last executing test programs: 2.068611943s ago: executing program 4 (id=1734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r1, 0xa05, 0x0, 0x0, {{}, {@val={0x34, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "12e7ee6b09830dfa49f5a985f4e3cf35"}]}, 0x30}}, 0x0) 1.892670291s ago: executing program 4 (id=1738): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.843957753s ago: executing program 3 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x88, r1, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x20, {0x0, 0x27, 0x40, "da0cb837a32d9be9ac300d56755e61dfbb9914a99d3e91f617687bff9c"}}, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, 0x88}}, 0x0) 1.788650697s ago: executing program 1 (id=1741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.682080028s ago: executing program 1 (id=1742): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2a4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="e674b96b9b8851dac97f1137b581cdda63b13c1be2c7f7ef38fb3efc782cc4807f3a2c25cef38ba3eda9f4a67f25ea16cc3289ce4c1a468284ac36999529dff5d129b2fe38ec32edb03f45970573bd3372350860d957f392dc60d55dc7c6b975a5bea57f4756cd90eceb19296aa9456b9656e5868a601e57377e41167c7a7599558e4e9379fdbfadce10c40370161a7bdb6828270038b4699cbe4a22f06bc52fdc4df05ba68e5bc46360cabddd18f9b65b24b214701c75951093b949713dbf346e4f79bc1cba15ee8770a18afd77b5add44cedcdcea936f06c69a0d9339cd45f4724ed42d38f845e691343ba0f6dd2f7e0dd753b671e240f990916a529dfc07b896f68c9e822a603893c672c4ac1dc781f2fbb3da5afc8bde6396cc0b1b23f0a9b66eb0500f2fbc10e80c8b87e9706ba155a5560e208e62b7c15f3c5e7d3fa0b04864ee3cab68a1f8caddf0584f9aef7a8a69b43bc335796f18f8600000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x2a4}}, 0x0) (async) 1.641029955s ago: executing program 3 (id=1743): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(r0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) accept$alg(r1, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000002000000000", 0x39}], 0x1) 1.621691031s ago: executing program 4 (id=1744): socket$inet6(0xa, 0x800, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) socket(0x10, 0x800, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e220500160000000000080017"], 0x34}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}], 0x20}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7c, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'dvmrp1\x00', 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006114187fffffff009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) syz_emit_ethernet(0xfc0, &(0x7f0000000d00)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x0, 0x0, "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"}}}}}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109500000000006300e600000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195}, 0x48) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x0, 0x0) shutdown(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) 1.396491714s ago: executing program 3 (id=1746): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4b4}, 0x10}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r2], 0x0, 0x26}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x3a, "5e4a9e3d09dd420055e80569fdd55959c77804c7258846f9d6b0b2aff63dd55e540760026ac1639f1b5672aeccd172489222f597072e815f0c08"}, &(0x7f0000000240)=0x42) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x40}}, 0x3c}, 0x1, 0x0, 0x0, 0x815}, 0x40040) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000000300)) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x5760, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x348, 0x11, 0x148, 0x0, 0x10, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2e0, 0x348, 0x1c, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x0, 0x0, 0x6]}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x4f8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb850018000000000000000c0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x2}, 0x48) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000001c0)={0x5}, 0x4) listen(r1, 0x9) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 1.396390086s ago: executing program 0 (id=1747): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000185ffffff00000000000000791201000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.358127872s ago: executing program 1 (id=1748): socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='jbd2_handle_stats\x00', r0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='jbd2_handle_stats\x00', r0}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000002060103000000000000000000000000050001000700000005"], 0x54}}, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x20, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@delqdisc={0x88, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0x7}, {0xe, 0xe}, {0x0, 0xa}}, [@q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb89}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x20008010) (async) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000001880)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xfffffe81) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x6, 0x2, 0x1c, {0xa, 0x4e20, 0xa540, @private0, 0x9}}, 0x24) 1.284133466s ago: executing program 2 (id=1749): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd6000730400043a00f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1.156598029s ago: executing program 0 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000a0006000802110000000000040067000400cc0004000801060066003e88000004001e010a0034"], 0x5c}}, 0x0) 1.15617676s ago: executing program 3 (id=1751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1", 0xc) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x33}, 0x20) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000500)=""/13, 0xd}, {&(0x7f00000022c0)=""/130, 0x82}], 0x2}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.153982069s ago: executing program 2 (id=1752): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x3a, 0x0, 0x0, 0x11000000}, 0x0) 1.144251081s ago: executing program 1 (id=1753): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_getmulticast={0x14, 0x3a, 0x0, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) 1.000873045s ago: executing program 0 (id=1754): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 944.65619ms ago: executing program 2 (id=1755): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@remote}, {@multicast1}, {@dev}, {@private=0xa010102}, {}, {}]}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @multicast1}}) 944.506623ms ago: executing program 1 (id=1756): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(r0) bind$alg(r1, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000002000000000", 0x39}], 0x1) 920.152745ms ago: executing program 3 (id=1757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x0, 0x1000009, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$binfmt_script(r6, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'SET\x00'}, {0x20, '#{('}], 0xa, "34a1f30ac232c12c7cff82997cf34152a6e90f656290f483e27b6ed6fad8efe8e10b4f64528fd2dff938228fb26d724f799296c09821f8fc4e2eca3b481b15e811c9a1092f3473b7118207e65cfec83379380d359d2b465c1606cec2c1b1e54a6813b0cb7f4a23fc2d12edbf13fd383d345d3d0a63f20f274f6f1ae88f973ff614e1879eb64c65c9d01449192bbc8da3e0"}, 0xa5) openat$cgroup_ro(r6, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="100000001c00933a00000000000000007f1d17548bf564de3854d6a1ff0d95199825aa0e666144629f37ae787690d396b8dd4d66828c2e6b5c43204f95f5af0bec12316cd494627b7afd5ccd21f7b8668f5b82a9ec8af3b70309dbc01d0e2c15a1"], 0x10}], 0x1}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01000002c6ffffffffffffff372cef9f522fb249000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000967a42e018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf980000007b000056080000000000008500000007000000b7000000000020659500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x90) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x9000000, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000b0603000000000000000000000000000900020073797a30000000000500010007000000100007800c00018008"], 0x38}}, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x3, 0x0, 0x0) 821.296499ms ago: executing program 2 (id=1758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 760.070107ms ago: executing program 1 (id=1759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x3}}, [0x7fffffff, 0x7, 0xfffffffffffffffb, 0x2cfe, 0x9, 0x2, 0x1d08, 0x3a1, 0x1, 0x2, 0x6e, 0xc, 0xa7, 0x1ff, 0xd]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x4, 0x20, 0x8, 0x8}, &(0x7f0000000140)=0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80", @ANYRES16, @ANYRES32=r7], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x9, 0x0, {{0x4c, 0x4, 0x2, 0x7, 0x130, 0x65, 0x0, 0xfe, 0x2f, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x6d, 0x2, [{0x6, 0x4, "cba5"}, {0x7, 0x10, "1304ff4f965b8039c5bd08988b9f"}, {0x5, 0xc, "105646b218e9638fa0ef"}, {0x5, 0x9, "3fa60c02eaa98c"}, {0x5, 0x9, "6c04b8d669bf27"}, {0x7, 0x5, "4786af"}, {0x6, 0x12, "e4fa4e4dc77be087bf84e93397ec3adb"}, {0x0, 0x4, "659e"}, {0x5, 0x10, "da338ace3008fd7748eb3f7f64ec"}, {0x1, 0xa, "07e20c5484067087"}]}, @timestamp_addr={0x44, 0xc, 0x88, 0x1, 0x3, [{@local, 0x2}]}, @ssrr={0x89, 0x1b, 0x52, [@private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1]}, @rr={0x7, 0x27, 0x8d, [@broadcast, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, @multicast1]}, @end, @timestamp={0x44, 0x14, 0xb2, 0x0, 0x7, [0x7ff, 0x5, 0x6, 0xa4]}, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x0, 0x4, "e284"}, {0x1, 0x9, "39938ed2abc0dc"}, {0x2, 0x4, "27a4"}, {0x0, 0x8, "6dde0d16c22e"}, {0x6, 0x2}, {0x7, 0x10, "20804ac9634ac58a3e9b2af36bc2"}, {0x2, 0xd, "0a9af8f670651b65084ca0"}]}, @timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0x6, [{@broadcast, 0x7}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x9, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x3b}, @empty, 0x8000, 0x8000, 0x2, 0x7}}) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x2, 0xfffffff9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x98, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x8000, 0x80, 0x0, 0x3, {{0x53, 0x4, 0x3, 0x4, 0x14c, 0x64, 0x0, 0x74, 0x29, 0x0, @remote, @empty, {[@timestamp_prespec={0x44, 0x24, 0xc8, 0x3, 0x5, [{@broadcast, 0x4}, {@multicast2, 0xf}, {@rand_addr=0x64010100, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x7}]}, @rr={0x7, 0x27, 0x84, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x30, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0xca65}, {@loopback, 0x42}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x5}, {@local, 0x3}, {@loopback, 0x5}]}, @timestamp_prespec={0x44, 0x44, 0x8d, 0x3, 0x6, [{@broadcast, 0x6}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0xef8}, {@loopback, 0x6}, {@local, 0x3}, {@multicast2}, {@multicast2, 0x8}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x20, 0x1, 0x9, [{@loopback, 0x9f}, {@remote, 0xd14}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@multicast2, 0x6}]}, @cipso={0x86, 0x3e, 0x1, [{0x1, 0xb, "8991ab3b01dbed50f7"}, {0x1, 0x2}, {0x5, 0x7, "49fd14d96b"}, {0x7, 0xc, "273dce159c9ae18211cf"}, {0x2, 0x6, "12be9e1c"}, {0x7, 0x12, "8a9a9ee045a1924d70e1eaea016ef7dd"}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000024c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002480)={&(0x7f0000000c00)=@newtfilter={0x1880, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xc, 0xffe0}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}, @TCA_RATE={0x6, 0x5, {0x48}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x181c, 0x2, [@TCA_MATCHALL_ACT={0x1808, 0x2, [@m_mirred={0x224, 0x4, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4b7, 0x2, 0x1, 0xffff7fff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x5, 0x9, 0xf883}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0xe4d6, 0x10000000, 0x81, 0x6}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x10000000, 0x1000}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xf}, 0x5, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x25, 0xa9f, 0x6, 0x3ff, 0x8001}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x1, 0x4, 0x1, 0x5}, 0x1, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xf4, 0x5, 0x1, 0xe2400000}, 0x1, r14}}]}, {0xf8, 0x6, "9fc6fe95a6b5f483632f27a66d901f0ffd058b8a38d231ee7a214d0db61ad7c9d6c95cc613bf242819596821dcb61d270657017c471800909d03e38f4279233386dd3cb83bc1089ae39667c86d8394deda3f8c94d54cbf2b0505066ff541a800da070be8025e0359722459b6037d2d78a89c2ec01f6697479cc045ceb317209c7745067997ea5a1dd545c4b5e9bc23c06ea3864f48f4353fcdda1d8aa57365c177c9bd93c41b17098d4e97910455bdbaa0e83e882aff50357dccf5799acf9e1301dc4114b549306f87f980d35b563afdca5060b323ab47c1ce68b6ad13fee5ad6d4c1d3afac0b1b3ab8b9b86e151e1d798639f3d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x8c, 0x1a, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1918, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5cf, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3b0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x60c, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16ab, 0xffffffffffffffff}}]}, {0x18, 0x6, "89fc668668b7577b1e8b5393dd65a056cd2d653a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xc4, 0x7, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xf9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4a, 0x6, "d2c9befd26df9c2406161aa8040d43210c4158e3465f0adfc5d6b14fe6ff9813427c63826cb2b12a472bacfc8e16c4721591d47f12b46969ab3e91bcd84b98547f4e0cb3f332"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x94, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x25b4, 0x9a7f2d698eac81a4}}]}, {0x5b, 0x6, "7d977aac63ec5431584257c3f8e79a3fb480fb2e51e3d985a10e1f12d55fb3a463cadb418c9cd8673ba146b152263887b94e96b001335d4380588bcbdfcf620646f821c4b88ee817293f09c9177fe12cdfa349f9e6c7fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x108, 0x1f, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10, 0x2, 0x0, 0x1d, 0xe61d}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0xa0, 0x6, "4551c9fd3beddf2c9c8a370a925bf411fa05926c1917269c7f9a85d47cf8243d0dd99ac90c7c3f85f3bc5b28fca2e5b9581ceafed3d991dd6dcb1daf740b8d4e67d0ceab1878430264c5193b83a359e5524e76d3c3b7fba41ff59dea19d3992a0a85993e160b1f82562fd5690278bd08ceaceb66ff48d91aee723fcca9cf1e8235ec9712f3437d752f95704db86b4e86a0a9c797ee9473f6d48f5c25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x128, 0x19, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0xaf, 0x6, "f5cee0c1d533bb45267c85e4ccdec1b44c69ee9f0a74c8373499a82066268bd9127fcd808f48be2c41adc79179bc5ce64dbd3e36ec7ce5a011365160e551adfc35316380bff633196ee069735cda9aeb57d2dfd40b3e4f388d691c6ec98b62d6c5b28464f80de12492608c87e9750e87033d352b082475614387f5ade922bb3c2b80dec721bd364ea89f2a28fce114a7d66a70daf7229281c57e11ada649989061d7a2146e24257235aa03"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x11cc, 0xf, 0x0, 0x0, {{0x7}, {0x1130, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x102a, 0x6, {0xc42, 'raw\x00', 0x3, 0x80, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x95, 0x6, {0x2, 'mangle\x00', 0x9, 0x1, "e10cbccfd15143c482136cad02278a1e6640ddc9062980e339f69d86bbf996000ca5f7ed7636b0647bc2c20012910b3f95e734394cbf1681ae1db8b9607f604d015d145e61539d114b08716f901ea834156aaf6c23d5d34522d3a87f2e780d011b46327f468c101fa77721"}}]}, {0x75, 0x6, "22bd36ebce6c4e514a182eea4a40f2f303609e9c8e5d10f71ba89ed9d6968cb3f2bc99b1b277ceba73e3be8ef50ff025e7ddeb24b0a39b6cd36e172f839f5393d73280d81c0877636c5bdf0e01d97ac74f53c7713827d7099e1293d8ebc5ff6f862d36b699bee842a9f14f880b8ea38dc0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x1880}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r16) sendmsg$NLBL_CIPSOV4_C_ADD(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r17, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r18 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r15, 0x5}, 0x8) ioctl$SIOCSIFHWADDR(r18, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb88a800008100000086dd4500007800000000002f9078ac1e0001e0000001000000000064907802000000000000000000000003607b5aaa4853b42d29f60ceb582f7167f6cf56d3c5db9164d13ff477cbe579c88c612b066cec0c218044d47326a8a1ac9862b477393bfc7f7c27a1e86c8d71f6b6f15dfb75a9744f47ab601f4c9386"], 0x92) 757.436871ms ago: executing program 0 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x20, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x700}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0) 610.159325ms ago: executing program 4 (id=1761): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4b4}, 0x10}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r2], 0x0, 0x26}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x3a, "5e4a9e3d09dd420055e80569fdd55959c77804c7258846f9d6b0b2aff63dd55e540760026ac1639f1b5672aeccd172489222f597072e815f0c08"}, &(0x7f0000000240)=0x42) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x40}}, 0x3c}, 0x1, 0x0, 0x0, 0x815}, 0x40040) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000000300)) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x5760, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x348, 0x11, 0x148, 0x0, 0x10, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2e0, 0x348, 0x1c, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x0, 0x0, 0x6]}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x4f8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb850018000000000000000c0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x2}, 0x48) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000001c0)={0x5}, 0x4) listen(r1, 0x9) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 531.373801ms ago: executing program 2 (id=1762): socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd6000730400043a00f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 392.592078ms ago: executing program 0 (id=1763): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89a2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f00000008c0)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0), 0x8) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0xc) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 