last executing test programs: 2.924915737s ago: executing program 1 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000004000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) 2.795613278s ago: executing program 1 (id=1674): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x41, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000b0000"], 0x0) 2.675590207s ago: executing program 0 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000f5ff0000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) 2.583832845s ago: executing program 0 (id=1677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000005000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0) 2.305495611s ago: executing program 0 (id=1679): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8500001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100000000000000", @ANYRES32=r1], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x10, 0x7, 0x40, 0x3, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0xc, "de29f6bed03be568ba93"}, @rr={0x7, 0xb, 0x2f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}]}, @end, @noop]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r3, 0xffffffffffffffff, 0x1c, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400c06c6cd830a7"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2.161825145s ago: executing program 0 (id=1682): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x4d, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="d7cc1096ffdb55a73a834be0709385f84ac95afaff7dc8af2306aed0312604920704331e15d36b72fabad6443ebe3fbdab3478e20b1988edd535c24c86324b09b8243ffdfaaf46d506f5e72a737ead55c2c5cf9b68ca12f4309afbab0d4f87dcf7ea4b1962ece4390b0d2c89ab36125b551fadf06c5c53fcd2cef00776becf015996a38cf1ac6543d8d389651841ae99a63f276d30c5f08e1c3502d7fa1a9d87409d34bb71813399348e734d95b8bd5d4b543a0ebc1e81e63e2ce92aa177ff373921094f26f409c66256299658973b57b18d983f7b74e23ddfdd086bbd2ee716d765", 0xe2}, {&(0x7f0000000800)}, {0x0}, {&(0x7f00000008c0)}, {&(0x7f0000001dc0)="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", 0x7f2}, {&(0x7f00000009c0)="38279d59298aa108fddec082da44011e24f8a80dc5c298206b74aae5c0b3e2d85ffd7d785879b533c9dd0dab444fd01a8d98e69299f13b9754aee5cfb000875a738c1d67c7cea7f36288a85aac988935a64faf12efa962add67bf37e32c03bd793e5da49f094237ac595b0f65e00a7c9996b11d2c4aeddb1403ec9a639232ac3d1498044a5338ae47c3f", 0x8a}, {&(0x7f0000002dc0)="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", 0xff8}, {0x0}], 0x8, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1, &(0x7f0000000cc0)=[@iv={0x90, 0x117, 0x2, 0x7b, "b304ceee6ad2287bd20003311ec8f110d8abd4b0930475ecbf00bc047376bad82646ed85dcb388c2f9d4b074ad37db17a91e97b7c7c6434321e5dbaed4568c3d51cfc284d4570bb3ee9f3a94c8ddf551b9d0e225919a451c4f4f48c56dc8f945bb456fa82ab1ce4295455e40991eaf496037f63ca14f2a8d80003e"}, @iv={0x58, 0x117, 0x2, 0x3d, "988aad82f13a8a1ead08a93a2fc193c6ade6c3815c4e6add64fd3a441aba1076e24503e4c385d61cf98a6de2ca50870406188e3f5f68abbea73e43e98b"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x41, "f93328ae5ea6c189edd7357774c214920fd2ce676446cad08d2144c6c8aeffb5da67c71cb7809007e4e3cf402ad56d687d21c171247e9d2e187f620c36b20e2e00"}, @iv={0x68, 0x117, 0x2, 0x53, "2685ce08026e1feb352ee09c1f24010235244892c7fe7a69db64a9c024ed7757b908396b788156be8f15801ca2354beb47cb414b54d7810d7c28a366d42dc334322890246386fa92578f689758dddd46259f7a"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1f0, 0x4004}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800), 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.911866296s ago: executing program 3 (id=1686): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200200000000000000000000000000002000100000000fffffffb1600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 1.855864705s ago: executing program 1 (id=1688): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000002c0)={'ip_vti0\x00', 0x4, 0x3ff}) poll(&(0x7f0000000140)=[{r0, 0x68}], 0x1, 0x200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000be186610044b000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r3, @ANYRESDEC=r7, @ANYRES64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r10, &(0x7f0000000040)="07000000010003", 0x7) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000002f8f0ffffffffffff00000002000010"], 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 1.797379913s ago: executing program 4 (id=1689): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000885, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000885, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000240)=0x9, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0xfffffffd, 0x7, {{0x5, 0x4, 0x0, 0x4, 0x7, 0x4, 0x0, 0xfe, 0x4, 0x0, @empty, @rand_addr=0x64010101}}}}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @broadcast}, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)='w', 0x1}], 0x1}}], 0x1, 0x20004800) (async) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)='w', 0x1}], 0x1}}], 0x1, 0x20004800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) close(r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x5502000000000000}, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200cde9c1ba0000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200cde9c1ba0000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r9, &(0x7f0000000240), 0x0}, 0x20) close(0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x25, &(0x7f0000000480)=ANY=[@ANYRES32], 0x9c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x25, &(0x7f0000000480)=ANY=[@ANYRES32], 0x9c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @multicast}) 1.707551365s ago: executing program 3 (id=1691): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500400003"], 0xe0}}, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 1.633593062s ago: executing program 4 (id=1692): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8500001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100000000000000", @ANYRES32=r1], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf9dc0adc317e6f48250900000008000200040001000c0001"], 0x28}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x10, 0x7, 0x40, 0x3, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0xc, "de29f6bed03be568ba93"}, @rr={0x7, 0xb, 0x2f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}]}, @end, @noop]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r3, 0xffffffffffffffff, 0x1c, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400c06c6cd830a7"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1.572754935s ago: executing program 2 (id=1694): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x2, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.500898709s ago: executing program 2 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xf, 0x3, 0x2) write(r1, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') unshare(0x24020400) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r4, @ANYBLOB="0800010000000000"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@can_delroute={0xffffffffffffffbc, 0x19, 0x8, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1}, 0x3, 0x4, 0x0, 0x0, 'Q\x00'}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd, 0x7, 0x1, 0xa}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_OR={0x15, 0x2, {{{0x2}, 0x1, 0x1, 0x0, 0x0, "f9aa820d0b69d38b"}}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x8, 0xfffffffffffffffb, 0x8}}, @CGW_SRC_IF={0x8, 0x9, r8}]}, 0x64}, 0x1, 0xba01}, 0x40001) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0xf, 0x3, 0x2) (async) write(r1, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') (async) unshare(0x24020400) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r4, @ANYBLOB="0800010000000000"], 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@can_delroute={0xffffffffffffffbc, 0x19, 0x8, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1}, 0x3, 0x4, 0x0, 0x0, 'Q\x00'}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd, 0x7, 0x1, 0xa}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_OR={0x15, 0x2, {{{0x2}, 0x1, 0x1, 0x0, 0x0, "f9aa820d0b69d38b"}}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x8, 0xfffffffffffffffb, 0x8}}, @CGW_SRC_IF={0x8, 0x9, r8}]}, 0x64}, 0x1, 0xba01}, 0x40001) (async) 1.431253755s ago: executing program 3 (id=1696): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x52}, 0x0, 0x1}, 0xe) listen(r0, 0xd) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[], 0x8) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) 1.42209359s ago: executing program 4 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 1.249729526s ago: executing program 3 (id=1698): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x23}}], 0x2, 0x0) 1.242437877s ago: executing program 2 (id=1699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x41, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000b0000"], 0x0) 1.227975465s ago: executing program 4 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000007000000140001800600010002000000080003"], 0x28}}, 0x0) 1.184798728s ago: executing program 0 (id=1701): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x4}) ppoll(&(0x7f0000000200)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x3) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) socket$kcm(0x10, 0x2, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) 1.122763631s ago: executing program 1 (id=1702): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @random="000500", @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x3}}, {@generic={0x4305, "f0d179e3378cee31fd78595c5bb4e2ca2d1ae4861edb0c7a"}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r4, 0x325}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000001500)=[{&(0x7f0000000140)=""/214, 0xd6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000001440)=""/107, 0x6b}, {&(0x7f00000014c0)=""/4, 0x4}], 0x9, &(0x7f00000015c0)=""/223, 0xdf}, 0x1) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x28, r7, 0x1, 0x4070bd2d, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) epoll_create(0x8001) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r9 = accept4$ax25(r8, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001a00)=@security={'security\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f0000001880), {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x7fe10c417b647b05, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff], 'macvlan1\x00', 'batadv0\x00', {0xff}, {}, 0x3b, 0x77, 0x2, 0x1}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x70, 0x1}}, @common=@rt={{0x138}, {0x9dd, [0x10001, 0x4], 0x4, 0x20, 0x4, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x41}, @private0], 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x6, 0x5}, {0x0, 0x4, 0x3}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001f40)={0x0, 0x35, "67a21b81e0631f20545467c16183d7d51fe653f5aa71f0c11a10d2504c45fe0ca7f906609901638e53ec7192a268ba0eaff6546b32"}, &(0x7f0000001f80)=0x3d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x1, &(0x7f0000001700)=@raw=[@call={0x85, 0x0, 0x0, 0x95}], &(0x7f0000001740)='GPL\x00', 0x3, 0xf3, &(0x7f0000001780)=""/243, 0x41000, 0x11, '\x00', r5, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000019c0)={0x3, 0xb, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[0x1], 0x0, 0x10, 0x200, @void, @value}, 0x94) 1.049584386s ago: executing program 3 (id=1703): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0xc, 0x2}, {0x0, 0x3}, {0xa, 0x3}]}]}}, 0x0, 0x46, 0x0, 0x1, 0xe, 0x0, @void, @value}, 0x28) 1.048647173s ago: executing program 4 (id=1704): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8500001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffff", @ANYRES32=r0], 0x30}}, 0x0) 962.423393ms ago: executing program 2 (id=1705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x2, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 817.517021ms ago: executing program 1 (id=1706): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500400003"], 0xe0}}, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 633.449928ms ago: executing program 2 (id=1707): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8500001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100000000000000", @ANYRES32=r1], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf9dc0adc317e6f48250900000008000200040001000c0001"], 0x28}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x10, 0x7, 0x40, 0x3, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0xc, "de29f6bed03be568ba93"}, @rr={0x7, 0xb, 0x2f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}]}, @end, @noop]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r3, 0xffffffffffffffff, 0x1c, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400c06c6cd830a7"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 179.681446ms ago: executing program 4 (id=1708): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b1121110000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x76b, @private0={0xfc, 0x0, '\x00', 0x2}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x32, 0x6}}], 0x18}}], 0x1, 0x8c0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r3], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 142.678026ms ago: executing program 1 (id=1709): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="80000000080211000001080211020000080211000000000000e3ffffffffffff63822f07c13b1974f10001000006463e98b2076c7014e5fe056dea5957480202020202020108"], 0x36) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x227, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "eeac72", 0x1f1, 0x3a, 0xff, @private0, @mcast2, {[@hopopts={0x5e, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @jumbo, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xa6}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x5, 0x6, "04cb58528047508f6f1471bf104517616cef703bc1e02c28a7af1450ce59317b8af0359106244347c9302df736b67c"}, {0x5, 0x13, "4a1a0eab6d2357eea79277bb2e3d1d161e3e3589547502d013776e4bb4eef5c3b3e39571ebc434911d799eccf969375cba77668fde9d4fef2c76d90366489ec672b29d6a5560eda5f03cde4bb275ead17c6988fd682103e9d9432af108cd97ba2980fa8741adac4336be9f50d43633cb574e2fc481ecb8c5c3c7c1291871f2c91e5c23363b9f2d437d6d601bba4ebdc92cd9a99bf3192944943f13"}, {0x18, 0x1b, "a8fecf84fedcefab14506d0851f70b0e7732e8397d7ad454b3b568425f924ef7a5c26aadf20c37707b04d2b53f9b68a1b8da5a15cba051edb8acad667d46d27f33550932fcee5b7720593ecb6dae77674e58c8183a44ca75e3e97294df7bdc7ed7ac77734a85441cbc30c6d8e56f593c2bd34644804f64579ce8a9371be4a6652513c812adae8dd67c6a67954340de95a2e247df61ae599f0caaddfb322638b7a0dd5b39d3e7c40bacce032ffb4d5ef27e0a8d598ec0915129c4f9d287eecfe21816bf9c58c33a1375b21f783e5a38dd7e47bc7e0ba22e0a17"}]}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="050000000000000056"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r7, @ANYRESDEC, @ANYRES16=r6, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x68}}, 0x0) 57.482544ms ago: executing program 0 (id=1710): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {0x7fff, 0x0, 0x2}, 0x2, 0x8}, [@tmpl={0x44, 0x8, [{{@in6=@loopback={0x800000000000000}, 0x4d4}, 0x0, @in=@broadcast}]}]}, 0xfc}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket(0x28, 0x5, 0x0) getpeername$packet(r6, 0x0, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1000000}, 0x1f00) (async) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1000000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x6000000}, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0xc, "54df942f7e09586180bb"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0xc, "54df942f7e09586180bb"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) 56.907766ms ago: executing program 3 (id=1711): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x4d, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="d7cc1096ffdb55a73a834be0709385f84ac95afaff7dc8af2306aed0312604920704331e15d36b72fabad6443ebe3fbdab3478e20b1988edd535c24c86324b09b8243ffdfaaf46d506f5e72a737ead55c2c5cf9b68ca12f4309afbab0d4f87dcf7ea4b1962ece4390b0d2c89ab36125b551fadf06c5c53fcd2cef00776becf015996a38cf1ac6543d8d389651841ae99a63f276d30c5f08e1c3502d7fa1a9d87409d34bb71813399348e734d95b8bd5d4b543a0ebc1e81e63e2ce92aa177ff373921094f26f409c66256299658973b57b18d983f7b74e23ddfdd086bbd2ee716d765", 0xe2}, {&(0x7f0000000800)}, {0x0}, {&(0x7f00000008c0)}, {&(0x7f0000001dc0)="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", 0x7f2}, {&(0x7f00000009c0)="38279d59298aa108fddec082da44011e24f8a80dc5c298206b74aae5c0b3e2d85ffd7d785879b533c9dd0dab444fd01a8d98e69299f13b9754aee5cfb000875a738c1d67c7cea7f36288a85aac988935a64faf12efa962add67bf37e32c03bd793e5da49f094237ac595b0f65e00a7c9996b11d2c4aeddb1403ec9a639232ac3d1498044a5338ae47c3f", 0x8a}, {&(0x7f0000002dc0)="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", 0xff8}, {0x0}], 0x8, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1, &(0x7f0000000cc0)=[@iv={0x90, 0x117, 0x2, 