x3f1/0x410 [ 178.465600][ T9301] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 178.471072][ T9301] ? __pfx_futex_wake+0x10/0x10 [ 178.475984][ T9301] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.481976][ T9301] ? do_syscall_64+0x100/0x230 [ 178.486756][ T9301] ? do_syscall_64+0xb6/0x230 [ 178.491443][ T9301] do_syscall_64+0xf3/0x230 [ 178.495958][ T9301] ? clear_bhb_loop+0x35/0x90 [ 178.500640][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.506537][ T9301] RIP: 0033:0x7f07c8d85d29 [ 178.510957][ T9301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.530592][ T9301] RSP: 002b:00007f07c9c85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 178.539023][ T9301] RAX: ffffffffffffffda RBX: 00007f07c8f75fa0 RCX: 00007f07c8d85d29 [ 178.547001][ T9301] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000008 [ 178.554979][ T9301] RBP: 00007f07c8e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 178.562955][ T9301] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 178.570924][ T9301] R13: 0000000000000000 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 178.578917][ T9301] [ 178.585090][ T9299] batadv_slave_1: entered promiscuous mode [ 178.622682][ T9299] gretap0: entered promiscuous mode [ 178.628688][ T9296] IPVS: using max 22 ests per chain, 52800 per kthread [ 178.641603][ T9299] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 178.658053][ T9299] Cannot create hsr debugfs directory [ 178.668351][ T9299] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 178.684898][ T9299] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 178.769063][ T9311] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.948897][ T9322] netlink: 'syz.2.1175': attribute type 11 has an invalid length. [ 178.962218][ T9325] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 179.133482][ T9335] __nla_validate_parse: 8 callbacks suppressed [ 179.133501][ T9335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1181'. [ 179.206378][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 179.270146][ T9340] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 179.338706][ T9350] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 179.362289][ T9350] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 179.372224][ T9352] Cannot find add_set index 32768 as target [ 179.374186][ T9350] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 179.445351][ T9353] Cannot find add_set index 32768 as target [ 180.156212][ T9383] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 180.339566][ T9395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1197'. [ 180.371889][ T9397] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1201'. [ 180.577629][ T9404] xt_TCPMSS: Only works on TCP SYN packets [ 180.869365][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 181.020136][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 181.043027][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 181.151358][ T9432] xt_CT: No such helper "snmp" [ 181.291621][ T9440] sock: sock_timestamping_bind_phc: sock not bind to device [ 181.456611][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1216'. [ 181.628068][ T6741] hid-generic 0005:16C0:0058.0001: item fetching failed at offset 0/1 [ 181.685875][ T6741] hid-generic 0005:16C0:0058.0001: probe with driver hid-generic failed with error -22 [ 181.783992][ T9473] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 181.916372][ T9483] netlink: 'syz.2.1223': attribute type 11 has an invalid length. [ 181.948669][ T9483] netlink: 'syz.2.1223': attribute type 2 has an invalid length. [ 181.978742][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 182.104862][ T9494] xt_connbytes: Forcing CT accounting to be enabled [ 182.339850][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 182.540845][ T9497] openvswitch: netlink: Missing key (keys=40, expected=100) [ 183.178830][ T9531] team0: No ports can be present during mode change [ 183.378715][ T9539] dummy0: entered promiscuous mode [ 183.415056][ T9539] dummy0: left promiscuous mode [ 184.033545][ T9575] nbd: must specify an index to disconnect [ 184.167180][ T9588] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 184.215011][ T9588] bond1: entered promiscuous mode [ 184.230345][ T9588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.280814][ T9594] __nla_validate_parse: 4 callbacks suppressed [ 184.280832][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 184.310214][ T9597] Cannot find add_set index 32768 as target [ 184.900858][ T9628] FAULT_INJECTION: forcing a failure. [ 184.900858][ T9628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.927665][ T9628] CPU: 1 UID: 0 PID: 9628 Comm: syz.1.1260 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 184.938381][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 184.948440][ T9628] Call Trace: [ 184.951718][ T9628] [ 184.954653][ T9628] dump_stack_lvl+0x241/0x360 [ 184.959343][ T9628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.964549][ T9628] ? __pfx__printk+0x10/0x10 [ 184.969166][ T9628] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 184.975329][ T9628] should_fail_ex+0x3b0/0x4e0 [ 184.980014][ T9628] prepare_alloc_pages+0x1da/0x5b0 [ 184.985139][ T9628] __alloc_pages_noprof+0x16f/0x710 [ 184.990351][ T9628] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 184.996090][ T9628] alloc_pages_mpol_noprof+0x3e8/0x680 [ 185.001562][ T9628] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 185.007574][ T9628] ? alloc_pages_noprof+0xef/0x170 [ 185.012721][ T9628] get_free_pages_noprof+0xc/0x30 [ 185.017754][ T9628] kasan_populate_vmalloc_pte+0x38/0xe0 [ 185.023302][ T9628] __apply_to_page_range+0x806/0xde0 [ 185.028599][ T9628] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 185.034850][ T9628] ? __pfx___apply_to_page_range+0x10/0x10 [ 185.040669][ T9628] ? do_raw_spin_unlock+0x13c/0x8b0 [ 185.045883][ T9628] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 185.051265][ T9628] alloc_vmap_area+0x1d4e/0x2400 [ 185.056222][ T9628] ? __pfx_alloc_vmap_area+0x10/0x10 [ 185.061517][ T9628] ? __kasan_kmalloc+0x98/0xb0 [ 185.066300][ T9628] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 185.072288][ T9628] ? __get_vm_area_node+0x132/0x2d0 [ 185.077499][ T9628] ? dev_map_alloc+0x141/0x540 [ 185.082353][ T9628] __get_vm_area_node+0x1c8/0x2d0 [ 185.087413][ T9628] __vmalloc_node_range_noprof+0x344/0x1380 [ 185.093321][ T9628] ? dev_map_alloc+0x141/0x540 [ 185.098107][ T9628] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 185.104448][ T9628] ? rcu_is_watching+0x15/0xb0 [ 185.109220][ T9628] ? trace_kmalloc+0x1f/0xd0 [ 185.113813][ T9628] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 185.119276][ T9628] ? bpf_map_area_alloc+0x64/0x120 [ 185.124392][ T9628] bpf_map_area_alloc+0xfc/0x120 [ 185.129334][ T9628] ? dev_map_alloc+0x141/0x540 [ 185.134114][ T9628] dev_map_alloc+0x141/0x540 [ 185.138716][ T9628] ? ns_capable+0x8a/0xf0 [ 185.143065][ T9628] map_create+0x946/0x11c0 [ 185.147503][ T9628] __sys_bpf+0x6d1/0x810 [ 185.151776][ T9628] ? __pfx___sys_bpf+0x10/0x10 [ 185.156585][ T9628] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.162581][ T9628] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.168945][ T9628] ? do_syscall_64+0x100/0x230 [ 185.173726][ T9628] __x64_sys_bpf+0x7c/0x90 [ 185.178162][ T9628] do_syscall_64+0xf3/0x230 [ 185.182682][ T9628] ? clear_bhb_loop+0x35/0x90 [ 185.187383][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.193289][ T9628] RIP: 0033:0x7fcefd385d29 [ 185.197712][ T9628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.217343][ T9628] RSP: 002b:00007fcefe273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.225765][ T9628] RAX: ffffffffffffffda RBX: 00007fcefd575fa0 RCX: 00007fcefd385d29 [ 185.233756][ T9628] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 185.241723][ T9628] RBP: 00007fcefe273090 R08: 0000000000000000 R09: 0000000000000000 [ 185.249700][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.257674][ T9628] R13: 0000000000000001 R14: 00007fcefd575fa0 R15: 00007ffc1be6de48 [ 185.265665][ T9628] [ 185.335861][ T9632] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1262'. [ 185.540162][ T9644] netlink: 'syz.3.1264': attribute type 11 has an invalid length. [ 185.568140][ T9643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 185.597853][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 185.619915][ T9653] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 185.633293][ T9654] nbd: device at index 0 is going down [ 185.652747][ T9653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1268'. [ 185.683463][ T9653] bridge0: port 1(macvlan1) entered blocking state [ 185.696076][ T9653] bridge0: port 1(macvlan1) entered disabled state [ 185.731129][ T9653] macvlan1: entered allmulticast mode [ 185.746035][ T9653] veth1_vlan: entered allmulticast mode [ 185.777194][ T9653] macvlan1: entered promiscuous mode [ 185.951240][ T9663] netlink: 'syz.1.1270': attribute type 21 has an invalid length. [ 185.959249][ T9663] netlink: 'syz.1.1270': attribute type 6 has an invalid length. [ 185.967326][ T9663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1270'. [ 186.636537][ T9694] nbd: couldn't find a device at index 4 [ 186.867172][ T9710] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1285'. [ 186.991547][ T9719] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1288'. [ 187.130034][ T9726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.141579][ T9726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.229193][ T9726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.241559][ T9726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.354117][ T9726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.400660][ T9726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.455180][ T9742] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1296'. [ 187.464697][ T9741] nbd: device at index 0 is going down [ 187.503743][ T9726] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.514359][ T9726] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.710008][ T9726] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.742638][ T9726] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.758620][ T9726] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.782694][ T9726] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.829617][ T9726] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.838126][ T9726] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.853102][ T9726] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.861561][ T9726] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.874270][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1300'. [ 187.968207][ T9757] atomic_op ffff888034ec8998 conn xmit_atomic 0000000000000000 [ 188.033677][ T9763] x_tables: duplicate underflow at hook 1 [ 188.396317][ T9779] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 188.480728][ T9785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.139615][ T9814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1324'. [ 189.173534][ T9816] nbd: device at index 0 is going down [ 189.501480][ T9828] bond0: entered allmulticast mode [ 189.565705][ T9835] __nla_validate_parse: 1 callbacks suppressed [ 189.565725][ T9835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1333'. [ 189.974179][ T9861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1336'. [ 189.999772][ T9861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1336'. [ 190.179033][ T9873] pim6reg: entered allmulticast mode [ 190.374170][ T9877] nbd: couldn't find a device at index 2 [ 190.417677][ T9882] ax25_connect(): syz.3.1341 uses autobind, please contact jreuter@yaina.de [ 190.577922][ T9898] FAULT_INJECTION: forcing a failure. [ 190.577922][ T9898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.602106][ T9897] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1346'. [ 190.654782][ T9897] nbd: must specify an index to disconnect [ 190.662584][ T9898] CPU: 0 UID: 0 PID: 9898 Comm: syz.0.1345 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 190.673297][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 190.683373][ T9898] Call Trace: [ 190.686673][ T9898] [ 190.689628][ T9898] dump_stack_lvl+0x241/0x360 [ 190.694346][ T9898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.699577][ T9898] ? __pfx__printk+0x10/0x10 [ 190.704196][ T9898] ? __pfx_lock_release+0x10/0x10 [ 190.709263][ T9898] should_fail_ex+0x3b0/0x4e0 [ 190.713979][ T9898] _copy_from_iter+0x1e9/0x1c20 [ 190.718863][ T9898] ? __virt_addr_valid+0x183/0x530 [ 190.724009][ T9898] ? __alloc_skb+0x28f/0x440 [ 190.728627][ T9898] ? __pfx__copy_from_iter+0x10/0x10 [ 190.733942][ T9898] ? __virt_addr_valid+0x183/0x530 [ 190.739090][ T9898] ? __virt_addr_valid+0x183/0x530 [ 190.744244][ T9898] ? __virt_addr_valid+0x45f/0x530 [ 190.749390][ T9898] ? __phys_addr_symbol+0x2f/0x70 [ 190.754465][ T9898] ? __check_object_size+0x47a/0x730 [ 190.759798][ T9898] netlink_sendmsg+0x73d/0xcb0 [ 190.764606][ T9898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.769940][ T9898] ? aa_sock_msg_perm+0x91/0x160 [ 190.774916][ T9898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.780235][ T9898] __sock_sendmsg+0x221/0x270 [ 190.784965][ T9898] ____sys_sendmsg+0x52a/0x7e0 [ 190.789776][ T9898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.795094][ T9898] ? __fget_files+0x2a/0x410 [ 190.799727][ T9898] ? __fget_files+0x2a/0x410 [ 190.804358][ T9898] __sys_sendmsg+0x269/0x350 [ 190.808982][ T9898] ? __pfx_lock_release+0x10/0x10 [ 190.814036][ T9898] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.819184][ T9898] ? __pfx_vfs_write+0x10/0x10 [ 190.823999][ T9898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.830362][ T9898] ? do_syscall_64+0x100/0x230 [ 190.835164][ T9898] ? do_syscall_64+0xb6/0x230 [ 190.839883][ T9898] do_syscall_64+0xf3/0x230 [ 190.844414][ T9898] ? clear_bhb_loop+0x35/0x90 [ 190.849122][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.855048][ T9898] RIP: 0033:0x7fcf8d585d29 [ 190.859492][ T9898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.879119][ T9898] RSP: 002b:00007fcf8d3f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.887565][ T9898] RAX: ffffffffffffffda RBX: 00007fcf8d775fa0 RCX: 00007fcf8d585d29 [ 190.895562][ T9898] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 190.903559][ T9898] RBP: 00007fcf8d3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 190.911554][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.919542][ T9898] R13: 0000000000000000 R14: 00007fcf8d775fa0 R15: 00007ffec2dc7338 [ 190.927550][ T9898] [ 191.322747][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 191.323130][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 191.329518][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 191.384058][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 191.406538][ T9925] FAULT_INJECTION: forcing a failure. [ 191.406538][ T9925] name failslab, interval 1, probability 0, space 0, times 0 [ 191.419233][ T9925] CPU: 0 UID: 0 PID: 9925 Comm: syz.0.1354 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 191.429929][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 191.440008][ T9925] Call Trace: [ 191.443311][ T9925] [ 191.446280][ T9925] dump_stack_lvl+0x241/0x360 [ 191.451007][ T9925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.456250][ T9925] ? __pfx__printk+0x10/0x10 [ 191.460886][ T9925] should_fail_ex+0x3b0/0x4e0 [ 191.465600][ T9925] should_failslab+0xac/0x100 [ 191.470329][ T9925] ? skb_clone+0x20c/0x390 [ 191.474895][ T9925] kmem_cache_alloc_noprof+0x70/0x380 [ 191.480328][ T9925] skb_clone+0x20c/0x390 [ 191.484612][ T9925] bpf_clone_redirect+0xab/0x3d0 [ 191.489594][ T9925] bpf_prog_208b094576c80b22+0x5f/0x64 [ 191.495084][ T9925] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.501105][ T9925] ? bpf_test_run+0x370/0xa90 [ 191.505814][ T9925] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 191.511582][ T9925] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.517928][ T9925] ? bpf_test_run+0x370/0xa90 [ 191.522616][ T9925] ? __pfx___cant_migrate+0x10/0x10 [ 191.527814][ T9925] ? bpf_test_run+0x370/0xa90 [ 191.532496][ T9925] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 191.538249][ T9925] ? bpf_test_timer_continue+0x11a/0x350 [ 191.543911][ T9925] bpf_test_run+0x4f0/0xa90 [ 191.548426][ T9925] ? bpf_test_run+0x370/0xa90 [ 191.553130][ T9925] ? __pfx_bpf_test_run+0x10/0x10 [ 191.558176][ T9925] ? __pfx_eth_type_trans+0x10/0x10 [ 191.563383][ T9925] ? convert___skb_to_skb+0x41/0x620 [ 191.568782][ T9925] bpf_prog_test_run_skb+0xca2/0x1820 [ 191.574177][ T9925] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 191.579986][ T9925] ? __fget_files+0x2a/0x410 [ 191.584582][ T9925] ? fput+0x21b/0x290 [ 191.588568][ T9925] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 191.594379][ T9925] bpf_prog_test_run+0x2e4/0x360 [ 191.599338][ T9925] __sys_bpf+0x48d/0x810 [ 191.603586][ T9925] ? __pfx___sys_bpf+0x10/0x10 [ 191.608362][ T9925] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.614354][ T9925] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.620689][ T9925] ? do_syscall_64+0x100/0x230 [ 191.625468][ T9925] __x64_sys_bpf+0x7c/0x90 [ 191.629903][ T9925] do_syscall_64+0xf3/0x230 [ 191.634412][ T9925] ? clear_bhb_loop+0x35/0x90 [ 191.639105][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.645010][ T9925] RIP: 0033:0x7fcf8d585d29 [ 191.649439][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.669064][ T9925] RSP: 002b:00007fcf8d3f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.677496][ T9925] RAX: ffffffffffffffda RBX: 00007fcf8d775fa0 RCX: 00007fcf8d585d29 [ 191.685482][ T9925] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 000000000000000a [ 191.693460][ T9925] RBP: 00007fcf8d3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 191.701432][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.709405][ T9925] R13: 0000000000000000 R14: 00007fcf8d775fa0 R15: 00007ffec2dc7338 [ 191.717400][ T9925] [ 191.916901][ T9934] bridge2: entered promiscuous mode [ 191.964403][ T9934] bridge2: entered allmulticast mode [ 191.999936][ T9934] team0: Port device bridge2 added [ 192.088230][ T9934] bridge0: port 2(ip6gretap0) entered blocking state [ 192.112752][ T9934] bridge0: port 2(ip6gretap0) entered disabled state [ 192.126453][ T9934] ip6gretap0: entered allmulticast mode [ 192.140179][ T9934] ip6gretap0: left allmulticast mode [ 192.332758][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1362'. [ 192.481871][ T9969] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1368'. [ 192.495771][ T9969] netlink: zone id is out of range [ 192.501023][ T9969] netlink: zone id is out of range [ 192.509189][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1367'. [ 192.518351][ T9969] netlink: get zone limit has 8 unknown bytes [ 192.528573][ T9969] netlink: zone id is out of range [ 192.542680][ T9969] netlink: zone id is out of range [ 192.547838][ T9969] netlink: zone id is out of range [ 192.562563][ T9969] netlink: zone id is out of range [ 192.567781][ T9969] netlink: zone id is out of range [ 192.584175][ T9969] netlink: zone id is out of range [ 192.599431][ T9969] netlink: set zone limit has 8 unknown bytes [ 192.969371][ T9991] netlink: 'syz.3.1376': attribute type 10 has an invalid length. [ 193.003395][ T9991] batman_adv: batadv0: Adding interface: team0 [ 193.009581][ T9991] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.038858][ T9991] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 193.270168][T10003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.311458][T10009] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 193.552158][T10003] bond2 (unregistering): Released all slaves [ 193.639131][T10025] Cannot find add_set index 32768 as target [ 193.864230][T10037] nbd: couldn't find a device at index 2 [ 194.274720][T10054] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1398'. [ 194.305724][T10054] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1398'. [ 194.384428][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.390850][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.656435][T10064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.705156][T10059] __nla_validate_parse: 1 callbacks suppressed [ 194.705176][T10059] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1400'. [ 194.772466][T10073] netlink: 'syz.2.1407': attribute type 10 has an invalid length. [ 194.783554][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.784934][T10074] nbd: couldn't find a device at index 3 [ 194.790668][T10073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.823907][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.841821][T10073] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.853827][T10073] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 194.909131][T10078] SET target dimension over the limit! [ 194.958034][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 194.986004][T10073] netlink: 'syz.2.1407': attribute type 2 has an invalid length. [ 195.022679][T10073] netlink: 'syz.2.1407': attribute type 9 has an invalid length. [ 195.030907][T10073] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1407'. [ 195.219927][T10092] Cannot find add_set index 32768 as target [ 195.322949][ T54] Bluetooth: hci0: command tx timeout [ 195.458479][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 195.475619][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 195.619815][T10104] FAULT_INJECTION: forcing a failure. [ 195.619815][T10104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.663696][T10104] CPU: 1 UID: 0 PID: 10104 Comm: syz.0.1417 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 195.674507][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 195.684586][T10104] Call Trace: [ 195.687886][T10104] [ 195.690841][T10104] dump_stack_lvl+0x241/0x360 [ 195.695560][T10104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.700798][T10104] ? __pfx__printk+0x10/0x10 [ 195.705430][T10104] ? __pfx_lock_release+0x10/0x10 [ 195.710501][T10104] should_fail_ex+0x3b0/0x4e0 [ 195.715219][T10104] _copy_from_user+0x2f/0xc0 [ 195.719850][T10104] copy_msghdr_from_user+0xae/0x680 [ 195.725082][T10104] ? __pfx___might_resched+0x10/0x10 [ 195.730417][T10104] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.736261][T10104] ? do_recvmmsg+0x44e/0xab0 [ 195.740878][T10104] ? __might_fault+0xaa/0x120 [ 195.745591][T10104] do_recvmmsg+0x3bd/0xab0 [ 195.750064][T10104] ? __pfx_do_recvmmsg+0x10/0x10 [ 195.755070][T10104] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 195.761018][T10104] ? ksys_write+0x22a/0x2b0 [ 195.765548][T10104] ? __pfx_lock_release+0x10/0x10 [ 195.770621][T10104] ? vfs_write+0x730/0xd30 [ 195.775055][T10104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.781046][T10104] ? __fget_files+0x2a/0x410 [ 195.785663][T10104] __x64_sys_recvmmsg+0x199/0x250 [ 195.790709][T10104] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 195.796271][T10104] ? do_syscall_64+0x100/0x230 [ 195.801049][T10104] ? do_syscall_64+0xb6/0x230 [ 195.805742][T10104] do_syscall_64+0xf3/0x230 [ 195.810259][T10104] ? clear_bhb_loop+0x35/0x90 [ 195.814955][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.820860][T10104] RIP: 0033:0x7fcf8d585d29 [ 195.825284][T10104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.844900][T10104] RSP: 002b:00007fcf8d3f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 195.853329][T10104] RAX: ffffffffffffffda RBX: 00007fcf8d775fa0 RCX: 00007fcf8d585d29 [ 195.861311][T10104] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000003 [ 195.869289][T10104] RBP: 00007fcf8d3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 195.877259][T10104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.885232][T10104] R13: 0000000000000000 R14: 00007fcf8d775fa0 R15: 00007ffec2dc7338 [ 195.893223][T10104] [ 196.033713][T10112] nbd: couldn't find a device at index 3 [ 196.040351][T10121] siw: device registration error -23 [ 196.065543][T10118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1421'. [ 196.096671][T10118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1421'. [ 196.335097][T10128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1425'. [ 196.349760][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 