350.749316ms ago: executing program 4 (id=1764): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r4) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000004c0)={'syz_tun\x00'}) r7 = socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000440)) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r9, 0x118, 0x1, &(0x7f0000000040), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) recvmmsg(r10, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000004d00)=""/4097, 0x1001}], 0x1}}], 0x2, 0x40010143, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r11, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4f4135de342a7790}, 0x20000080) 284.967223ms ago: executing program 3 (id=1765): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x8848, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x78, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}}, 0x0) 136.536502ms ago: executing program 2 (id=1766): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="050100000000000069113e000000000043797acc6d1d0f9bb585100000020000008500000005000092a7a9cd36230f1d29a3fc3f6b43b01b1fbd3f1840"], &(0x7f0000000580)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0xa, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x6}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000003010103000000000000000002000000180001801400018008000100ac1414aa08000200ac1414aa0c0019800800010086090000edb234e85f0bac83b39f61dc0292442b77477de122a11f46b4dc4bcda439da3307f68618"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000e3cc2d2b6371f3f900000000009500000000000000bc940ef9229c7043a7024bd962b410eebf5624458217da4e4718aa945fb56043eaeb4e462d6522bcf04c5f67f5eb1b"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000c40)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYBLOB="1a412d3ff2838733fe289b041eee1ea393a1c2a4e8615b49442d8e2549f5154b567aaf5160636e9dd9d77570f7615e8c25df5c9f21433d30b2ccac36e1a7b6c0d8f8f9fbab336768e3e0830189fb31f1b0e85a1a8dfd958df175b05d3dbc21f4fcf9813283383c98ed66a58fbb320258a05562a657f436aa1b8c9658144a90a6dc5f17c17f04fc181fa515e7ff72e2cba68dd70364b0a5ac24a3f57ddb7d295e19b54aa98245666e426e275962b33369697a5714e616902c721b55338e13340c2551b4130a4d24b65cf15c90b882", @ANYRES64=0x0], 0x0, 0x0, 0xfffffffffffffe25, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x26}, 0x20) syz_emit_ethernet(0xb9, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d60800451300ab00680000048990780a010101ac1414bb8306ee26f36e86390000000202062a35f07002069677ce26070598ffa5000918f38fe4d10dc77d0d8533cdaadc032bf9c4a98f020cedfde7eb2dd3b85dec55443cb63364010101000000037f000001000000ea6401010100040000ac1414aa00000000ac1414aa00000008ffffffff000000807f000001000000010001000000d19f75d1274417a79690eaa02c926a3dec06fbe930649740cb5e39b43abd1418601629071482d6865526be1615f3cbdeda8f0d55b7b7e32fce2e2a12677eca55d710e5580793022349bdb93b612823a9c1709896b36c01849b3af4659f8096a989cb76e5ea076073"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x20040000) sendto$inet6(r3, &(0x7f0000000680)=',', 0x1, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0x4, @remote}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x44, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r9}, 0xfffffffffffffccf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x73, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x4) 113.971529ms ago: executing program 0 (id=1767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1", 0xc) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x33}, 0x20) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000500)=""/13, 0xd}, {&(0x7f00000022c0)=""/130, 0x82}], 0x2}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1768): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@remote}, {@multicast1}, {@dev}, {@private=0xa010102}, {}, {}]}]}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @multicast1}}) kernel console output (not intermixed with test programs): bc [ 111.140643][ T6281] RDX: 000000000000000f RSI: 00007f82c37cf0b0 RDI: 0000000000000004 [ 111.148672][ T6281] RBP: 00007f82c37cf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.156684][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.164689][ T6281] R13: 000000000000004d R14: 00007f82c2b03f60 R15: 00007ffc7e8501b8 [ 111.172743][ T6281] [ 111.293153][ T6288] xt_nfacct: accounting object `syz1' does not exists [ 111.326952][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 111.706300][ T6316] x_tables: duplicate underflow at hook 1 [ 111.816561][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 111.922232][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 112.037700][ T6330] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 112.051897][ T6330] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.395'. [ 112.380513][ T6335] xt_nfacct: accounting object `syz1' does not exists [ 112.407928][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 112.532115][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 112.893150][ T6369] FAULT_INJECTION: forcing a failure. [ 112.893150][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.942671][ T6369] CPU: 1 PID: 6369 Comm: syz.1.408 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 112.952721][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 112.962838][ T6369] Call Trace: [ 112.966149][ T6369] [ 112.969109][ T6369] dump_stack_lvl+0x241/0x360 [ 112.973834][ T6369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.979079][ T6369] ? __pfx__printk+0x10/0x10 [ 112.983754][ T6369] should_fail_ex+0x3b0/0x4e0 [ 112.988477][ T6369] _copy_from_user+0x2f/0xe0 [ 112.993108][ T6369] bpf_test_init+0x11f/0x180 [ 112.997728][ T6369] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 113.003110][ T6369] ? __pfx_lock_acquire+0x10/0x10 [ 113.008234][ T6369] ? __pfx_lock_release+0x10/0x10 [ 113.013277][ T6369] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.019270][ T6369] ? __fget_files+0x29/0x470 [ 113.023900][ T6369] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.029717][ T6369] bpf_prog_test_run+0x33a/0x3b0 [ 113.034668][ T6369] __sys_bpf+0x48d/0x810 [ 113.039011][ T6369] ? __pfx___sys_bpf+0x10/0x10 [ 113.043795][ T6369] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 113.049802][ T6369] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.056229][ T6369] ? do_syscall_64+0x100/0x230 [ 113.061004][ T6369] __x64_sys_bpf+0x7c/0x90 [ 113.065436][ T6369] do_syscall_64+0xf3/0x230 [ 113.069965][ T6369] ? clear_bhb_loop+0x35/0x90 [ 113.074656][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.080560][ T6369] RIP: 0033:0x7fb7f3575bd9 [ 113.084982][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.104603][ T6369] RSP: 002b:00007fb7f4369048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.113026][ T6369] RAX: ffffffffffffffda RBX: 00007fb7f3703f60 RCX: 00007fb7f3575bd9 [ 113.121025][ T6369] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 113.129092][ T6369] RBP: 00007fb7f43690a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.137073][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.145047][ T6369] R13: 000000000000000b R14: 00007fb7f3703f60 R15: 00007ffde80cf0b8 [ 113.153040][ T6369] [ 113.275857][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 113.331682][ T6383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.413'. [ 113.572950][ T6390] xt_nfacct: accounting object `syz1' does not exists [ 113.923423][ T6404] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.033834][ T6408] netlink: 'syz.1.420': attribute type 21 has an invalid length. [ 114.285042][ T6420] FAULT_INJECTION: forcing a failure. [ 114.285042][ T6420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.300107][ T6420] CPU: 1 PID: 6420 Comm: syz.3.426 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 114.310162][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 114.320249][ T6420] Call Trace: [ 114.323560][ T6420] [ 114.326521][ T6420] dump_stack_lvl+0x241/0x360 [ 114.331237][ T6420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.336472][ T6420] ? __pfx__printk+0x10/0x10 [ 114.341096][ T6420] ? vfs_write+0x7c4/0xc90 [ 114.345554][ T6420] should_fail_ex+0x3b0/0x4e0 [ 114.350276][ T6420] _copy_from_user+0x2f/0xe0 [ 114.354902][ T6420] move_addr_to_kernel+0x82/0x150 [ 114.359959][ T6420] __sys_bind+0x168/0x2f0 [ 114.364418][ T6420] ? __pfx___sys_bind+0x10/0x10 [ 114.369337][ T6420] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.375704][ T6420] ? do_syscall_64+0x100/0x230 [ 114.380511][ T6420] __x64_sys_bind+0x7a/0x90 [ 114.385060][ T6420] do_syscall_64+0xf3/0x230 [ 114.389601][ T6420] ? clear_bhb_loop+0x35/0x90 [ 114.394318][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.400238][ T6420] RIP: 0033:0x7fadf9375bd9 [ 114.404681][ T6420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.424332][ T6420] RSP: 002b:00007fadfa151048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 114.432794][ T6420] RAX: ffffffffffffffda RBX: 00007fadf9503f60 RCX: 00007fadf9375bd9 [ 114.440808][ T6420] RDX: 0000000000000010 RSI: 0000000020000880 RDI: 0000000000000004 [ 114.448812][ T6420] RBP: 00007fadfa1510a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.456816][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.464816][ T6420] R13: 000000000000000b R14: 00007fadf9503f60 R15: 00007ffcbf6440e8 [ 114.472842][ T6420] [ 114.616104][ T6432] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 114.654977][ T6432] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.600880][ T6479] FAULT_INJECTION: forcing a failure. [ 115.600880][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 115.621090][ T6479] CPU: 1 PID: 6479 Comm: syz.2.449 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 115.631133][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 115.641316][ T6479] Call Trace: [ 115.644629][ T6479] [ 115.647582][ T6479] dump_stack_lvl+0x241/0x360 [ 115.652278][ T6479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.657492][ T6479] ? __pfx__printk+0x10/0x10 [ 115.662100][ T6479] should_fail_ex+0x3b0/0x4e0 [ 115.666794][ T6479] ? nfnetlink_rcv+0x11b8/0x2a90 [ 115.671745][ T6479] should_failslab+0x9/0x20 [ 115.676267][ T6479] kmalloc_trace_noprof+0x6c/0x2c0 [ 115.681404][ T6479] nfnetlink_rcv+0x11b8/0x2a90 [ 115.686213][ T6479] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.691381][ T6479] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.696587][ T6479] ? skb_clone+0x240/0x390 [ 115.701018][ T6479] ? __pfx_lock_release+0x10/0x10 [ 115.706064][ T6479] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.711275][ T6479] netlink_unicast+0x7f0/0x990 [ 115.716060][ T6479] ? __pfx_netlink_unicast+0x10/0x10 [ 115.721439][ T6479] ? __virt_addr_valid+0x183/0x520 [ 115.726570][ T6479] ? __check_object_size+0x49c/0x900 [ 115.731960][ T6479] ? bpf_lsm_netlink_send+0x9/0x10 [ 115.737094][ T6479] netlink_sendmsg+0x8e4/0xcb0 [ 115.741912][ T6479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.747210][ T6479] ? __import_iovec+0x536/0x820 [ 115.752067][ T6479] ? aa_sock_msg_perm+0x91/0x160 [ 115.757022][ T6479] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.762315][ T6479] ? security_socket_sendmsg+0x87/0xb0 [ 115.767787][ T6479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.773079][ T6479] __sock_sendmsg+0x221/0x270 [ 115.777767][ T6479] ____sys_sendmsg+0x525/0x7d0 [ 115.782569][ T6479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.787897][ T6479] __sys_sendmsg+0x2b0/0x3a0 [ 115.792506][ T6479] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.797632][ T6479] ? vfs_write+0x7c4/0xc90 [ 115.802093][ T6479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.808428][ T6479] ? do_syscall_64+0x100/0x230 [ 115.813200][ T6479] ? do_syscall_64+0xb6/0x230 [ 115.817970][ T6479] do_syscall_64+0xf3/0x230 [ 115.822487][ T6479] ? clear_bhb_loop+0x35/0x90 [ 115.827171][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.833069][ T6479] RIP: 0033:0x7f17d9575bd9 [ 115.837495][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.857115][ T6479] RSP: 002b:00007f17da33f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.865604][ T6479] RAX: ffffffffffffffda RBX: 00007f17d9703f60 RCX: 00007f17d9575bd9 [ 115.873586][ T6479] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 115.881645][ T6479] RBP: 00007f17da33f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.889616][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.897595][ T6479] R13: 000000000000004d R14: 00007f17d9703f60 R15: 00007fff4cc81b08 [ 115.905594][ T6479] [ 115.965695][ T6477] __nla_validate_parse: 5 callbacks suppressed [ 115.965718][ T6477] netlink: 5 bytes leftover after parsing attributes in process `syz.1.447'. [ 116.241517][ T6493] netlink: 'syz.3.452': attribute type 11 has an invalid length. [ 116.529705][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.591238][ T6498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.454'. [ 116.724154][ T6512] netlink: 'syz.1.457': attribute type 12 has an invalid length. [ 116.764418][ T6512] netlink: 194716 bytes leftover after parsing attributes in process `syz.1.457'. [ 117.212247][ T6530] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 117.322470][ T6530] bond0: entered promiscuous mode [ 117.343661][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.466'. [ 117.345705][ T6530] bond_slave_0: entered promiscuous mode [ 117.393693][ T6530] bond_slave_1: entered promiscuous mode [ 117.419848][ T6530] bond0: left promiscuous mode [ 117.430611][ T6530] bond_slave_0: left promiscuous mode [ 117.442716][ T6530] bond_slave_1: left promiscuous mode [ 117.962130][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.042381][ T6559] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.475'. [ 118.077231][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 118.609088][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.485'. [ 118.745003][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 118.769703][ T6588] netlink: 248 bytes leftover after parsing attributes in process `syz.4.489'. [ 118.856149][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'. [ 118.910697][ T6592] syzkaller0: entered promiscuous mode [ 118.935179][ T6592] syzkaller0: entered allmulticast mode [ 119.056444][ T6602] netlink: 'syz.2.495': attribute type 75 has an invalid length. [ 119.149225][ T6602] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 120.081504][ T6655] xt_connbytes: Forcing CT accounting to be enabled [ 120.615985][ T6679] vlan2: entered promiscuous mode [ 120.621290][ T6679] bond0: entered promiscuous mode [ 120.626609][ T6679] bond_slave_0: entered promiscuous mode [ 120.632760][ T6679] bond_slave_1: entered promiscuous mode [ 120.861299][ T6687] IPVS: length: 215 != 24 [ 120.998498][ T6693] __nla_validate_parse: 6 callbacks suppressed [ 120.998520][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.523'. [ 121.053339][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'. [ 121.109714][ T6698] FAULT_INJECTION: forcing a failure. [ 121.109714][ T6698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.110163][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 121.124490][ T6698] CPU: 0 PID: 6698 Comm: syz.0.522 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 121.142439][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 121.152526][ T6698] Call Trace: [ 121.155849][ T6698] [ 121.158816][ T6698] dump_stack_lvl+0x241/0x360 [ 121.163543][ T6698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.168788][ T6698] ? __pfx__printk+0x10/0x10 [ 121.173417][ T6698] ? __pfx_lock_release+0x10/0x10 [ 121.178530][ T6698] ? __lock_acquire+0x1346/0x1fd0 [ 121.183604][ T6698] should_fail_ex+0x3b0/0x4e0 [ 121.188356][ T6698] _copy_from_user+0x2f/0xe0 [ 121.192988][ T6698] kstrtouint_from_user+0xc6/0x190 [ 121.198144][ T6698] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 121.203997][ T6698] ? __pfx_lock_acquire+0x10/0x10 [ 121.209101][ T6698] proc_fail_nth_write+0xaa/0x2d0 [ 121.214161][ T6698] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 121.220099][ T6698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.225750][ T6698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.231390][ T6698] vfs_write+0x2a2/0xc90 [ 121.235654][ T6698] ? __pfx_vfs_write+0x10/0x10 [ 121.240432][ T6698] ? __fget_files+0x29/0x470 [ 121.245123][ T6698] ? __fget_files+0x3f6/0x470 [ 121.249830][ T6698] ksys_write+0x1a0/0x2c0 [ 121.254182][ T6698] ? __pfx_ksys_write+0x10/0x10 [ 121.259047][ T6698] ? do_syscall_64+0x100/0x230 [ 121.263848][ T6698] ? do_syscall_64+0xb6/0x230 [ 121.268553][ T6698] do_syscall_64+0xf3/0x230 [ 121.273081][ T6698] ? clear_bhb_loop+0x35/0x90 [ 121.277786][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.283888][ T6698] RIP: 0033:0x7f82c297475f [ 121.288319][ T6698] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 121.308039][ T6698] RSP: 002b:00007f82c37ae040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 121.316486][ T6698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82c297475f [ 121.324464][ T6698] RDX: 0000000000000001 RSI: 00007f82c37ae0b0 RDI: 0000000000000006 [ 121.332443][ T6698] RBP: 00007f82c37ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.340416][ T6698] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 121.348476][ T6698] R13: 000000000000006e R14: 00007f82c2b04038 R15: 00007ffc7e8501b8 [ 121.356467][ T6698] [ 121.645313][ T6708] xt_NFQUEUE: number of total queues is 0 [ 122.042407][ T6729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.363119][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 122.478320][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 122.805279][ T6756] FAULT_INJECTION: forcing a failure. [ 122.805279][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 122.864836][ T6756] CPU: 1 PID: 6756 Comm: syz.2.547 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 122.874908][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 122.884974][ T6756] Call Trace: [ 122.888278][ T6756] [ 122.891216][ T6756] dump_stack_lvl+0x241/0x360 [ 122.895909][ T6756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.901117][ T6756] ? __pfx__printk+0x10/0x10 [ 122.905723][ T6756] ? __pfx___might_resched+0x10/0x10 [ 122.911039][ T6756] should_fail_ex+0x3b0/0x4e0 [ 122.915761][ T6756] should_failslab+0x9/0x20 [ 122.920277][ T6756] kmalloc_node_trace_noprof+0x74/0x300 [ 122.925855][ T6756] ? page_pool_create_percpu+0x77/0x7c0 [ 122.931496][ T6756] page_pool_create_percpu+0x77/0x7c0 [ 122.936880][ T6756] bpf_test_run_xdp_live+0x2cd/0x2110 [ 122.942262][ T6756] ? arch_stack_walk+0x16d/0x1b0 [ 122.947242][ T6756] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 122.953073][ T6756] ? mark_lock+0x9a/0x350 [ 122.957448][ T6756] ? __pfx_lock_release+0x10/0x10 [ 122.962484][ T6756] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 122.968418][ T6756] ? __might_fault+0xaa/0x120 [ 122.973113][ T6756] ? __might_fault+0xc6/0x120 [ 122.977855][ T6756] ? _copy_from_user+0xa6/0xe0 [ 122.982667][ T6756] ? bpf_test_init+0x15a/0x180 [ 122.987530][ T6756] ? xdp_convert_md_to_buff+0x5b/0x330 [ 122.992997][ T6756] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 122.998386][ T6756] ? __pfx_lock_release+0x10/0x10 [ 123.003425][ T6756] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.009240][ T6756] ? __fget_files+0x29/0x470 [ 123.013849][ T6756] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.019676][ T6756] bpf_prog_test_run+0x33a/0x3b0 [ 123.024619][ T6756] __sys_bpf+0x48d/0x810 [ 123.028896][ T6756] ? __pfx___sys_bpf+0x10/0x10 [ 123.033687][ T6756] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.039701][ T6756] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.046033][ T6756] ? do_syscall_64+0x100/0x230 [ 123.050808][ T6756] __x64_sys_bpf+0x7c/0x90 [ 123.055239][ T6756] do_syscall_64+0xf3/0x230 [ 123.059747][ T6756] ? clear_bhb_loop+0x35/0x90 [ 123.064434][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.070332][ T6756] RIP: 0033:0x7f17d9575bd9 [ 123.074753][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.094359][ T6756] RSP: 002b:00007f17da33f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.102892][ T6756] RAX: ffffffffffffffda RBX: 00007f17d9703f60 RCX: 00007f17d9575bd9 [ 123.110875][ T6756] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 123.118852][ T6756] RBP: 00007f17da33f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.126827][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.134800][ T6756] R13: 000000000000004d R14: 00007f17d9703f60 R15: 00007fff4cc81b08 [ 123.142791][ T6756] [ 123.340695][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 123.410134][ T6773] netlink: 'syz.0.555': attribute type 5 has an invalid length. [ 123.434249][ T6768] batman_adv: batadv1: Adding interface: netdevsim0 [ 123.456402][ T6768] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.538287][ T6768] batman_adv: batadv1: Interface activated: netdevsim0 [ 123.558570][ T6773] batadv_slave_0: entered allmulticast mode [ 123.565399][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 123.576714][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 123.613428][ T6778] vxcan3: entered promiscuous mode [ 123.706265][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.556'. [ 123.739699][ T6781] netlink: 7 bytes leftover after parsing attributes in process `syz.4.556'. [ 123.975849][ T6796] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 124.302215][ T6805] dummy0: entered promiscuous mode [ 124.830727][ T6833] xt_HMARK: spi-set and port-set can't be combined [ 124.850081][ T6834] ip6t_REJECT: ECHOREPLY is not supported [ 124.946220][ T6825] netlink: 'syz.0.575': attribute type 1 has an invalid length. [ 125.030480][ T6825] netlink: 'syz.0.575': attribute type 3 has an invalid length. [ 125.061066][ T6825] netlink: 'syz.0.575': attribute type 3 has an invalid length. [ 125.579176][ T6867] FAULT_INJECTION: forcing a failure. [ 125.579176][ T6867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.616347][ T6867] CPU: 1 PID: 6867 Comm: syz.0.587 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 125.626389][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.636470][ T6867] Call Trace: [ 125.639757][ T6867] [ 125.642708][ T6867] dump_stack_lvl+0x241/0x360 [ 125.647400][ T6867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.652605][ T6867] ? __pfx__printk+0x10/0x10 [ 125.657197][ T6867] ? __pfx_lock_release+0x10/0x10 [ 125.662231][ T6867] should_fail_ex+0x3b0/0x4e0 [ 125.666929][ T6867] _copy_from_user+0x2f/0xe0 [ 125.671532][ T6867] copy_msghdr_from_user+0xae/0x680 [ 125.676749][ T6867] ? __pfx___might_resched+0x10/0x10 [ 125.682046][ T6867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.687952][ T6867] ? __might_fault+0xaa/0x120 [ 125.692659][ T6867] do_recvmmsg+0x40f/0xae0 [ 125.697090][ T6867] ? __pfx_lock_release+0x10/0x10 [ 125.702121][ T6867] ? __pfx_do_recvmmsg+0x10/0x10 [ 125.707088][ T6867] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 125.713000][ T6867] ? ksys_write+0x23e/0x2c0 [ 125.717507][ T6867] ? __pfx_lock_release+0x10/0x10 [ 125.722536][ T6867] ? vfs_write+0x7c4/0xc90 [ 125.726963][ T6867] ? __mutex_unlock_slowpath+0x21d/0x750 [ 125.732616][ T6867] ? __fget_files+0x3f6/0x470 [ 125.737313][ T6867] __x64_sys_recvmmsg+0x199/0x250 [ 125.742347][ T6867] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 125.747902][ T6867] ? do_syscall_64+0x100/0x230 [ 125.752691][ T6867] ? do_syscall_64+0xb6/0x230 [ 125.757464][ T6867] do_syscall_64+0xf3/0x230 [ 125.761969][ T6867] ? clear_bhb_loop+0x35/0x90 [ 125.766674][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.772590][ T6867] RIP: 0033:0x7f82c2975bd9 [ 125.777011][ T6867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.796633][ T6867] RSP: 002b:00007f82c37cf048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 125.805067][ T6867] RAX: ffffffffffffffda RBX: 00007f82c2b03f60 RCX: 00007f82c2975bd9 [ 125.813065][ T6867] RDX: 0000000000000414 RSI: 0000000020000840 RDI: 0000000000000004 [ 125.821040][ T6867] RBP: 00007f82c37cf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.829016][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.837001][ T6867] R13: 000000000000004d R14: 00007f82c2b03f60 R15: 00007ffc7e8501b8 [ 125.844993][ T6867] [ 125.919760][ T6869] tipc: Started in network mode [ 125.944706][ T6869] tipc: Node identity ac1414aa, cluster identity 4711 [ 125.981664][ T6869] tipc: Enabled bearer , priority 10 [ 126.031362][ T6873] netlink: 'syz.2.588': attribute type 63 has an invalid length. [ 126.447708][ T6894] __nla_validate_parse: 10 callbacks suppressed [ 126.447731][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 126.551704][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 126.688957][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 126.977889][ T5118] Bluetooth: hci4: command 0x0405 tx timeout [ 126.979640][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.016501][ T6914] team0: Port device bond0 added [ 127.099470][ T5154] tipc: Node number set to 2886997162 [ 127.193722][ T6922] Bluetooth: MGMT ver 1.22 [ 127.403363][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 127.486121][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 127.686055][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 127.698196][ T6943] FAULT_INJECTION: forcing a failure. [ 127.698196][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.711541][ T6935] bridge_slave_1: left allmulticast mode [ 127.711572][ T6935] bridge_slave_1: left promiscuous mode [ 127.719393][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.773034][ T6943] CPU: 0 PID: 6943 Comm: syz.3.614 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 127.783081][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 127.793170][ T6943] Call Trace: [ 127.796484][ T6943] [ 127.799461][ T6943] dump_stack_lvl+0x241/0x360 [ 127.804184][ T6943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.809432][ T6943] ? __pfx__printk+0x10/0x10 [ 127.811803][ T6950] xt_ecn: cannot match TCP bits for non-tcp packets [ 127.814054][ T6943] ? snprintf+0xda/0x120 [ 127.824913][ T6943] should_fail_ex+0x3b0/0x4e0 [ 127.829640][ T6943] _copy_to_user+0x2f/0xb0 [ 127.834092][ T6943] simple_read_from_buffer+0xca/0x150 [ 127.839518][ T6943] proc_fail_nth_read+0x1e9/0x250 [ 127.844575][ T6943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.850162][ T6943] ? rw_verify_area+0x520/0x6b0 [ 127.855048][ T6943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.860709][ T6943] vfs_read+0x204/0xbc0 [ 127.864914][ T6943] ? __pfx_lock_release+0x10/0x10 [ 127.869976][ T6943] ? __pfx_vfs_read+0x10/0x10 [ 127.874687][ T6943] ? __fget_files+0x29/0x470 [ 127.879397][ T6943] ? __fget_files+0x3f6/0x470 [ 127.884126][ T6943] ksys_read+0x1a0/0x2c0 [ 127.888409][ T6943] ? __pfx_ksys_read+0x10/0x10 [ 127.893204][ T6943] ? do_syscall_64+0x100/0x230 [ 127.897998][ T6943] ? do_syscall_64+0xb6/0x230 [ 127.902704][ T6943] do_syscall_64+0xf3/0x230 [ 127.907288][ T6943] ? clear_bhb_loop+0x35/0x90 [ 127.912020][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.917952][ T6943] RIP: 0033:0x7fadf93746bc [ 127.922408][ T6943] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 127.942052][ T6943] RSP: 002b:00007fadfa151040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.950512][ T6943] RAX: ffffffffffffffda RBX: 00007fadf9503f60 RCX: 00007fadf93746bc [ 127.958521][ T6943] RDX: 000000000000000f RSI: 00007fadfa1510b0 RDI: 0000000000000004 [ 127.966538][ T6943] RBP: 00007fadfa1510a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.974547][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.982550][ T6943] R13: 000000000000000b R14: 00007fadf9503f60 R15: 00007ffcbf6440e8 [ 127.990575][ T6943] [ 128.069591][ T6935] bridge_slave_0: left allmulticast mode [ 128.105687][ T6935] bridge_slave_0: left promiscuous mode [ 128.113023][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.332080][ T6959] tap0: tun_chr_ioctl cmd 1074025673 [ 128.607283][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 128.648622][ T6977] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2920 [ 128.704421][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 129.550792][ T7008] tipc: Enabled bearer , priority 0 [ 129.569009][ T7014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.634'. [ 129.611011][ T7010] netlink: 'syz.4.637': attribute type 3 has an invalid length. [ 129.660607][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 129.850437][ T7018] bridge_slave_1: left allmulticast mode [ 129.867514][ T7018] bridge_slave_1: left promiscuous mode [ 129.879105][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.907248][ T7018] bridge_slave_0: left allmulticast mode [ 129.924553][ T7018] bridge_slave_0: left promiscuous mode [ 129.935437][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.204475][ T7007] lo speed is unknown, defaulting to 1000 [ 130.883694][ T7062] netlink: 'syz.0.650': attribute type 3 has an invalid length. [ 131.454871][ T7078] netlink: 'syz.2.655': attribute type 2 has an invalid length. [ 131.683518][ T7083] __nla_validate_parse: 7 callbacks suppressed [ 131.683541][ T7083] netlink: 165 bytes leftover after parsing attributes in process `syz.1.656'. [ 132.180271][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 132.535928][ T7121] netlink: 300 bytes leftover after parsing attributes in process `syz.4.668'. [ 132.677869][ T7125] FAULT_INJECTION: forcing a failure. [ 132.677869][ T7125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.707209][ T7125] CPU: 0 PID: 7125 Comm: syz.0.670 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 132.717284][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 132.718954][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 132.727343][ T7125] Call Trace: [ 132.727357][ T7125] [ 132.727367][ T7125] dump_stack_lvl+0x241/0x360 [ 132.727398][ T7125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.727422][ T7125] ? __pfx__printk+0x10/0x10 [ 132.756950][ T7125] ? __pfx_lock_release+0x10/0x10 [ 132.762019][ T7125] should_fail_ex+0x3b0/0x4e0 [ 132.766744][ T7125] _copy_from_user+0x2f/0xe0 [ 132.769292][ T7126] netlink: 'syz.1.669': attribute type 15 has an invalid length. [ 132.771351][ T7125] do_ip6t_set_ctl+0x73a/0x1270 [ 132.783943][ T7125] ? __pfx___might_resched+0x10/0x10 [ 132.789275][ T7125] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 132.794606][ T7125] ? __pfx_lock_release+0x10/0x10 [ 132.795637][ T7126] netlink: 'syz.1.669': attribute type 18 has an invalid length. [ 132.799661][ T7125] ? __mutex_unlock_slowpath+0x21d/0x750 [ 132.799725][ T7125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.816091][ T7128] netlink: 'syz.4.673': attribute type 21 has an invalid length. [ 132.819193][ T7125] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.831196][ T7128] netlink: 164 bytes leftover after parsing attributes in process `syz.4.673'. [ 132.831768][ T7125] nf_setsockopt+0x295/0x2c0 [ 132.831806][ T7125] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.831833][ T7125] do_sock_setsockopt+0x3af/0x720 [ 132.831871][ T7125] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 132.831900][ T7125] ? __fget_files+0x29/0x470 [ 132.831932][ T7125] ? __fget_files+0x3f6/0x470 [ 132.831974][ T7125] __sys_setsockopt+0x1ae/0x250 [ 132.832017][ T7125] __x64_sys_setsockopt+0xb5/0xd0 [ 132.832052][ T7125] do_syscall_64+0xf3/0x230 [ 132.832076][ T7125] ? clear_bhb_loop+0x35/0x90 [ 132.832107][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.832132][ T7125] RIP: 0033:0x7f82c2975bd9 [ 132.832154][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.832173][ T7125] RSP: 002b:00007f82c37cf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.832198][ T7125] RAX: ffffffffffffffda RBX: 00007f82c2b03f60 RCX: 00007f82c2975bd9 [ 132.832216][ T7125] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 132.832230][ T7125] RBP: 00007f82c37cf0a0 R08: 0000000000000330 R09: 0000000000000000 [ 132.832246][ T7125] R10: 0000000020000980 R11: 0000000000000246 R12: 0000000000000001 [ 132.832261][ T7125] R13: 000000000000004d R14: 00007f82c2b03f60 R15: 00007ffc7e8501b8 [ 132.832295][ T7125] [ 132.977546][ T7133] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 133.131869][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.144532][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.174889][ T7135] netlink: 80 bytes leftover after parsing attributes in process `syz.0.674'. [ 133.245099][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 133.272308][ T7143] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 133.299339][ T7143] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.679'. [ 133.975191][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 134.152456][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 134.514650][ T7195] syzkaller1: entered promiscuous mode [ 134.534657][ T7195] syzkaller1: entered allmulticast mode [ 134.781243][ T7210] syz0: rxe_newlink: already configured on lo [ 134.831322][ T7208] infiniband syz0: set active [ 134.921874][ T7208] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 134.959867][ T25] lo speed is unknown, defaulting to 1000 [ 135.692301][ T7242] netlink: 'syz.3.708': attribute type 31 has an invalid length. [ 136.334179][ T7227] lo speed is unknown, defaulting to 1000 [ 136.554103][ T7278] vlan2: entered promiscuous mode [ 136.578413][ T7278] ip6gretap0: entered promiscuous mode [ 136.601632][ T7278] vlan2: entered allmulticast mode [ 136.618624][ T7278] ip6gretap0: entered allmulticast mode [ 136.641992][ T7278] ip6gretap0: left allmulticast mode [ 136.651337][ T7278] ip6gretap0: left promiscuous mode [ 137.153005][ T7295] __nla_validate_parse: 7 callbacks suppressed [ 137.153028][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 137.513490][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 138.199829][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 138.556200][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'. [ 138.707909][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 138.830657][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 138.865179][ T7359] nbd: couldn't find a device at index 0 [ 139.040672][ T7368] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 139.130370][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 139.234305][ T7376] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.758'. [ 139.674044][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 139.842024][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 139.949915][ T7413] Cannot find add_set index 0 as target [ 141.076654][ T7458] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.495260][ T7486] FAULT_INJECTION: forcing a failure. [ 141.495260][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 141.555809][ T7486] CPU: 0 PID: 7486 Comm: syz.2.796 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 141.565856][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.575948][ T7486] Call Trace: [ 141.579251][ T7486] [ 141.582206][ T7486] dump_stack_lvl+0x241/0x360 [ 141.586923][ T7486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.592162][ T7486] ? __pfx__printk+0x10/0x10 [ 141.596793][ T7486] ? __pfx___might_resched+0x10/0x10 [ 141.602141][ T7486] should_fail_ex+0x3b0/0x4e0 [ 141.606859][ T7486] ? alloc_netdev_mqs+0xb6f/0xff0 [ 141.611913][ T7486] should_failslab+0x9/0x20 [ 141.616449][ T7486] kmalloc_trace_noprof+0x6c/0x2c0 [ 141.621598][ T7486] ? __xdp_rxq_info_reg+0x142/0x290 [ 141.626836][ T7486] alloc_netdev_mqs+0xb6f/0xff0 [ 141.631735][ T7486] rtnl_create_link+0x2f9/0xc20 [ 141.636640][ T7486] rtnl_newlink+0x1423/0x20a0 [ 141.641375][ T7486] ? rtnl_newlink+0xaf1/0x20a0 [ 141.646208][ T7486] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.651283][ T7486] ? mark_lock+0x9a/0x350 [ 141.655655][ T7486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.661673][ T7486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.668033][ T7486] ? lockdep_hardirqs_on+0x99/0x150 [ 141.673255][ T7486] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.678290][ T7486] ? rtnl_get_link+0x10c/0x2d0 [ 141.683052][ T7486] ? rtnetlink_rcv_msg+0x886/0x1180 [ 141.688254][ T7486] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.693284][ T7486] rtnetlink_rcv_msg+0x89b/0x1180 [ 141.698321][ T7486] ? rtnetlink_rcv_msg+0x208/0x1180 [ 141.703532][ T7486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.709020][ T7486] ? __local_bh_enable_ip+0x168/0x200 [ 141.714398][ T7486] ? lockdep_hardirqs_on+0x99/0x150 [ 141.719616][ T7486] ? __local_bh_enable_ip+0x168/0x200 [ 141.725013][ T7486] ? dev_hard_start_xmit+0x773/0x7e0 [ 141.730308][ T7486] ? __dev_queue_xmit+0x2da/0x3e90 [ 141.735430][ T7486] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 141.741163][ T7486] ? __dev_queue_xmit+0x2da/0x3e90 [ 141.746302][ T7486] ? __dev_queue_xmit+0x1763/0x3e90 [ 141.751521][ T7486] ? __dev_queue_xmit+0x2da/0x3e90 [ 141.756648][ T7486] ? irqentry_exit+0x63/0x90 [ 141.761258][ T7486] ? __pfx___dev_queue_xmit+0x10/0x10 [ 141.766642][ T7486] ? __copy_skb_header+0x437/0x5b0 [ 141.771780][ T7486] ? ref_tracker_free+0x643/0x7e0 [ 141.776840][ T7486] netlink_rcv_skb+0x1e3/0x430 [ 141.781628][ T7486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.787120][ T7486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.792431][ T7486] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.797636][ T7486] netlink_unicast+0x7f0/0x990 [ 141.802419][ T7486] ? __pfx_netlink_unicast+0x10/0x10 [ 141.807728][ T7486] ? __virt_addr_valid+0x183/0x520 [ 141.812862][ T7486] ? __check_object_size+0x49c/0x900 [ 141.818169][ T7486] ? bpf_lsm_netlink_send+0x9/0x10 [ 141.823309][ T7486] netlink_sendmsg+0x8e4/0xcb0 [ 141.828092][ T7486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.833381][ T7486] ? __sanitizer_cov_trace_pc+0x37/0x70 [ 141.838933][ T7486] ? __import_iovec+0x536/0x820 [ 141.843787][ T7486] ? aa_sock_msg_perm+0x91/0x160 [ 141.848747][ T7486] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 141.854059][ T7486] ? security_socket_sendmsg+0x87/0xb0 [ 141.859555][ T7486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.864861][ T7486] __sock_sendmsg+0x221/0x270 [ 141.869580][ T7486] ____sys_sendmsg+0x525/0x7d0 [ 141.874367][ T7486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.879670][ T7486] __sys_sendmsg+0x2b0/0x3a0 [ 141.884273][ T7486] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.889391][ T7486] ? vfs_write+0x7c4/0xc90 [ 141.893858][ T7486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.900203][ T7486] ? do_syscall_64+0x100/0x230 [ 141.904984][ T7486] ? do_syscall_64+0xb6/0x230 [ 141.909679][ T7486] do_syscall_64+0xf3/0x230 [ 141.914193][ T7486] ? clear_bhb_loop+0x35/0x90 [ 141.918903][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.924820][ T7486] RIP: 0033:0x7f17d9575bd9 [ 141.929239][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.948850][ T7486] RSP: 002b:00007f17da33f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.957272][ T7486] RAX: ffffffffffffffda RBX: 00007f17d9703f60 RCX: 00007f17d9575bd9 [ 141.965242][ T7486] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 141.973217][ T7486] RBP: 00007f17da33f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.981188][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.989158][ T7486] R13: 000000000000004d R14: 00007f17d9703f60 R15: 00007fff4cc81b08 [ 141.997149][ T7486] [ 142.191885][ T7491] netlink: 'syz.1.800': attribute type 9 has an invalid length. [ 142.574669][ T7514] netlink: 'syz.2.808': attribute type 12 has an invalid length. [ 142.609865][ T7514] __nla_validate_parse: 7 callbacks suppressed [ 142.609886][ T7514] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.808'. [ 142.858728][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 142.910308][ T7527] veth0_vlan: entered allmulticast mode [ 143.093782][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 143.127287][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.813'. [ 143.313648][ T7540] vlan2: entered promiscuous mode [ 143.358832][ T7540] team0: entered promiscuous mode [ 143.363922][ T7540] team_slave_0: entered promiscuous mode [ 143.411402][ T7540] team_slave_1: entered promiscuous mode [ 143.430936][ T7540] bond0: entered promiscuous mode [ 143.447723][ T7540] bond_slave_0: entered promiscuous mode [ 143.468080][ T7540] bond_slave_1: entered promiscuous mode [ 143.490711][ T7540] team0: Device vlan2 is already an upper device of the team interface [ 143.519318][ T7540] team0: left promiscuous mode [ 143.527530][ T7540] team_slave_0: left promiscuous mode [ 143.547974][ T7540] team_slave_1: left promiscuous mode [ 143.568375][ T7540] bond0: left promiscuous mode [ 143.587174][ T7540] bond_slave_0: left promiscuous mode [ 143.617600][ T7540] bond_slave_1: left promiscuous mode [ 143.913851][ T7567] netlink: 72 bytes leftover after parsing attributes in process `syz.1.824'. [ 143.947623][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 144.170663][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 144.211682][ T7583] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 144.251773][ T7583] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.831'. [ 144.891133][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 144.913458][ T7610] veth1_macvtap: left promiscuous mode [ 144.949681][ T7610] macsec0: entered promiscuous mode [ 145.002455][ T7611] veth1_macvtap: entered promiscuous mode [ 145.040796][ T7611] macsec0: left promiscuous mode [ 145.080991][ T7611] macsec0: entered allmulticast mode [ 145.103825][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 145.106355][ T7611] veth1_macvtap: entered allmulticast mode [ 145.374430][ T7620] netlink: 'syz.2.845': attribute type 3 has an invalid length. [ 145.848296][ T7641] netlink: 'syz.3.854': attribute type 10 has an invalid length. [ 145.856656][ T7641] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 145.917584][ T7641] batman_adv: batadv1: Removing interface: netdevsim0 [ 145.969956][ T7641] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 145.984649][ T7641] team0: Failed to send options change via netlink (err -105) [ 145.994654][ T7641] team0: Port device netdevsim0 added [ 146.016561][ T7643] netlink: 'syz.3.854': attribute type 10 has an invalid length. [ 146.038273][ T7643] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 146.073862][ T7643] team0: Failed to send options change via netlink (err -105) [ 146.083873][ T7643] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 146.105044][ T7643] team0: Port device netdevsim0 removed [ 146.142728][ T7643] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 146.154689][ T7643] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 146.796943][ T7675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.180075][ T7692] netlink: 'syz.3.873': attribute type 3 has an invalid length. [ 147.237525][ T7692] netlink: 'syz.3.873': attribute type 3 has an invalid length. [ 147.436208][ T7704] team0: entered promiscuous mode [ 147.473761][ T7704] team_slave_0: entered promiscuous mode [ 147.488169][ T7704] team_slave_1: entered promiscuous mode [ 147.557757][ T7704] team0: left promiscuous mode [ 147.573965][ T7704] team_slave_0: left promiscuous mode [ 147.583660][ T7704] team_slave_1: left promiscuous mode [ 147.666759][ T7715] __nla_validate_parse: 8 callbacks suppressed [ 147.666779][ T7715] netlink: 112 bytes leftover after parsing attributes in process `syz.2.881'. [ 148.017892][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 148.181862][ T7737] ax25_connect(): syz.3.890 uses autobind, please contact jreuter@yaina.de [ 148.740483][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 148.791686][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 148.804811][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.924215][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.006015][ T7771] FAULT_INJECTION: forcing a failure. [ 149.006015][ T7771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.022607][ T7773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.044735][ T7771] CPU: 0 PID: 7771 Comm: syz.4.906 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 149.054769][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 149.064842][ T7771] Call Trace: [ 149.068125][ T7771] [ 149.071056][ T7771] dump_stack_lvl+0x241/0x360 [ 149.075752][ T7771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.080970][ T7771] ? __pfx__printk+0x10/0x10 [ 149.085578][ T7771] ? __pfx_lock_release+0x10/0x10 [ 149.090636][ T7771] ? __lock_acquire+0x1346/0x1fd0 [ 149.095701][ T7771] should_fail_ex+0x3b0/0x4e0 [ 149.100428][ T7771] _copy_from_user+0x2f/0xe0 [ 149.105065][ T7771] kstrtouint_from_user+0xc6/0x190 [ 149.110227][ T7771] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 149.116000][ T7771] ? __pfx_lock_acquire+0x10/0x10 [ 149.121071][ T7771] proc_fail_nth_write+0xaa/0x2d0 [ 149.126214][ T7771] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 149.132166][ T7771] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.137842][ T7771] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.143603][ T7771] vfs_write+0x2a2/0xc90 [ 149.147898][ T7771] ? __pfx_vfs_write+0x10/0x10 [ 149.152711][ T7771] ? __fget_files+0x29/0x470 [ 149.157378][ T7771] ? __fget_files+0x3f6/0x470 [ 149.162121][ T7771] ksys_write+0x1a0/0x2c0 [ 149.166584][ T7771] ? __pfx_ksys_write+0x10/0x10 [ 149.171480][ T7771] ? do_syscall_64+0x100/0x230 [ 149.176292][ T7771] ? do_syscall_64+0xb6/0x230 [ 149.181008][ T7771] do_syscall_64+0xf3/0x230 [ 149.185550][ T7771] ? clear_bhb_loop+0x35/0x90 [ 149.190278][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.196210][ T7771] RIP: 0033:0x7fba0497475f [ 149.200659][ T7771] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 149.220305][ T7771] RSP: 002b:00007fba043ff040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.228756][ T7771] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba0497475f [ 149.236777][ T7771] RDX: 0000000000000001 RSI: 00007fba043ff0b0 RDI: 0000000000000005 [ 149.244778][ T7771] RBP: 00007fba043ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.252923][ T7771] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 149.260924][ T7771] R13: 000000000000000b R14: 00007fba04b03f60 R15: 00007ffca4fa41d8 [ 149.268936][ T7771] [ 149.542665][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 149.686770][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.696703][ T7799] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.914'. [ 149.751989][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 149.753737][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.807777][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.842154][ T5153] IPVS: starting estimator thread 0... [ 149.890364][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.908046][ T7806] netlink: 'syz.0.918': attribute type 2 has an invalid length. [ 149.919511][ T7806] netlink: 52 bytes leftover after parsing attributes in process `syz.0.918'. [ 149.956884][ T7803] IPVS: using max 15 ests per chain, 36000 per kthread [ 150.478874][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 150.745810][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 150.928222][ T7840] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 151.110471][ T7853] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 151.155686][ T7853] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 151.222166][ T7810] syz.2.921: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 151.279943][ T7810] CPU: 1 PID: 7810 Comm: syz.2.921 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 151.289997][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.300100][ T7810] Call Trace: [ 151.303417][ T7810] [ 151.306376][ T7810] dump_stack_lvl+0x241/0x360 [ 151.311101][ T7810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.316358][ T7810] ? __pfx__printk+0x10/0x10 [ 151.320997][ T7810] ? __rcu_read_unlock+0xa1/0x110 [ 151.326097][ T7810] warn_alloc+0x278/0x410 [ 151.330492][ T7810] ? __pfx_warn_alloc+0x10/0x10 [ 151.335421][ T7810] ? translate_table+0x174/0x2330 [ 151.340497][ T7810] ? __get_vm_area_node+0x23d/0x270 [ 151.345735][ T7810] __vmalloc_node_range_noprof+0x69f/0x1460 [ 151.351703][ T7810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.358073][ T7810] ? rcu_is_watching+0x15/0xb0 [ 151.362875][ T7810] ? trace_kmalloc+0x1f/0xd0 [ 151.367534][ T7810] ? __kmalloc_node_noprof+0x247/0x440 [ 151.373032][ T7810] ? kvmalloc_node_noprof+0x72/0x190 [ 151.378365][ T7810] kvmalloc_node_noprof+0x142/0x190 [ 151.383634][ T7810] ? translate_table+0x174/0x2330 [ 151.388717][ T7810] translate_table+0x174/0x2330 [ 151.393661][ T7810] ? __pfx_translate_table+0x10/0x10 [ 151.398971][ T7810] ? __might_fault+0xaa/0x120 [ 151.403675][ T7810] ? __pfx_lock_release+0x10/0x10 [ 151.408728][ T7810] ? __might_fault+0xaa/0x120 [ 151.413440][ T7810] ? __might_fault+0xc6/0x120 [ 151.418144][ T7810] ? _copy_from_user+0xa6/0xe0 [ 151.422919][ T7810] ? copy_from_sockptr_offset+0x6b/0xb0 [ 151.428484][ T7810] do_ip6t_set_ctl+0xe4c/0x1270 [ 151.433358][ T7810] ? __pfx___might_resched+0x10/0x10 [ 151.438660][ T7810] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 151.443963][ T7810] ? __pfx_lock_release+0x10/0x10 [ 151.449011][ T7810] ? __mutex_unlock_slowpath+0x21d/0x750 [ 151.454680][ T7810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.460697][ T7810] nf_setsockopt+0x295/0x2c0 [ 151.465314][ T7810] rawv6_setsockopt+0x327/0x740 [ 151.470180][ T7810] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 151.475572][ T7810] ? aa_sock_opt_perm+0x79/0x120 [ 151.480562][ T7810] ? sock_common_setsockopt+0x37/0xc0 [ 151.485967][ T7810] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 151.491872][ T7810] do_sock_setsockopt+0x3af/0x720 [ 151.497282][ T7810] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 151.502845][ T7810] ? __fget_files+0x29/0x470 [ 151.507459][ T7810] ? __fget_files+0x3f6/0x470 [ 151.512245][ T7810] __sys_setsockopt+0x1ae/0x250 [ 151.517156][ T7810] __x64_sys_setsockopt+0xb5/0xd0 [ 151.522200][ T7810] do_syscall_64+0xf3/0x230 [ 151.526713][ T7810] ? clear_bhb_loop+0x35/0x90 [ 151.531402][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.537311][ T7810] RIP: 0033:0x7f17d9575bd9 [ 151.541742][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.561445][ T7810] RSP: 002b:00007f17da33f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.569893][ T7810] RAX: ffffffffffffffda RBX: 00007f17d9703f60 RCX: 00007f17d9575bd9 [ 151.577963][ T7810] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 151.585939][ T7810] RBP: 00007f17d95e4e60 R08: 00000000000003d0 R09: 0000000000000000 [ 151.593917][ T7810] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 [ 151.601893][ T7810] R13: 000000000000004d R14: 00007f17d9703f60 R15: 00007fff4cc81b08 [ 151.609996][ T7810] [ 151.665703][ T7810] Mem-Info: [ 151.668887][ T7810] active_anon:4075 inactive_anon:0 isolated_anon:0 [ 151.668887][ T7810] active_file:1444 inactive_file:38160 isolated_file:0 [ 151.668887][ T7810] unevictable:768 dirty:156 writeback:0 [ 151.668887][ T7810] slab_reclaimable:8697 slab_unreclaimable:102233 [ 151.668887][ T7810] mapped:13402 shmem:1230 pagetables:752 [ 151.668887][ T7810] sec_pagetables:0 bounce:0 [ 151.668887][ T7810] kernel_misc_reclaimable:0 [ 151.668887][ T7810] free:1386301 free_pcp:891 free_cma:0 [ 151.742490][ T7810] Node 0 active_anon:16100kB inactive_anon:0kB active_file:5776kB inactive_file:152556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53608kB dirty:624kB writeback:0kB shmem:3384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10444kB pagetables:2908kB sec_pagetables:0kB all_unreclaimable? no [ 151.881648][ T7810] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 151.963349][ T7810] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.008370][ T7810] lowmem_reserve[]: 0 2571 2571 0 0 [ 152.021397][ T7810] Node 0 DMA32 free:1586992kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:15864kB inactive_anon:0kB active_file:5776kB inactive_file:152240kB unevictable:1536kB writepending:624kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:1824kB local_pcp:1020kB free_cma:0kB [ 152.072280][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 152.085285][ T7879] syz_tun: entered promiscuous mode [ 152.091941][ T7810] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 152.120938][ T7879] batadv_slave_0: entered promiscuous mode [ 152.133335][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 152.139088][ T7810] Node 1 Normal free:3945772kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.170372][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 152.183319][ T7810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.214965][ T7810] Node 0 DMA32: 3*4kB (M) 42*8kB (ME) 58*16kB (UME) 110*32kB (UME) 54*64kB (UME) 30*128kB (UME) 41*256kB (UM) 44*512kB (UME) 14*1024kB (UM) 2*2048kB (M) 372*4096kB (ME) = 1587260kB [ 152.296095][ T7810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 152.337736][ T7810] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 7*16kB (UM) 9*32kB (UM) 6*64kB (U) 4*128kB (U) 2*256kB (UM) 3*512kB (UM) 4*1024kB (U) 3*2048kB (U) 960*4096kB (M) = 3945772kB [ 152.355178][ T7810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.365136][ T7810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.374868][ T7810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.423750][ T7810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.437201][ T7893] FAULT_INJECTION: forcing a failure. [ 152.437201][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 152.450806][ T7810] 40837 total pagecache pages [ 152.459839][ T7893] CPU: 1 PID: 7893 Comm: syz.1.945 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 152.466040][ T7810] 0 pages in swap cache [ 152.469840][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.469859][ T7893] Call Trace: [ 152.469870][ T7893] [ 152.469881][ T7893] dump_stack_lvl+0x241/0x360 [ 152.484135][ T7810] Free swap = 124996kB [ 152.487374][ T7893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.487409][ T7893] ? __pfx__printk+0x10/0x10 [ 152.487447][ T7893] should_fail_ex+0x3b0/0x4e0 [ 152.487483][ T7893] ? rtnl_newlink+0xf2/0x20a0 [ 152.487517][ T7893] should_failslab+0x9/0x20 [ 152.493863][ T7810] Total swap = 124996kB [ 152.495099][ T7893] kmalloc_trace_noprof+0x6c/0x2c0 [ 152.503014][ T7810] 2097051 pages RAM [ 152.504459][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 152.512060][ T7810] 0 pages HighMem/MovableOnly [ 152.513788][ T7893] rtnl_newlink+0xf2/0x20a0 [ 152.513855][ T7893] ? __mutex_trylock_common+0x183/0x2e0 [ 152.520002][ T7810] 400874 pages reserved [ 152.523012][ T7893] ? __pfx___might_resched+0x10/0x10 [ 152.523046][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 152.557765][ T7810] 0 pages cma reserved [ 152.559973][ T7893] ? __pfx___mutex_trylock_common+0x10/0x10 [ 152.560018][ T7893] ? rcu_is_watching+0x15/0xb0 [ 152.585174][ T7893] ? trace_contention_end+0x3c/0x120 [ 152.590510][ T7893] ? __mutex_lock+0x2ef/0xd70 [ 152.595246][ T7893] ? rcu_read_unlock+0x87/0xa0 [ 152.600057][ T7893] ? rtnetlink_rcv_msg+0x842/0x1180 [ 152.605288][ T7893] ? __pfx_lock_release+0x10/0x10 [ 152.610345][ T7893] ? __pfx___mutex_lock+0x10/0x10 [ 152.615430][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 152.620495][ T7893] rtnetlink_rcv_msg+0x89b/0x1180 [ 152.625557][ T7893] ? rtnetlink_rcv_msg+0x208/0x1180 [ 152.630796][ T7893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.636652][ T7893] ? __local_bh_enable_ip+0x168/0x200 [ 152.642056][ T7893] ? lockdep_hardirqs_on+0x99/0x150 [ 152.647299][ T7893] ? __local_bh_enable_ip+0x168/0x200 [ 152.652698][ T7893] ? dev_hard_start_xmit+0x773/0x7e0 [ 152.658022][ T7893] ? __dev_queue_xmit+0x2da/0x3e90 [ 152.663175][ T7893] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 152.668960][ T7893] ? __dev_queue_xmit+0x2da/0x3e90 [ 152.674126][ T7893] ? __dev_queue_xmit+0x1763/0x3e90 [ 152.679354][ T7893] ? kasan_save_track+0x51/0x80 [ 152.684237][ T7893] ? do_syscall_64+0xf3/0x230 [ 152.688949][ T7893] ? __dev_queue_xmit+0x2da/0x3e90 [ 152.694102][ T7893] ? __pfx___dev_queue_xmit+0x10/0x10 [ 152.699532][ T7893] ? ref_tracker_free+0x643/0x7e0 [ 152.704604][ T7893] netlink_rcv_skb+0x1e3/0x430 [ 152.709410][ T7893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.714904][ T7893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.720256][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.725495][ T7893] netlink_unicast+0x7f0/0x990 [ 152.730321][ T7893] ? __pfx_netlink_unicast+0x10/0x10 [ 152.735634][ T7893] ? __virt_addr_valid+0x183/0x520 [ 152.740791][ T7893] ? __check_object_size+0x49c/0x900 [ 152.746116][ T7893] ? bpf_lsm_netlink_send+0x9/0x10 [ 152.751277][ T7893] netlink_sendmsg+0x8e4/0xcb0 [ 152.756088][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.761411][ T7893] ? __import_iovec+0x536/0x820 [ 152.766298][ T7893] ? aa_sock_msg_perm+0x91/0x160 [ 152.771278][ T7893] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 152.776594][ T7893] ? security_socket_sendmsg+0x87/0xb0 [ 152.782090][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.787405][ T7893] __sock_sendmsg+0x221/0x270 [ 152.792250][ T7893] ____sys_sendmsg+0x525/0x7d0 [ 152.797064][ T7893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.802405][ T7893] __sys_sendmsg+0x2b0/0x3a0 [ 152.807033][ T7893] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.812183][ T7893] ? vfs_write+0x7c4/0xc90 [ 152.816682][ T7893] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.823052][ T7893] ? do_syscall_64+0x100/0x230 [ 152.827851][ T7893] ? do_syscall_64+0xb6/0x230 [ 152.832563][ T7893] do_syscall_64+0xf3/0x230 [ 152.837095][ T7893] ? clear_bhb_loop+0x35/0x90 [ 152.841803][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.847721][ T7893] RIP: 0033:0x7fb7f3575bd9 [ 152.852153][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.871791][ T7893] RSP: 002b:00007fb7f4348048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.880252][ T7893] RAX: ffffffffffffffda RBX: 00007fb7f3704038 RCX: 00007fb7f3575bd9 [ 152.888423][ T7893] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 152.896420][ T7893] RBP: 00007fb7f43480a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.904418][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.912415][ T7893] R13: 000000000000006e R14: 00007fb7f3704038 R15: 00007ffde80cf0b8 [ 152.920431][ T7893] [ 153.218159][ T7909] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 153.241082][ T7909] __nla_validate_parse: 6 callbacks suppressed [ 153.241105][ T7909] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.950'. [ 153.283755][ T7909] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 153.300893][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 153.447495][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 153.459825][ T7918] Cannot find del_set index 4 as target [ 153.563627][ T7918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.954'. [ 153.700220][ T7923] netlink: 'syz.4.956': attribute type 11 has an invalid length. [ 153.707502][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 153.788910][ T7927] netlink: 'syz.4.956': attribute type 11 has an invalid length. [ 153.865479][ T7929] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 153.883978][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 153.913593][ T7929] bridge0: port 3(batadv0) entered blocking state [ 153.937068][ T7929] bridge0: port 3(batadv0) entered disabled state [ 153.964135][ T7929] batadv0: entered allmulticast mode [ 154.008754][ T7929] batadv0: entered promiscuous mode [ 154.051433][ T7929] bridge0: port 3(batadv0) entered blocking state [ 154.058164][ T7929] bridge0: port 3(batadv0) entered forwarding state [ 154.117698][ T7932] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 154.211486][ T7932] bridge0: port 3(batadv0) entered disabled state [ 154.296284][ T7932] batadv0: left allmulticast mode [ 154.301391][ T7932] batadv0: left promiscuous mode [ 154.316649][ T7932] bridge0: port 3(batadv0) entered disabled state [ 154.426577][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.435057][ T7932] batadv0: entered promiscuous mode [ 154.491269][ T7932] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.732091][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.869821][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.965'. [ 154.890165][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 155.151441][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 155.185048][ T7979] netlink: 165 bytes leftover after parsing attributes in process `syz.4.968'. [ 156.902483][ T8051] nbd: device at index 1 is going down [ 158.686625][ T8130] vxcan4: entered allmulticast mode [ 158.972618][ T8142] __nla_validate_parse: 20 callbacks suppressed [ 158.972640][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1023'. [ 159.095259][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 159.452931][ T8163] netlink: 'syz.2.1030': attribute type 13 has an invalid length. [ 159.703924][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 159.954352][ T8181] trusted_key: syz.1.1041 sent an empty control message without MSG_MORE. [ 160.001575][ T8181] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1041'. [ 160.037064][ T8181] ax25_connect(): syz.1.1041 uses autobind, please contact jreuter@yaina.de [ 160.207814][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'. [ 160.257841][ T8191] netlink: 'syz.3.1045': attribute type 11 has an invalid length. [ 160.277481][ T8191] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1045'. [ 160.303986][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 160.401538][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 160.467409][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1044'. [ 160.671575][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 160.696391][ T8210] netlink: 'syz.1.1050': attribute type 1 has an invalid length. [ 161.772654][ T8242] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 162.474885][ T8267] netlink: 'syz.2.1073': attribute type 22 has an invalid length. [ 162.692033][ T8273] netlink: 'syz.2.1075': attribute type 21 has an invalid length. [ 163.087681][ T8293] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 163.126001][ T8293] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 163.232765][ T8294] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 163.315877][ T8294] batman_adv: batadv0: Adding interface: team0 [ 163.322193][ T8294] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.390592][ T8294] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 164.187784][ T8314] __nla_validate_parse: 13 callbacks suppressed [ 164.187806][ T8314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1089'. [ 164.361135][ T8324] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 164.807900][ T8350] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1099'. [ 165.001933][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 165.064684][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1102'. [ 165.219693][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 165.497046][ T8372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.566240][ T8371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.590535][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 165.700075][ T8379] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1111'. [ 166.240801][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 166.373700][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 166.918835][ T8418] netlink: 728 bytes leftover after parsing attributes in process `syz.3.1123'. [ 167.140614][ T8423] FAULT_INJECTION: forcing a failure. [ 167.140614][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 167.154602][ T8423] CPU: 1 PID: 8423 Comm: syz.1.1125 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 167.164715][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.174891][ T8423] Call Trace: [ 167.178197][ T8423] [ 167.181144][ T8423] dump_stack_lvl+0x241/0x360 [ 167.185864][ T8423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.191100][ T8423] ? __pfx__printk+0x10/0x10 [ 167.195920][ T8423] ? __pfx___might_resched+0x10/0x10 [ 167.201250][ T8423] ? deref_stack_reg+0x1c7/0x260 [ 167.206226][ T8423] should_fail_ex+0x3b0/0x4e0 [ 167.210958][ T8423] should_failslab+0x9/0x20 [ 167.215516][ T8423] __kmalloc_node_noprof+0xdf/0x440 [ 167.220775][ T8423] ? kvmalloc_node_noprof+0x72/0x190 [ 167.226095][ T8423] kvmalloc_node_noprof+0x72/0x190 [ 167.231241][ T8423] bpf_test_run_xdp_live+0x207/0x2110 [ 167.236738][ T8423] ? arch_stack_walk+0x16d/0x1b0 [ 167.241738][ T8423] ? stack_trace_save+0x118/0x1d0 [ 167.246818][ T8423] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 167.252667][ T8423] ? mark_lock+0x9a/0x350 [ 167.257087][ T8423] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 167.263027][ T8423] ? __might_fault+0xaa/0x120 [ 167.267750][ T8423] ? __might_fault+0xc6/0x120 [ 167.272468][ T8423] ? _copy_from_user+0xa6/0xe0 [ 167.277263][ T8423] ? bpf_test_init+0x15a/0x180 [ 167.282072][ T8423] ? xdp_convert_md_to_buff+0x5b/0x330 [ 167.287571][ T8423] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 167.293020][ T8423] ? __pfx_lock_release+0x10/0x10 [ 167.298104][ T8423] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.303948][ T8423] ? __fget_files+0x29/0x470 [ 167.308596][ T8423] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 167.314442][ T8423] bpf_prog_test_run+0x33a/0x3b0 [ 167.319432][ T8423] __sys_bpf+0x48d/0x810 [ 167.323720][ T8423] ? __pfx___sys_bpf+0x10/0x10 [ 167.328542][ T8423] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 167.334558][ T8423] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.340920][ T8423] ? do_syscall_64+0x100/0x230 [ 167.345727][ T8423] __x64_sys_bpf+0x7c/0x90 [ 167.350192][ T8423] do_syscall_64+0xf3/0x230 [ 167.354808][ T8423] ? clear_bhb_loop+0x35/0x90 [ 167.359519][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.365441][ T8423] RIP: 0033:0x7fb7f3575bd9 [ 167.369892][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.389614][ T8423] RSP: 002b:00007fb7f4369048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.398075][ T8423] RAX: ffffffffffffffda RBX: 00007fb7f3703f60 RCX: 00007fb7f3575bd9 [ 167.406083][ T8423] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 167.414080][ T8423] RBP: 00007fb7f43690a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.422069][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.430070][ T8423] R13: 000000000000000b R14: 00007fb7f3703f60 R15: 00007ffde80cf0b8 [ 167.438184][ T8423] [ 167.989314][ T8442] netlink: 'syz.2.1133': attribute type 3 has an invalid length. [ 168.891794][ T8484] nbd: socks must be embedded in a SOCK_ITEM attr [ 169.245860][ T8498] __nla_validate_parse: 1 callbacks suppressed [ 169.245882][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 169.325807][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 169.483923][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 169.773752][ T8522] FAULT_INJECTION: forcing a failure. [ 169.773752][ T8522] name failslab, interval 1, probability 0, space 0, times 0 [ 169.840311][ T8522] CPU: 0 PID: 8522 Comm: syz.2.1164 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 169.850436][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.860523][ T8522] Call Trace: [ 169.863832][ T8522] [ 169.866829][ T8522] dump_stack_lvl+0x241/0x360 [ 169.871546][ T8522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.876792][ T8522] ? __pfx__printk+0x10/0x10 [ 169.881429][ T8522] should_fail_ex+0x3b0/0x4e0 [ 169.886154][ T8522] ? nfnetlink_rcv+0x11b8/0x2a90 [ 169.891128][ T8522] should_failslab+0x9/0x20 [ 169.895670][ T8522] kmalloc_trace_noprof+0x6c/0x2c0 [ 169.900829][ T8522] nfnetlink_rcv+0x11b8/0x2a90 [ 169.905679][ T8522] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 169.910888][ T8522] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.916124][ T8522] ? skb_clone+0x240/0x390 [ 169.920587][ T8522] ? __pfx_lock_release+0x10/0x10 [ 169.925671][ T8522] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.930911][ T8522] netlink_unicast+0x7f0/0x990 [ 169.935723][ T8522] ? __pfx_netlink_unicast+0x10/0x10 [ 169.941036][ T8522] ? __virt_addr_valid+0x183/0x520 [ 169.946189][ T8522] ? __check_object_size+0x49c/0x900 [ 169.951511][ T8522] ? bpf_lsm_netlink_send+0x9/0x10 [ 169.956667][ T8522] netlink_sendmsg+0x8e4/0xcb0 [ 169.961483][ T8522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.966807][ T8522] ? __import_iovec+0x536/0x820 [ 169.971694][ T8522] ? aa_sock_msg_perm+0x91/0x160 [ 169.976672][ T8522] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 169.981991][ T8522] ? security_socket_sendmsg+0x87/0xb0 [ 169.987495][ T8522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.992810][ T8522] __sock_sendmsg+0x221/0x270 [ 169.997527][ T8522] ____sys_sendmsg+0x525/0x7d0 [ 170.002366][ T8522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.007719][ T8522] __sys_sendmsg+0x2b0/0x3a0 [ 170.012354][ T8522] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.017533][ T8522] ? vfs_write+0x7c4/0xc90 [ 170.022035][ T8522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.028401][ T8522] ? do_syscall_64+0x100/0x230 [ 170.033202][ T8522] ? do_syscall_64+0xb6/0x230 [ 170.037914][ T8522] do_syscall_64+0xf3/0x230 [ 170.042454][ T8522] ? clear_bhb_loop+0x35/0x90 [ 170.047169][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.053091][ T8522] RIP: 0033:0x7f17d9575bd9 [ 170.057550][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.077188][ T8522] RSP: 002b:00007f17da33f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.085646][ T8522] RAX: ffffffffffffffda RBX: 00007f17d9703f60 RCX: 00007f17d9575bd9 [ 170.093659][ T8522] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 170.101665][ T8522] RBP: 00007f17da33f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.109679][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.113314][ T8532] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.1167'. [ 170.117658][ T8522] R13: 000000000000004d R14: 00007f17d9703f60 R15: 00007fff4cc81b08 [ 170.117698][ T8522] [ 170.190414][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 170.385091][ T8537] netlink: 'syz.2.1169': attribute type 11 has an invalid length. [ 170.636664][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 170.960468][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 171.169742][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 171.458098][ T8571] syzkaller0: entered promiscuous mode [ 171.478290][ T8571] syzkaller0: entered allmulticast mode [ 173.482257][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 173.554556][ T8590] team1: Mode "" not found [ 173.580985][ T8591] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1186'. [ 173.799539][ T8622] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.809274][ T8622] TCP: tcp_parse_options: Illegal window scaling value 124 > 14 received [ 174.138682][ T8639] netlink: 'syz.4.1201': attribute type 2 has an invalid length. [ 174.479472][ T8651] __nla_validate_parse: 1 callbacks suppressed [ 174.479494][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 174.672430][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 175.497752][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 175.546462][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 175.782103][ T8692] team_slave_0: entered promiscuous mode [ 175.788262][ T8692] team_slave_1: entered promiscuous mode [ 175.901557][ T8692] team_slave_0: left promiscuous mode [ 175.907129][ T8692] team_slave_1: left promiscuous mode [ 176.012079][ T8706] netlink: 'syz.2.1225': attribute type 4 has an invalid length. [ 176.273375][ T8714] netlink: 'syz.0.1229': attribute type 11 has an invalid length. [ 176.340795][ T8714] netlink: 'syz.0.1229': attribute type 11 has an invalid length. [ 176.447316][ T8719] netlink: 'syz.1.1231': attribute type 2 has an invalid length. [ 176.484367][ T8719] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 176.516433][ T8719] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1231'. [ 176.552566][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 176.609905][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 177.160072][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 177.374451][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 177.631421][ T8778] netlink: 'syz.0.1249': attribute type 4 has an invalid length. [ 177.802927][ T8778] infiniband syz0: set down [ 177.824929][ T8786] bond0: (slave bond_slave_0): Releasing backup interface [ 177.863546][ T8] lo speed is unknown, defaulting to 1000 [ 177.929771][ T8788] team0: Port device wlan1 added [ 177.951657][ T8] lo speed is unknown, defaulting to 