0x7b, "b304ceee6ad2287bd20003311ec8f110d8abd4b0930475ecbf00bc047376bad82646ed85dcb388c2f9d4b074ad37db17a91e97b7c7c6434321e5dbaed4568c3d51cfc284d4570bb3ee9f3a94c8ddf551b9d0e225919a451c4f4f48c56dc8f945bb456fa82ab1ce4295455e40991eaf496037f63ca14f2a8d80003e"}, @iv={0x58, 0x117, 0x2, 0x3d, "988aad82f13a8a1ead08a93a2fc193c6ade6c3815c4e6add64fd3a441aba1076e24503e4c385d61cf98a6de2ca50870406188e3f5f68abbea73e43e98b"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x41, "f93328ae5ea6c189edd7357774c214920fd2ce676446cad08d2144c6c8aeffb5da67c71cb7809007e4e3cf402ad56d687d21c171247e9d2e187f620c36b20e2e00"}, @iv={0x68, 0x117, 0x2, 0x53, "2685ce08026e1feb352ee09c1f24010235244892c7fe7a69db64a9c024ed7757b908396b788156be8f15801ca2354beb47cb414b54d7810d7c28a366d42dc334322890246386fa92578f689758dddd46259f7a"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1f0, 0x4004}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800), 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 0s ago: executing program 2 (id=1712): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000002c0)={'ip_vti0\x00', 0x4, 0x3ff}) poll(&(0x7f0000000140)=[{r0, 0x68}], 0x1, 0x200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000be186610044b000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYBLOB, @ANYRES32=r5, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r3, @ANYRESDEC=r7, @ANYRES64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r10, &(0x7f0000000040)="07000000010003", 0x7) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000002f8f0ffffffffffff00000002000010"], 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) kernel console output (not intermixed with test programs): wpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.822922][ T6021] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.049755][ T6021] lo speed is unknown, defaulting to 1000 [ 101.065554][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 101.088391][ T6053] Cannot find set identified by id 0 to match [ 101.092333][ T6021] lo speed is unknown, defaulting to 1000 [ 101.120867][ T6053] pim6reg: entered allmulticast mode [ 101.126565][ T6021] lo speed is unknown, defaulting to 1000 [ 101.137851][ T6021] lo speed is unknown, defaulting to 1000 [ 101.157607][ T6050] delete_channel: no stack [ 101.171142][ T6021] lo speed is unknown, defaulting to 1000 [ 101.823832][ T6073] netlink: 'syz.1.39': attribute type 2 has an invalid length. [ 101.847659][ T6072] netlink: 'syz.3.42': attribute type 2 has an invalid length. [ 101.856014][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'. [ 101.875829][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'. [ 101.891340][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 101.893650][ T6075] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 101.904969][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 101.926215][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 101.940958][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 101.950365][ T6066] netlink: 56 bytes leftover after parsing attributes in process `syz.1.39'. [ 102.005249][ T6072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.014804][ T6072] team0: Port device bond2 added [ 102.060729][ T6066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.069574][ T6066] team0: Port device bond2 added [ 102.076006][ T10] lo speed is unknown, defaulting to 1000 [ 102.104631][ T10] s›z0: Port: 1 Link DOWN [ 102.373302][ T6087] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.382368][ T6087] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.391175][ T6087] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.400036][ T6087] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.443033][ T6087] team0: Port device vxlan0 added [ 102.531783][ T6090] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.542529][ T6090] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.552881][ T6090] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.562408][ T6090] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.621589][ T6090] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.631131][ T6090] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.642339][ T6090] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.652898][ T6090] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.775348][ T6092] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.784657][ T6092] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.794014][ T6092] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.802963][ T6092] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.832047][ T6092] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 102.983719][ T6098] lo speed is unknown, defaulting to 1000 [ 103.172638][ T6111] sit0: entered promiscuous mode [ 103.198598][ T6111] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 103.258461][ T6111] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 103.702147][ T6128] lo speed is unknown, defaulting to 1000 [ 104.710863][ T6154] netlink: 'syz.2.64': attribute type 2 has an invalid length. [ 104.948299][ T6162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.121784][ T6154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.130959][ T6154] team0: Port device bond1 added [ 105.234625][ T6172] __nla_validate_parse: 13 callbacks suppressed [ 105.234646][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 105.258598][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 105.326999][ T6167] bridge0: entered promiscuous mode [ 105.342583][ T6167] vlan2: entered promiscuous mode [ 105.751097][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 105.764900][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 105.774916][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 105.788430][ T6191] netlink: 'syz.1.79': attribute type 15 has an invalid length. [ 105.921899][ T6194] FAULT_INJECTION: forcing a failure. [ 105.921899][ T6194] name failslab, interval 1, probability 0, space 0, times 1 [ 105.953500][ T6196] Bluetooth: MGMT ver 1.23 [ 105.954153][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: syz.1.82 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 105.954184][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.954204][ T6194] Call Trace: [ 105.954213][ T6194] [ 105.954223][ T6194] dump_stack_lvl+0x241/0x360 [ 105.954272][ T6194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.954304][ T6194] ? __pfx__printk+0x10/0x10 [ 105.954333][ T6194] ? __lock_acquire+0xad5/0xd80 [ 105.954369][ T6194] should_fail_ex+0x424/0x570 [ 105.954403][ T6194] should_failslab+0xac/0x100 [ 105.954436][ T6194] kmem_cache_alloc_noprof+0x78/0x390 [ 105.954467][ T6194] ? skb_clone+0x20c/0x390 [ 105.954503][ T6194] skb_clone+0x20c/0x390 [ 105.954536][ T6194] __netlink_deliver_tap+0x3c4/0x7f0 [ 105.954573][ T6194] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.954594][ T6194] netlink_deliver_tap+0x19d/0x1b0 [ 105.954619][ T6194] netlink_unicast+0x7c6/0x9a0 [ 105.954663][ T6194] ? __pfx_netlink_unicast+0x10/0x10 [ 105.954707][ T6194] ? skb_put+0x114/0x1f0 [ 105.954738][ T6194] netlink_sendmsg+0x8c3/0xcd0 [ 105.954777][ T6194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.954806][ T6194] ? aa_sock_msg_perm+0x91/0x160 [ 105.954844][ T6194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.954865][ T6194] __sock_sendmsg+0x221/0x270 [ 105.954903][ T6194] ____sys_sendmsg+0x523/0x860 [ 105.954941][ T6194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.954967][ T6194] ? __fget_files+0x2a/0x420 [ 105.955004][ T6194] ? __fget_files+0x2a/0x420 [ 105.955049][ T6194] __sys_sendmsg+0x271/0x360 [ 105.955083][ T6194] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.955176][ T6194] ? do_syscall_64+0xb6/0x230 [ 105.955205][ T6194] do_syscall_64+0xf3/0x230 [ 105.955229][ T6194] ? clear_bhb_loop+0x45/0xa0 [ 105.955256][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.955282][ T6194] RIP: 0033:0x7f9364f8e169 [ 105.955307][ T6194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.955324][ T6194] RSP: 002b:00007f9365ecc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.955349][ T6194] RAX: ffffffffffffffda RBX: 00007f93651b5fa0 RCX: 00007f9364f8e169 [ 105.955365][ T6194] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 105.955385][ T6194] RBP: 00007f9365ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 105.955398][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.955411][ T6194] R13: 0000000000000000 R14: 00007f93651b5fa0 R15: 00007ffc3e9f7e88 [ 105.955446][ T6194] [ 106.428753][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'. [ 106.431997][ T6209] netlink: 148 bytes leftover after parsing attributes in process `syz.2.86'. [ 107.059346][ T6221] bridge_slave_0: left allmulticast mode [ 107.071371][ T6221] bridge_slave_0: left promiscuous mode [ 107.085955][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.285129][ T6221] bridge_slave_1: left allmulticast mode [ 107.295267][ T6221] bridge_slave_1: left promiscuous mode [ 107.308019][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.360657][ T6221] bond0: (slave bond_slave_0): Releasing backup interface [ 107.406311][ T6221] bond0: (slave bond_slave_1): Releasing backup interface [ 107.462186][ T6221] team0: Port device team_slave_0 removed [ 107.481162][ T6221] team0: Port device team_slave_1 removed [ 107.488245][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.497769][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.513394][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.522271][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.543396][ T6221] team0: Port device bond1 removed [ 107.555391][ T6221] team0: Port device bond2 removed [ 107.582495][ T6225] bond0: entered promiscuous mode [ 107.587663][ T6225] bond_slave_0: entered promiscuous mode [ 107.609802][ T6225] bond_slave_1: entered promiscuous mode [ 107.638016][ T6225] batadv0: entered promiscuous mode [ 107.655135][ T6225] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 107.672168][ T6225] Cannot create hsr debugfs directory [ 107.679240][ T6225] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 107.688245][ T6238] atomic_op ffff88807cf6c198 conn xmit_atomic 0000000000000000 [ 108.032924][ T6246] lo speed is unknown, defaulting to 1000 [ 108.044031][ T6250] netlink: 'syz.0.98': attribute type 39 has an invalid length. [ 108.192025][ T6255] tipc: Started in network mode [ 108.197243][ T6255] tipc: Node identity , cluster identity 4711 [ 108.207973][ T6255] tipc: Failed to obtain node identity [ 108.214142][ T6255] tipc: Enabling of bearer rejected, failed to enable media [ 108.332171][ T6258] netlink: 292 bytes leftover after parsing attributes in process `syz.0.100'. [ 108.340924][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 108.402678][ T6258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.100'. [ 108.684773][ T2156] hid-generic 0005:0B57:0058.0001: item fetching failed at offset 0/1 [ 108.733452][ T2156] hid-generic 0005:0B57:0058.0001: probe with driver hid-generic failed with error -22 [ 108.815564][ T6276] netlink: 'syz.2.107': attribute type 12 has an invalid length. [ 108.985863][ T6282] Zero length message leads to an empty skb [ 109.171512][ T6291] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 109.242399][ T6291] batadv1: entered promiscuous mode [ 109.272983][ T6291] batadv1: entered allmulticast mode [ 109.732787][ T6310] netlink: 'syz.1.121': attribute type 75 has an invalid length. [ 109.992958][ T6322] delete_channel: no stack [ 110.097747][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.105559][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.365242][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.382535][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.502810][ T6317] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.523094][ T6317] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.536588][ T6317] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.548950][ T6317] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.057932][ T6355] __nla_validate_parse: 8 callbacks suppressed [ 111.057954][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 111.184307][ T6365] delete_channel: no stack [ 111.738538][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.746761][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.934110][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.962892][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.993289][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 112.114863][ T6374] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.124476][ T6374] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.133888][ T6374] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.143248][ T6374] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.156384][ T6374] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.166389][ T6374] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.175464][ T6374] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.184620][ T6374] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.433714][ T6390] sctp: [Deprecated]: syz.0.149 (pid 6390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.433714][ T6390] Use struct sctp_sack_info instead [ 112.472959][ T6390] netlink: 52 bytes leftover after parsing attributes in process `syz.0.149'. [ 112.675881][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 112.734899][ T6407] delete_channel: no stack [ 112.874090][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.155'. [ 112.920680][ T6413] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 112.924004][ T6411] netlink: 128 bytes leftover after parsing attributes in process `syz.4.154'. [ 113.150373][ T6422] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 113.182941][ T6418] macvtap1: entered promiscuous mode [ 113.188341][ T6418] vlan0: entered promiscuous mode [ 113.217522][ T6418] macvtap1: entered allmulticast mode [ 113.223222][ T6418] vlan0: entered allmulticast mode [ 113.228537][ T6418] veth0_vlan: entered allmulticast mode [ 113.285526][ T6418] vlan0: left allmulticast mode [ 113.296902][ T6418] veth0_vlan: left allmulticast mode [ 113.309723][ T6418] vlan0: left promiscuous mode [ 113.402706][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 113.412547][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 113.446028][ T6436] ip6t_rpfilter: unknown options [ 113.465072][ T6426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.483544][ T6426] bond1: (slave bond2): making interface the new active one [ 113.508713][ T6426] bond1: (slave bond2): Enslaving as an active interface with an up link [ 113.697171][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 113.752909][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 113.766788][ T6442] delete_channel: no stack [ 114.775083][ T6486] lo speed is unknown, defaulting to 1000 [ 114.803913][ T6479] lo speed is unknown, defaulting to 1000 [ 114.920255][ T6491] delete_channel: no stack [ 115.075948][ T6496] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.157270][ T6497] veth1_macvtap: left promiscuous mode [ 115.162937][ T6497] macsec0: entered promiscuous mode [ 115.220562][ T6494] veth1_macvtap: entered promiscuous mode [ 115.264608][ T6494] macsec0: left promiscuous mode [ 115.896207][ T6519] delete_channel: no stack [ 115.928388][ T6525] netlink: 'syz.3.197': attribute type 2 has an invalid length. [ 116.015015][ T6525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.026170][ T6525] team0: Port device bond3 added [ 116.132172][ T6530] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.141044][ T6530] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.149909][ T6530] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.159274][ T6530] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.173279][ T6530] vxlan0: entered promiscuous mode [ 116.180164][ T6530] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 116.307354][ T6536] __nla_validate_parse: 9 callbacks suppressed [ 116.307375][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 116.345361][ T6536] delete_channel: no stack [ 116.373446][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 116.582794][ T6545] FAULT_INJECTION: forcing a failure. [ 116.582794][ T6545] name failslab, interval 1, probability 0, space 0, times 0 [ 116.730436][ T6545] CPU: 1 UID: 0 PID: 6545 Comm: syz.3.204 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 116.730468][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.730481][ T6545] Call Trace: [ 116.730489][ T6545] [ 116.730498][ T6545] dump_stack_lvl+0x241/0x360 [ 116.730537][ T6545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.730567][ T6545] ? __pfx__printk+0x10/0x10 [ 116.730601][ T6545] ? __pfx___might_resched+0x10/0x10 [ 116.730633][ T6545] should_fail_ex+0x424/0x570 [ 116.730665][ T6545] should_failslab+0xac/0x100 [ 116.730696][ T6545] __kmalloc_cache_noprof+0x73/0x370 [ 116.730731][ T6545] ? ip_set_create+0x338/0x1960 [ 116.730763][ T6545] ip_set_create+0x338/0x1960 [ 116.730794][ T6545] ? __pfx_rcu_is_watching+0x1/0x10 [ 116.730821][ T6545] ? trace_contention_end+0x3c/0x120 [ 116.730851][ T6545] ? __pfx_ip_set_create+0x10/0x10 [ 116.730915][ T6545] ? nfnetlink_rcv_msg+0x227/0x1190 [ 116.730944][ T6545] nfnetlink_rcv_msg+0xbf7/0x1190 [ 116.730971][ T6545] ? nfnetlink_rcv_msg+0x227/0x1190 [ 116.731024][ T6545] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.731049][ T6545] ? stack_trace_save+0x11a/0x1d0 [ 116.731106][ T6545] ? kmem_cache_free+0x197/0x410 [ 116.731132][ T6545] ? nlmon_xmit+0xaf/0x100 [ 116.731152][ T6545] ? dev_hard_start_xmit+0x2d9/0x830 [ 116.731177][ T6545] ? __dev_queue_xmit+0x1b80/0x3f60 [ 116.731202][ T6545] ? __netlink_deliver_tap+0x561/0x7f0 [ 116.731222][ T6545] ? netlink_deliver_tap+0x19d/0x1b0 [ 116.731241][ T6545] ? netlink_unicast+0x7c6/0x9a0 [ 116.731269][ T6545] ? netlink_sendmsg+0x8c3/0xcd0 [ 116.731288][ T6545] ? __sock_sendmsg+0x221/0x270 [ 116.731337][ T6545] netlink_rcv_skb+0x208/0x480 [ 116.731359][ T6545] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.731388][ T6545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.731426][ T6545] ? apparmor_capable+0x13b/0x1b0 [ 116.731450][ T6545] ? bpf_lsm_capable+0x9/0x10 [ 116.731473][ T6545] ? security_capable+0x7e/0x2d0 [ 116.731509][ T6545] nfnetlink_rcv+0x296/0x28f0 [ 116.731538][ T6545] ? __dev_queue_xmit+0x2f9/0x3f60 [ 116.731566][ T6545] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 116.731591][ T6545] ? __dev_queue_xmit+0x2f9/0x3f60 [ 116.731618][ T6545] ? __dev_queue_xmit+0x2f9/0x3f60 [ 116.731648][ T6545] ? __dev_queue_xmit+0x1780/0x3f60 [ 116.731673][ T6545] ? kasan_save_track+0x3f/0x80 [ 116.731694][ T6545] ? __kasan_slab_alloc+0x66/0x80 [ 116.731731][ T6545] ? do_syscall_64+0xf3/0x230 [ 116.731758][ T6545] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.731784][ T6545] ? __dev_queue_xmit+0x2f9/0x3f60 [ 116.731816][ T6545] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.731864][ T6545] ? ref_tracker_free+0x63e/0x7e0 [ 116.731893][ T6545] ? __asan_memcpy+0x40/0x70 [ 116.731912][ T6545] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.731938][ T6545] ? __skb_clone+0x5c/0x6d0 [ 116.732058][ T6545] ? skb_clone+0x240/0x390 [ 116.732110][ T6545] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.732135][ T6545] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.732160][ T6545] netlink_unicast+0x7f8/0x9a0 [ 116.732203][ T6545] ? __pfx_netlink_unicast+0x10/0x10 [ 116.732238][ T6545] ? skb_put+0x114/0x1f0 [ 116.732268][ T6545] netlink_sendmsg+0x8c3/0xcd0 [ 116.732305][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.732333][ T6545] ? aa_sock_msg_perm+0x91/0x160 [ 116.732373][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.732393][ T6545] __sock_sendmsg+0x221/0x270 [ 116.732430][ T6545] ____sys_sendmsg+0x523/0x860 [ 116.732466][ T6545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.732490][ T6545] ? __fget_files+0x2a/0x420 [ 116.732526][ T6545] ? __fget_files+0x2a/0x420 [ 116.732566][ T6545] __sys_sendmsg+0x271/0x360 [ 116.732608][ T6545] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.732705][ T6545] ? do_syscall_64+0xb6/0x230 [ 116.732734][ T6545] do_syscall_64+0xf3/0x230 [ 116.732758][ T6545] ? clear_bhb_loop+0x45/0xa0 [ 116.732784][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.732805][ T6545] RIP: 0033:0x7fc1b758e169 [ 116.732824][ T6545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.732840][ T6545] RSP: 002b:00007fc1b84b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.732863][ T6545] RAX: ffffffffffffffda RBX: 00007fc1b77b5fa0 RCX: 00007fc1b758e169 [ 116.732878][ T6545] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 116.732891][ T6545] RBP: 00007fc1b84b2090 R08: 0000000000000000 R09: 0000000000000000 [ 116.732904][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.732922][ T6545] R13: 0000000000000000 R14: 00007fc1b77b5fa0 R15: 00007ffddcd4b428 [ 116.732960][ T6545] [ 117.212943][ T6552] netlink: 148 bytes leftover after parsing attributes in process `syz.2.207'. [ 117.370842][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 117.434967][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 117.681644][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 117.740851][ T6568] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 117.749864][ T6569] netlink: 'syz.0.210': attribute type 2 has an invalid length. [ 117.827525][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 117.846088][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 117.862659][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 117.873975][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 117.883267][ T6573] netlink: 'syz.1.213': attribute type 15 has an invalid length. [ 118.034297][ T6569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.063936][ T6569] team0: Port device bond3 added [ 118.093588][ T6580] netlink: 'syz.4.215': attribute type 15 has an invalid length. [ 118.406978][ T6592] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 118.940863][ T6612] netlink: 'syz.4.227': attribute type 2 has an invalid length. [ 119.188098][ T6612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.214373][ T6612] team0: Port device bond2 added [ 119.703740][ T6646] Cannot find del_set index 1 as target [ 119.737080][ T6642] bridge0: port 3(veth0_to_hsr) entered blocking state [ 119.744308][ T6642] bridge0: port 3(veth0_to_hsr) entered disabled state [ 119.754078][ T6642] veth0_to_hsr: entered allmulticast mode [ 119.821833][ T6642] veth0_to_hsr: entered promiscuous mode [ 119.919629][ T6637] lo speed is unknown, defaulting to 1000 [ 120.055839][ T6655] netlink: 'syz.0.239': attribute type 15 has an invalid length. [ 120.274854][ T6662] openvswitch: netlink: Actions may not be safe on all matching packets [ 120.588627][ T6674] Illegal XDP return value 1732517921 on prog (id 89) dev N/A, expect packet loss! [ 120.819153][ T6679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.072356][ T6679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.228474][ T6679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.491238][ T6679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.541711][ T6707] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.551045][ T6707] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.560066][ T6707] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.569243][ T6707] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.622844][ T6707] team0: Port device vxlan0 added [ 121.800465][ T6679] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.924644][ T6679] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.077108][ T6679] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.110132][ T6724] __nla_validate_parse: 16 callbacks suppressed [ 122.110154][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 122.149043][ T6679] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.257540][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.266279][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.407783][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.444909][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.607480][ T6742] netlink: 'syz.1.264': attribute type 13 has an invalid length. [ 122.643852][ T6725] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.656657][ T6725] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.668123][ T6725] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.686119][ T6725] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.772658][ T6725] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.782318][ T6725] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.791649][ T6725] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.800919][ T6725] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.822985][ T6742] macvtap0: entered promiscuous mode [ 122.875306][ T6742] macvtap0: refused to change device tx_queue_len [ 123.207749][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 123.374586][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 123.420740][ T6756] tipc: Started in network mode [ 123.427718][ T6756] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 123.526045][ T6756] tipc: Enabling of bearer rejected, failed to enable media [ 124.021628][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 124.092670][ T6786] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 124.100592][ T30] audit: type=1107 audit(1744869944.782:2): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 124.118002][ T6781] delete_channel: no stack [ 124.400599][ T6795] ip6t_rpfilter: unknown options [ 124.417489][ T6786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 124.456622][ T6786] bond4: (slave bond5): making interface the new active one [ 124.518197][ T6786] bond4: (slave bond5): Enslaving as an active interface with an up link [ 124.681207][ T6806] netlink: 112 bytes leftover after parsing attributes in process `syz.1.280'. [ 124.765548][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 124.788974][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 124.807282][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 125.270079][ T6832] lo speed is unknown, defaulting to 1000 [ 125.373938][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 125.438588][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 125.478537][ T6844] delete_channel: no stack [ 125.990417][ T6872] netlink: 'syz.2.299': attribute type 15 has an invalid length. [ 126.419967][ T6896] netlink: 'syz.2.304': attribute type 11 has an invalid length. [ 126.473838][ T6873] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.979757][ T6910] syz_tun: entered allmulticast mode [ 126.993667][ T6908] syz_tun: left allmulticast mode [ 127.124617][ T6914] delete_channel: no stack [ 127.333751][ T6920] sctp: [Deprecated]: syz.1.313 (pid 6920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.333751][ T6920] Use struct sctp_sack_info instead [ 127.369296][ T6925] netlink: 'syz.2.315': attribute type 6 has an invalid length. [ 127.377218][ T6925] netlink: 'syz.2.315': attribute type 7 has an invalid length. [ 127.393403][ T6925] netlink: 'syz.2.315': attribute type 8 has an invalid length. [ 127.442506][ T6930] __nla_validate_parse: 6 callbacks suppressed [ 127.442525][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 127.511270][ T6929] macvtap0: left promiscuous mode [ 127.767212][ T6943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.320'. [ 127.872157][ T6948] lo speed is unknown, defaulting to 1000 [ 128.207595][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 128.292748][ T6965] delete_channel: no stack [ 128.487985][ T6969] openvswitch: netlink: EtherType 0 is less than min 600 [ 129.087250][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 129.124750][ T6989] netlink: 148 bytes leftover after parsing attributes in process `syz.3.338'. [ 129.235230][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.323558][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 129.368181][ T6994] delete_channel: no stack [ 129.978086][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 130.099146][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 130.117664][ T7024] bridge_slave_0: left allmulticast mode [ 130.123646][ T7024] bridge_slave_0: left promiscuous mode [ 130.129568][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.172051][ T7024] bridge_slave_1: left allmulticast mode [ 130.179207][ T7026] delete_channel: no stack [ 130.189780][ T7024] bridge_slave_1: left promiscuous mode [ 130.195832][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.212782][ T7024] bond0: (slave bond_slave_0): Releasing backup interface [ 130.307711][ T7024] bond0: (slave bond_slave_1): Releasing backup interface [ 130.348257][ T7024] team0: Port device team_slave_0 removed [ 130.372890][ T7024] team0: Port device team_slave_1 removed [ 130.391187][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.415903][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.484260][ T7024] veth0_to_hsr: left allmulticast mode [ 130.510876][ T7024] veth0_to_hsr: left promiscuous mode [ 130.536302][ T7024] bridge0: port 3(veth0_to_hsr) entered disabled state [ 130.587966][ T7024] team0: Port device bond1 removed [ 130.661843][ T7024] bond0: (slave vxlan0): Releasing backup interface [ 130.681697][ T7024] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.691562][ T7024] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.701522][ T7024] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.711067][ T7024] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.804825][ T7024] team0: Port device bond2 removed [ 131.065234][ T7045] netlink: 'syz.3.360': attribute type 12 has an invalid length. [ 131.076571][ T7045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.360'. [ 131.294311][ T7060] xt_hashlimit: size too large, truncated to 1048576 [ 131.517791][ T7069] delete_channel: no stack [ 132.579231][ T7109] __nla_validate_parse: 5 callbacks suppressed [ 132.579250][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 132.592982][ T7111] xt_time: unknown flags 0x4 [ 132.792293][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 132.838743][ T7117] delete_channel: no stack [ 133.024821][ T7126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.384'. [ 133.038190][ T7121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.381'. [ 133.308687][ T7135] netlink: 112 bytes leftover after parsing attributes in process `syz.2.388'. [ 133.745763][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 133.840871][ T7155] delete_channel: no stack [ 133.873500][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 133.885303][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 133.896216][ T7160] netlink: 'syz.4.399': attribute type 7 has an invalid length. [ 134.512555][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 134.543749][ T7192] delete_channel: no stack [ 134.663330][ T7196] tipc: Started in network mode [ 134.676487][ T7196] tipc: Node identity e0000001, cluster identity 4711 [ 134.700545][ T7196] tipc: Enabling of bearer rejected, failed to enable media [ 134.892214][ T7205] netlink: 112 bytes leftover after parsing attributes in process `syz.4.416'. [ 135.246255][ T7228] delete_channel: no stack [ 135.297183][ T7231] syz.4.420: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.327438][ T7231] CPU: 1 UID: 0 PID: 7231 Comm: syz.4.420 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 135.327470][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.327485][ T7231] Call Trace: [ 135.327494][ T7231] [ 135.327503][ T7231] dump_stack_lvl+0x241/0x360 [ 135.327543][ T7231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.327573][ T7231] ? __pfx__printk+0x10/0x10 [ 135.327600][ T7231] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 135.327633][ T7231] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 135.327662][ T7231] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 135.327693][ T7231] warn_alloc+0x27c/0x410 [ 135.327716][ T7231] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 135.327750][ T7231] ? __pfx_warn_alloc+0x10/0x10 [ 135.327770][ T7231] ? kasan_save_track+0x3f/0x80 [ 135.327790][ T7231] ? __kasan_kmalloc+0x9d/0xb0 [ 135.327824][ T7231] ? xsk_setsockopt+0x449/0x840 [ 135.327855][ T7231] ? do_sock_setsockopt+0x3b1/0x710 [ 135.327879][ T7231] ? __x64_sys_setsockopt+0x1ee/0x280 [ 135.327903][ T7231] ? do_syscall_64+0xf3/0x230 [ 135.327925][ T7231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.327956][ T7231] __vmalloc_node_range_noprof+0x128/0x1390 [ 135.328023][ T7231] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.328061][ T7231] ? __kasan_kmalloc+0x9d/0xb0 [ 135.328090][ T7231] vmalloc_user_noprof+0x74/0x80 [ 135.328123][ T7231] ? xskq_create+0xb6/0x170 [ 135.328140][ T7231] xskq_create+0xb6/0x170 [ 135.328162][ T7231] xsk_init_queue+0xa1/0x100 [ 135.328198][ T7231] xsk_setsockopt+0x449/0x840 [ 135.328233][ T7231] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.328265][ T7231] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.328295][ T7231] ? aa_sock_opt_perm+0x79/0x120 [ 135.328330][ T7231] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.328360][ T7231] do_sock_setsockopt+0x3b1/0x710 [ 135.328392][ T7231] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 135.328415][ T7231] ? __fget_files+0x2a/0x420 [ 135.328448][ T7231] ? __fget_files+0x39d/0x420 [ 135.328476][ T7231] ? __fget_files+0x2a/0x420 [ 135.328515][ T7231] __x64_sys_setsockopt+0x1ee/0x280 [ 135.328550][ T7231] do_syscall_64+0xf3/0x230 [ 135.328575][ T7231] ? clear_bhb_loop+0x45/0xa0 [ 135.328601][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.328622][ T7231] RIP: 0033:0x7f188d38e169 [ 135.328642][ T7231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.328659][ T7231] RSP: 002b:00007f188e178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.328684][ T7231] RAX: ffffffffffffffda RBX: 00007f188d5b6240 RCX: 00007f188d38e169 [ 135.328699][ T7231] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 135.328712][ T7231] RBP: 00007f188d410a68 R08: 0000000000000004 