196.360724][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 196.370297][T10134] netlink: 'syz.0.1424': attribute type 7 has an invalid length. [ 196.403104][T10136] FAULT_INJECTION: forcing a failure. [ 196.403104][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 196.415962][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.3.1426 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 196.426757][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 196.436841][T10136] Call Trace: [ 196.440144][T10136] [ 196.443098][T10136] dump_stack_lvl+0x241/0x360 [ 196.447798][T10136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.453003][T10136] ? __pfx__printk+0x10/0x10 [ 196.457603][T10136] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 196.464115][T10136] ? __pfx___might_resched+0x10/0x10 [ 196.469422][T10136] should_fail_ex+0x3b0/0x4e0 [ 196.474118][T10136] should_failslab+0xac/0x100 [ 196.478830][T10136] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 196.485187][T10136] ? __kernfs_new_node+0x9d/0x870 [ 196.490218][T10136] ? __pfx_validate_chain+0x10/0x10 [ 196.495429][T10136] kstrdup+0x39/0xb0 [ 196.499356][T10136] __kernfs_new_node+0x9d/0x870 [ 196.504228][T10136] ? mark_lock+0x9a/0x360 [ 196.508569][T10136] ? __lock_acquire+0x1397/0x2100 [ 196.513612][T10136] ? __pfx___kernfs_new_node+0x10/0x10 [ 196.519097][T10136] kernfs_new_node+0x137/0x240 [ 196.523871][T10136] kernfs_create_dir_ns+0x43/0x120 [ 196.529012][T10136] sysfs_create_dir_ns+0x189/0x3a0 [ 196.534121][T10136] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 196.539778][T10136] kobject_add_internal+0x435/0x8d0 [ 196.545022][T10136] kobject_add+0x152/0x220 [ 196.549488][T10136] ? kobject_put+0x43d/0x480 [ 196.554087][T10136] ? __pfx_kobject_add+0x10/0x10 [ 196.559059][T10136] ? get_device_parent+0x25d/0x410 [ 196.564215][T10136] ? device_add+0x318/0xbf0 [ 196.568729][T10136] device_add+0x4e5/0xbf0 [ 196.573079][T10136] ? device_initialize+0x266/0x460 [ 196.578227][T10136] wakeup_source_sysfs_add+0x1aa/0x270 [ 196.583707][T10136] wakeup_source_register+0x171/0x250 [ 196.589097][T10136] ep_insert+0xe94/0x1ab0 [ 196.593465][T10136] ? __pfx_ep_insert+0x10/0x10 [ 196.598284][T10136] ? bpf_lsm_capable+0x9/0x10 [ 196.603031][T10136] do_epoll_ctl+0x8bc/0xf80 [ 196.607605][T10136] __x64_sys_epoll_ctl+0x161/0x1a0 [ 196.612737][T10136] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 196.618375][T10136] ? do_syscall_64+0x100/0x230 [ 196.623174][T10136] ? do_syscall_64+0xb6/0x230 [ 196.627887][T10136] do_syscall_64+0xf3/0x230 [ 196.632424][T10136] ? clear_bhb_loop+0x35/0x90 [ 196.637176][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.643108][T10136] RIP: 0033:0x7fa417b85d29 [ 196.647530][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.667141][T10136] RSP: 002b:00007fa41896f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 196.675573][T10136] RAX: ffffffffffffffda RBX: 00007fa417d76080 RCX: 00007fa417b85d29 [ 196.683566][T10136] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 196.691539][T10136] RBP: 00007fa41896f090 R08: 0000000000000000 R09: 0000000000000000 [ 196.699514][T10136] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000002 [ 196.707486][T10136] R13: 0000000000000000 R14: 00007fa417d76080 R15: 00007ffdace81048 [ 196.715476][T10136] [ 196.729163][T10136] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 197.153640][T10158] xt_hashlimit: max too large, truncated to 1048576 [ 197.442429][T10163] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 197.541348][T10177] FAULT_INJECTION: forcing a failure. [ 197.541348][T10177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.556327][T10177] CPU: 1 UID: 0 PID: 10177 Comm: syz.3.1441 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 197.567129][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 197.577211][T10177] Call Trace: [ 197.580513][T10177] [ 197.583468][T10177] dump_stack_lvl+0x241/0x360 [ 197.588192][T10177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.593455][T10177] ? __pfx__printk+0x10/0x10 [ 197.598100][T10177] ? __pfx_lock_release+0x10/0x10 [ 197.603154][T10177] should_fail_ex+0x3b0/0x4e0 [ 197.604318][T10175] netlink: 'syz.2.1440': attribute type 11 has an invalid length. [ 197.607854][T10177] _copy_from_user+0x2f/0xc0 [ 197.607895][T10177] ____sys_sendmsg+0x2ef/0x7e0 [ 197.607934][T10177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.630390][T10177] ? __fget_files+0x2a/0x410 [ 197.635032][T10177] ? __fget_files+0x2a/0x410 [ 197.639677][T10177] __sys_sendmmsg+0x36a/0x720 [ 197.644407][T10177] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.649757][T10177] ? __pfx_lock_release+0x10/0x10 [ 197.654815][T10177] ? kstrtouint_from_user+0x128/0x190 [ 197.660254][T10177] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 197.666195][T10177] ? ksys_write+0x22a/0x2b0 [ 197.670729][T10177] ? __pfx_lock_release+0x10/0x10 [ 197.675806][T10177] ? vfs_write+0x730/0xd30 [ 197.680267][T10177] ? __mutex_unlock_slowpath+0x21e/0x790 [ 197.685981][T10177] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.692009][T10177] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.698378][T10177] ? do_syscall_64+0x100/0x230 [ 197.703182][T10177] __x64_sys_sendmmsg+0xa0/0xb0 [ 197.708076][T10177] do_syscall_64+0xf3/0x230 [ 197.712617][T10177] ? clear_bhb_loop+0x35/0x90 [ 197.717422][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.723345][T10177] RIP: 0033:0x7fa417b85d29 [ 197.727795][T10177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.747422][T10177] RSP: 002b:00007fa418990038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.755850][T10177] RAX: ffffffffffffffda RBX: 00007fa417d75fa0 RCX: 00007fa417b85d29 [ 197.763834][T10177] RDX: 0000000000000001 RSI: 0000000020000ac0 RDI: 0000000000000003 [ 197.771808][T10177] RBP: 00007fa418990090 R08: 0000000000000000 R09: 0000000000000000 [ 197.779784][T10177] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.787761][T10177] R13: 0000000000000000 R14: 00007fa417d75fa0 R15: 00007ffdace81048 [ 197.795795][T10177] [ 198.076931][T10194] syz.0.1446[10194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.077000][T10194] syz.0.1446[10194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.098924][T10194] syz.0.1446[10194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.118175][T10194] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 198.738817][T10221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 198.778494][T10224] netlink: 'syz.0.1459': attribute type 7 has an invalid length. [ 198.788708][T10224] netlink: 'syz.0.1459': attribute type 8 has an invalid length. [ 198.938105][T10230] vlan2: entered allmulticast mode [ 198.963701][T10230] bond0: entered allmulticast mode [ 198.972291][T10230] bond0: left allmulticast mode [ 199.505849][T10255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.519644][T10255] bond0: (slave bond2): Enslaving as an active interface with an up link [ 199.901727][T10274] infiniband syz1: set active [ 199.910648][T10274] infiniband syz1: added team_slave_0 [ 199.977741][T10274] RDS/IB: syz1: added [ 199.996849][T10274] smc: adding ib device syz1 with port count 1 [ 200.023701][T10274] smc: ib device syz1 port 1 has pnetid [ 200.248364][T10288] __nla_validate_parse: 12 callbacks suppressed [ 200.248386][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 200.376863][T10287] syz.3.1479 uses old SIOCAX25GETINFO [ 200.661726][T10301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1483'. [ 200.725740][T10301] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1483'. [ 200.784920][T10309] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1486'. [ 200.950793][T10314] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 201.353715][T10330] netlink: 'syz.4.1493': attribute type 15 has an invalid length. [ 201.620607][T10341] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1499'. [ 201.631644][T10341] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 201.639485][T10341] netlink: 'syz.4.1499': attribute type 2 has an invalid length. [ 203.409618][T10355] netlink: 'syz.1.1502': attribute