1000 [ 177.974506][ T8789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.029029][ T8789] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.029968][ T8791] FAULT_INJECTION: forcing a failure. [ 178.029968][ T8791] name failslab, interval 1, probability 0, space 0, times 0 [ 178.051096][ T8791] CPU: 1 PID: 8791 Comm: syz.1.1255 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 178.052082][ T8789] gretap1: entered promiscuous mode [ 178.061182][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 178.061202][ T8791] Call Trace: [ 178.061213][ T8791] [ 178.061224][ T8791] dump_stack_lvl+0x241/0x360 [ 178.061258][ T8791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.061284][ T8791] ? __pfx__printk+0x10/0x10 [ 178.061318][ T8791] should_fail_ex+0x3b0/0x4e0 [ 178.061356][ T8791] should_failslab+0x9/0x20 [ 178.061389][ T8791] __kmalloc_node_noprof+0xdf/0x440 [ 178.061423][ T8791] ? kvmalloc_node_noprof+0x72/0x190 [ 178.061453][ T8791] kvmalloc_node_noprof+0x72/0x190 [ 178.061479][ T8791] page_pool_create_percpu+0x2b0/0x7c0 [ 178.061513][ T8791] bpf_test_run_xdp_live+0x2cd/0x2110 [ 178.061542][ T8791] ? arch_stack_walk+0x16d/0x1b0 [ 178.061594][ T8791] ? __lock_acquire+0x1346/0x1fd0 [ 178.061646][ T8791] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 178.061672][ T8791] ? mark_lock+0x9a/0x350 [ 178.061740][ T8791] ? __pfx_lock_release+0x10/0x10 [ 178.061772][ T8791] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 178.112294][ T8789] gretap1: entered allmulticast mode [ 178.117386][ T8791] ? __might_fault+0xaa/0x120 [ 178.117429][ T8791] ? __might_fault+0xc6/0x120 [ 178.117466][ T8791] ? _copy_from_user+0xa6/0xe0 [ 178.117494][ T8791] ? bpf_test_init+0x15a/0x180 [ 178.117519][ T8791] ? xdp_convert_md_to_buff+0x5b/0x330 [ 178.117550][ T8791] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 178.117585][ T8791] ? __pfx_lock_release+0x10/0x10 [ 178.117620][ T8791] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 178.117646][ T8791] ? __fget_files+0x29/0x470 [ 178.215003][ T8791] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 178.220850][ T8791] bpf_prog_test_run+0x33a/0x3b0 [ 178.225815][ T8791] __sys_bpf+0x48d/0x810 [ 178.230094][ T8791] ? __pfx___sys_bpf+0x10/0x10 [ 178.234895][ T8791] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.240893][ T8791] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.247322][ T8791] ? do_syscall_64+0x100/0x230 [ 178.252103][ T8791] __x64_sys_bpf+0x7c/0x90 [ 178.256538][ T8791] do_syscall_64+0xf3/0x230 [ 178.261050][ T8791] ? clear_bhb_loop+0x35/0x90 [ 178.265743][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.271644][ T8791] RIP: 0033:0x7fb7f3575bd9 [ 178.276065][ T8791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.295697][ T8791] RSP: 002b:00007fb7f4369048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.304129][ T8791] RAX: ffffffffffffffda RBX: 00007fb7f3703f60 RCX: 00007fb7f3575bd9 [ 178.312111][ T8791] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 178.320106][ T8791] RBP: 00007fb7f43690a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.328084][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.336082][ T8791] R13: 000000000000000b R14: 00007fb7f3703f60 R15: 00007ffde80cf0b8 [ 178.344076][ T8791] [ 178.427733][ T8791] page_pool_create_percpu() gave up with errno -12 [ 178.586638][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 178.652085][ T8799] netlink: 'syz.3.1259': attribute type 4 has an invalid length. [ 178.995740][ T8812] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 179.058022][ T8814] bond0: (slave netdevsim0): Releasing backup interface [ 179.081027][ T8814] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 179.144806][ T8814] batman_adv: batadv2: Adding interface: netdevsim0 [ 179.198001][ T8814] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.238956][ T8814] batman_adv: batadv2: Not using interface netdevsim0 (retrying later): interface not active [ 179.419210][ T8832] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 179.479150][ T8832] FAULT_INJECTION: forcing a failure. [ 179.479150][ T8832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.546107][ T8832] CPU: 0 PID: 8832 Comm: syz.2.1273 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 179.556413][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 179.566501][ T8832] Call Trace: [ 179.569788][ T8832] [ 179.572725][ T8832] dump_stack_lvl+0x241/0x360 [ 179.577420][ T8832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.582636][ T8832] ? __pfx__printk+0x10/0x10 [ 179.587240][ T8832] ? snprintf+0xda/0x120 [ 179.591499][ T8832] should_fail_ex+0x3b0/0x4e0 [ 179.596199][ T8832] _copy_to_user+0x2f/0xb0 [ 179.600628][ T8832] simple_read_from_buffer+0xca/0x150 [ 179.606020][ T8832] proc_fail_nth_read+0x1e9/0x250 [ 179.611058][ T8832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.616615][ T8832] ? rw_verify_area+0x520/0x6b0 [ 179.621488][ T8832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.627047][ T8832] vfs_read+0x204/0xbc0 [ 179.631223][ T8832] ? __pfx_lock_release+0x10/0x10 [ 179.636263][ T8832] ? __pfx_sock_write_iter+0x10/0x10 [ 179.641568][ T8832] ? __pfx_vfs_read+0x10/0x10 [ 179.646259][ T8832] ? __fget_files+0x29/0x470 [ 179.650947][ T8832] ? __fget_files+0x3f6/0x470 [ 179.655672][ T8832] ksys_read+0x1a0/0x2c0 [ 179.659937][ T8832] ? __pfx_ksys_read+0x10/0x10 [ 179.664801][ T8832] ? do_syscall_64+0x100/0x230 [ 179.669574][ T8832] ? do_syscall_64+0xb6/0x230 [ 179.674260][ T8832] do_syscall_64+0xf3/0x230 [ 179.678773][ T8832] ? clear_bhb_loop+0x35/0x90 [ 179.683461][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.689377][ T8832] RIP: 0033:0x7f17d95746bc [ 179.693795][ T8832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 179.713771][ T8832] RSP: 002b:00007f17da33f040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.722197][ T8832] RAX: ffffffffffffffda RBX: 00007f17d9703f60 RCX: 00007f17d95746bc [ 179.730278][ T8832] RDX: 000000000000000f RSI: 00007f17da33f0b0 RDI: 0000000000000004 [ 179.738261][ T8832] RBP: 00007f17da33f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.746241][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.754224][ T8832] R13: 000000000000004d R14: 00007f17d9703f60 R15: 00007fff4cc81b08 [ 179.762213][ T8832] [ 179.785128][ T8838] __nla_validate_parse: 3 callbacks suppressed [ 179.785149][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 179.785262][ T8839] netlink: 'syz.1.1277': attribute type 3 has an invalid length. [ 179.831714][ T8838] vxcan5: entered promiscuous mode [ 179.951356][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 179.983160][ T8844] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 180.004513][ T8844] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 180.037728][ T8838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1274'. [ 180.055721][ T8838] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1274'. [ 180.074535][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 180.311778][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 180.418841][ T8860] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1285'. [ 180.517633][ T8860] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 180.852592][ T8884] No such timeout policy "syz0" [ 180.938419][ T8885] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1291'. [ 181.180064][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 181.378867][ T8901] batman_adv: batadv0: Adding interface: ipvlan2 [ 181.429917][ T8901] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.490466][ T8901] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 181.532151][ T8909] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 181.763126][ T8880] lo speed is unknown, defaulting to 1000 [ 182.042854][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 182.084266][ T8922] netlink: 'syz.2.1306': attribute type 14 has an invalid length. [ 183.185044][ T8948] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 183.271286][ T8956] Κό: entered promiscuous mode [ 183.700647][ T8980] bond0: left promiscuous mode [ 183.742201][ T8980] bond_slave_0: left promiscuous mode [ 183.764050][ T8980] bond_slave_1: left promiscuous mode [ 183.795685][ T8980] batadv0: left promiscuous mode [ 183.840694][ T8980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.893149][ T8980] bond0: entered promiscuous mode [ 183.915945][ T8980] bond_slave_0: entered promiscuous mode [ 183.923121][ T8980] bond_slave_1: entered promiscuous mode [ 183.960432][ T8980] batadv0: entered promiscuous mode [ 183.997745][ T8980] team0: Port device bond0 added [ 184.414632][ T9011] syz.3.1335[9011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.414814][ T9011] syz.3.1335[9011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.510063][ T9015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.618614][ T9020] veth0_vlan: mtu greater than device maximum [ 184.967677][ T9035] __nla_validate_parse: 10 callbacks suppressed [ 184.967701][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 185.228523][ T9045] syz.3.1349[9045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.228699][ T9045] syz.3.1349[9045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.290788][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 185.755702][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 185.959339][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 185.975864][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 186.116989][ T9082] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1363'. [ 186.144389][ T9082] 0·: renamed from hsr0 (while UP) [ 186.158239][ T9090] syz.2.1365[9090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.158420][ T9090] syz.2.1365[9090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.202838][ T9082] 0·: entered allmulticast mode [ 186.243310][ T9082] hsr_slave_0: entered allmulticast mode [ 186.264604][ T9082] hsr_slave_1: entered allmulticast mode [ 186.286990][ T9082] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 186.322844][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 186.344023][ T9098] netlink: 'syz.4.1366': attribute type 4 has an invalid length. [ 186.359238][ T9098] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1366'. [ 186.929722][ T9119] FAULT_INJECTION: forcing a failure. [ 186.929722][ T9119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.930410][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 186.943313][ T9119] CPU: 1 PID: 9119 Comm: syz.1.1375 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 186.962004][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 186.972082][ T9119] Call Trace: [ 186.975368][ T9119] [ 186.978302][ T9119] dump_stack_lvl+0x241/0x360 [ 186.982994][ T9119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.988204][ T9119] ? __pfx__printk+0x10/0x10 [ 186.992807][ T9119] ? snprintf+0xda/0x120 [ 186.997064][ T9119] should_fail_ex+0x3b0/0x4e0 [ 187.001774][ T9119] _copy_to_user+0x2f/0xb0 [ 187.006214][ T9119] simple_read_from_buffer+0xca/0x150 [ 187.011598][ T9119] proc_fail_nth_read+0x1e9/0x250 [ 187.016633][ T9119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.022190][ T9119] ? rw_verify_area+0x520/0x6b0 [ 187.027045][ T9119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.032610][ T9119] vfs_read+0x204/0xbc0 [ 187.036774][ T9119] ? __pfx_lock_release+0x10/0x10 [ 187.041809][ T9119] ? __pfx_vfs_read+0x10/0x10 [ 187.046497][ T9119] ? __fget_files+0x29/0x470 [ 187.051100][ T9119] ? __fget_files+0x3f6/0x470 [ 187.055802][ T9119] ksys_read+0x1a0/0x2c0 [ 187.060060][ T9119] ? __pfx_ksys_read+0x10/0x10 [ 187.064832][ T9119] ? do_syscall_64+0x100/0x230 [ 187.069626][ T9119] ? do_syscall_64+0xb6/0x230 [ 187.074314][ T9119] do_syscall_64+0xf3/0x230 [ 187.078842][ T9119] ? clear_bhb_loop+0x35/0x90 [ 187.083533][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.089437][ T9119] RIP: 0033:0x7fb7f35746bc [ 187.093870][ T9119] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 187.113494][ T9119] RSP: 002b:00007fb7f4369040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.121951][ T9119] RAX: ffffffffffffffda RBX: 00007fb7f3703f60 RCX: 00007fb7f35746bc [ 187.129930][ T9119] RDX: 000000000000000f RSI: 00007fb7f43690b0 RDI: 0000000000000004 [ 187.138000][ T9119] RBP: 00007fb7f43690a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.145976][ T9119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.153953][ T9119] R13: 000000000000000b R14: 00007fb7f3703f60 R15: 00007ffde80cf0b8 [ 187.161944][ T9119] [ 187.352795][ T9126] syz.2.1378[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.355746][ T9126] syz.2.1378[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.441977][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 188.005206][ T9156] netlink: 'syz.3.1387': attribute type 11 has an invalid length. [ 188.059636][ T9156] netlink: 'syz.3.1387': attribute type 11 has an invalid length. [ 188.278260][ T9170] syz.1.1393[9170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.296371][ T9170] syz.1.1393[9170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.616473][ T9184] netlink: 'syz.0.1399': attribute type 9 has an invalid length. [ 188.654168][ T9184] bond0: entered promiscuous mode [ 188.660288][ T9184] bond_slave_0: entered promiscuous mode [ 188.667073][ T9184] bond_slave_1: entered promiscuous mode [ 188.674248][ T9184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.691652][ T9184] bond0: left promiscuous mode [ 188.725396][ T9184] bond_slave_0: left promiscuous mode [ 188.728149][ T9192] FAULT_INJECTION: forcing a failure. [ 188.728149][ T9192] name failslab, interval 1, probability 0, space 0, times 0 [ 188.753771][ T9192] CPU: 1 PID: 9192 Comm: syz.1.1402 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 188.764007][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 188.774099][ T9192] Call Trace: [ 188.777405][ T9192] [ 188.780344][ T9192] dump_stack_lvl+0x241/0x360 [ 188.785038][ T9192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.790252][ T9192] ? __pfx__printk+0x10/0x10 [ 188.794862][ T9192] ? __pfx___might_resched+0x10/0x10 [ 188.800174][ T9192] should_fail_ex+0x3b0/0x4e0 [ 188.804871][ T9192] should_failslab+0x9/0x20 [ 188.809397][ T9192] __kmalloc_node_noprof+0xdf/0x440 [ 188.814644][ T9192] ? kvmalloc_node_noprof+0x72/0x190 [ 188.819945][ T9192] kvmalloc_node_noprof+0x72/0x190 [ 188.825065][ T9192] xt_alloc_table_info+0x3d/0xa0 [ 188.830017][ T9192] do_ip6t_set_ctl+0xba0/0x1270 [ 188.834892][ T9192] ? __pfx___might_resched+0x10/0x10 [ 188.840197][ T9192] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 188.845524][ T9192] ? __pfx_lock_release+0x10/0x10 [ 188.850623][ T9192] ? __mutex_unlock_slowpath+0x21d/0x750 [ 188.856282][ T9192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.862293][ T9192] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.867167][ T9192] nf_setsockopt+0x295/0x2c0 [ 188.871773][ T9192] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 188.877676][ T9192] do_sock_setsockopt+0x3af/0x720 [ 188.882725][ T9192] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 188.888284][ T9192] ? __fget_files+0x29/0x470 [ 188.892907][ T9192] ? __fget_files+0x3f6/0x470 [ 188.897607][ T9192] __sys_setsockopt+0x1ae/0x250 [ 188.902479][ T9192] __x64_sys_setsockopt+0xb5/0xd0 [ 188.907520][ T9192] do_syscall_64+0xf3/0x230 [ 188.912050][ T9192] ? clear_bhb_loop+0x35/0x90 [ 188.916742][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.922647][ T9192] RIP: 0033:0x7fb7f3575bd9 [ 188.927074][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.946777][ T9192] RSP: 002b:00007fb7f4369048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.955202][ T9192] RAX: ffffffffffffffda RBX: 00007fb7f3703f60 RCX: 00007fb7f3575bd9 [ 188.963187][ T9192] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 188.971169][ T9192] RBP: 00007fb7f43690a0 R08: 0000000000000330 R09: 0000000000000000 [ 188.979146][ T9192] R10: 0000000020000980 R11: 0000000000000246 R12: 0000000000000001 [ 188.987122][ T9192] R13: 000000000000000b R14: 00007fb7f3703f60 R15: 00007ffde80cf0b8 [ 188.995140][ T9192] [ 188.999853][ T9184] bond_slave_1: left promiscuous mode [ 189.467028][ T9209] syz.1.1407[9209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.467201][ T9209] syz.1.1407[9209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.618514][ T9215] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 190.165905][ T9245] FAULT_INJECTION: forcing a failure. [ 190.165905][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 190.212490][ T9245] CPU: 1 PID: 9245 Comm: syz.3.1422 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 190.222716][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 190.232809][ T9245] Call Trace: [ 190.236118][ T9245] [ 190.239074][ T9245] dump_stack_lvl+0x241/0x360 [ 190.243792][ T9245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.249026][ T9245] ? __pfx__printk+0x10/0x10 [ 190.253659][ T9245] ? ref_tracker_alloc+0x332/0x490 [ 190.258828][ T9245] should_fail_ex+0x3b0/0x4e0 [ 190.263551][ T9245] ? skb_clone+0x20c/0x390 [ 190.268015][ T9245] should_failslab+0x9/0x20 [ 190.272581][ T9245] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 190.278012][ T9245] skb_clone+0x20c/0x390 [ 190.282306][ T9245] __netlink_deliver_tap+0x3cc/0x7c0 [ 190.287645][ T9245] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.292875][ T9245] netlink_deliver_tap+0x19d/0x1b0 [ 190.298029][ T9245] netlink_unicast+0x7be/0x990 [ 190.302843][ T9245] ? __pfx_netlink_unicast+0x10/0x10 [ 190.308173][ T9245] ? __virt_addr_valid+0x183/0x520 [ 190.313329][ T9245] ? __check_object_size+0x49c/0x900 [ 190.318667][ T9245] ? bpf_lsm_netlink_send+0x9/0x10 [ 190.323911][ T9245] netlink_sendmsg+0x8e4/0xcb0 [ 190.328729][ T9245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.334065][ T9245] ? aa_sock_msg_perm+0x91/0x160 [ 190.339055][ T9245] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 190.344375][ T9245] ? security_socket_sendmsg+0x87/0xb0 [ 190.349877][ T9245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.355200][ T9245] __sock_sendmsg+0x221/0x270 [ 190.359922][ T9245] sock_write_iter+0x2dd/0x400 [ 190.364729][ T9245] ? __pfx_sock_write_iter+0x10/0x10 [ 190.370067][ T9245] ? bpf_lsm_file_permission+0x9/0x10 [ 190.375474][ T9245] ? security_file_permission+0x7f/0xa0 [ 190.381073][ T9245] vfs_write+0xa72/0xc90 [ 190.385363][ T9245] ? __pfx_sock_write_iter+0x10/0x10 [ 190.390686][ T9245] ? __pfx_vfs_write+0x10/0x10 [ 190.395511][ T9245] ksys_write+0x1a0/0x2c0 [ 190.399893][ T9245] ? __pfx_ksys_write+0x10/0x10 [ 190.404790][ T9245] ? do_syscall_64+0x100/0x230 [ 190.409599][ T9245] ? do_syscall_64+0xb6/0x230 [ 190.414318][ T9245] do_syscall_64+0xf3/0x230 [ 190.418862][ T9245] ? clear_bhb_loop+0x35/0x90 [ 190.423592][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.429521][ T9245] RIP: 0033:0x7fadf9375bd9 [ 190.433970][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.453620][ T9245] RSP: 002b:00007fadfa151048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.462079][ T9245] RAX: ffffffffffffffda RBX: 00007fadf9503f60 RCX: 00007fadf9375bd9 [ 190.470106][ T9245] RDX: 0000000000033fe0 RSI: 0000000020000000 RDI: 0000000000000003 [ 190.478113][ T9245] RBP: 00007fadfa1510a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.485431][ T9252] syz.2.1424[9252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.486097][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.486120][ T9245] R13: 000000000000000b R14: 00007fadf9503f60 R15: 00007ffcbf6440e8 [ 190.486157][ T9245] [ 190.535220][ T9253] __nla_validate_parse: 9 callbacks suppressed [ 190.535241][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1427'. [ 190.548435][ T9256] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1428'. [ 190.613931][ T9254] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 190.621564][ T9252] syz.2.1424[9252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.652290][ T9245] netlink: 'syz.3.1422': attribute type 21 has an invalid length. [ 190.690618][ T9245] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1422'. [ 190.740956][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 190.932203][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 191.040344][ T9279] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1436'. [ 191.198932][ T9287] syzkaller1: entered promiscuous mode [ 191.226764][ T9287] syzkaller1: entered allmulticast mode [ 191.373448][ T9294] syz.1.1440[9294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.373629][ T9294] syz.1.1440[9294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.460349][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 191.521367][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'. [ 191.537785][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 191.847087][ T9314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1447'. [ 192.268818][ T9341] syz.2.1457[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.268979][ T9341] syz.2.1457[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.836580][ T9368] delete_channel: no stack [ 192.947306][ T9378] netlink: 'syz.4.1472': attribute type 5 has an invalid length. [ 192.985212][ T9379] netlink: 'syz.0.1470': attribute type 44 has an invalid length. [ 192.985841][ T9378] FAULT_INJECTION: forcing a failure. [ 192.985841][ T9378] name failslab, interval 1, probability 0, space 0, times 0 [ 193.021743][ T9378] CPU: 0 PID: 9378 Comm: syz.4.1472 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 193.031959][ T9378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 193.042044][ T9378] Call Trace: [ 193.045337][ T9378] [ 193.048281][ T9378] dump_stack_lvl+0x241/0x360 [ 193.052983][ T9378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.058190][ T9378] ? __pfx__printk+0x10/0x10 [ 193.062789][ T9378] ? ref_tracker_alloc+0x332/0x490 [ 193.067923][ T9378] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.073401][ T9378] should_fail_ex+0x3b0/0x4e0 [ 193.078101][ T9378] ? skb_clone+0x20c/0x390 [ 193.082537][ T9378] should_failslab+0x9/0x20 [ 193.087056][ T9378] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 193.092453][ T9378] skb_clone+0x20c/0x390 [ 193.096718][ T9378] __netlink_deliver_tap+0x3cc/0x7c0 [ 193.102024][ T9378] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.107229][ T9378] netlink_deliver_tap+0x19d/0x1b0 [ 193.112359][ T9378] netlink_sendskb+0x68/0x140 [ 193.117047][ T9378] netlink_unicast+0x39d/0x990 [ 193.121817][ T9378] ? __asan_memcpy+0x40/0x70 [ 193.126425][ T9378] ? __pfx_netlink_unicast+0x10/0x10 [ 193.131726][ T9378] netlink_rcv_skb+0x262/0x430 [ 193.136612][ T9378] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 193.142082][ T9378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.147387][ T9378] ? apparmor_capable+0x138/0x1b0 [ 193.152425][ T9378] ? bpf_lsm_capable+0x9/0x10 [ 193.157115][ T9378] ? security_capable+0x90/0xb0 [ 193.161990][ T9378] nfnetlink_rcv+0x297/0x2a90 [ 193.166688][ T9378] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 193.172435][ T9378] ? __dev_queue_xmit+0x2da/0x3e90 [ 193.177569][ T9378] ? __dev_queue_xmit+0x1763/0x3e90 [ 193.182804][ T9378] ? kasan_save_track+0x51/0x80 [ 193.187671][ T9378] ? do_syscall_64+0xf3/0x230 [ 193.192355][ T9378] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 193.197561][ T9378] ? __dev_queue_xmit+0x2da/0x3e90 [ 193.202708][ T9378] ? __pfx___dev_queue_xmit+0x10/0x10 [ 193.208157][ T9378] ? ref_tracker_free+0x643/0x7e0 [ 193.213197][ T9378] ? __asan_memcpy+0x40/0x70 [ 193.217798][ T9378] ? __pfx_ref_tracker_free+0x10/0x10 [ 193.223200][ T9378] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.228414][ T9378] ? skb_clone+0x240/0x390 [ 193.232848][ T9378] ? __pfx_lock_release+0x10/0x10 [ 193.237881][ T9378] ? __netlink_deliver_tap+0x77e/0x7c0 [ 193.243359][ T9378] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.248571][ T9378] netlink_unicast+0x7f0/0x990 [ 193.253363][ T9378] ? __pfx_netlink_unicast+0x10/0x10 [ 193.258674][ T9378] ? __virt_addr_valid+0x183/0x520 [ 193.263802][ T9378] ? __check_object_size+0x49c/0x900 [ 193.269103][ T9378] ? bpf_lsm_netlink_send+0x9/0x10 [ 193.274232][ T9378] netlink_sendmsg+0x8e4/0xcb0 [ 193.279024][ T9378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.284330][ T9378] ? __import_iovec+0x536/0x820 [ 193.289192][ T9378] ? aa_sock_msg_perm+0x91/0x160 [ 193.294151][ T9378] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.299445][ T9378] ? security_socket_sendmsg+0x87/0xb0 [ 193.304915][ T9378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.310208][ T9378] __sock_sendmsg+0x221/0x270 [ 193.314920][ T9378] ____sys_sendmsg+0x525/0x7d0 [ 193.319718][ T9378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.325124][ T9378] __sys_sendmsg+0x2b0/0x3a0 [ 193.329739][ T9378] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.334892][ T9378] ? vfs_write+0x7c4/0xc90 [ 193.339367][ T9378] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.345711][ T9378] ? do_syscall_64+0x100/0x230 [ 193.350519][ T9378] ? do_syscall_64+0xb6/0x230 [ 193.355257][ T9378] do_syscall_64+0xf3/0x230 [ 193.359776][ T9378] ? clear_bhb_loop+0x35/0x90 [ 193.364472][ T9378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.370383][ T9378] RIP: 0033:0x7fba04975bd9 [ 193.374833][ T9378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.394465][ T9378] RSP: 002b:00007fba043ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.402894][ T9378] RAX: ffffffffffffffda RBX: 00007fba04b03f60 RCX: 00007fba04975bd9 [ 193.410872][ T9378] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 193.418851][ T9378] RBP: 00007fba043ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.426828][ T9378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.434811][ T9378] R13: 000000000000000b R14: 00007fba04b03f60 R15: 00007ffca4fa41d8 [ 193.442805][ T9378] [ 193.612745][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.639546][ T9379] team0: Port device bond0 added [ 194.581855][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.591675][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.673800][ T9376] lo speed is unknown, defaulting to 1000 [ 194.824568][ T9426] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 194.914735][ T9426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.207954][ T9449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.149652][ T9498] __nla_validate_parse: 9 callbacks suppressed [ 196.149674][ T9498] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1511'. [ 196.212951][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 196.246200][ T9499] nbd: couldn't find a device at index 0 [ 196.260406][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 196.567213][ T9511] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1518'. [ 196.649470][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 197.481577][ T9548] FAULT_INJECTION: forcing a failure. [ 197.481577][ T9548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.537050][ T9548] CPU: 0 PID: 9548 Comm: syz.4.1532 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 197.547282][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.557376][ T9548] Call Trace: [ 197.560688][ T9548] [ 197.563652][ T9548] dump_stack_lvl+0x241/0x360 [ 197.568372][ T9548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.573606][ T9548] ? __pfx__printk+0x10/0x10 [ 197.578247][ T9548] ? __lock_acquire+0x1346/0x1fd0 [ 197.583322][ T9548] should_fail_ex+0x3b0/0x4e0 [ 197.588047][ T9548] prepare_alloc_pages+0x1da/0x5d0 [ 197.593219][ T9548] __alloc_pages_noprof+0x166/0x6c0 [ 197.598471][ T9548] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 197.604351][ T9548] alloc_pages_mpol_noprof+0x3e8/0x680 [ 197.609865][ T9548] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 197.615907][ T9548] vma_alloc_folio_noprof+0xf3/0x1f0 [ 197.621240][ T9548] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 197.627183][ T9548] ? do_raw_spin_unlock+0x13c/0x8b0 [ 197.632433][ T9548] folio_prealloc+0x31/0x170 [ 197.637061][ T9548] do_wp_page+0x11cc/0x52f0 [ 197.641633][ T9548] ? __pfx_do_wp_page+0x10/0x10 [ 197.646529][ T9548] ? __pfx_lock_acquire+0x10/0x10 [ 197.651747][ T9548] ? do_raw_spin_lock+0x14f/0x370 [ 197.656834][ T9548] handle_pte_fault+0x117e/0x7090 [ 197.661874][ T9548] ? cgroup_rstat_updated+0x13b/0xc60 [ 197.667261][ T9548] ? __pfx_validate_chain+0x10/0x10 [ 197.672475][ T9548] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 197.678216][ T9548] ? __pfx_handle_pte_fault+0x10/0x10 [ 197.683600][ T9548] ? __lock_acquire+0x1346/0x1fd0 [ 197.688664][ T9548] ? __pfx_lock_release+0x10/0x10 [ 197.693701][ T9548] handle_mm_fault+0x10df/0x1ba0 [ 197.698686][ T9548] ? __pfx_handle_mm_fault+0x10/0x10 [ 197.704002][ T9548] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.710349][ T9548] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 197.715691][ T9548] exc_page_fault+0x2b9/0x8c0 [ 197.720418][ T9548] asm_exc_page_fault+0x26/0x30 [ 197.725283][ T9548] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 197.731104][ T9548] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 197.750716][ T9548] RSP: 0018:ffffc90013707738 EFLAGS: 00050206 [ 197.756793][ T9548] RAX: ffff88806dfa0001 RBX: 00000000200105d0 RCX: 00000000000035d0 [ 197.764795][ T9548] RDX: 0000000000000000 RSI: ffff88806dfacce8 RDI: 000000002000d000 [ 197.772772][ T9548] RBP: ffffc900137078b0 R08: ffff88806dfb02b7 R09: 1ffff1100dbf6056 [ 197.780752][ T9548] R10: dffffc0000000000 R11: ffffed100dbf6057 R12: dffffc0000000000 [ 197.788728][ T9548] R13: 1ffff920026e0efc R14: 00000000000101d0 R15: ffff88806dfa00e8 [ 197.796731][ T9548] _copy_to_iter+0x4c0/0x1960 [ 197.801430][ T9548] ? __virt_addr_valid+0x183/0x520 [ 197.806568][ T9548] ? __pfx__copy_to_iter+0x10/0x10 [ 197.811697][ T9548] ? __virt_addr_valid+0x183/0x520 [ 197.816824][ T9548] ? __virt_addr_valid+0x183/0x520 [ 197.821947][ T9548] ? __virt_addr_valid+0x44e/0x520 [ 197.827078][ T9548] ? __check_object_size+0x49c/0x900 [ 197.832386][ T9548] __skb_datagram_iter+0x110/0x8c0 [ 197.837520][ T9548] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 197.843172][ T9548] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 197.848993][ T9548] skb_copy_datagram_iter+0xd1/0x250 [ 197.854295][ T9548] tipc_recvstream+0x7a8/0xf80 [ 197.859089][ T9548] ? __pfx_tipc_recvstream+0x10/0x10 [ 197.864425][ T9548] ? aa_sock_msg_perm+0x91/0x160 [ 197.869386][ T9548] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 197.874677][ T9548] ? security_socket_recvmsg+0x90/0xb0 [ 197.880144][ T9548] ? __pfx_tipc_recvstream+0x10/0x10 [ 197.885439][ T9548] sock_recvmsg+0x22f/0x280 [ 197.889957][ T9548] ____sys_recvmsg+0x1db/0x470 [ 197.894742][ T9548] ? __pfx_____sys_recvmsg+0x10/0x10 [ 197.900090][ T9548] __sys_recvmsg+0x2f0/0x3e0 [ 197.904700][ T9548] ? __pfx___sys_recvmsg+0x10/0x10 [ 197.909856][ T9548] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.916193][ T9548] ? do_syscall_64+0x100/0x230 [ 197.920968][ T9548] ? do_syscall_64+0xb6/0x230 [ 197.925668][ T9548] do_syscall_64+0xf3/0x230 [ 197.930178][ T9548] ? clear_bhb_loop+0x35/0x90 [ 197.934885][ T9548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.940785][ T9548] RIP: 0033:0x7fba04975bd9 [ 197.945205][ T9548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.964816][ T9548] RSP: 002b:00007fba043ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 197.973241][ T9548] RAX: ffffffffffffffda RBX: 00007fba04b03f60 RCX: 00007fba04975bd9 [ 197.981224][ T9548] RDX: 0000000000003f01 RSI: 0000000020000500 RDI: 0000000000000003 [ 197.989200][ T9548] RBP: 00007fba043ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.997177][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.005151][ T9548] R13: 000000000000000b R14: 00007fba04b03f60 R15: 00007ffca4fa41d8 [ 198.013148][ T9548] [ 198.900886][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 199.234806][ T9615] vlan5: entered promiscuous mode [ 199.277717][ T9615] vlan5: entered allmulticast mode [ 199.316201][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1556'. [ 199.331647][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1556'. [ 199.496665][ T9631] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1560'. [ 199.522762][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 199.540844][ T9627] dummy0: entered promiscuous mode [ 200.431130][ T9666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.633388][ T9666] tun0: tun_chr_ioctl cmd 35108 [ 201.032920][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 201.181780][ T9692] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1581'. [ 201.320420][ T9706] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 201.368779][ T9708] netlink: 'syz.0.1586': attribute type 20 has an invalid length. [ 201.384291][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 201.393980][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 201.653829][ T9721] vlan3: entered promiscuous mode [ 201.675703][ T9721] team0: entered promiscuous mode [ 201.689003][ T9721] team_slave_0: entered promiscuous mode [ 201.707682][ T9721] team_slave_1: entered promiscuous mode [ 201.737108][ T9721] team0: Device vlan3 is already an upper device of the team interface [ 201.768728][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 201.774870][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 201.774887][ T5106] Bluetooth: hci3: command 0x0406 tx timeout [ 201.812138][ T9721] team0: left promiscuous mode [ 201.826331][ T9721] team_slave_0: left promiscuous mode [ 201.840587][ T9721] team_slave_1: left promiscuous mode [ 202.349905][ T9751] netlink: 'syz.4.1601': attribute type 12 has an invalid length. [ 202.376437][ T9751] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.1601'. [ 203.260500][ T9794] vlan2: entered promiscuous mode [ 203.449076][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1622'. [ 203.644700][ T9810] pimreg: entered allmulticast mode [ 203.931854][ T9831] netlink: 'syz.3.1631': attribute type 1 has an invalid length. [ 204.327791][ T9851] netlink: 'syz.0.1642': attribute type 11 has an invalid length. [ 204.627176][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'. [ 204.710477][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 205.116121][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 205.962515][ T9919] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1669'. [ 206.194351][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1671'. [ 206.446108][ T9931] netlink: 'syz.0.1673': attribute type 2 has an invalid length. [ 206.469579][ T9931] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 206.694060][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1676'. [ 206.761407][ T9942] netlink: 'syz.1.1677': attribute type 4 has an invalid length. [ 206.803852][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 207.073634][ T9948] netlink: 'syz.2.1680': attribute type 10 has an invalid length. [ 207.102247][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'. [ 207.127884][ T9948] ipvlan1: entered promiscuous mode [ 207.166150][ T9948] ipvlan1: entered allmulticast mode [ 207.177835][ T9948] veth0_vlan: entered allmulticast mode [ 207.197696][ T9948] bridge0: port 3(ipvlan1) entered blocking state [ 207.204378][ T9948] bridge0: port 3(ipvlan1) entered disabled state [ 207.232604][ T9948] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 207.262585][ T9960] FAULT_INJECTION: forcing a failure. [ 207.262585][ T9960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.301638][ T9960] CPU: 1 PID: 9960 Comm: syz.1.1684 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 207.311776][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 207.321859][ T9960] Call Trace: [ 207.325167][ T9960] [ 207.328137][ T9960] dump_stack_lvl+0x241/0x360 [ 207.332864][ T9960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.338096][ T9960] ? __pfx__printk+0x10/0x10 [ 207.342695][ T9960] ? __pfx_lock_release+0x10/0x10 [ 207.347724][ T9960] ? __lock_acquire+0x1346/0x1fd0 [ 207.352763][ T9960] should_fail_ex+0x3b0/0x4e0 [ 207.357461][ T9960] _copy_from_user+0x2f/0xe0 [ 207.362064][ T9960] kstrtouint_from_user+0xc6/0x190 [ 207.367196][ T9960] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 207.372941][ T9960] ? __pfx_lock_acquire+0x10/0x10 [ 207.377988][ T9960] proc_fail_nth_write+0xaa/0x2d0 [ 207.383067][ T9960] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 