R09: 0000000000000000 [ 135.328725][ T7231] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.328739][ T7231] R13: 0000000000000000 R14: 00007f188d5b6240 R15: 00007ffc68c3e8e8 [ 135.328774][ T7231] [ 135.630356][ T7231] Mem-Info: [ 135.681346][ T7231] active_anon:5199 inactive_anon:0 isolated_anon:0 [ 135.681346][ T7231] active_file:1463 inactive_file:38321 isolated_file:0 [ 135.681346][ T7231] unevictable:768 dirty:195 writeback:0 [ 135.681346][ T7231] slab_reclaimable:9676 slab_unreclaimable:99325 [ 135.681346][ T7231] mapped:29844 shmem:1443 pagetables:897 [ 135.681346][ T7231] sec_pagetables:0 bounce:0 [ 135.681346][ T7231] kernel_misc_reclaimable:0 [ 135.681346][ T7231] free:1344466 free_pcp:320 free_cma:0 [ 135.755664][ T7231] Node 0 active_anon:20896kB inactive_anon:0kB active_file:5852kB inactive_file:153208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119376kB dirty:780kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11332kB pagetables:3588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.789596][ T7231] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.821699][ T7231] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.852376][ T7231] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 135.858312][ T7231] Node 0 DMA32 free:1450964kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20988kB inactive_anon:0kB active_file:5852kB inactive_file:153116kB unevictable:1536kB writepending:780kB present:3129332kB managed:2547412kB mlocked:0kB bounce:0kB free_pcp:2060kB local_pcp:1060kB free_cma:0kB [ 135.889226][ T7231] lowmem_reserve[]: 0 0 0 0 0 [ 135.899011][ T7231] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 135.978959][ T7231] lowmem_reserve[]: 0 0 0 0 0 [ 135.983797][ T7231] Node 1 Normal free:3910716kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.097974][ T7231] lowmem_reserve[]: 0 0 0 0 0 [ 136.119306][ T7231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.158867][ T7231] Node 0 DMA32: 773*4kB (UME) 258*8kB (UME) 114*16kB (UME) 100*32kB (UME) 30*64kB (UME) 67*128kB (UME) 26*256kB (UME) 18*512kB (UME) 9*1024kB (UM) 5*2048kB (UM) 341*4096kB (UM) = 1452740kB [ 136.187326][ T7249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.211800][ T7231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 136.228177][ T7249] sctp: [Deprecated]: syz.1.433 (pid 7249) Use of int in max_burst socket option deprecated. [ 136.228177][ T7249] Use struct sctp_assoc_value instead [ 136.245833][ T7231] Node 1 Normal: 235*4kB (U) 50*8kB (UME) 36*16kB (UME) 182*32kB (UME) 92*64kB (UME) 32*128kB (UME) 15*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 5*2048kB (UE) 945*4096kB (M) = 3910716kB [ 136.276098][ T7231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.286488][ T7231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.303355][ T7231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.314855][ T7231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.338350][ T7253] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.348566][ T7231] 41229 total pagecache pages [ 136.355960][ T7231] 0 pages in swap cache [ 136.361915][ T7231] Free swap = 124996kB [ 136.366122][ T7231] Total swap = 124996kB [ 136.372811][ T7253] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.382831][ T7231] 2097051 pages RAM [ 136.386718][ T7231] 0 pages HighMem/MovableOnly [ 136.394768][ T7253] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.403280][ T7231] 428540 pages reserved [ 136.407480][ T7231] 0 pages cma reserved [ 136.407483][ T7254] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 136.426293][ T7253] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.975578][ T7277] erspan0: entered promiscuous mode [ 137.405791][ T7277] erspan0: left promiscuous mode [ 137.601572][ T7284] __nla_validate_parse: 8 callbacks suppressed [ 137.601592][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 137.670845][ T7290] ip6t_rpfilter: unknown options [ 137.912948][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 137.931501][ T7301] netlink: 'syz.4.450': attribute type 1 has an invalid length. [ 138.054731][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.064270][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.161758][ T7310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.172139][ T7310] bond3: (slave bond4): making interface the new active one [ 138.182351][ T7310] bond3: (slave bond4): Enslaving as an active interface with an up link [ 138.196073][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.454'. [ 138.228486][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 138.460409][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 138.694229][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 138.705017][ T7327] netlink: 96 bytes leftover after parsing attributes in process `syz.4.458'. [ 138.724104][ T7354] netlink: 128 bytes leftover after parsing attributes in process `syz.3.459'. [ 138.732906][ T7350] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 138.743019][ T7327] netlink: 120 bytes leftover after parsing attributes in process `syz.4.458'. [ 138.956834][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 139.032890][ T7345] lo speed is unknown, defaulting to 1000 [ 139.913246][ T7397] delete_channel: no stack [ 140.386394][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.406643][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.434538][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.471288][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.502292][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.531544][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 140.544586][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 140.574598][ T10] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x1 [ 140.595772][ T10] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 140.927033][ T7440] team0 (unregistering): Port device bond3 removed [ 140.940865][ T7440] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.950611][ T7440] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.960178][ T7440] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.969403][ T7440] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.985366][ T7446] delete_channel: no stack [ 141.068083][ T7440] team0 (unregistering): Port device vxlan0 removed [ 141.364597][ T7459] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.387705][ T7459] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.419824][ T7459] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.445367][ T7459] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.638831][ T7471] nbd: must specify at least one socket [ 141.704144][ T7474] delete_channel: no stack [ 141.753434][ T7478] netlink: 'syz.0.504': attribute type 4 has an invalid length. [ 142.068480][ T7491] lo speed is unknown, defaulting to 1000 [ 142.095513][ T7492] sctp: [Deprecated]: syz.1.509 (pid 7492) Use of int in maxseg socket option. [ 142.095513][ T7492] Use struct sctp_assoc_value instead [ 142.158458][ T7492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.169809][ T7492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.180040][ T7492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.190539][ T7492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.205063][ T7492] geneve4: entered promiscuous mode [ 142.216606][ T7492] geneve4: entered allmulticast mode [ 143.015624][ T7529] __nla_validate_parse: 10 callbacks suppressed [ 143.015645][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 143.033975][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 143.043073][ T7529] netlink: 'syz.1.521': attribute type 15 has an invalid length. [ 143.067644][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 143.234234][ T7530] bond0: (slave bond_slave_0): Releasing backup interface [ 143.257466][ T7530] bond_slave_0 (unregistering): left promiscuous mode [ 143.313874][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 143.402730][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.526'. [ 143.534764][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 143.579782][ T7545] bond3: (slave bond4): Releasing backup interface [ 143.926918][ T7563] FAULT_INJECTION: forcing a failure. [ 143.926918][ T7563] name failslab, interval 1, probability 0, space 0, times 0 [ 143.935551][ T7560] netlink: 'syz.1.536': attribute type 2 has an invalid length. [ 143.956772][ T7565] vlan2: entered promiscuous mode [ 143.985340][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.0.535 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 143.985375][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.985387][ T7563] Call Trace: [ 143.985395][ T7563] [ 143.985403][ T7563] dump_stack_lvl+0x241/0x360 [ 143.985441][ T7563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.985470][ T7563] ? __pfx__printk+0x10/0x10 [ 143.985502][ T7563] ? __pfx___might_resched+0x10/0x10 [ 143.985531][ T7563] should_fail_ex+0x424/0x570 [ 143.985562][ T7563] should_failslab+0xac/0x100 [ 143.985591][ T7563] __kvmalloc_node_noprof+0x170/0x5a0 [ 143.985620][ T7563] ? hash_ipmark_create+0x498/0x1190 [ 143.985646][ T7563] ? hash_ipmark_create+0x3b9/0x1190 [ 143.985677][ T7563] hash_ipmark_create+0x498/0x1190 [ 143.985719][ T7563] ? __pfx_hash_ipmark_create+0x10/0x10 [ 143.985746][ T7563] ip_set_create+0xa7d/0x1960 [ 143.985775][ T7563] ? ip_set_create+0x48c/0x1960 [ 143.985807][ T7563] ? __pfx_ip_set_create+0x10/0x10 [ 143.985868][ T7563] ? nfnetlink_rcv_msg+0x227/0x1190 [ 143.985896][ T7563] nfnetlink_rcv_msg+0xbf7/0x1190 [ 143.985920][ T7563] ? __lock_acquire+0xad5/0xd80 [ 143.985939][ T7563] ? nfnetlink_rcv_msg+0x227/0x1190 [ 143.985991][ T7563] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.986045][ T7563] ? __kernel_text_address+0xd/0x40 [ 143.986076][ T7563] ? unwind_get_return_address+0x4d/0x90 [ 143.986103][ T7563] ? arch_stack_walk+0xff/0x150 [ 143.986133][ T7563] ? __lock_acquire+0xad5/0xd80 [ 143.986163][ T7563] netlink_rcv_skb+0x208/0x480 [ 143.986185][ T7563] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.986225][ T7563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.986260][ T7563] ? apparmor_capable+0x13b/0x1b0 [ 143.986281][ T7563] ? bpf_lsm_capable+0x9/0x10 [ 143.986303][ T7563] ? security_capable+0x7e/0x2d0 [ 143.986337][ T7563] nfnetlink_rcv+0x296/0x28f0 [ 143.986360][ T7563] ? __kernel_text_address+0xd/0x40 [ 143.986393][ T7563] ? arch_stack_walk+0xff/0x150 [ 143.986409][ T7565] bond0: (slave vlan2): Opening slave failed [ 143.986433][ T7563] ? stack_trace_save+0x11a/0x1d0 [ 143.986463][ T7563] ? __pfx_stack_trace_save+0x10/0x10 [ 143.986493][ T7563] ? stack_depot_save_flags+0x44/0x940 [ 143.986521][ T7563] ? stack_trace_snprint+0x71/0xf0 [ 143.986553][ T7563] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 143.986587][ T7563] ? kasan_save_track+0x51/0x80 [ 143.986609][ T7563] ? kasan_save_track+0x3f/0x80 [ 143.986628][ T7563] ? __kasan_slab_alloc+0x66/0x80 [ 143.986652][ T7563] ? kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 143.986680][ T7563] ? kmalloc_reserve+0xa8/0x2a0 [ 143.986703][ T7563] ? __alloc_skb+0x1f2/0x480 [ 143.986724][ T7563] ? netlink_sendmsg+0x638/0xcd0 [ 143.986744][ T7563] ? __sock_sendmsg+0x221/0x270 [ 143.986775][ T7563] ? ____sys_sendmsg+0x523/0x860 [ 143.986807][ T7563] ? __lock_acquire+0xad5/0xd80 [ 143.986859][ T7563] ? __lock_acquire+0xad5/0xd80 [ 143.986903][ T7563] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.986930][ T7563] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.986955][ T7563] netlink_unicast+0x7f8/0x9a0 [ 143.986999][ T7563] ? __pfx_netlink_unicast+0x10/0x10 [ 143.987035][ T7563] ? skb_put+0x114/0x1f0 [ 143.987067][ T7563] netlink_sendmsg+0x8c3/0xcd0 [ 143.987106][ T7563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.987135][ T7563] ? aa_sock_msg_perm+0x91/0x160 [ 143.987173][ T7563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.987193][ T7563] __sock_sendmsg+0x221/0x270 [ 143.987238][ T7563] ____sys_sendmsg+0x523/0x860 [ 143.987277][ T7563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.987303][ T7563] ? __fget_files+0x2a/0x420 [ 143.987340][ T7563] ? __fget_files+0x2a/0x420 [ 143.987385][ T7563] __sys_sendmsg+0x271/0x360 [ 143.987419][ T7563] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.987513][ T7563] ? do_syscall_64+0xb6/0x230 [ 143.987543][ T7563] do_syscall_64+0xf3/0x230 [ 143.987568][ T7563] ? clear_bhb_loop+0x45/0xa0 [ 143.987595][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.987617][ T7563] RIP: 0033:0x7f4b5538e169 [ 143.987638][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.987656][ T7563] RSP: 002b:00007f4b561a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.987679][ T7563] RAX: ffffffffffffffda RBX: 00007f4b555b5fa0 RCX: 00007f4b5538e169 [ 143.987695][ T7563] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 143.987709][ T7563] RBP: 00007f4b561a3090 R08: 0000000000000000 R09: 0000000000000000 [ 143.987722][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.987734][ T7563] R13: 0000000000000000 R14: 00007f4b555b5fa0 R15: 00007fff37705c88 [ 143.987770][ T7563] [ 144.173884][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 144.468417][ T7571] netlink: 56 bytes leftover after parsing attributes in process `syz.1.536'. [ 144.492873][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 144.502357][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 144.585708][ T7577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.624830][ T7577] team0: Port device bond4 added [ 144.854305][ T7586] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.237452][ T7595] tipc: Started in network mode [ 145.245483][ T7595] tipc: Node identity , cluster identity 4711 [ 145.277699][ T7595] tipc: Failed to obtain node identity [ 145.293444][ T7595] tipc: Enabling of bearer rejected, failed to enable media [ 145.564204][ T7613] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 145.676977][ T7610] bond4 (unregistering): Released all slaves [ 145.751428][ T7621] FAULT_INJECTION: forcing a failure. [ 145.751428][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 145.788946][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.1.555 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 145.788976][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.788989][ T7621] Call Trace: [ 145.788998][ T7621] [ 145.789008][ T7621] dump_stack_lvl+0x241/0x360 [ 145.789047][ T7621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.789075][ T7621] ? __pfx__printk+0x10/0x10 [ 145.789116][ T7621] ? __pfx___might_resched+0x10/0x10 [ 145.789147][ T7621] should_fail_ex+0x424/0x570 [ 145.789178][ T7621] should_failslab+0xac/0x100 [ 145.789208][ T7621] __kmalloc_noprof+0xdf/0x4d0 [ 145.789236][ T7621] ? esp6_init_state+0x74c/0x1180 [ 145.789266][ T7621] esp6_init_state+0x74c/0x1180 [ 145.789288][ T7621] ? __sock_sendmsg+0x221/0x270 [ 145.789316][ T7621] ? ____sys_sendmsg+0x523/0x860 [ 145.789354][ T7621] ? __pfx_esp6_init_state+0x10/0x10 [ 145.789417][ T7621] ? __xfrm_init_state+0x6d9/0x1050 [ 145.789436][ T7621] ? __xfrm_init_state+0x6d9/0x1050 [ 145.789458][ T7621] __xfrm_init_state+0x7ac/0x1050 [ 145.789486][ T7621] xfrm_add_sa+0x2fb9/0x4230 [ 145.789529][ T7621] ? __pfx_xfrm_add_sa+0x10/0x10 [ 145.789567][ T7621] ? __nla_parse+0x40/0x60 [ 145.789601][ T7621] xfrm_user_rcv_msg+0x9c3/0xca0 [ 145.789638][ T7621] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 145.789708][ T7621] ? __mutex_trylock_common+0x184/0x2e0 [ 145.789747][ T7621] ? __pfx___mutex_trylock_common+0x10/0x10 [ 145.789786][ T7621] netlink_rcv_skb+0x208/0x480 [ 145.789809][ T7621] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 145.789841][ T7621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.789879][ T7621] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.789906][ T7621] xfrm_netlink_rcv+0x79/0x90 [ 145.789938][ T7621] netlink_unicast+0x7f8/0x9a0 [ 145.789979][ T7621] ? __pfx_netlink_unicast+0x10/0x10 [ 145.790013][ T7621] ? skb_put+0x114/0x1f0 [ 145.790042][ T7621] netlink_sendmsg+0x8c3/0xcd0 [ 145.790086][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.790113][ T7621] ? aa_sock_msg_perm+0x91/0x160 [ 145.790148][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.790167][ T7621] __sock_sendmsg+0x221/0x270 [ 145.790202][ T7621] ____sys_sendmsg+0x523/0x860 [ 145.790238][ T7621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.790261][ T7621] ? __fget_files+0x2a/0x420 [ 145.790296][ T7621] ? __fget_files+0x2a/0x420 [ 145.790336][ T7621] __sys_sendmsg+0x271/0x360 [ 145.790369][ T7621] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.790457][ T7621] ? do_syscall_64+0xb6/0x230 [ 145.790484][ T7621] do_syscall_64+0xf3/0x230 [ 145.790507][ T7621] ? clear_bhb_loop+0x45/0xa0 [ 145.790532][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.790552][ T7621] RIP: 0033:0x7f9364f8e169 [ 145.790569][ T7621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.790585][ T7621] RSP: 002b:00007f9365ecc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.790608][ T7621] RAX: ffffffffffffffda RBX: 00007f93651b5fa0 RCX: 00007f9364f8e169 [ 145.790622][ T7621] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 145.790635][ T7621] RBP: 00007f9365ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 145.790647][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.790659][ T7621] R13: 0000000000000000 R14: 00007f93651b5fa0 R15: 00007ffc3e9f7e88 [ 145.790692][ T7621] [ 146.145913][ T7625] delete_channel: no stack [ 146.685697][ T7650] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 146.710089][ T7646] !: renamed from dummy0 [ 146.953956][ T7659] netlink: 'syz.0.571': attribute type 12 has an invalid length. [ 147.100254][ T7672] geneve1: entered allmulticast mode [ 147.169673][ T7678] netlink: 'syz.4.576': attribute type 2 has an invalid length. [ 147.953983][ T7715] bridge_slave_0: left allmulticast mode [ 147.960134][ T7715] bridge_slave_0: left promiscuous mode [ 147.967689][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.983170][ T7715] bridge_slave_1: left allmulticast mode [ 147.989593][ T7715] bridge_slave_1: left promiscuous mode [ 147.996268][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.011930][ T7718] netlink: 'syz.1.588': attribute type 10 has an invalid length. [ 148.032179][ T7715] bond0: (slave bond_slave_0): Releasing backup interface [ 148.045242][ T7715] bond0: (slave bond_slave_1): Releasing backup interface [ 148.061386][ T7715] team0: Port device team_slave_0 removed [ 148.070646][ T7715] team0: Port device team_slave_1 removed [ 148.077204][ T7715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.086878][ T7715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.116469][ T7715] team0: Port device bond1 removed [ 148.140032][ T7715] team0: Port device bond2 removed [ 148.154860][ T7715] team0: Port device vxlan0 removed [ 148.241085][ T7715] team0: Port device bond4 removed [ 148.493867][ T7730] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 148.561833][ T7736] __nla_validate_parse: 25 callbacks suppressed [ 148.561856][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.592'. [ 148.624473][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.592'. [ 148.640388][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 148.670170][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 148.678315][ T7738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.707175][ T7730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.592'. [ 148.726123][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 148.730133][ T7738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.739756][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 148.753320][ T7745] netlink: 'syz.0.597': attribute type 7 has an invalid length. [ 148.778900][ T7738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.800255][ T7738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.896912][ T7730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.906573][ T7730] team0: Port device bond2 added [ 148.937571][ T7744] netlink: 128 bytes leftover after parsing attributes in process `syz.3.595'. [ 149.025553][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 149.035042][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 149.542916][ T7779] lo speed is unknown, defaulting to 1000 [ 149.763638][ T7790] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 149.862131][ T7794] netlink: 'syz.4.609': attribute type 2 has an invalid length. [ 149.951348][ T7790] bond3: entered promiscuous mode [ 149.964424][ T7790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.978480][ T7791] batadv1: entered promiscuous mode [ 149.984642][ T7791] batadv1: entered allmulticast mode [ 149.992257][ T7791] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.001516][ T7791] bond3: (slave batadv1): making interface the new active one [ 150.010788][ T7791] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 150.160351][ T7794] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.178371][ T7794] team0: Port device bond5 added [ 150.979091][ T7848] netlink: 'syz.3.625': attribute type 2 has an invalid length. [ 151.116133][ T7839] bond4 (unregistering): Released all slaves [ 151.247798][ T7859] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 151.766326][ T7886] ip6gre1: entered promiscuous mode [ 152.030731][ T7899] netlink: 'syz.0.644': attribute type 2 has an invalid length. [ 152.220594][ T7899] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.231370][ T7899] team0: Port device bond7 added [ 152.734852][ T7938] bond0: entered promiscuous mode [ 152.740447][ T7938] bond0: entered allmulticast mode [ 152.753918][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.874575][ T7946] ip6t_rpfilter: unknown options [ 152.935662][ T7948] geneve3: entered promiscuous mode [ 153.678184][ T7975] __nla_validate_parse: 35 callbacks suppressed [ 153.678206][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.668'. [ 153.699721][ T7974] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 154.285348][ T7980] 8021q: adding VLAN 0 to HW filter on device bond7 [ 154.334916][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 154.350698][ T7980] bond6: (slave bond7): making interface the new active one [ 154.379535][ T7980] bond6: (slave bond7): Enslaving as an active interface with an up link [ 154.699252][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 154.818390][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 154.842863][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 155.087048][ T8052] netlink: 'syz.1.684': attribute type 2 has an invalid length. [ 155.101532][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 155.149647][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 155.178559][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 155.196128][ T8055] netlink: 56 bytes leftover after parsing attributes in process `syz.1.684'. [ 155.215830][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 155.285648][ T8052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.297297][ T8052] team0: Port device bond5 added [ 155.681190][ T8076] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.102040][ T8100] delete_channel: no stack [ 157.198255][ T8139] delete_channel: no stack [ 157.908476][ T8142] team0 (unregistering): Port device team_slave_0 removed [ 157.933787][ T8142] team0 (unregistering): Port device team_slave_1 removed [ 158.000018][ T8142] team0 (unregistering): Port device bond3 removed [ 158.024267][ T8142] team0 (unregistering): Port device bond7 removed [ 158.461892][ T8177] vlan2: entered promiscuous mode [ 158.467142][ T8177] bridge0: entered promiscuous mode [ 158.473529][ T8177] vlan2: entered allmulticast mode [ 158.485535][ T8177] bridge0: entered allmulticast mode [ 158.519858][ T8184] bridge_slave_0: left allmulticast mode [ 158.526731][ T8184] bridge_slave_0: left promiscuous mode [ 158.567938][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.599858][ T8184] bridge_slave_1: left allmulticast mode [ 158.605670][ T8184] bridge_slave_1: left promiscuous mode [ 158.636630][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.711581][ T8184] bond0: (slave bond_slave_0): Releasing backup interface [ 158.732923][ T8184] bond_slave_0: left promiscuous mode [ 158.759708][ T8184] bond0: (slave bond_slave_1): Releasing backup interface [ 158.772756][ T8184] bond_slave_1: left promiscuous mode [ 158.779729][ T8191] netlink: 'syz.3.732': attribute type 2 has an invalid length. [ 158.785718][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.827254][ T8184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.834949][ T8199] __nla_validate_parse: 12 callbacks suppressed [ 158.834968][ T8199] netlink: 248 bytes leftover after parsing attributes in process `syz.1.734'. [ 158.862206][ T8184] bond1: (slave bond2): Releasing backup interface [ 158.882562][ T8184] bond0: (slave vxlan0): Releasing backup interface [ 158.893279][ T8184] vxlan0: left promiscuous mode [ 158.899654][ T8184] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.908100][ T8184] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.917189][ T8184] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.926313][ T8184] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.926336][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 158.944982][ T8202] netlink: 56 bytes leftover after parsing attributes in process `syz.3.732'. [ 158.968328][ T8184] bond4: (slave bond5): Releasing backup interface [ 158.985448][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 159.004031][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 159.171884][ T8202] bond4 (unregistering): Released all slaves [ 159.377306][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 159.505400][ T8223] bond0: entered promiscuous mode [ 159.539083][ T8223] batadv0: entered promiscuous mode [ 159.562582][ T8223] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 159.581808][ T8223] Cannot create hsr debugfs directory [ 159.593936][ T8223] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 159.624570][ T8223] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 159.664793][ T8223] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 159.744131][ T8224] lo speed is unknown, defaulting to 1000 [ 160.222369][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 160.939610][ T8271] lo speed is unknown, defaulting to 1000 [ 161.181935][ T8290] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 161.754166][ T8314] netlink: 112 bytes leftover after parsing attributes in process `syz.1.762'. [ 161.836404][ T8319] netlink: 112 bytes leftover after parsing attributes in process `syz.3.763'. [ 162.347410][ T8344] FAULT_INJECTION: forcing a failure. [ 162.347410][ T8344] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.389075][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.4.769 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 162.389107][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.389121][ T8344] Call Trace: [ 162.389129][ T8344] [ 162.389138][ T8344] dump_stack_lvl+0x241/0x360 [ 162.389175][ T8344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.389216][ T8344] ? __pfx__printk+0x10/0x10 [ 162.389256][ T8344] should_fail_ex+0x424/0x570 [ 162.389287][ T8344] _copy_to_user+0x31/0xb0 [ 162.389312][ T8344] simple_read_from_buffer+0xc4/0x170 [ 162.389346][ T8344] proc_fail_nth_read+0x1ef/0x260 [ 162.389369][ T8344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.389393][ T8344] ? rw_verify_area+0x246/0x630 [ 162.389414][ T8344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.389437][ T8344] vfs_read+0x21f/0xb90 [ 162.389465][ T8344] ? __pfx___mutex_lock+0x10/0x10 [ 162.389490][ T8344] ? __pfx_vfs_read+0x10/0x10 [ 162.389515][ T8344] ? __fget_files+0x2a/0x420 [ 162.389547][ T8344] ? __fget_files+0x39d/0x420 [ 162.389575][ T8344] ? __fget_files+0x2a/0x420 [ 162.389616][ T8344] ksys_read+0x19d/0x2d0 [ 162.389641][ T8344] ? __pfx_ksys_read+0x10/0x10 [ 162.389671][ T8344] ? do_syscall_64+0xb6/0x230 [ 162.389698][ T8344] do_syscall_64+0xf3/0x230 [ 162.389721][ T8344] ? clear_bhb_loop+0x45/0xa0 [ 162.389746][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.389766][ T8344] RIP: 0033:0x7f188d38cb7c [ 162.389785][ T8344] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.389802][ T8344] RSP: 002b:00007f188e1db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.389823][ T8344] RAX: ffffffffffffffda RBX: 00007f188d5b5fa0 RCX: 00007f188d38cb7c [ 162.389838][ T8344] RDX: 000000000000000f RSI: 00007f188e1db0a0 RDI: 0000000000000004 [ 162.389850][ T8344] RBP: 00007f188e1db090 R08: 0000000000000000 R09: 0000000000000000 [ 162.389862][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.389873][ T8344] R13: 0000000000000000 R14: 00007f188d5b5fa0 R15: 00007ffc68c3e8e8 [ 162.389905][ T8344] [ 162.430967][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.770'. [ 163.144920][ T8378] tipc: Started in network mode [ 163.167991][ T8378] tipc: Node identity , cluster identity 4711 [ 163.187862][ T8378] tipc: Failed to obtain node identity [ 163.195510][ T8378] tipc: Enabling of bearer rejected, failed to enable media [ 163.347867][ T8387] tipc: Enabling of bearer rejected, failed to enable media [ 163.530039][ T8395] delete_channel: no stack [ 163.678680][ T8401] FAULT_INJECTION: forcing a failure. [ 163.678680][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 163.715367][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: syz.4.785 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 163.715398][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.715411][ T8401] Call Trace: [ 163.715419][ T8401] [ 163.715428][ T8401] dump_stack_lvl+0x241/0x360 [ 163.715466][ T8401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.715495][ T8401] ? __pfx__printk+0x10/0x10 [ 163.715533][ T8401] ? __pfx___might_resched+0x10/0x10 [ 163.715565][ T8401] should_fail_ex+0x424/0x570 [ 163.715597][ T8401] should_failslab+0xac/0x100 [ 163.715627][ T8401] __kmalloc_noprof+0xdf/0x4d0 [ 163.715655][ T8401] ? xfrm_alloc_replay_state_esn+0x93/0x1c0 [ 163.715684][ T8401] xfrm_alloc_replay_state_esn+0x93/0x1c0 [ 163.715713][ T8401] xfrm_add_sa+0x31ee/0x4230 [ 163.715756][ T8401] ? __pfx_xfrm_add_sa+0x10/0x10 [ 163.715794][ T8401] ? __nla_parse+0x40/0x60 [ 163.715830][ T8401] xfrm_user_rcv_msg+0x9c3/0xca0 [ 163.715869][ T8401] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 163.715944][ T8401] ? __mutex_trylock_common+0x184/0x2e0 [ 163.715979][ T8401] ? __pfx___mutex_trylock_common+0x10/0x10 [ 163.716018][ T8401] netlink_rcv_skb+0x208/0x480 [ 163.716043][ T8401] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 163.716087][ T8401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.716133][ T8401] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.716162][ T8401] xfrm_netlink_rcv+0x79/0x90 [ 163.716194][ T8401] netlink_unicast+0x7f8/0x9a0 [ 163.716236][ T8401] ? __pfx_netlink_unicast+0x10/0x10 [ 163.716269][ T8401] ? skb_put+0x114/0x1f0 [ 163.716299][ T8401] netlink_sendmsg+0x8c3/0xcd0 [ 163.716334][ T8401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.716361][ T8401] ? aa_sock_msg_perm+0x91/0x160 [ 163.716397][ T8401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.716415][ T8401] __sock_sendmsg+0x221/0x270 [ 163.716451][ T8401] ____sys_sendmsg+0x523/0x860 [ 163.716486][ T8401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.716509][ T8401] ? __fget_files+0x2a/0x420 [ 163.716543][ T8401] ? __fget_files+0x2a/0x420 [ 163.716584][ T8401] __sys_sendmsg+0x271/0x360 [ 163.716616][ T8401] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.716700][ T8401] ? do_syscall_64+0xb6/0x230 [ 163.716729][ T8401] do_syscall_64+0xf3/0x230 [ 163.716752][ T8401] ? clear_bhb_loop+0x45/0xa0 [ 163.716776][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.716796][ T8401] RIP: 0033:0x7f188d38e169 [ 163.716814][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.716831][ T8401] RSP: 002b:00007f188e1db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.716853][ T8401] RAX: ffffffffffffffda RBX: 00007f188d5b5fa0 RCX: 00007f188d38e169 [ 163.716867][ T8401] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 163.716879][ T8401] RBP: 00007f188e1db090 R08: 0000000000000000 R09: 0000000000000000 [ 163.716892][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.716903][ T8401] R13: 0000000000000000 R14: 00007f188d5b5fa0 R15: 00007ffc68c3e8e8 [ 163.716935][ T8401] [ 164.090175][ T8412] __nla_validate_parse: 6 callbacks suppressed [ 164.090195][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 164.318936][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 164.343432][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 164.492162][ T8427] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 164.525541][ T8427] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 164.858601][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.795'. [ 164.897252][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 164.953354][ T8450] delete_channel: no stack [ 165.195963][ T8465] netlink: 112 bytes leftover after parsing attributes in process `syz.0.803'. [ 165.210518][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 165.327501][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 165.354074][ T8464] nbd: device at index 64 is going down [ 165.708620][ T8479] netlink: 'syz.1.807': attribute type 10 has an invalid length. [ 165.967991][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 166.014623][ T8493] delete_channel: no stack [ 166.151165][ T8489] netlink: 'syz.4.808': attribute type 5 has an invalid length. [ 166.233930][ T8505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.818'. [ 166.920028][ T8537] delete_channel: no stack [ 167.463034][ T8562] netlink: 'syz.4.836': attribute type 2 has an invalid length. [ 167.565787][ T8562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 167.576207][ T8562] team0: Port device bond8 added [ 168.023734][ T8575] delete_channel: no stack [ 