type 6 has an invalid length. [ 203.676597][T10367] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:0 [ 203.693268][T10368] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 203.744539][T10371] Cannot find add_set index 32768 as target [ 203.752882][T10368] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 203.802650][T10368] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 203.866707][T10374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.943208][T10374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.971268][T10384] xt_l2tp: missing protocol rule (udp|l2tpip) [ 204.005160][T10374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.466968][T10397] IPv6: sit1: Disabled Multicast RS [ 204.699853][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 204.737163][T10410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.794258][T10410] batadv_slave_0: entered promiscuous mode [ 204.810614][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 204.831432][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 204.852668][T10410] net_ratelimit: 1 callbacks suppressed [ 204.852686][T10410] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 204.869425][T10412] FAULT_INJECTION: forcing a failure. [ 204.869425][T10412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.919659][T10412] CPU: 1 UID: 0 PID: 10412 Comm: syz.0.1522 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 204.930456][T10412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 204.940538][T10412] Call Trace: [ 204.943831][T10412] [ 204.946773][T10412] dump_stack_lvl+0x241/0x360 [ 204.951486][T10412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.956743][T10412] ? __pfx__printk+0x10/0x10 [ 204.961371][T10412] ? __pfx_lock_release+0x10/0x10 [ 204.966432][T10412] should_fail_ex+0x3b0/0x4e0 [ 204.971127][T10412] _copy_from_user+0x2f/0xc0 [ 204.975753][T10412] copy_msghdr_from_user+0xae/0x680 [ 204.980997][T10412] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 204.986834][T10412] ? __fget_files+0x2a/0x410 [ 204.991469][T10412] ? __fget_files+0x2a/0x410 [ 204.996094][T10412] __sys_sendmsg+0x209/0x350 [ 205.000722][T10412] ? __pfx_lock_release+0x10/0x10 [ 205.005779][T10412] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.010931][T10412] ? __pfx_vfs_write+0x10/0x10 [ 205.015748][T10412] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.022107][T10412] ? do_syscall_64+0x100/0x230 [ 205.026893][T10412] ? do_syscall_64+0xb6/0x230 [ 205.031576][T10412] do_syscall_64+0xf3/0x230 [ 205.036080][T10412] ? clear_bhb_loop+0x35/0x90 [ 205.040763][T10412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.046655][T10412] RIP: 0033:0x7fcf8d585d29 [ 205.051075][T10412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.070683][T10412] RSP: 002b:00007fcf8d3f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.079101][T10412] RAX: ffffffffffffffda RBX: 00007fcf8d775fa0 RCX: 00007fcf8d585d29 [ 205.087076][T10412] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 205.095050][T10412] RBP: 00007fcf8d3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 205.103031][T10412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.111003][T10412] R13: 0000000000000000 R14: 00007fcf8d775fa0 R15: 00007ffec2dc7338 [ 205.118985][T10412] [ 205.543747][T10436] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 205.579698][T10438] siw: device registration error -23 [ 205.615791][T10424] veth0_to_team: left promiscuous mode [ 205.616618][T10440] siw: device registration error -23 [ 205.637103][T10424] veth0_to_team: left allmulticast mode [ 205.777955][T10446] netlink: 'syz.3.1533': attribute type 2 has an invalid length. [ 205.790319][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 205.987448][T10424] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.996239][T10424] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.005482][T10424] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.014490][T10424] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.049414][T10424] vlan2: left allmulticast mode [ 206.056379][T10424] gretap1: left allmulticast mode [ 206.067720][T10424] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.076940][T10424] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.085822][T10424] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.094936][T10424] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.135979][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 206.294271][T10458] FAULT_INJECTION: forcing a failure. [ 206.294271][T10458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.331287][T10458] CPU: 0 UID: 0 PID: 10458 Comm: syz.2.1537 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 206.342099][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 206.352160][T10458] Call Trace: [ 206.355451][T10458] [ 206.358403][T10458] dump_stack_lvl+0x241/0x360 [ 206.363121][T10458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.368357][T10458] ? __pfx__printk+0x10/0x10 [ 206.372985][T10458] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.379189][T10458] should_fail_ex+0x3b0/0x4e0 [ 206.383899][T10458] prepare_alloc_pages+0x1da/0x5b0 [ 206.389050][T10458] __alloc_pages_noprof+0x16f/0x710 [ 206.394279][T10458] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 206.400036][T10458] alloc_pages_mpol_noprof+0x3e8/0x680 [ 206.405522][T10458] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 206.411513][T10458] ? alloc_pages_noprof+0xef/0x170 [ 206.416659][T10458] get_free_pages_noprof+0xc/0x30 [ 206.421707][T10458] kasan_populate_vmalloc_pte+0x38/0xe0 [ 206.427276][T10458] __apply_to_page_range+0x806/0xde0 [ 206.432602][T10458] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 206.438871][T10458] ? __pfx___apply_to_page_range+0x10/0x10 [ 206.444710][T10458] ? do_raw_spin_unlock+0x13c/0x8b0 [ 206.449967][T10458] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 206.455384][T10458] alloc_vmap_area+0x1d4e/0x2400 [ 206.460366][T10458] ? __pfx_alloc_vmap_area+0x10/0x10 [ 206.465675][T10458] ? __kasan_kmalloc+0x98/0xb0 [ 206.470449][T10458] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 206.476440][T10458] ? __get_vm_area_node+0x132/0x2d0 [ 206.481648][T10458] ? dev_map_alloc+0x141/0x540 [ 206.486414][T10458] __get_vm_area_node+0x1c8/0x2d0 [ 206.491457][T10458] __vmalloc_node_range_noprof+0x344/0x1380 [ 206.497356][T10458] ? dev_map_alloc+0x141/0x540 [ 206.502146][T10458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.508494][T10458] ? rcu_is_watching+0x15/0xb0 [ 206.513274][T10458] ? trace_kmalloc+0x1f/0xd0 [ 206.517875][T10458] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 206.523346][T10458] ? bpf_map_area_alloc+0x64/0x120 [ 206.528464][T10458] bpf_map_area_alloc+0xfc/0x120 [ 206.533403][T10458] ? dev_map_alloc+0x141/0x540 [ 206.538164][T10458] dev_map_alloc+0x141/0x540 [ 206.542753][T10458] ? ns_capable+0x8a/0xf0 [ 206.547101][T10458] map_create+0x946/0x11c0 [ 206.551527][T10458] __sys_bpf+0x6d1/0x810 [ 206.555776][T10458] ? __pfx___sys_bpf+0x10/0x10 [ 206.560558][T10458] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 206.566561][T10458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.572908][T10458] ? do_syscall_64+0x100/0x230 [ 206.577693][T10458] __x64_sys_bpf+0x7c/0x90 [ 206.582118][T10458] do_syscall_64+0xf3/0x230 [ 206.586626][T10458] ? clear_bhb_loop+0x35/0x90 [ 206.591313][T10458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.597212][T10458] RIP: 0033:0x7f07c8d85d29 [ 206.601631][T10458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.621246][T10458] RSP: 002b:00007f07c9c85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.629661][T10458] RAX: ffffffffffffffda RBX: 00007f07c8f75fa0 RCX: 00007f07c8d85d29 [ 206.637631][T10458] RDX: 0000000000000048 RSI: 0000000020000580 RDI: 0000000000000000 [ 206.645601][T10458] RBP: 00007f07c9c85090 R08: 0000000000000000 R09: 0000000000000000 [ 206.653572][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.661540][T10458] R13: 0000000000000001 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 206.669529][T10458] [ 206.722434][T10460] siw: device registration