207.388983][ T9960] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 207.394635][ T9960] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 207.400278][ T9960] vfs_write+0x2a2/0xc90 [ 207.404570][ T9960] ? __pfx_vfs_write+0x10/0x10 [ 207.409360][ T9960] ? __fget_files+0x29/0x470 [ 207.413981][ T9960] ? __fget_files+0x3f6/0x470 [ 207.418701][ T9960] ksys_write+0x1a0/0x2c0 [ 207.423057][ T9960] ? __pfx_ksys_write+0x10/0x10 [ 207.427917][ T9960] ? do_syscall_64+0x100/0x230 [ 207.432696][ T9960] ? do_syscall_64+0xb6/0x230 [ 207.437383][ T9960] do_syscall_64+0xf3/0x230 [ 207.441896][ T9960] ? clear_bhb_loop+0x35/0x90 [ 207.446588][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.452490][ T9960] RIP: 0033:0x7fb7f357475f [ 207.456913][ T9960] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 207.476541][ T9960] RSP: 002b:00007fb7f4369040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 207.485074][ T9960] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb7f357475f [ 207.493135][ T9960] RDX: 0000000000000001 RSI: 00007fb7f43690b0 RDI: 0000000000000004 [ 207.501140][ T9960] RBP: 00007fb7f43690a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.509150][ T9960] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 207.517151][ T9960] R13: 000000000000000b R14: 00007fb7f3703f60 R15: 00007ffde80cf0b8 [ 207.525157][ T9960] [ 207.866965][ T9972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1686'. [ 207.898522][ T9971] netlink: 'syz.1.1689': attribute type 4 has an invalid length. [ 208.186732][ T9989] tap0: tun_chr_ioctl cmd 1074025677 [ 208.203271][ T9989] tap0: linktype set to 780 [ 208.734011][T10014] netlink: 'syz.0.1701': attribute type 11 has an invalid length. [ 208.973517][T10006] infiniband syz2: set active [ 208.983752][T10006] infiniband syz2: added bond_slave_1 [ 209.107755][T10006] RDS/IB: syz2: added [ 209.121395][T10006] smc: adding ib device syz2 with port count 1 [ 209.129580][T10006] smc: ib device syz2 port 1 has pnetid [ 209.293463][T10026] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 209.391899][T10027] vlan4: entered promiscuous mode [ 209.419233][T10027] syz_tun: entered promiscuous mode [ 209.489720][T10027] team0: Port device vlan4 added [ 210.009116][T10061] FAULT_INJECTION: forcing a failure. [ 210.009116][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 210.074773][T10061] CPU: 0 PID: 10061 Comm: syz.4.1715 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 210.085001][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.095100][T10061] Call Trace: [ 210.098417][T10061] [ 210.101379][T10061] dump_stack_lvl+0x241/0x360 [ 210.106104][T10061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.111349][T10061] ? __pfx__printk+0x10/0x10 [ 210.115986][T10061] should_fail_ex+0x3b0/0x4e0 [ 210.120715][T10061] ? rtnl_newlink+0xf2/0x20a0 [ 210.125442][T10061] should_failslab+0x9/0x20 [ 210.129995][T10061] kmalloc_trace_noprof+0x6c/0x2c0 [ 210.135160][T10061] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.140227][T10061] rtnl_newlink+0xf2/0x20a0 [ 210.144809][T10061] ? __mutex_trylock_common+0x183/0x2e0 [ 210.150489][T10061] ? __pfx___might_resched+0x10/0x10 [ 210.155813][T10061] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.160877][T10061] ? __pfx___mutex_trylock_common+0x10/0x10 [ 210.166813][T10061] ? rcu_is_watching+0x15/0xb0 [ 210.171620][T10061] ? trace_contention_end+0x3c/0x120 [ 210.176938][T10061] ? __mutex_lock+0x2ef/0xd70 [ 210.181650][T10061] ? rcu_read_unlock+0x87/0xa0 [ 210.186459][T10061] ? rtnetlink_rcv_msg+0x842/0x1180 [ 210.191686][T10061] ? __pfx_lock_release+0x10/0x10 [ 210.196753][T10061] ? __pfx___mutex_lock+0x10/0x10 [ 210.201846][T10061] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.206911][T10061] rtnetlink_rcv_msg+0x89b/0x1180 [ 210.211970][T10061] ? rtnetlink_rcv_msg+0x208/0x1180 [ 210.217206][T10061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.222710][T10061] ? __local_bh_enable_ip+0x168/0x200 [ 210.228117][T10061] ? lockdep_hardirqs_on+0x99/0x150 [ 210.233374][T10061] ? __local_bh_enable_ip+0x168/0x200 [ 210.238787][T10061] ? dev_hard_start_xmit+0x773/0x7e0 [ 210.244117][T10061] ? __dev_queue_xmit+0x2da/0x3e90 [ 210.249272][T10061] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 210.255033][T10061] ? __dev_queue_xmit+0x2da/0x3e90 [ 210.260282][T10061] ? __dev_queue_xmit+0x1763/0x3e90 [ 210.265532][T10061] ? kasan_save_track+0x51/0x80 [ 210.270425][T10061] ? do_syscall_64+0xf3/0x230 [ 210.275150][T10061] ? __dev_queue_xmit+0x2da/0x3e90 [ 210.280312][T10061] ? __pfx___dev_queue_xmit+0x10/0x10 [ 210.285754][T10061] ? ref_tracker_free+0x643/0x7e0 [ 210.290837][T10061] netlink_rcv_skb+0x1e3/0x430 [ 210.295642][T10061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.301137][T10061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.306481][T10061] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.311723][T10061] netlink_unicast+0x7f0/0x990 [ 210.316532][T10061] ? __pfx_netlink_unicast+0x10/0x10 [ 210.321852][T10061] ? __virt_addr_valid+0x183/0x520 [ 210.327009][T10061] ? __check_object_size+0x49c/0x900 [ 210.332344][T10061] ? bpf_lsm_netlink_send+0x9/0x10 [ 210.337504][T10061] netlink_sendmsg+0x8e4/0xcb0 [ 210.342323][T10061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.347651][T10061] ? __import_iovec+0x536/0x820 [ 210.352543][T10061] ? aa_sock_msg_perm+0x91/0x160 [ 210.357533][T10061] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.362863][T10061] ? security_socket_sendmsg+0x87/0xb0 [ 210.368371][T10061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.373692][T10061] __sock_sendmsg+0x221/0x270 [ 210.378426][T10061] ____sys_sendmsg+0x525/0x7d0 [ 210.383253][T10061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.388603][T10061] __sys_sendmsg+0x2b0/0x3a0 [ 210.393241][T10061] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.398454][T10061] ? vfs_write+0x7c4/0xc90 [ 210.402975][T10061] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.409345][T10061] ? do_syscall_64+0x100/0x230 [ 210.414156][T10061] ? do_syscall_64+0xb6/0x230 [ 210.418899][T10061] do_syscall_64+0xf3/0x230 [ 210.423442][T10061] ? clear_bhb_loop+0x35/0x90 [ 210.428166][T10061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.434186][T10061] RIP: 0033:0x7fba04975bd9 [ 210.438633][T10061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.458321][T10061] RSP: 002b:00007fba043de048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.466784][T10061] RAX: ffffffffffffffda RBX: 00007fba04b04038 RCX: 00007fba04975bd9 [ 210.474792][T10061] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 210.482797][T10061] RBP: 00007fba043de0a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.490799][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.498801][T10061] R13: 000000000000006e R14: 00007fba04b04038 R15: 00007ffca4fa41d8 [ 210.506825][T10061] [ 210.794279][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'. [ 211.229541][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 211.265824][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 211.324784][T10087] vlan2: entered promiscuous mode [ 211.336113][T10087] syz_tun: entered promiscuous mode [ 211.378442][T10092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1726'. [ 211.382258][T10087] team0: Port device vlan2 added [ 211.543822][T10094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1727'. [ 211.570743][T10094] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1727'. [ 212.077669][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1734'. [ 212.327672][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 213.001133][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 213.048339][T10160] syz.3.1751[10160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.048521][T10160] syz.3.1751[10160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.206612][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1754'. [ 213.403122][T10177] netlink: 'syz.1.1759': attribute type 2 has an invalid length. [ 213.436829][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 214.080916][ T6197] ================================================================== [ 214.089033][ T6197] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 [ 214.097134][ T6197] Write of size 8 at addr ffff88802b977008 by task kworker/u8:14/6197 [ 214.105308][ T6197] [ 214.107652][ T6197] CPU: 0 PID: 6197 Comm: kworker/u8:14 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 214.118169][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.123370][T10212] syz.0.1767[10212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.128229][ T6197] Workqueue: l2tp l2tp_tunnel_del_work [ 214.128272][ T6197] Call Trace: [ 214.128288][ T6197] [ 214.128299][ T6197] dump_stack_lvl+0x241/0x360 [ 214.153637][T10212] syz.0.1767[10212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.156098][ T6197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.156133][ T6197] ? __pfx__printk+0x10/0x10 [ 214.156155][ T6197] ? _printk+0xd5/0x120 [ 214.156177][ T6197] ? __virt_addr_valid+0x183/0x520 [ 214.186731][ T6197] ? __virt_addr_valid+0x183/0x520 [ 214.191880][ T6197] print_report+0x169/0x550 [ 214.196448][ T6197] ? __virt_addr_valid+0x183/0x520 [ 214.201601][ T6197] ? __virt_addr_valid+0x183/0x520 [ 214.206745][ T6197] ? __virt_addr_valid+0x44e/0x520 [ 214.211893][ T6197] ? __phys_addr+0xba/0x170 [ 214.216432][ T6197] ? l2tp_session_delete+0x28/0x9e0 [ 214.221661][ T6197] kasan_report+0x143/0x180 [ 214.226291][ T6197] ? l2tp_session_delete+0x28/0x9e0 [ 214.231624][ T6197] kasan_check_range+0x282/0x290 [ 214.236607][ T6197] l2tp_session_delete+0x28/0x9e0 [ 214.241665][ T6197] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 214.247074][ T6197] l2tp_tunnel_del_work+0x1cb/0x330 [ 214.252317][ T6197] ? process_scheduled_works+0x945/0x1830 [ 214.258080][ T6197] process_scheduled_works+0xa2c/0x1830 [ 214.263677][ T6197] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.269708][ T6197] ? assign_work+0x364/0x3d0 [ 214.274307][ T6197] worker_thread+0x86d/0xd50 [ 214.278924][ T6197] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 214.284845][ T6197] ? __kthread_parkme+0x169/0x1d0 [ 214.289884][ T6197] ? __pfx_worker_thread+0x10/0x10 [ 214.295035][ T6197] kthread+0x2f0/0x390 [ 214.299135][ T6197] ? __pfx_worker_thread+0x10/0x10 [ 214.304253][ T6197] ? __pfx_kthread+0x10/0x10 [ 214.308859][ T6197] ret_from_fork+0x4b/0x80 [ 214.313307][ T6197] ? __pfx_kthread+0x10/0x10 [ 214.317910][ T6197] ret_from_fork_asm+0x1a/0x30 [ 214.322699][ T6197] [ 214.325720][ T6197] [ 214.328045][ T6197] Allocated by task 10198: [ 214.332458][ T6197] kasan_save_track+0x3f/0x80 [ 214.337330][ T6197] __kasan_kmalloc+0x98/0xb0 [ 214.341932][ T6197] __kmalloc_noprof+0x1f9/0x400 [ 214.346818][ T6197] l2tp_session_create+0x3b/0xc20 [ 214.351846][ T6197] pppol2tp_connect+0xca3/0x17a0 [ 214.356806][ T6197] __sys_connect+0x2df/0x310 [ 214.361404][ T6197] __x64_sys_connect+0x7a/0x90 [ 214.366173][ T6197] do_syscall_64+0xf3/0x230 [ 214.370678][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.376579][ T6197] [ 214.378915][ T6197] Freed by task 24: [ 214.382730][ T6197] kasan_save_track+0x3f/0x80 [ 214.387424][ T6197] kasan_save_free_info+0x40/0x50 [ 214.392498][ T6197] poison_slab_object+0xe0/0x150 [ 214.397448][ T6197] __kasan_slab_free+0x37/0x60 [ 214.402229][ T6197] kfree+0x149/0x360 [ 214.406145][ T6197] __sk_destruct+0x58/0x5f0 [ 214.410692][ T6197] rcu_core+0xafd/0x1830 [ 214.414944][ T6197] handle_softirqs+0x2c4/0x970 [ 214.419717][ T6197] run_ksoftirqd+0xca/0x130 [ 214.424228][ T6197] smpboot_thread_fn+0x544/0xa30 [ 214.429173][ T6197] kthread+0x2f0/0x390 [ 214.433249][ T6197] ret_from_fork+0x4b/0x80 [ 214.437856][ T6197] ret_from_fork_asm+0x1a/0x30 [ 214.442643][ T6197] [ 214.444975][ T6197] Last potentially related work creation: [ 214.450691][ T6197] kasan_save_stack+0x3f/0x60 [ 214.455377][ T6197] __kasan_record_aux_stack+0xac/0xc0 [ 214.460759][ T6197] call_rcu+0x167/0xa70 [ 214.464915][ T6197] pppol2tp_release+0x24b/0x350 [ 214.469771][ T6197] sock_close+0xbc/0x240 [ 214.474017][ T6197] __fput+0x24a/0x8a0 [ 214.478002][ T6197] task_work_run+0x24f/0x310 [ 214.482602][ T6197] syscall_exit_to_user_mode+0x168/0x360 [ 214.488246][ T6197] do_syscall_64+0x100/0x230 [ 214.492838][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.498737][ T6197] [ 214.501057][ T6197] The buggy address belongs to the object at ffff88802b977000 [ 214.501057][ T6197] which belongs to the cache kmalloc-1k of size 1024 [ 214.515202][ T6197] The buggy address is located 8 bytes inside of [ 214.515202][ T6197] freed 1024-byte region [ffff88802b977000, ffff88802b977400) [ 214.529169][ T6197] [ 214.531488][ T6197] The buggy address belongs to the physical page: [ 214.537904][ T6197] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b970 [ 214.546688][ T6197] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 214.555185][ T6197] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 214.562732][ T6197] page_type: 0xffffefff(slab) [ 214.567415][ T6197] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 214.575998][ T6197] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 214.584580][ T6197] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 214.593250][ T6197] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 214.601923][ T6197] head: 00fff00000000003 ffffea0000ae5c01 ffffffffffffffff 0000000000000000 [ 214.610592][ T6197] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 214.619354][ T6197] page dumped because: kasan: bad access detected [ 214.625785][ T6197] page_owner tracks the page as allocated [ 214.631495][ T6197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 61, tgid 61 (kworker/u8:4), ts 79314380139, free_ts 79098985969 [ 214.650442][ T6197] post_alloc_hook+0x1f3/0x230 [ 214.655222][ T6197] get_page_from_freelist+0x2e4c/0x2f10 [ 214.660785][ T6197] __alloc_pages_noprof+0x256/0x6c0 [ 214.666086][ T6197] alloc_slab_page+0x5f/0x120 [ 214.670768][ T6197] allocate_slab+0x5a/0x2f0 [ 214.675276][ T6197] ___slab_alloc+0xcd1/0x14b0 [ 214.680132][ T6197] __slab_alloc+0x58/0xa0 [ 214.684461][ T6197] __kmalloc_noprof+0x257/0x400 [ 214.689348][ T6197] ___neigh_create+0x691/0x2470 [ 214.694230][ T6197] ip6_finish_output2+0x1631/0x1680 [ 214.699430][ T6197] ip6_finish_output+0x41e/0x810 [ 214.704379][ T6197] ndisc_send_skb+0xab2/0x1380 [ 214.709201][ T6197] ndisc_send_ns+0xcc/0x160 [ 214.713797][ T6197] addrconf_dad_work+0xb45/0x16f0 [ 214.718919][ T6197] process_scheduled_works+0xa2c/0x1830 [ 214.724465][ T6197] worker_thread+0x86d/0xd50 [ 214.729054][ T6197] page last free pid 5157 tgid 5157 stack trace: [ 214.735381][ T6197] free_unref_page+0xd22/0xea0 [ 214.740156][ T6197] __slab_free+0x31b/0x3d0 [ 214.744668][ T6197] qlist_free_all+0x9e/0x140 [ 214.749271][ T6197] kasan_quarantine_reduce+0x14f/0x170 [ 214.754744][ T6197] __kasan_slab_alloc+0x23/0x80 [ 214.759602][ T6197] kmem_cache_alloc_noprof+0x135/0x2a0 [ 214.765070][ T6197] getname_flags+0xbd/0x4f0 [ 214.769580][ T6197] user_path_at_empty+0x2c/0x60 [ 214.774431][ T6197] user_statfs+0xd9/0x460 [ 214.778779][ T6197] __x64_sys_statfs+0xe8/0x1a0 [ 214.783554][ T6197] do_syscall_64+0xf3/0x230 [ 214.788068][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.793966][ T6197] [ 214.796287][ T6197] Memory state around the buggy address: [ 214.801912][ T6197] ffff88802b976f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.809969][ T6197] ffff88802b976f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.818046][ T6197] >ffff88802b977000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.826100][ T6197] ^ [ 214.830512][ T6197] ffff88802b977080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.838581][ T6197] ffff88802b977100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.846637][ T6197] ================================================================== [ 214.859438][ T6197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 214.866677][ T6197] CPU: 1 PID: 6197 Comm: kworker/u8:14 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 214.877121][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.887182][ T6197] Workqueue: l2tp l2tp_tunnel_del_work [ 214.892656][ T6197] Call Trace: [ 214.895949][ T6197] [ 214.898894][ T6197] dump_stack_lvl+0x241/0x360 [ 214.903667][ T6197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.908871][ T6197] ? __pfx__printk+0x10/0x10 [ 214.913461][ T6197] ? preempt_schedule+0xe1/0xf0 [ 214.918318][ T6197] ? vscnprintf+0x5d/0x90 [ 214.922654][ T6197] panic+0x349/0x860 [ 214.926563][ T6197] ? check_panic_on_warn+0x21/0xb0 [ 214.931684][ T6197] ? __pfx_panic+0x10/0x10 [ 214.936114][ T6197] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 214.942189][ T6197] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.948524][ T6197] ? print_report+0x502/0x550 [ 214.953213][ T6197] check_panic_on_warn+0x86/0xb0 [ 214.958159][ T6197] ? l2tp_session_delete+0x28/0x9e0 [ 214.963363][ T6197] end_report+0x77/0x160 [ 214.967614][ T6197] kasan_report+0x154/0x180 [ 214.972130][ T6197] ? l2tp_session_delete+0x28/0x9e0 [ 214.977336][ T6197] kasan_check_range+0x282/0x290 [ 214.982285][ T6197] l2tp_session_delete+0x28/0x9e0 [ 214.987313][ T6197] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 214.992690][ T6197] l2tp_tunnel_del_work+0x1cb/0x330 [ 214.997896][ T6197] ? process_scheduled_works+0x945/0x1830 [ 215.003622][ T6197] process_scheduled_works+0xa2c/0x1830 [ 215.009184][ T6197] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.015168][ T6197] ? assign_work+0x364/0x3d0 [ 215.019773][ T6197] worker_thread+0x86d/0xd50 [ 215.024372][ T6197] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 215.030279][ T6197] ? __kthread_parkme+0x169/0x1d0 [ 215.035320][ T6197] ? __pfx_worker_thread+0x10/0x10 [ 215.040438][ T6197] kthread+0x2f0/0x390 [ 215.044516][ T6197] ? __pfx_worker_thread+0x10/0x10 [ 215.049644][ T6197] ? __pfx_kthread+0x10/0x10 [ 215.054263][ T6197] ret_from_fork+0x4b/0x80 [ 215.058787][ T6197] ? __pfx_kthread+0x10/0x10 [ 215.063417][ T6197] ret_from_fork_asm+0x1a/0x30 [ 215.068206][ T6197] [ 215.071603][ T6197] Kernel Offset: disabled [ 215.075952][ T6197] Rebooting in 86400 seconds..