168.317813][ T8591] lo speed is unknown, defaulting to 1000 [ 168.934821][ T8619] delete_channel: no stack [ 169.237391][ T8629] __nla_validate_parse: 13 callbacks suppressed [ 169.237417][ T8629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.861'. [ 169.266427][ T8629] netlink: 'syz.3.861': attribute type 5 has an invalid length. [ 169.785032][ T8655] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.811881][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.868'. [ 169.861742][ T8658] netlink: 'syz.0.870': attribute type 10 has an invalid length. [ 169.877145][ T8657] netlink: 96 bytes leftover after parsing attributes in process `syz.2.872'. [ 169.887097][ T8658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.870'. [ 169.933705][ T8658] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 170.239324][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'. [ 170.302482][ T8002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.311942][ T8002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.438856][ T8670] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.467259][ T8670] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.494453][ T8670] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.520677][ T8670] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.746890][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'. [ 170.767475][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'. [ 170.814861][ T8681] erspan0: entered promiscuous mode [ 170.827588][ T8681] erspan0: left promiscuous mode [ 170.977649][ T8685] netlink: 'syz.2.884': attribute type 2 has an invalid length. [ 170.988686][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.884'. [ 170.998188][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.884'. [ 171.014384][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 171.256479][ T8698] sctp: [Deprecated]: syz.2.889 (pid 8698) Use of int in maxseg socket option. [ 171.256479][ T8698] Use struct sctp_assoc_value instead [ 171.348320][ T8704] vlan2: entered promiscuous mode [ 171.374561][ T8704] vlan2: entered allmulticast mode [ 171.383689][ T8704] bridge0: entered allmulticast mode [ 171.428626][ T8707] team0: Port device bond5 removed [ 171.677592][ T8720] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 171.695700][ T8720] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 172.095209][ T8735] netlink: 'syz.2.902': attribute type 8 has an invalid length. [ 172.422289][ T8742] delete_channel: no stack [ 172.634254][ T8757] ip6t_rpfilter: unknown options [ 172.926222][ T8764] nbd: nbd64 already in use [ 173.227845][ T8788] delete_channel: no stack [ 173.324910][ T8787] syzkaller0: entered promiscuous mode [ 173.356069][ T8787] syzkaller0: entered allmulticast mode [ 173.544586][ T8797] team0 (unregistering): Port device team_slave_0 removed [ 173.555767][ T8797] team0 (unregistering): Port device team_slave_1 removed [ 173.565391][ T8797] team0 (unregistering): Port device vxlan0 removed [ 173.573943][ T8797] team0 (unregistering): Port device bond1 removed [ 173.600335][ T8797] team0 (unregistering): Port device bond2 removed [ 175.641983][ T8839] ip6gretap1: entered allmulticast mode [ 175.866473][ T8848] __nla_validate_parse: 14 callbacks suppressed [ 175.866495][ T8848] netlink: 148 bytes leftover after parsing attributes in process `syz.3.940'. [ 176.087381][ T8854] netlink: 'syz.3.942': attribute type 2 has an invalid length. [ 176.126959][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.942'. [ 176.148297][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.942'. [ 176.176270][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 176.206062][ T8852] netlink: 56 bytes leftover after parsing attributes in process `syz.3.942'. [ 176.262567][ T8852] bond4 (unregistering): Released all slaves [ 176.693197][ T8872] netlink: 'syz.0.949': attribute type 2 has an invalid length. [ 176.796934][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 176.827125][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 176.880505][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 176.895353][ T8884] netlink: 'syz.2.951': attribute type 2 has an invalid length. [ 176.939056][ T8885] netlink: 56 bytes leftover after parsing attributes in process `syz.0.949'. [ 177.003574][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 177.062295][ T8872] bond8 (unregistering): Released all slaves [ 177.166916][ T8896] bond4 (unregistering): Released all slaves [ 177.198090][ T8894] tipc: Started in network mode [ 177.203780][ T8894] tipc: Node identity , cluster identity 4711 [ 177.238900][ T8894] tipc: Failed to obtain node identity [ 177.273409][ T8894] tipc: Enabling of bearer rejected, failed to enable media [ 177.494002][ T8907] lo speed is unknown, defaulting to 1000 [ 177.594976][ T8914] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 177.633698][ T8920] FAULT_INJECTION: forcing a failure. [ 177.633698][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 177.671345][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.3.960 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 177.671375][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.671387][ T8920] Call Trace: [ 177.671395][ T8920] [ 177.671404][ T8920] dump_stack_lvl+0x241/0x360 [ 177.671441][ T8920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.671470][ T8920] ? __pfx__printk+0x10/0x10 [ 177.671503][ T8920] ? __pfx___might_resched+0x10/0x10 [ 177.671533][ T8920] should_fail_ex+0x424/0x570 [ 177.671564][ T8920] should_failslab+0xac/0x100 [ 177.671594][ T8920] __kmalloc_noprof+0xdf/0x4d0 [ 177.671620][ T8920] ? xfrm_alloc_replay_state_esn+0x93/0x1c0 [ 177.671649][ T8920] xfrm_alloc_replay_state_esn+0x93/0x1c0 [ 177.671684][ T8920] xfrm_add_sa+0x31ee/0x4230 [ 177.671726][ T8920] ? __pfx_xfrm_add_sa+0x10/0x10 [ 177.671763][ T8920] ? __nla_parse+0x40/0x60 [ 177.671797][ T8920] xfrm_user_rcv_msg+0x9c3/0xca0 [ 177.671836][ T8920] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.671907][ T8920] ? __mutex_trylock_common+0x184/0x2e0 [ 177.671942][ T8920] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.671985][ T8920] netlink_rcv_skb+0x208/0x480 [ 177.672009][ T8920] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.672044][ T8920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.672090][ T8920] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.672116][ T8920] xfrm_netlink_rcv+0x79/0x90 [ 177.672148][ T8920] netlink_unicast+0x7f8/0x9a0 [ 177.672190][ T8920] ? __pfx_netlink_unicast+0x10/0x10 [ 177.672223][ T8920] ? skb_put+0x114/0x1f0 [ 177.672253][ T8920] netlink_sendmsg+0x8c3/0xcd0 [ 177.672289][ T8920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.672316][ T8920] ? aa_sock_msg_perm+0x91/0x160 [ 177.672352][ T8920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.672372][ T8920] __sock_sendmsg+0x221/0x270 [ 177.672409][ T8920] ____sys_sendmsg+0x523/0x860 [ 177.672446][ T8920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.672470][ T8920] ? __fget_files+0x2a/0x420 [ 177.672504][ T8920] ? __fget_files+0x2a/0x420 [ 177.672564][ T8920] __sys_sendmsg+0x271/0x360 [ 177.672597][ T8920] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.672692][ T8920] ? do_syscall_64+0xb6/0x230 [ 177.672719][ T8920] do_syscall_64+0xf3/0x230 [ 177.672743][ T8920] ? clear_bhb_loop+0x45/0xa0 [ 177.672768][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.672788][ T8920] RIP: 0033:0x7fc1b758e169 [ 177.672810][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.672827][ T8920] RSP: 002b:00007fc1b84b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.672849][ T8920] RAX: ffffffffffffffda RBX: 00007fc1b77b5fa0 RCX: 00007fc1b758e169 [ 177.672864][ T8920] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 177.672877][ T8920] RBP: 00007fc1b84b2090 R08: 0000000000000000 R09: 0000000000000000 [ 177.672889][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.672901][ T8920] R13: 0000000000000000 R14: 00007fc1b77b5fa0 R15: 00007ffddcd4b428 [ 177.672934][ T8920] [ 177.697294][ T8923] 8021q: VLANs not supported on vxcan1 [ 178.577824][ T8958] netlink: 'syz.3.969': attribute type 2 has an invalid length. [ 178.645577][ T8939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.714526][ T8939] bond_slave_1: left promiscuous mode [ 178.721788][ T8939] bond0 (unregistering): Released all slaves [ 179.106876][ T8965] bond4 (unregistering): Released all slaves [ 179.434205][ T8983] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 179.458909][ T8983] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 179.499086][ T8987] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 179.508993][ T8987] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 179.872612][ T9001] delete_channel: no stack [ 180.585992][ T9023] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 180.609100][ T9023] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 180.889138][ T9031] __nla_validate_parse: 16 callbacks suppressed [ 180.889189][ T9031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.990'. [ 180.932779][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.991'. [ 181.179032][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 181.202863][ T9044] delete_channel: no stack [ 181.579501][ T9056] validate_nla: 2 callbacks suppressed [ 181.579521][ T9056] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 181.628247][ T9056] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 181.775145][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1004'. [ 181.863208][ T9075] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1003'. [ 182.085037][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 182.157237][ T9082] delete_channel: no stack [ 182.249219][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1010'. [ 182.295247][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1010'. [ 182.356868][ T9088] erspan0: entered promiscuous mode [ 182.367375][ T9088] erspan0: left promiscuous mode [ 182.386988][ T9092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.478614][ T9096] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 182.508233][ T9099] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 182.581100][ T9102] x_tables: ip_tables: osf match: only valid for protocol 6 [ 182.803176][ T9114] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 182.814956][ T9100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.844081][ T9100] bond4: (slave bond5): making interface the new active one [ 182.861492][ T9114] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 182.872993][ T9100] bond4: (slave bond5): Enslaving as an active interface with an up link [ 182.874316][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1017'. [ 183.128072][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 183.174221][ T9122] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 183.430171][ T9130] lo speed is unknown, defaulting to 1000 [ 184.070349][ T9158] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 184.078242][ T9158] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 184.258092][ T30] audit: type=1804 audit(1744870004.942:3): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1034" name="cgroup.controllers" dev="tmpfs" ino=1122 res=1 errno=0 [ 184.326694][ T30] audit: type=1800 audit(1744870004.972:4): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1034" name="cgroup.controllers" dev="tmpfs" ino=1122 res=0 errno=0 [ 184.410986][ T9130] lo speed is unknown, defaulting to 1000 [ 184.455316][ T9132] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 185.028384][ T9190] batadv0: entered promiscuous mode [ 185.035660][ T9190] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.063183][ T9190] batadv0: left promiscuous mode [ 185.464246][ T9204] vlan2: entered promiscuous mode [ 185.577123][ T9214] bridge_slave_0: left allmulticast mode [ 185.585572][ T9214] bridge_slave_0: left promiscuous mode [ 185.593013][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.603562][ T9214] bridge_slave_1: left allmulticast mode [ 185.635074][ T9214] bridge_slave_1: left promiscuous mode [ 185.663387][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.694636][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.707424][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.722779][ T9214] bond3: (slave batadv1): Releasing active interface [ 185.936873][ T9234] __nla_validate_parse: 16 callbacks suppressed [ 185.936896][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 186.093245][ T9239] FAULT_INJECTION: forcing a failure. [ 186.093245][ T9239] name failslab, interval 1, probability 0, space 0, times 0 [ 186.109389][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.4.1059 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 186.109453][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.109467][ T9239] Call Trace: [ 186.109479][ T9239] [ 186.109488][ T9239] dump_stack_lvl+0x241/0x360 [ 186.109537][ T9239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.109566][ T9239] ? __pfx__printk+0x10/0x10 [ 186.109599][ T9239] ? __pfx___might_resched+0x10/0x10 [ 186.109629][ T9239] should_fail_ex+0x424/0x570 [ 186.109661][ T9239] should_failslab+0xac/0x100 [ 186.109691][ T9239] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 186.109720][ T9239] ? __alloc_skb+0x1c2/0x480 [ 186.109748][ T9239] __alloc_skb+0x1c2/0x480 [ 186.109778][ T9239] ? __pfx___alloc_skb+0x10/0x10 [ 186.109808][ T9239] ? netlink_ack_tlv_len+0x6e/0x200 [ 186.109832][ T9239] netlink_ack+0x147/0xa70 [ 186.109857][ T9239] ? __pfx___mutex_trylock_common+0x10/0x10 [ 186.109904][ T9239] netlink_rcv_skb+0x296/0x480 [ 186.109925][ T9239] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 186.109960][ T9239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.110006][ T9239] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.110032][ T9239] xfrm_netlink_rcv+0x79/0x90 [ 186.110064][ T9239] netlink_unicast+0x7f8/0x9a0 [ 186.110105][ T9239] ? __pfx_netlink_unicast+0x10/0x10 [ 186.110138][ T9239] ? skb_put+0x114/0x1f0 [ 186.110167][ T9239] netlink_sendmsg+0x8c3/0xcd0 [ 186.110203][ T9239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.110230][ T9239] ? aa_sock_msg_perm+0x91/0x160 [ 186.110265][ T9239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.110284][ T9239] __sock_sendmsg+0x221/0x270 [ 186.110319][ T9239] ____sys_sendmsg+0x523/0x860 [ 186.110356][ T9239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.110379][ T9239] ? __fget_files+0x2a/0x420 [ 186.110413][ T9239] ? __fget_files+0x2a/0x420 [ 186.110454][ T9239] __sys_sendmsg+0x271/0x360 [ 186.110486][ T9239] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.110575][ T9239] ? do_syscall_64+0xb6/0x230 [ 186.110602][ T9239] do_syscall_64+0xf3/0x230 [ 186.110625][ T9239] ? clear_bhb_loop+0x45/0xa0 [ 186.110650][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.110669][ T9239] RIP: 0033:0x7f188d38e169 [ 186.110693][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.110711][ T9239] RSP: 002b:00007f188e1db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.110740][ T9239] RAX: ffffffffffffffda RBX: 00007f188d5b5fa0 RCX: 00007f188d38e169 [ 186.110756][ T9239] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 186.110769][ T9239] RBP: 00007f188e1db090 R08: 0000000000000000 R09: 0000000000000000 [ 186.110782][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.110793][ T9239] R13: 0000000000000000 R14: 00007f188d5b5fa0 R15: 00007ffc68c3e8e8 [ 186.110827][ T9239] [ 186.473779][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'. [ 186.517564][ T9241] netlink: 'syz.4.1060': attribute type 10 has an invalid length. [ 186.567722][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1060'. [ 186.570202][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 186.640294][ T9241] openvswitch: netlink: Flow key attr not present in new flow. [ 186.776539][ T9248] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1062'. [ 186.813241][ T9248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1062'. [ 186.861154][ T9252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1063'. [ 186.949598][ T9259] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 186.957594][ T9259] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 187.243525][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 187.291144][ T9267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.021884][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 188.427641][ T9] IPVS: starting estimator thread 0... [ 188.539016][ T9300] IPVS: using max 29 ests per chain, 69600 per kthread [ 188.830552][ T9324] SET target dimension over the limit! [ 188.831469][ T9318] lo speed is unknown, defaulting to 1000 [ 189.275352][ T9345] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 189.290022][ T9345] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 189.298019][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 189.998425][ T9382] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 190.009339][ T9384] netlink: 'syz.1.1104': attribute