error -23 [ 207.021057][T10477] FAULT_INJECTION: forcing a failure. [ 207.021057][T10477] name failslab, interval 1, probability 0, space 0, times 0 [ 207.058438][T10481] siw: device registration error -23 [ 207.081387][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.2.1544 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 207.092197][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 207.102292][T10477] Call Trace: [ 207.105591][T10477] [ 207.108524][T10477] dump_stack_lvl+0x241/0x360 [ 207.113215][T10477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.118426][T10477] ? __pfx__printk+0x10/0x10 [ 207.123123][T10477] ? kmem_cache_alloc_noprof+0x48/0x380 [ 207.128795][T10477] ? __pfx___might_resched+0x10/0x10 [ 207.134097][T10477] should_fail_ex+0x3b0/0x4e0 [ 207.138797][T10477] should_failslab+0xac/0x100 [ 207.143508][T10477] ? getname_kernel+0x59/0x2f0 [ 207.148300][T10477] kmem_cache_alloc_noprof+0x70/0x380 [ 207.153698][T10477] getname_kernel+0x59/0x2f0 [ 207.158294][T10477] kern_path+0x1d/0x50 [ 207.162373][T10477] unix_find_other+0x123/0x910 [ 207.167147][T10477] ? __pfx___alloc_skb+0x10/0x10 [ 207.172091][T10477] ? __pfx_unix_find_other+0x10/0x10 [ 207.177400][T10477] ? sock_wmalloc+0xc3/0x120 [ 207.182000][T10477] unix_stream_connect+0x3a5/0x1070 [ 207.187243][T10477] ? __might_fault+0xaa/0x120 [ 207.191955][T10477] ? __pfx_unix_stream_connect+0x10/0x10 [ 207.197625][T10477] __sys_connect+0x288/0x2d0 [ 207.202245][T10477] ? __fget_files+0x2a/0x410 [ 207.206864][T10477] ? __pfx___sys_connect+0x10/0x10 [ 207.211991][T10477] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.218324][T10477] ? do_syscall_64+0x100/0x230 [ 207.223093][T10477] __x64_sys_connect+0x7a/0x90 [ 207.227856][T10477] do_syscall_64+0xf3/0x230 [ 207.232359][T10477] ? clear_bhb_loop+0x35/0x90 [ 207.237055][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.242980][T10477] RIP: 0033:0x7f07c8d85d29 [ 207.247427][T10477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.267066][T10477] RSP: 002b:00007f07c9c85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 207.268924][T10486] sch_fq: defrate 0 ignored. [ 207.275500][T10477] RAX: ffffffffffffffda RBX: 00007f07c8f75fa0 RCX: 00007f07c8d85d29 [ 207.275524][T10477] RDX: 000000000000006e RSI: 0000000020000280 RDI: 0000000000000006 [ 207.275541][T10477] RBP: 00007f07c9c85090 R08: 0000000000000000 R09: 0000000000000000 [ 207.275557][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.275572][T10477] R13: 0000000000000000 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 207.275606][T10477] [ 207.369959][T10489] erspan1: entered promiscuous mode [ 207.398796][T10489] erspan1: entered allmulticast mode [ 207.443207][T10497] FAULT_INJECTION: forcing a failure. [ 207.443207][T10497] name failslab, interval 1, probability 0, space 0, times 0 [ 207.456368][T10497] CPU: 0 UID: 0 PID: 10497 Comm: syz.2.1552 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 207.467168][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 207.477251][T10497] Call Trace: [ 207.480546][T10497] [ 207.483494][T10497] dump_stack_lvl+0x241/0x360 [ 207.488197][T10497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.493414][T10497] ? __pfx__printk+0x10/0x10 [ 207.498014][T10497] ? __kmalloc_cache_noprof+0x48/0x390 [ 207.503486][T10497] ? __pfx___might_resched+0x10/0x10 [ 207.508777][T10497] ? dev_add_physical_location+0x119/0x460 [ 207.514599][T10497] should_fail_ex+0x3b0/0x4e0 [ 207.519283][T10497] should_failslab+0xac/0x100 [ 207.523969][T10497] __kmalloc_cache_noprof+0x70/0x390 [ 207.529342][T10497] ? kobject_uevent_env+0x28b/0x8e0 [ 207.534578][T10497] ? __pfx_dev_uevent_name+0x10/0x10 [ 207.539887][T10497] kobject_uevent_env+0x28b/0x8e0 [ 207.544930][T10497] ? bus_add_device+0xde/0x460 [ 207.549738][T10497] device_add+0x63b/0xbf0 [ 207.554084][T10497] wakeup_source_sysfs_add+0x1aa/0x270 [ 207.559556][T10497] wakeup_source_register+0x171/0x250 [ 207.564969][T10497] ep_insert+0xe94/0x1ab0 [ 207.569323][T10497] ? __pfx_ep_insert+0x10/0x10 [ 207.574110][T10497] ? bpf_lsm_capable+0x9/0x10 [ 207.578803][T10497] do_epoll_ctl+0x8bc/0xf80 [ 207.583317][T10497] __x64_sys_epoll_ctl+0x161/0x1a0 [ 207.588438][T10497] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 207.594082][T10497] ? do_syscall_64+0x100/0x230 [ 207.598874][T10497] ? do_syscall_64+0xb6/0x230 [ 207.603565][T10497] do_syscall_64+0xf3/0x230 [ 207.608083][T10497] ? clear_bhb_loop+0x35/0x90 [ 207.612781][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.618697][T10497] RIP: 0033:0x7f07c8d85d29 [ 207.623120][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.642743][T10497] RSP: 002b:00007f07c9c85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 207.651199][T10497] RAX: ffffffffffffffda RBX: 00007f07c8f75fa0 RCX: 00007f07c8d85d29 [ 207.659183][T10497] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 207.667167][T10497] RBP: 00007f07c9c85090 R08: 0000000000000000 R09: 0000000000000000 [ 207.675148][T10497] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 207.683136][T10497] R13: 0000000000000000 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 207.691131][T10497] [ 207.736675][T10489] netlink: 'syz.0.1549': attribute type 21 has an invalid length. [ 207.745553][T10489] netlink: 'syz.0.1549': attribute type 6 has an invalid length. [ 207.759197][T10489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1549'. [ 207.841910][T10499] FAULT_INJECTION: forcing a failure. [ 207.841910][T10499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.872460][T10499] CPU: 1 UID: 0 PID: 10499 Comm: syz.1.1553 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 207.883270][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 207.893354][T10499] Call Trace: [ 207.896650][T10499] [ 207.899619][T10499] dump_stack_lvl+0x241/0x360 [ 207.904337][T10499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.909576][T10499] ? __pfx__printk+0x10/0x10 [ 207.914207][T10499] ? snprintf+0xda/0x120 [ 207.918516][T10499] should_fail_ex+0x3b0/0x4e0 [ 207.923223][T10499] _copy_to_user+0x31/0xb0 [ 207.927675][T10499] simple_read_from_buffer+0xca/0x150 [ 207.933074][T10499] proc_fail_nth_read+0x1e9/0x250 [ 207.938128][T10499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.943708][T10499] ? rw_verify_area+0x55e/0x6f0 [ 207.948579][T10499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.954155][T10499] vfs_read+0x1fc/0xb70 [ 207.958339][T10499] ? __pfx___mutex_lock+0x10/0x10 [ 207.963386][T10499] ? __pfx_vfs_read+0x10/0x10 [ 207.968083][T10499] ? __fget_files+0x2a/0x410 [ 207.972699][T10499] ? __fget_files+0x395/0x410 [ 207.977404][T10499] ? __fget_files+0x2a/0x410 [ 207.982027][T10499] ksys_read+0x18f/0x2b0 [ 207.986313][T10499] ? __pfx_ksys_read+0x10/0x10 [ 207.991097][T10499] ? do_syscall_64+0x100/0x230 [ 207.995891][T10499] ? do_syscall_64+0xb6/0x230 [ 208.000617][T10499] do_syscall_64+0xf3/0x230 [ 208.005155][T10499] ? clear_bhb_loop+0x35/0x90 [ 208.009868][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.015789][T10499] RIP: 0033:0x7fcefd38473c [ 208.020245][T10499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.039874][T10499] RSP: 002b:00007fcefe273030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.048315][T10499] RAX: ffffffffffffffda RBX: 00007fcefd575fa0 RCX: 00007fcefd38473c [ 208.056308][T10499] RDX: 000000000000000f RSI: 00007fcefe2730a0 RDI: 0000000000000004 [ 208.064304][T10499] RBP: 00007fcefe273090 R08: 0000000000000000 R09: 0000000000000000 [ 208.072305][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.080306][T10499] R13: 0000000000000000 R14: 00007fcefd575fa0 R15: 00007ffc1be6de48 [ 208.088324][T10499] [ 208.311397][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'. [ 208.339661][T10511] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.524486][T10520] FAULT_INJECTION: forcing a failure. [ 208.524486][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 208.579995][T10520] CPU: 1 UID: 0 PID: 10520 Comm: syz.3.1561 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 208.590809][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 