type 2 has an invalid length. [ 190.029551][ T9371] team0 (unregistering): Port device bond5 removed [ 190.040774][ T9371] team0 (unregistering): Port device bond8 removed [ 190.074996][ T9375] erspan0: entered promiscuous mode [ 190.083884][ T9375] erspan0: left promiscuous mode [ 190.246267][ T9386] 8021q: adding VLAN 0 to HW filter on device bond9 [ 190.256006][ T9386] bond8: (slave bond9): making interface the new active one [ 190.267345][ T9386] bond8: (slave bond9): Enslaving as an active interface with an up link [ 190.328654][ T9377] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.344270][ T9377] team0: Port device bond6 added [ 190.502622][ T9404] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.641216][ T9404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.685624][ T9416] netlink: 'syz.0.1113': attribute type 10 has an invalid length. [ 190.732389][ T9404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.805499][ T9420] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 190.817989][ T9420] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 190.846207][ T9404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.946709][ T9424] __nla_validate_parse: 15 callbacks suppressed [ 190.946731][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 191.068410][ T9404] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.134953][ T9404] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.185464][ T9404] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.206004][ T9404] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.350318][ T9435] netlink: 'syz.3.1121': attribute type 10 has an invalid length. [ 191.459716][ T9435] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.730146][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1125'. [ 191.848378][ T9450] syzkaller1: entered promiscuous mode [ 191.854551][ T9450] syzkaller1: entered allmulticast mode [ 192.060084][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 192.084903][ T9471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1133'. [ 192.096804][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 192.298101][ T9481] netlink: 'syz.0.1135': attribute type 2 has an invalid length. [ 192.313964][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 192.327008][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 192.339546][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 192.348690][ T9477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1135'. [ 192.400263][ T9477] bond10 (unregistering): Released all slaves [ 192.585876][ T9491] lo speed is unknown, defaulting to 1000 [ 192.649844][ T9495] veth0_virt_wifi: entered allmulticast mode [ 192.692381][ T9497] netlink: 'syz.2.1139': attribute type 2 has an invalid length. [ 192.732429][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1139'. [ 192.794373][ T9493] bond0 (unregistering): Released all slaves [ 193.372976][ T9501] team0 (unregistering): Port device bond6 removed [ 193.644829][ T9529] delete_channel: no stack [ 194.093198][ T9544] tipc: Started in network mode [ 194.125866][ T9544] tipc: Node identity , cluster identity 4711 [ 194.140672][ T9544] tipc: Failed to obtain node identity [ 194.151289][ T9544] tipc: Enabling of bearer rejected, failed to enable media [ 195.495915][ T9572] delete_channel: no stack [ 195.549654][ T9573] netlink: 'syz.2.1162': attribute type 2 has an invalid length. [ 195.632638][ T9573] bond0 (unregistering): Released all slaves [ 196.181008][ T9585] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.190099][ T9585] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.200566][ T9585] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.209749][ T9585] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.231822][ T9591] tipc: Enabling of bearer rejected, failed to enable media [ 196.244933][ T9596] tipc: Cannot configure node identity twice [ 196.472861][ T9607] lo speed is unknown, defaulting to 1000 [ 196.484723][ T9611] delete_channel: no stack [ 196.694987][ T9620] __nla_validate_parse: 14 callbacks suppressed [ 196.695008][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1182'. [ 196.961034][ T9632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 197.108499][ T9607] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1177'. [ 197.584210][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1189'. [ 197.915664][ T9667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 198.275786][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 198.343919][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 198.415860][ T9685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1202'. [ 198.881921][ T9709] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.954858][ T9709] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.997886][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1213'. [ 199.027499][ T9709] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.095218][ T9709] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.198287][ T9709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.264752][ T9709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.346117][ T9709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.411025][ T9709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.485793][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.655249][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1220'. [ 200.059954][ T8002] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 200.480089][ T9778] syzkaller1: entered promiscuous mode [ 200.485634][ T9778] syzkaller1: entered allmulticast mode [ 201.515559][ T9836] delete_channel: no stack [ 201.870906][ T9858] __nla_validate_parse: 11 callbacks suppressed [ 201.870931][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 201.977312][ T24] IPVS: starting estimator thread 0... [ 201.989556][ T8002] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 202.011229][ T9862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.090605][ T9863] IPVS: using max 29 ests per chain, 69600 per kthread [ 202.205604][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1269'. [ 202.257191][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 202.266721][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 202.276243][ T9876] netlink: 'syz.4.1271': attribute type 7 has an invalid length. [ 202.405589][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1274'. [ 202.985184][ T9900] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 202.996335][ T9900] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 203.227579][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'. [ 203.247819][ T9909] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1284'. [ 203.270198][ T9909] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 203.821681][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 203.833627][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'. [ 203.885930][ T8006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.926403][ T8006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.976739][ T9931] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.999083][ T9931] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.007835][ T9931] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.030534][ T9931] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.062196][ T9934] netlink: 'syz.4.1293': attribute type 2 has an invalid length. [ 204.154773][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1293'. [ 204.280902][ T9934] bond9 (unregistering): Released all slaves [ 204.314442][ T9943] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 204.333440][ T9943] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 204.638428][ T9957] erspan0: entered promiscuous mode [ 204.658640][ T9957] erspan0: left promiscuous mode [ 205.191996][ T9987] netlink: 'syz.3.1309': attribute type 2 has an invalid length. [ 205.275229][ T9987] bond6 (unregistering): Released all slaves [ 205.327928][ T9992] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 205.337238][ T9992] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 206.386545][T10036] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 207.336957][T10083] validate_nla: 1 callbacks suppressed [ 207.336977][T10083] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 207.386407][T10083] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 207.402896][T10075] lo speed is unknown, defaulting to 1000 [ 207.445968][T10092] __nla_validate_parse: 18 callbacks suppressed [ 207.445990][T10092] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1339'. [ 207.450640][T10093] xt_hashlimit: size too large, truncated to 1048576 [ 207.513402][T10094] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 207.562872][T10094] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 207.948381][T10110] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1345'. [ 208.031578][T10115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 208.242710][T10121] batadv0: entered promiscuous mode [ 208.264575][T10121] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 208.273133][T10121] Cannot create hsr debugfs directory [ 208.280812][T10121] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 208.291248][T10121] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 208.302859][T10121] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 208.312805][T10127] netlink: 'syz.2.1352': attribute type 10 has an invalid length. [ 208.320945][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1352'. [ 208.457026][T10132] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 208.465994][T10132] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 208.475600][T10133] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 208.487458][T10133] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 208.683386][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 208.717405][T10136] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1356'. [ 209.255241][T10168] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 209.366157][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 209.640563][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1370'. [ 210.656085][T10195] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.690235][T10195] tipc: Enabled bearer , priority 10 [ 210.790625][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.928912][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.068918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.138960][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1388'. [ 211.174780][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 211.202717][T10238] delete_channel: no stack [ 211.208888][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.349693][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.499009][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.554201][T10254] tipc: Started in network mode [ 211.567746][T10254] tipc: Node identity , cluster identity 4711 [ 211.574529][T10254] tipc: Failed to obtain node identity [ 211.601050][T10254] tipc: Enabling of bearer rejected, failed to enable media [ 211.639049][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.780234][ T9] tipc: Node number set to 1 [ 211.792316][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.795137][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 211.799216][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 211.846873][ T8004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.868013][ T8004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.919248][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.055986][T10282] delete_channel: no stack [ 212.189056][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.676221][T10317] __nla_validate_parse: 4 callbacks suppressed [ 212.676254][T10317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1417'. [ 212.686484][T10315] validate_nla: 7 callbacks suppressed [ 212.686506][T10315] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 212.713125][T10317] delete_channel: no stack [ 212.747788][T10315] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 212.768204][T10311] vlan2: entered allmulticast mode [ 212.779202][T10311] macvtap0: entered allmulticast mode [ 212.831244][T10320] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1418'. [ 212.914282][T10326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1420'. [ 213.149989][T10332] syzkaller0: entered promiscuous mode [ 213.155537][T10332] syzkaller0: entered allmulticast mode [ 213.371885][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 213.411965][T10346] lo speed is unknown, defaulting to 1000 [ 213.438273][T10346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1424'. [ 213.695656][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1427'. [ 213.710024][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1427'. [ 213.730340][T10352] erspan0: entered promiscuous mode [ 213.746525][T10352] erspan0: left promiscuous mode [ 214.205750][T10360] ip6t_rpfilter: unknown options [ 214.232654][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 214.288306][T10362] netlink: 'syz.1.1431': attribute type 10 has an invalid length. [ 215.638194][T10369] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 215.657383][T10369] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 215.729232][T10376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1434'. [ 215.868948][ C0] net_ratelimit: 3 callbacks suppressed [ 215.868967][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.988913][T10389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.102940][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1441'. [ 216.176983][T10400] netlink: 'syz.4.1442': attribute type 2 has an invalid length. [ 216.287203][T10394] bond9 (unregistering): Released all slaves [ 216.638338][T10426] netlink: 'syz.3.1451': attribute type 1 has an invalid length. [ 216.688861][T10426] netlink: 'syz.3.1451': attribute type 1 has an invalid length. [ 216.782744][T10440] netlink: 'syz.1.1454': attribute type 2 has an invalid length. [ 216.854798][T10440] bond7 (unregistering): Released all slaves [ 216.909839][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.928185][T10450] delete_channel: no stack [ 217.196504][T10464] netlink: 'syz.0.1460': attribute type 2 has an invalid length. [ 217.312323][T10464] bond10 (unregistering): Released all slaves [ 217.694899][T10487] __nla_validate_parse: 16 callbacks suppressed [ 217.694924][T10487] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1465'. [ 217.805028][T10493] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.826919][T10496] validate_nla: 1 callbacks suppressed [ 217.826940][T10496] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 217.872223][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 217.872758][T10496] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 217.948930][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.077507][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1471'. [ 218.082183][T10503] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1470'. [ 218.136430][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 218.156154][T10508] delete_channel: no stack [ 218.401541][T10525] netlink: 'syz.2.1476': attribute type 2 has an invalid length. [ 218.412413][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 218.421642][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 218.459960][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 218.477789][T10525] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1476'. [ 218.561979][T10525] bond0 (unregistering): Released all slaves [ 218.627719][T10537] SET target dimension over the limit! [ 218.922648][T10548] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 218.958835][T10548] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 218.998895][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.031589][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1485'. [ 219.086802][T10555] delete_channel: no stack [ 219.440938][T10576] netlink: 'syz.0.1492': attribute type 2 has an invalid length. [ 219.512970][T10574] bond10 (unregistering): Released all slaves [ 219.593441][T10581] netlink: 'syz.1.1494': attribute type 13 has an invalid length. [ 219.745270][T10586] delete_channel: no stack [ 219.755649][T10590] syz_tun: entered allmulticast mode [ 219.821389][T10590] netlink: 'syz.1.1498': attribute type 21 has an invalid length. [ 219.858032][T10594] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 219.866268][T10594] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 219.922355][T10588] syz_tun: left allmulticast mode [ 219.934444][T10600] delete_channel: no stack [ 220.029018][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.608570][T10637] delete_channel: no stack [ 220.998472][T10650] tipc: Started in network mode [ 221.026041][T10650] tipc: Node identity , cluster identity 4711 [ 221.061668][T10650] tipc: Failed to obtain node identity [ 