208.593876][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 208.600866][T10520] Call Trace: [ 208.600878][T10520] [ 208.600893][T10520] dump_stack_lvl+0x241/0x360 [ 208.600931][T10520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.610014][T10522] nbd: couldn't find device at index 0 [ 208.613114][T10520] ? __pfx__printk+0x10/0x10 [ 208.613150][T10520] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 208.641407][T10520] ? __pfx___might_resched+0x10/0x10 [ 208.646720][T10520] should_fail_ex+0x3b0/0x4e0 [ 208.651430][T10520] should_failslab+0xac/0x100 [ 208.656142][T10520] __kmalloc_node_noprof+0xe1/0x4d0 [ 208.661384][T10520] ? __kvmalloc_node_noprof+0x72/0x190 [ 208.666894][T10520] __kvmalloc_node_noprof+0x72/0x190 [ 208.672206][T10520] nf_tables_newchain+0x22eb/0x3310 [ 208.677460][T10520] ? __pfx_nf_tables_newchain+0x10/0x10 [ 208.683061][T10520] ? __pfx_lock_acquire+0x10/0x10 [ 208.688119][T10520] ? nfnl_pernet+0x23/0x240 [ 208.692686][T10520] ? __nla_parse+0x40/0x60 [ 208.697145][T10520] nfnetlink_rcv+0x14e3/0x2ab0 [ 208.701962][T10520] ? __pfx_validate_chain+0x10/0x10 [ 208.707225][T10520] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 208.712383][T10520] ? __lock_acquire+0x1397/0x2100 [ 208.717471][T10520] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.722702][T10520] ? __pfx_lock_release+0x10/0x10 [ 208.727768][T10520] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.732997][T10520] netlink_unicast+0x7f6/0x990 [ 208.737796][T10520] ? __pfx_netlink_unicast+0x10/0x10 [ 208.743107][T10520] ? __virt_addr_valid+0x45f/0x530 [ 208.748252][T10520] ? __phys_addr_symbol+0x2f/0x70 [ 208.753305][T10520] ? __check_object_size+0x47a/0x730 [ 208.758621][T10520] netlink_sendmsg+0x8e4/0xcb0 [ 208.763427][T10520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.768743][T10520] ? aa_sock_msg_perm+0x91/0x160 [ 208.773707][T10520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.779015][T10520] __sock_sendmsg+0x221/0x270 [ 208.783728][T10520] ____sys_sendmsg+0x52a/0x7e0 [ 208.788550][T10520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.793877][T10520] ? __fget_files+0x2a/0x410 [ 208.798521][T10520] ? __fget_files+0x2a/0x410 [ 208.803143][T10526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1564'. [ 208.803162][T10520] __sys_sendmsg+0x269/0x350 [ 208.816689][T10520] ? __pfx_lock_release+0x10/0x10 [ 208.821740][T10520] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.826914][T10520] ? __pfx_vfs_write+0x10/0x10 [ 208.831745][T10520] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.838105][T10520] ? do_syscall_64+0x100/0x230 [ 208.842905][T10520] ? do_syscall_64+0xb6/0x230 [ 208.847611][T10520] do_syscall_64+0xf3/0x230 [ 208.852138][T10520] ? clear_bhb_loop+0x35/0x90 [ 208.856848][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.862775][T10520] RIP: 0033:0x7fa417b85d29 [ 208.867210][T10520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.886854][T10520] RSP: 002b:00007fa418990038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.895325][T10520] RAX: ffffffffffffffda RBX: 00007fa417d75fa0 RCX: 00007fa417b85d29 [ 208.903326][T10520] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 208.911317][T10520] RBP: 00007fa418990090 R08: 0000000000000000 R09: 0000000000000000 [ 208.919308][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.927297][T10520] R13: 0000000000000000 R14: 00007fa417d75fa0 R15: 00007ffdace81048 [ 208.935313][T10520] [ 209.511236][T10558] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.553161][T10558] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.555834][T10560] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 209.595916][T10560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1576'. [ 209.670667][T10558] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.706870][T10558] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.770091][T10558] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.790893][T10558] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.874793][T10558] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.895742][T10558] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.060355][T10558] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.109883][T10558] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.160614][T10558] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.179629][T10558] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.209338][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1582'. [ 210.228844][T10576] tipc: Enabling of bearer rejected, media not registered [ 210.269984][T10558] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.289289][T10558] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.328629][T10558] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.391162][T10558] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.973648][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.986214][T10621] batadv_slave_0: entered promiscuous mode [ 212.021546][T10659] Cannot find add_set index 32768 as target [ 212.067084][T10660] siw: device registration error -23 [ 212.409372][T10669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1606'. [ 212.427883][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 212.449400][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 212.469361][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 212.492140][T10666] tipc: Enabling of bearer rejected, failed to enable media [ 213.130772][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1607'. [ 213.189159][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1607'. [ 213.361807][T10688] ebtables: ebtables: counters copy to user failed while replacing table [ 213.567998][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 213.608670][T10694] vlan0: entered allmulticast mode [ 214.389813][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1620'. [ 214.399376][T10707] netlink: 'syz.4.1620': attribute type 3 has an invalid length. [ 214.407645][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1620'. [ 214.724969][T10715] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1618'. [ 215.160920][T10731] x_tables: duplicate underflow at hook 3 [ 215.376943][T10737] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 215.398325][T10737] macvlan2: entered allmulticast mode [ 215.409575][T10737] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 215.426210][T10737] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 216.479726][T10733] bridge0: port 3(gretap0) entered blocking state [ 216.487017][T10733] bridge0: port 3(gretap0) entered disabled state [ 216.495225][T10733] gretap0: entered allmulticast mode [ 216.502244][T10733] gretap0: left allmulticast mode [ 216.523423][T10751] netlink: 'syz.2.1631': attribute type 2 has an invalid length. [ 216.887621][T10763] FAULT_INJECTION: forcing a failure. [ 216.887621][T10763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.911800][T10763] CPU: 1 UID: 0 PID: 10763 Comm: syz.2.1637 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 216.922613][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 216.932698][T10763] Call Trace: [ 216.935998][T10763] [ 216.938955][T10763] dump_stack_lvl+0x241/0x360 [ 216.943689][T10763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.948919][T10763] ? __pfx__printk+0x10/0x10 [ 216.953541][T10763] ? __pfx_lock_release+0x10/0x10 [ 216.958606][T10763] should_fail_ex+0x3b0/0x4e0 [ 216.963321][T10763] _copy_from_iter+0x1e9/0x1c20 [ 216.968226][T10763] ? __virt_addr_valid+0x183/0x530 [ 216.973406][T10763] ? __alloc_skb+0x28f/0x440 [ 216.978052][T10763] ? __pfx__copy_from_iter+0x10/0x10 [ 216.983376][T10763] ? __virt_addr_valid+0x183/0x530 [ 216.988522][T10763] ? __virt_addr_valid+0x183/0x530 [ 216.993664][T10763] ? __virt_addr_valid+0x45f/0x530 [ 216.998805][T10763] ? __phys_addr_symbol+0x2f/0x70 [ 217.003859][T10763] ? __check_object_size+0x47a/0x730 [ 217.009272][T10763] netlink_sendmsg+0x73d/0xcb0 [ 217.014077][T10763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.019396][T10763] ? aa_sock_msg_perm+0x91/0x160 [ 217.024382][T10763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.029705][T10763] __sock_sendmsg+0x221/0x270 [ 217.034431][T10763] ____sys_sendmsg+0x52a/0x7e0 [ 217.039231][T10763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.044553][T10763] ? __fget_files+0x2a/0x410 [ 217.049186][T10763] ? __fget_files+0x2a/0x410 [ 217.053839][T10763] __sys_sendmsg+0x269/0x350 [ 217.058467][T10763] ? __pfx_lock_release+0x10/0x10 [ 217.063532][T10763] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.068690][T10763] ? __pfx_vfs_write+0x10/0x10 [ 217.073502][T10763] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.079854][T10763] ? do_syscall_64+0x100/0x230 [ 217.084654][T10763] ? do_syscall_64+0xb6/0x230 [ 217.089390][T10763] do_syscall_64+0xf3/0x230 [ 217.093927][T10763] ? clear_bhb_loop+0x35/0x90 [ 217.098644][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.104582][T10763] RIP: 0033:0x7f07c8d85d29 [ 217.109030][T10763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.128657][T10763] RSP: 002b:00007f07c9c85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.137098][T10763] RAX: ffffffffffffffda RBX: 00007f07c8f75fa0 RCX: 00007f07c8d85d29 [ 217.145101][T10763] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 217.153102][T10763] RBP: 00007f07c9c85090 R08: 0000000000000000 R09: 0000000000000000 [ 217.161096][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.169097][T10763] R13: 0000000000000000 R14: 00007f07c8f75fa0 R15: 00007ffe73778038 [ 217.177112][T10763] [ 217.228411][T10755] netlink: 'syz.4.1633': attribute type 21 has an invalid length. [ 217.239237][T10755] netlink: 'syz.4.1633': attribute type 6 has an invalid length. [ 217.331165][T10781] gre1: entered promiscuous mode [ 218.257487][T10798] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 219.363454][T10801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.371882][T10801] bond3: (slave bond4): making interface the new active one [ 219.381144][T10801] bond3: (slave bond4): Enslaving as an active interface with an up link [ 219.390388][T10805] netlink: 'syz.0.1649': attribute type 8 has an invalid length. [ 219.402891][T10805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.652137][ T5832] ------------[ cut here ]------------ [ 219.653282][T10820] erspan1: entered promiscuous mode [ 219.658698][ T5832] WARNING: CPU: 0 PID: 5832 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xfb/0x290 [ 219.674205][ T5832] Modules linked in: [ 219.676191][T10820] erspan1: entered allmulticast mode [ 219.678110][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:2 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 219.684648][T10824] __nla_validate_parse: 1 callbacks suppressed [ 219.684667][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 219.695036][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.721665][ T5832] Workqueue: hci4 hci_conn_timeout [ 219.727591][ T5832] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 219.733878][ T5832] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 40 2b e4 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 26 2b e4 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 219.754463][ T5832] RSP: 0018:ffffc9000404fb90 EFLAGS: 00010293 [ 219.760579][ T5832] RAX: ffffffff8abb48ca RBX: ffff8880246188e8 RCX: ffff88802973da00 [ 219.769160][ T5832] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 219.777799][ T5832] RBP: 00000000ffffffff R08: ffffffff8abb4833 R09: 1ffff110048c3002 [ 219.786416][ T5832] R10: dffffc0000000000 R11: ffffed10048c3003 R12: dffffc0000000000 [ 219.795042][ T5832] R13: ffffffff8168ee96 R14: ffff888024618000 R15: 0000000002400000 [ 219.803654][ T5832] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 219.813473][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.820178][ T5832] CR2: 00007fcefe272f98 CR3: 000000003670e000 CR4: 00000000003526f0 [ 219.828948][ T5832] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.837605][ T5832] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.846195][ T5832] Call Trace: [ 219.849491][ T5832] [ 219.853065][ T5832] ? __warn+0x165/0x4d0 [ 219.857261][ T5832] ? hci_conn_timeout+0xfb/0x290 [ 219.862237][ T5832] ? report_bug+0x2b3/0x500 [ 219.867300][ T5832] ? hci_conn_timeout+0xfb/0x290 [ 219.872280][ T5832] ? handle_bug+0x60/0x90 [ 219.877206][ T5832] ? exc_invalid_op+0x1a/0x50 [ 219.881935][ T5832] ? asm_exc_invalid_op+0x1a/0x20 [ 219.887277][ T5832] ? process_scheduled_works+0x976/0x1840 [ 219.893082][ T5832] ? hci_conn_timeout+0x63/0x290 [ 219.898046][ T5832] ? hci_conn_timeout+0xfa/0x290 [ 219.903173][ T5832] ? hci_conn_timeout+0xfb/0x290 [ 219.908145][ T5832] process_scheduled_works+0xa66/0x1840 [ 219.914551][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 219.920569][ T5832] ? assign_work+0x364/0x3d0 [ 219.926027][ T5832] worker_thread+0x870/0xd30 [ 219.930667][ T5832] ? __kthread_parkme+0x169/0x1d0 [ 219.935279][T10825] netlink: 'syz.2.1656': attribute type 21 has an invalid length. [ 219.936341][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 219.944450][T10825] netlink: 'syz.2.1656': attribute type 6 has an invalid length. [ 219.949185][ T5832] kthread+0x2f0/0x390 [ 219.949216][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 219.949237][ T5832] ? __pfx_kthread+0x10/0x10 [ 219.949264][ T5832] ret_from_fork+0x4b/0x80 [ 219.949290][ T5832] ? __pfx_kthread+0x10/0x10 [ 219.949334][ T5832] ret_from_fork_asm+0x1a/0x30 [ 219.949373][ T5832] [ 219.949397][ T5832] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.949410][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:2 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 219.949434][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.949448][ T5832] Workqueue: hci4 hci_conn_timeout [ 219.949472][ T5832] Call Trace: [ 219.949480][ T5832] [ 219.949489][ T5832] dump_stack_lvl+0x241/0x360 [ 219.949526][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.949558][ T5832] ? __pfx__printk+0x10/0x10 [ 219.949595][ T5832] ? vscnprintf+0x5d/0x90 [ 219.949629][ T5832] panic+0x349/0x880 [ 219.949660][ T5832] ? __warn+0x174/0x4d0 [ 219.949688][ T5832] ? __pfx_panic+0x10/0x10 [ 219.949727][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 219.949754][ T5832] __warn+0x344/0x4d0 [ 219.949779][ T5832] ? hci_conn_timeout+0xfb/0x290 [ 219.949806][ T5832] report_bug+0x2b3/0x500 [ 219.949828][ T5832] ? hci_conn_timeout+0xfb/0x290 [ 219.949856][ T5832] handle_bug+0x60/0x90 [ 219.949883][ T5832] exc_invalid_op+0x1a/0x50 [ 219.949911][ T5832] asm_exc_invalid_op+0x1a/0x20 [ 219.949937][ T5832] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 219.949960][ T5832] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 40 2b e4 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 26 2b e4 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 219.949978][ T5832] RSP: 0018:ffffc9000404fb90 EFLAGS: 00010293 [ 219.949998][ T5832] RAX: ffffffff8abb48ca RBX: ffff8880246188e8 RCX: ffff88802973da00 [ 219.950015][ T5832] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 219.950029][ T5832] RBP: 00000000ffffffff R08: ffffffff8abb4833 R09: 1ffff110048c3002 [ 219.950046][ T5832] R10: dffffc0000000000 R11: ffffed10048c3003 R12: dffffc0000000000 [ 219.950063][ T5832] R13: ffffffff8168ee96 R14: ffff888024618000 R15: 0000000002400000 [ 219.950082][ T5832] ? process_scheduled_works+0x976/0x1840 [ 219.950109][ T5832] ? hci_conn_timeout+0x63/0x290 [ 219.950130][ T5832] ? hci_conn_timeout+0xfa/0x290 [ 219.950163][ T5832] process_scheduled_works+0xa66/0x1840 [ 219.950214][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 219.950247][ T5832] ? assign_work+0x364/0x3d0 [ 219.950281][ T5832] worker_thread+0x870/0xd30 [ 219.950320][ T5832] ? __kthread_parkme+0x169/0x1d0 [ 219.950349][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 219.950383][ T5832] kthread+0x2f0/0x390 [ 219.950408][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 219.950429][ T5832] ? __pfx_kthread+0x10/0x10 [ 219.950455][ T5832] ret_from_fork+0x4b/0x80 [ 219.950475][ T5832] ? __pfx_kthread+0x10/0x10 [ 219.950500][ T5832] ret_from_fork_asm+0x1a/0x30 [ 219.950535][ T5832] [ 219.957432][ T5832] Kernel Offset: disabled