221.069002][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.098089][T10650] tipc: Enabling of bearer rejected, failed to enable media [ 221.352341][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.362713][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.430558][T10664] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.449053][T10664] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.470148][T10664] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.493419][T10664] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.606161][T10669] delete_channel: no stack [ 222.109041][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.464639][T10696] lo speed is unknown, defaulting to 1000 [ 222.928017][T10715] syz_tun: entered allmulticast mode [ 222.956800][T10714] syz_tun: left allmulticast mode [ 223.148896][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.384216][T10742] validate_nla: 2 callbacks suppressed [ 223.384240][T10742] netlink: 'syz.2.1551': attribute type 2 has an invalid length. [ 223.424691][T10742] __nla_validate_parse: 13 callbacks suppressed [ 223.424713][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1551'. [ 223.461215][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1551'. [ 223.512394][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 223.530323][T10737] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1551'. [ 223.614178][T10756] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 223.641346][T10737] bond0 (unregistering): Released all slaves [ 223.753102][T10757] 8021q: adding VLAN 0 to HW filter on device bond11 [ 223.768367][T10757] bond10: (slave bond11): making interface the new active one [ 223.778344][T10757] bond10: (slave bond11): Enslaving as an active interface with an up link [ 223.788316][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 223.804048][T10765] delete_channel: no stack [ 223.856913][T10755] SET target dimension over the limit! [ 224.040498][T10776] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1562'. [ 224.199004][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.454218][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 224.480750][T10792] delete_channel: no stack [ 224.604373][T10793] netlink: 'syz.3.1568': attribute type 4 has an invalid length. [ 225.054301][T10815] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1578'. [ 225.117515][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1580'. [ 225.228983][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.273461][T10825] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1582'. [ 225.576193][T10838] FAULT_INJECTION: forcing a failure. [ 225.576193][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.611718][T10838] CPU: 0 UID: 0 PID: 10838 Comm: syz.1.1587 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 225.611768][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.611790][T10838] Call Trace: [ 225.611799][T10838] [ 225.611807][T10838] dump_stack_lvl+0x241/0x360 [ 225.611847][T10838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.611876][T10838] ? __pfx__printk+0x10/0x10 [ 225.611919][T10838] should_fail_ex+0x424/0x570 [ 225.611952][T10838] _copy_from_user+0x2d/0xb0 [ 225.611982][T10838] copy_msghdr_from_user+0xb3/0x580 [ 225.612023][T10838] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 225.612052][T10838] ? __fget_files+0x2a/0x420 [ 225.612087][T10838] ? __fget_files+0x2a/0x420 [ 225.612128][T10838] __sys_sendmsg+0x20a/0x360 [ 225.612161][T10838] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.612247][T10838] ? do_syscall_64+0xb6/0x230 [ 225.612275][T10838] do_syscall_64+0xf3/0x230 [ 225.612307][T10838] ? clear_bhb_loop+0x45/0xa0 [ 225.612332][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.612353][T10838] RIP: 0033:0x7f9364f8e169 [ 225.612372][T10838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.612389][T10838] RSP: 002b:00007f9365ecc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.612412][T10838] RAX: ffffffffffffffda RBX: 00007f93651b5fa0 RCX: 00007f9364f8e169 [ 225.612427][T10838] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 225.612441][T10838] RBP: 00007f9365ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 225.612454][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.612467][T10838] R13: 0000000000000000 R14: 00007f93651b5fa0 R15: 00007ffc3e9f7e88 [ 225.612500][T10838] [ 226.038513][T10850] SET target dimension over the limit! [ 226.071481][T10848] lo speed is unknown, defaulting to 1000 [ 226.213464][T10852] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 226.268964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.104669][T10889] erspan0: entered promiscuous mode [ 227.130459][T10889] erspan0: left promiscuous mode [ 227.309406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.958116][T10943] FAULT_INJECTION: forcing a failure. [ 227.958116][T10943] name failslab, interval 1, probability 0, space 0, times 0 [ 227.972709][T10943] CPU: 0 UID: 0 PID: 10943 Comm: syz.4.1623 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 227.972739][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.972752][T10943] Call Trace: [ 227.972762][T10943] [ 227.972771][T10943] dump_stack_lvl+0x241/0x360 [ 227.972809][T10943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.972839][T10943] ? __pfx__printk+0x10/0x10 [ 227.972871][T10943] ? __pfx___might_resched+0x10/0x10 [ 227.972902][T10943] should_fail_ex+0x424/0x570 [ 227.972934][T10943] should_failslab+0xac/0x100 [ 227.972964][T10943] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 227.973006][T10943] ? __alloc_skb+0x1c2/0x480 [ 227.973034][T10943] __alloc_skb+0x1c2/0x480 [ 227.973064][T10943] ? __pfx___alloc_skb+0x10/0x10 [ 227.973090][T10943] ? netlink_autobind+0xd6/0x2f0 [ 227.973112][T10943] ? netlink_autobind+0x2b0/0x2f0 [ 227.973140][T10943] netlink_sendmsg+0x638/0xcd0 [ 227.973176][T10943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.973202][T10943] ? aa_sock_msg_perm+0x91/0x160 [ 227.973236][T10943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.973255][T10943] __sock_sendmsg+0x221/0x270 [ 227.973290][T10943] ____sys_sendmsg+0x523/0x860 [ 227.973328][T10943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.973352][T10943] ? __fget_files+0x2a/0x420 [ 227.973387][T10943] ? __fget_files+0x2a/0x420 [ 227.973427][T10943] __sys_sendmsg+0x271/0x360 [ 227.973464][T10943] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.973564][T10943] ? do_syscall_64+0xb6/0x230 [ 227.973594][T10943] do_syscall_64+0xf3/0x230 [ 227.973618][T10943] ? clear_bhb_loop+0x45/0xa0 [ 227.973644][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.973664][T10943] RIP: 0033:0x7f188d38e169 [ 227.973683][T10943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.973701][T10943] RSP: 002b:00007f188e1ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.973724][T10943] RAX: ffffffffffffffda RBX: 00007f188d5b6080 RCX: 00007f188d38e169 [ 227.973740][T10943] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000008 [ 227.973753][T10943] RBP: 00007f188e1ba090 R08: 0000000000000000 R09: 0000000000000000 [ 227.973766][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.973779][T10943] R13: 0000000000000000 R14: 00007f188d5b6080 R15: 00007ffc68c3e8e8 [ 227.973812][T10943] [ 228.350977][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.724476][T10946] __nla_validate_parse: 17 callbacks suppressed [ 228.724502][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 228.787609][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 228.842027][T10951] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1627'. [ 228.876246][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1625'. [ 228.899854][T10956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.988466][T10958] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1630'. [ 229.276099][T10975] netlink: 'syz.1.1634': attribute type 5 has an invalid length. [ 229.284975][T10975] netlink: 'syz.1.1634': attribute type 5 has an invalid length. [ 229.388894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.434948][T10979] raw_sendmsg: syz.0.1635 forgot to set AF_INET. Fix it! [ 229.639689][T10991] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1642'. [ 229.666660][T10995] syz_tun: entered allmulticast mode [ 229.691978][T10994] syz_tun: left allmulticast mode [ 229.705505][T10989] lo speed is unknown, defaulting to 1000 [ 229.846654][T11000] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 230.326951][T11019] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.353136][T11005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.367427][T11005] bond7: (slave bond8): making interface the new active one [ 230.375969][T11005] bond7: (slave bond8): Enslaving as an active interface with an up link [ 230.439363][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.547163][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 230.703596][T11033] syz_tun: entered allmulticast mode [ 230.725042][T11031] syz_tun: left allmulticast mode [ 230.810773][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1658'. [ 230.832772][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1658'. [ 230.907688][T11047] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1657'. [ 231.002450][T11051] netlink: 'syz.0.1660': attribute type 2 has an invalid length. [ 231.085826][T11049] bond12 (unregistering): Released all slaves [ 231.468996][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.515728][T11078] syz_tun: entered allmulticast mode [ 231.530577][T11075] syz_tun: left allmulticast mode [ 231.784037][T11092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.390240][T11116] syz_tun: entered allmulticast mode [ 232.418447][T11115] syz_tun: left allmulticast mode [ 232.509549][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.037540][T11150] syz_tun: entered allmulticast mode [ 233.058672][T11148] syz_tun: left allmulticast mode [ 233.459899][T11168] netlink: 'syz.1.1702': attribute type 4 has an invalid length. [ 233.548922][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.825489][T11180] __nla_validate_parse: 11 callbacks suppressed [ 233.825511][T11180] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1706'. [ 234.163889][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1704'. [ 234.382485][T11189] netlink: 'syz.4.1708': attribute type 16 has an invalid length. [ 234.400412][T11189] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 234.412457][T11189] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 234.420904][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.4.1708 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 234.433003][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.443079][T11189] RIP: 0010:rtnl_create_link+0x6b8/0xea0 [ 234.448775][T11189] Code: 24 10 42 80 3c 28 00 74 08 48 89 df e8 c1 3c 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 18 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 99 3c 3a f8 45 31 e4 48 83 7d 00 [ 234.468400][T11189] RSP: 0018:ffffc90004656e70 EFLAGS: 00010206 [ 234.474485][T11189] RAX: 0000000000000055 RBX: ffff88805d160008 RCX: 0000000000080000 [ 234.482466][T11189] RDX: ffffc9000c7da000 RSI: 0000000000002692 RDI: 0000000000002693 [ 234.490526][T11189] RBP: 00000000000002a8 R08: ffffffff89f340d2 R09: 1ffff920008cadfa [ 234.498504][T11189] R10: dffffc0000000000 R11: fffff520008cadfb R12: ffff888046eee080 [ 234.506656][T11189] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805d160000 [ 234.514656][T11189] FS: 00007f188e1db6c0(0000) GS:ffff888124fa5000(0000) knlGS:0000000000000000 [ 234.523600][T11189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.530292][T11189] CR2: 000000110c2d4f66 CR3: 000000007e212000 CR4: 00000000003526f0 [ 234.538279][T11189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.546254][T11189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.554231][T11189] Call Trace: [ 234.557512][T11189] [ 234.560457][T11189] rtnl_newlink_create+0x2f2/0xc30 [ 234.565582][T11189] ? __mutex_lock+0x380/0x10c0 [ 234.570356][T11189] ? __pfx_aa_get_newest_label+0x10/0x10 [ 234.576093][T11189] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 234.581749][T11189] ? __pfx___mutex_lock+0x10/0x10 [ 234.586781][T11189] ? ns_capable+0x8a/0xf0 [ 234.591123][T11189] rtnl_newlink+0x18b0/0x1fe0 [ 234.595939][T11189] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.601159][T11189] ? __lock_acquire+0xad5/0xd80 [ 234.606045][T11189] ? __lock_acquire+0xad5/0xd80 [ 234.610903][T11189] ? __lock_acquire+0xad5/0xd80 [ 234.615858][T11189] ? is_bpf_text_address+0x26/0x2a0 [ 234.621066][T11189] ? 0xffffffffa000094c [ 234.625249][T11189] ? is_bpf_text_address+0x288/0x2a0 [ 234.630540][T11189] ? is_bpf_text_address+0x26/0x2a0 [ 234.635919][T11189] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.642172][T11189] ? kernel_text_address+0xa7/0xe0 [ 234.647299][T11189] ? __kernel_text_address+0xd/0x40 [ 234.652519][T11189] ? aa_get_newest_label+0x101/0x6f0 [ 234.657852][T11189] ? __lock_acquire+0xad5/0xd80 [ 234.662732][T11189] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.667785][T11189] rtnetlink_rcv_msg+0x80f/0xd70 [ 234.672913][T11189] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 234.678056][T11189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.683613][T11189] ? __lock_acquire+0xad5/0xd80 [ 234.688563][T11189] netlink_rcv_skb+0x208/0x480 [ 234.693333][T11189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.698967][T11189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.704270][T11189] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.709739][T11189] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.714946][T11189] netlink_unicast+0x7f8/0x9a0 [ 234.719741][T11189] ? __pfx_netlink_unicast+0x10/0x10 [ 234.725162][T11189] ? skb_put+0x114/0x1f0 [ 234.729417][T11189] netlink_sendmsg+0x8c3/0xcd0 [ 234.734191][T11189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.739509][T11189] ? aa_sock_msg_perm+0x91/0x160 [ 234.744464][T11189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.750274][T11189] __sock_sendmsg+0x221/0x270 [ 234.755063][T11189] ____sys_sendmsg+0x523/0x860 [ 234.759849][T11189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.765263][T11189] ? __fget_files+0x2a/0x420 [ 234.769870][T11189] ? __fget_files+0x2a/0x420 [ 234.774478][T11189] __sys_sendmsg+0x271/0x360 [ 234.779091][T11189] ? __pfx_futex_wake+0x10/0x10 [ 234.784215][T11189] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.789367][T11189] ? do_syscall_64+0xb6/0x230 [ 234.794156][T11189] do_syscall_64+0xf3/0x230 [ 234.798673][T11189] ? clear_bhb_loop+0x45/0xa0 [ 234.803364][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.809266][T11189] RIP: 0033:0x7f188d38e169 [ 234.813708][T11189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.833437][T11189] RSP: 002b:00007f188e1db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.841889][T11189] RAX: ffffffffffffffda RBX: 00007f188d5b5fa0 RCX: 00007f188d38e169 [ 234.849983][T11189] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000010 [ 234.858006][T11189] RBP: 00007f188d410a68 R08: 0000000000000000 R09: 0000000000000000 [ 234.866049][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.874038][T11189] R13: 0000000000000000 R14: 00007f188d5b5fa0 R15: 00007ffc68c3e8e8 [ 234.882040][T11189] [ 234.885065][T11189] Modules linked in: [ 234.889381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.896866][T11189] ---[ end trace 0000000000000000 ]--- [ 234.912889][T11193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.914202][T11199] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1711'. [ 234.932530][T11189] RIP: 0010:rtnl_create_link+0x6b8/0xea0 [ 234.938245][T11189] Code: 24 10 42 80 3c 28 00 74 08 48 89 df e8 c1 3c 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 18 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 99 3c 3a f8 45 31 e4 48 83 7d 00 [ 234.959351][T11189] RSP: 0018:ffffc90004656e70 EFLAGS: 00010206 [ 234.963584][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1710'. [ 234.970903][T11189] RAX: 0000000000000055 RBX: ffff88805d160008 RCX: 0000000000080000 [ 234.982743][T11189] RDX: ffffc9000c7da000 RSI: 0000000000002692 RDI: 0000000000002693 [ 234.990997][T11189] RBP: 00000000000002a8 R08: ffffffff89f340d2 R09: 1ffff920008cadfa [ 234.999726][T11189] R10: dffffc0000000000 R11: fffff520008cadfb R12: ffff888046eee080 [ 235.007853][T11189] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805d160000 [ 235.016043][T11189] FS: 00007f188e1db6c0(0000) GS:ffff8881250a5000(0000) knlGS:0000000000000000 [ 235.025995][T11189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.033125][T11189] CR2: 000000110c3549e0 CR3: 000000007e212000 CR4: 00000000003526f0 [ 235.042156][T11189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.050397][T11189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.058446][T11189] Kernel panic - not syncing: Fatal exception [ 235.064841][T11189] Kernel Offset: disabled [ 235.069184][T11189] Rebooting in 86400 seconds..